Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
File:                     x_SYwou91eWf9XaMbTikEMqCZkA.mft (raw, json)
Hash identifier:          W+JtwB63r7Wuh1myAqwi6rP65pjKjHOorOwE40k/3IY=
Subject key identifier:   AF:F5:A5:35:CB:D6:4D:F3:C7:D5:80:C4:D8:32:F7:15:E6:9A:A0:49
Authority key identifier: C7:F4:98:C2:8B:BD:D5:E5:9F:F5:76:8C:6D:38:A4:10:CA:82:66:40
Certificate issuer:       /CN=c7f498c28bbdd5e59ff5768c6d38a410ca826640
Certificate serial:       019873E2D4425CFD95DC068CF4229CC2B09E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x_SYwou91eWf9XaMbTikEMqCZkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
Manifest number:          0E04
Signing time:             Mon 04 Aug 2025 07:01:41 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:41 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:41 +0000
Files and hashes:         1: x_SYwou91eWf9XaMbTikEMqCZkA.crl (hash: o0iFV/ozwb5A02UKh8bp/97u9TsSJzraS8XereNLRiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x_SYwou91eWf9XaMbTikEMqCZkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:d4:42:5c:fd:95:dc:06:8c:f4:22:9c:c2:b0:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7f498c28bbdd5e59ff5768c6d38a410ca826640
        Validity
            Not Before: Aug  4 07:01:41 2025 GMT
            Not After : Aug  5 07:01:41 2025 GMT
        Subject: CN=aff5a535cbd64df3c7d580c4d832f715e69aa049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:37:a0:af:10:bc:94:18:f5:b5:77:af:79:20:
                    91:68:c7:c3:c8:77:d2:01:0e:0f:30:08:ba:7e:8a:
                    5e:07:03:01:63:e4:92:2e:81:f9:24:7b:af:fb:77:
                    c6:da:9f:38:3c:cf:78:03:f5:fa:ee:2a:3e:af:f0:
                    8e:86:a7:62:7d:1f:c5:d5:cf:84:da:f3:d6:b3:e6:
                    c4:4b:14:c4:6a:bc:00:7b:bf:47:7f:63:9b:66:bf:
                    f1:cb:81:dd:b1:53:f4:74:1f:f1:d1:53:0a:32:80:
                    6f:cd:ea:28:54:5b:ba:fe:0f:cb:c8:79:46:22:bf:
                    35:55:27:f6:e7:1d:08:b6:92:f2:b1:9c:19:22:cd:
                    c9:44:33:38:0d:b1:38:db:92:47:97:b7:3b:1d:6f:
                    9d:69:61:1f:ec:7e:ee:c3:56:ca:38:f6:ea:f7:00:
                    40:0c:8a:a7:05:f4:01:77:c5:38:0a:f7:96:d4:28:
                    cd:82:8d:5a:ba:c0:73:c8:da:e4:70:da:14:65:d2:
                    50:38:9d:9b:73:32:f9:b9:36:5b:f5:3f:7d:ec:5d:
                    f3:21:51:93:1f:bb:c7:6c:4e:7f:7e:fc:3f:61:b4:
                    d4:1f:1d:ca:42:a1:f5:81:72:44:cf:8c:b9:0c:29:
                    b1:d0:0d:76:92:c3:7b:0c:bb:4c:68:f7:d0:4e:e7:
                    94:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F5:A5:35:CB:D6:4D:F3:C7:D5:80:C4:D8:32:F7:15:E6:9A:A0:49
            X509v3 Authority Key Identifier:
                keyid:C7:F4:98:C2:8B:BD:D5:E5:9F:F5:76:8C:6D:38:A4:10:CA:82:66:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_SYwou91eWf9XaMbTikEMqCZkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:c0:0e:13:3b:c3:fc:6b:1f:3b:4b:d2:ec:f5:8a:7c:f7:2a:
         18:5e:e2:c9:60:17:00:49:73:25:94:b3:97:4a:6d:31:a4:fe:
         e7:31:25:28:31:a0:4d:a2:21:4f:4c:fc:d9:eb:84:2f:d7:31:
         43:20:c9:bf:9e:2d:64:32:bb:2d:79:82:62:ff:ad:ee:25:08:
         fa:6b:89:4a:12:ce:4b:a8:2e:46:75:ee:fe:22:16:c5:05:dc:
         17:23:74:c2:97:12:be:3d:8b:c7:91:ab:58:47:fd:51:8d:22:
         0e:4c:24:64:3a:45:54:e7:9d:22:63:0b:b1:d4:41:32:48:bb:
         ec:7c:73:25:13:9b:6d:ce:cf:31:3b:40:75:5a:e0:c3:c6:8b:
         e5:7e:c8:5b:ad:5e:a9:25:52:15:0c:91:a9:0d:a9:b5:8e:e3:
         06:36:da:a6:4d:60:4b:b6:00:e2:59:af:a6:46:86:24:0b:11:
         bd:8c:e1:72:62:c6:d5:c4:4e:4a:0b:df:e7:1d:5d:7a:19:09:
         ff:24:b2:fe:34:3e:52:8d:79:6d:b6:19:55:82:a5:3b:76:44:
         33:a6:ff:08:59:dd:8d:8e:b7:1c:ef:7f:28:e3:be:c6:34:a6:
         92:ef:1e:28:19:1f:a7:78:55:98:47:3c:0f:82:51:a3:e4:d8:
         01:b0:7d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:39:09 2025 by rpki-client