Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
File:                     x_SYwou91eWf9XaMbTikEMqCZkA.mft (raw, json)
Hash identifier:          CajVtFvwHyZPREUZwCVH/iuWsG7luflPkHakmZ6yPqw=
Subject key identifier:   60:76:43:19:B7:33:5B:C2:89:52:27:18:91:D6:B4:6B:B0:4B:EC:50
Authority key identifier: C7:F4:98:C2:8B:BD:D5:E5:9F:F5:76:8C:6D:38:A4:10:CA:82:66:40
Certificate issuer:       /CN=c7f498c28bbdd5e59ff5768c6d38a410ca826640
Certificate serial:       0196741D8661D18DF80351544FBC7308F796
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x_SYwou91eWf9XaMbTikEMqCZkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
Manifest number:          0CFB
Signing time:             Sat 26 Apr 2025 22:00:13 +0000
Manifest this update:     Sat 26 Apr 2025 22:00:13 +0000
Manifest next update:     Sun 27 Apr 2025 22:00:13 +0000
Files and hashes:         1: x_SYwou91eWf9XaMbTikEMqCZkA.crl (hash: x2YZFSitEHlJ0AV6oEOVXN/WriyeegJZ3zc7+EcBTzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x_SYwou91eWf9XaMbTikEMqCZkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 22:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:1d:86:61:d1:8d:f8:03:51:54:4f:bc:73:08:f7:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7f498c28bbdd5e59ff5768c6d38a410ca826640
        Validity
            Not Before: Apr 26 22:00:13 2025 GMT
            Not After : Apr 27 22:00:13 2025 GMT
        Subject: CN=60764319b7335bc28952271891d6b46bb04bec50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:70:67:50:78:19:84:d3:62:c9:0e:a4:1e:b3:
                    5e:dd:23:e8:bb:47:a8:19:ae:77:31:17:dc:1d:ec:
                    e5:9b:d3:95:73:d5:93:af:98:ba:04:dd:0b:68:fd:
                    2b:a0:b2:2f:36:65:7b:34:09:a9:d5:63:1b:83:89:
                    bc:f2:3f:ad:37:8c:09:1b:ff:9f:ce:e1:5d:b2:d9:
                    66:45:b6:f5:4b:31:23:a6:12:24:d0:bc:4c:5f:4a:
                    3b:46:b3:6c:91:15:f3:a8:9a:9c:a9:2b:45:f5:1d:
                    15:3e:6d:c8:92:05:63:14:c8:12:35:b6:ca:0e:51:
                    c9:07:28:06:4a:3d:38:b2:1a:27:e2:4c:90:8f:ff:
                    47:78:f3:f4:82:55:bd:62:75:c9:a3:d6:41:6e:23:
                    89:f3:21:c0:cc:f7:4b:0b:67:98:7c:6c:e4:4f:60:
                    59:ef:37:ae:1e:73:7f:0d:a5:b4:00:50:cb:15:72:
                    34:ef:98:93:d1:c6:f7:17:f6:5c:98:1b:1c:6b:e4:
                    8f:01:eb:5c:84:3e:5f:bd:6c:cc:93:86:d7:9f:bb:
                    02:95:a5:d3:0e:b3:3b:94:8d:3a:cc:b2:8b:f0:49:
                    96:1d:56:21:d4:e8:6a:99:f1:d6:dd:61:09:e1:70:
                    05:19:09:fd:47:70:8d:d4:d1:0f:1d:2b:80:de:4e:
                    62:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:76:43:19:B7:33:5B:C2:89:52:27:18:91:D6:B4:6B:B0:4B:EC:50
            X509v3 Authority Key Identifier:
                keyid:C7:F4:98:C2:8B:BD:D5:E5:9F:F5:76:8C:6D:38:A4:10:CA:82:66:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_SYwou91eWf9XaMbTikEMqCZkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:6d:cb:39:ed:64:c1:88:cd:62:12:bf:8c:36:51:bf:34:74:
         47:32:5a:bf:6a:79:7c:7d:96:99:ca:8e:0a:10:2c:ae:11:89:
         fc:a7:1c:df:4e:86:76:b7:40:f9:8b:59:56:b9:8f:46:a8:3d:
         5b:94:af:92:28:5e:27:f1:1a:c4:c8:09:40:d0:1e:cd:ec:54:
         6f:7c:a6:98:92:c8:82:0b:9f:d4:49:52:dc:6f:d6:66:b3:c5:
         41:9f:c6:7a:11:3d:cc:15:ae:04:c1:fa:45:e3:34:99:75:b1:
         22:8d:28:a8:8e:94:7b:00:26:1f:7c:76:46:a7:25:11:68:8e:
         83:83:ee:b6:e7:78:6b:cc:a0:6f:e2:7a:96:6d:a9:e3:c0:da:
         09:e0:1e:2e:50:6b:dd:1e:19:0a:c8:19:1a:c9:4d:b7:51:65:
         67:3f:aa:5a:ab:d6:c3:07:36:1d:86:5f:bb:47:e3:28:96:db:
         c4:ee:46:24:fe:da:f3:76:75:25:c5:ef:eb:31:51:32:fb:4f:
         5e:bb:f8:b8:22:12:24:11:dd:2d:1b:a3:f7:fe:cf:5b:89:d4:
         2e:99:a1:88:ad:2d:24:57:da:77:d8:de:98:b8:13:ed:82:97:
         07:64:17:4b:3a:27:14:db:9a:df:f4:97:ff:00:0c:5c:94:a2:
         5e:96:ab:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:02:13 2025 by rpki-client