Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft
File:                     SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft (raw, json)
Hash identifier:          eqVeNWMboJR/ULZvL1O2BPrwJ1llWizjRNP7VDfGbLs=
Subject key identifier:   DD:21:BD:E2:23:E8:9F:54:6B:75:AA:04:D3:1E:C9:55:E9:F8:39:EB
Authority key identifier: 48:94:9D:3C:87:35:03:DB:D2:96:BD:A6:0E:B7:77:BC:54:1D:51:4E
Certificate issuer:       /CN=48949d3c873503dbd296bda60eb777bc541d514e
Certificate serial:       019848F733803281715D86E94C2EBF75F751
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft
Manifest number:          03BC
Signing time:             Sat 26 Jul 2025 23:00:16 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:16 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:16 +0000
Files and hashes:         1: SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl (hash: bqYxsFS5NZwvuQ0Jn09jyn8FKFaxVunpbcnhzWYMXkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 23:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:33:80:32:81:71:5d:86:e9:4c:2e:bf:75:f7:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48949d3c873503dbd296bda60eb777bc541d514e
        Validity
            Not Before: Jul 26 23:00:16 2025 GMT
            Not After : Jul 27 23:00:16 2025 GMT
        Subject: CN=dd21bde223e89f546b75aa04d31ec955e9f839eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:27:f4:94:62:8d:7b:2f:f3:4b:a6:1b:da:ce:
                    97:cb:95:7d:dc:28:2d:68:06:4b:b5:a3:a2:1c:49:
                    23:64:b8:de:4c:e4:6b:21:4b:bf:18:60:11:89:ee:
                    d7:c2:b8:57:09:4a:2b:15:34:e0:ce:06:9f:f9:00:
                    c7:7a:73:fa:47:a3:4a:20:97:c1:ef:dd:09:16:b2:
                    73:59:ed:cc:01:3a:3c:1f:78:d3:e0:79:8b:a4:3a:
                    c9:75:30:5e:63:fc:42:93:d3:36:11:c0:b4:2b:ec:
                    b4:ca:aa:20:13:8d:d9:05:4e:77:21:92:f3:3f:f7:
                    1c:8f:9a:eb:c5:86:78:44:ea:10:1e:5c:3f:5e:d6:
                    21:e9:dd:c1:d3:aa:59:27:87:d1:a3:3a:63:7d:9b:
                    57:23:e8:78:e8:57:4f:1a:b6:81:98:57:b0:d0:86:
                    e8:0e:27:65:49:93:df:48:af:4f:e6:1f:9b:64:23:
                    71:9c:c6:6e:eb:95:c5:65:d4:f1:dd:9e:98:b9:c5:
                    08:49:3c:e5:b1:58:39:6c:59:f6:03:2d:3f:e9:5a:
                    01:3b:61:52:e7:fc:e9:6f:c0:d8:a9:cd:49:21:fd:
                    8e:95:5c:9b:52:69:08:14:9f:1e:62:6b:6f:d2:96:
                    85:ab:91:ce:45:fd:0d:a3:ec:e0:26:9a:3e:59:cb:
                    33:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:21:BD:E2:23:E8:9F:54:6B:75:AA:04:D3:1E:C9:55:E9:F8:39:EB
            X509v3 Authority Key Identifier:
                keyid:48:94:9D:3C:87:35:03:DB:D2:96:BD:A6:0E:B7:77:BC:54:1D:51:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:d8:30:86:10:7b:59:10:8f:3a:6f:a7:82:b4:ca:0c:36:ae:
         8a:8e:4c:a1:10:b1:1b:2e:3b:0f:db:65:70:ba:d3:c9:aa:a3:
         7e:97:6a:cb:e3:bd:a2:fa:6d:43:50:a4:ee:30:6f:77:a5:07:
         66:aa:4d:49:d1:6d:86:35:c8:6e:ec:85:8f:29:02:2a:b7:e8:
         5d:90:c5:ff:56:52:b5:0f:90:45:cc:8b:1b:b4:93:b5:1d:e2:
         4a:b3:28:72:ef:d3:99:1e:b7:37:02:27:78:dc:3c:48:70:e3:
         a1:91:44:31:80:8c:08:06:39:93:57:54:03:bf:ea:da:9a:30:
         0e:3d:44:d9:da:53:35:4f:d3:f0:66:25:0e:3a:22:8b:8a:3c:
         2c:01:a5:d3:60:0a:d4:e6:f5:7e:22:33:f2:48:81:b7:3c:a4:
         7e:e1:6f:c8:99:2c:b8:94:1b:3c:9e:d1:f1:79:5b:b2:3b:de:
         3a:3c:87:9e:e5:39:4d:0b:53:67:c1:5b:b1:4b:ba:cd:3e:53:
         97:aa:41:e5:95:7e:25:73:50:3c:5a:9c:49:78:c4:3e:30:72:
         32:8c:05:58:cc:e9:86:e0:3a:4a:ca:dc:d0:d2:67:c4:c5:3c:
         49:e1:95:1e:1a:f6:96:5c:09:71:e7:73:fd:db:f0:15:40:38:
         fa:1b:81:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:30:28 2025 by rpki-client