Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
File:                     SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft (raw, json)
Hash identifier:          /BtHxdHu/2EzmeN9TL/1hDmdFwfXgJ/yAQAjS+OcceY=
Subject key identifier:   67:39:F4:DC:8E:FD:1F:EA:07:72:58:59:59:59:FC:E0:BA:1B:0A:66
Authority key identifier: 4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6
Certificate issuer:       /CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6
Certificate serial:       019FA116DFE419E0CCD87197E7752D036CAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
Manifest number:          0FAC
Signing time:             Mon 27 Jul 2026 01:00:58 +0000
Manifest this update:     Mon 27 Jul 2026 01:00:58 +0000
Manifest next update:     Tue 28 Jul 2026 01:00:58 +0000
Files and hashes:         1: SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl (hash: ezw23pjX+Xk4aBzmO28UOaaMvPCkXrYOtSNsGLGMQus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:16:df:e4:19:e0:cc:d8:71:97:e7:75:2d:03:6c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6
        Validity
            Not Before: Jul 27 01:00:58 2026 GMT
            Not After : Jul 28 01:00:58 2026 GMT
        Subject: CN=6739f4dc8efd1fea077258595959fce0ba1b0a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:84:10:a8:46:85:f9:35:3f:01:96:22:1b:56:
                    46:d3:34:53:d5:81:a4:be:e6:1c:a6:c5:f0:5d:6b:
                    5e:08:24:51:58:ad:da:c2:9c:cf:97:96:a2:97:2f:
                    7c:cd:89:24:c2:ef:e9:ad:2b:d3:60:21:6f:90:6a:
                    4a:b1:86:69:53:b6:75:58:46:94:35:95:ad:64:eb:
                    c5:83:81:65:dc:d4:e4:1a:b3:03:46:28:b8:51:0d:
                    02:5c:c0:eb:02:04:13:51:9e:7d:38:51:45:12:f9:
                    34:6b:e2:3d:4f:d1:ca:a2:40:bb:0e:4b:a7:ea:89:
                    39:9f:b6:8e:6b:95:9c:9a:55:13:0e:c5:c3:47:c3:
                    1c:59:ac:71:57:34:be:04:49:a3:02:5e:44:97:07:
                    19:85:36:92:28:67:35:20:44:ee:64:40:33:60:8e:
                    9a:f1:57:0c:b2:58:b8:4e:63:6f:45:29:c4:fe:16:
                    f6:7c:6b:bb:b6:df:de:4b:21:a0:82:7f:bb:20:14:
                    d1:e2:c1:c1:02:d5:1e:cd:7a:cd:d9:6a:ea:09:c0:
                    7a:54:15:c1:5c:43:05:c3:c7:27:9d:7d:fe:42:a5:
                    3a:19:18:85:ce:f6:50:62:25:28:c3:2b:5c:30:41:
                    68:d8:0f:00:07:9a:9a:5e:b8:20:b4:e9:0b:d0:7e:
                    c4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:39:F4:DC:8E:FD:1F:EA:07:72:58:59:59:59:FC:E0:BA:1B:0A:66
            X509v3 Authority Key Identifier:
                keyid:4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:6b:2d:84:de:a8:35:82:e5:fa:89:8b:2f:c6:69:dd:fd:e2:
         e0:22:68:98:c9:b3:77:1f:92:f7:7f:c8:72:ec:7c:dd:d4:29:
         8c:9a:5d:3d:a0:cf:06:8f:f8:40:c5:07:0c:f5:92:03:05:69:
         22:16:e0:d1:f2:26:00:5f:0f:61:ee:47:13:60:7f:f2:e7:c5:
         98:5d:3b:f9:44:af:b8:a2:d1:95:58:6d:a7:61:28:7a:23:b0:
         60:84:5e:00:75:b4:85:26:53:c2:63:b0:6f:d4:52:14:74:cb:
         4a:ad:67:e6:46:6c:52:c2:3d:0f:2c:8d:f3:63:01:f0:1d:70:
         20:14:b9:14:43:f4:79:7a:7c:1c:a7:de:8b:6f:53:9f:25:e4:
         55:3c:8f:95:68:11:fe:74:52:97:15:a8:71:67:8e:38:03:a1:
         b8:9c:32:91:09:37:f8:81:2c:ee:cc:b7:a1:27:1c:c9:20:8c:
         ec:2e:a2:07:3c:df:4f:84:a5:41:1e:3f:21:43:30:ec:d5:3a:
         a7:12:d5:fb:30:be:89:55:07:57:4f:0b:cb:63:f0:db:b0:af:
         ee:ac:75:66:bf:13:d0:e9:5d:2a:8d:d5:8a:00:e1:16:8c:70:
         55:ee:ce:45:da:8c:69:96:b3:d3:d9:af:4e:0c:3c:8b:f6:e7:
         64:ea:c6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----