Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
File:                     10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft (raw, json)
Hash identifier:          TAz8BLLcb8y7t1zRBTKPtr8WldAMcBgsqUgFfk9XPGk=
Subject key identifier:   3D:19:AF:AE:16:77:05:26:70:FF:67:83:D8:0B:EE:83:DF:B7:22:96
Authority key identifier: D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64
Certificate issuer:       /CN=d74794f996ac5a3f02b56a75c14949403d02ac64
Certificate serial:       01965F4D853F56DAD04372E2F66E7067BFD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
Manifest number:          14FE
Signing time:             Tue 22 Apr 2025 21:00:37 +0000
Manifest this update:     Tue 22 Apr 2025 21:00:37 +0000
Manifest next update:     Wed 23 Apr 2025 21:00:37 +0000
Files and hashes:         1: 10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl (hash: aJNEDYZgcLXzuE0/u6gMXeyvBms8sRuWpdUFSYPyBjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 20:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5f:4d:85:3f:56:da:d0:43:72:e2:f6:6e:70:67:bf:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d74794f996ac5a3f02b56a75c14949403d02ac64
        Validity
            Not Before: Apr 22 21:00:37 2025 GMT
            Not After : Apr 23 21:00:37 2025 GMT
        Subject: CN=3d19afae1677052670ff6783d80bee83dfb72296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:33:4f:8c:3d:84:1c:39:38:a0:da:e0:1a:a3:
                    15:95:03:fe:18:d0:89:68:8e:34:fd:8c:58:5d:ff:
                    e0:d4:7d:62:89:9a:24:be:21:69:67:5d:d4:3e:8d:
                    19:23:68:6b:28:71:4a:f0:46:8c:bf:60:2a:01:3b:
                    06:86:c3:cc:31:ec:c3:a9:76:13:87:26:92:9e:3a:
                    28:d8:9c:e8:6f:0e:65:36:25:65:2c:ee:a4:1e:2f:
                    d3:9b:72:b0:94:db:e0:a0:4d:b9:98:a5:16:a8:a2:
                    14:2c:33:2b:6b:c1:e8:86:a4:78:91:4e:bb:9d:ea:
                    6e:a5:db:2d:f5:ba:bc:7a:c0:11:b2:15:ab:00:2f:
                    84:d8:ed:fe:d3:21:1f:23:37:88:0c:1f:2a:88:39:
                    17:91:06:8f:9d:53:92:01:25:f9:af:00:3b:ad:22:
                    e7:26:34:e6:5b:63:a8:69:ac:8f:b7:bd:cc:84:45:
                    63:ee:3b:a2:cc:00:a1:7b:9d:b9:4d:bd:be:0e:07:
                    76:09:1c:4c:a6:b7:c5:ca:30:3e:3c:6f:3c:b2:6e:
                    85:60:99:04:a5:2d:96:aa:ff:53:bf:58:fa:d9:39:
                    b4:d4:7a:45:4b:b4:ee:39:bf:f8:e7:d6:c4:38:64:
                    07:68:a4:35:96:ef:25:83:d4:4d:9a:93:fe:05:14:
                    26:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:19:AF:AE:16:77:05:26:70:FF:67:83:D8:0B:EE:83:DF:B7:22:96
            X509v3 Authority Key Identifier:
                keyid:D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c1:c7:87:39:62:8e:23:bb:70:e7:3a:d2:23:e0:69:4b:8d:
         df:63:87:7d:db:3c:21:a9:2a:1a:89:17:f6:63:1c:d4:75:66:
         04:5c:1e:af:35:25:7c:7c:14:8a:2b:87:df:b4:dd:1c:d0:5e:
         5f:96:c7:93:52:83:f1:5a:c0:a8:b5:8c:a6:59:bf:ea:3d:8b:
         27:a2:91:33:c9:7d:3d:3c:64:67:ae:c5:9d:45:8b:dd:86:91:
         47:f4:85:02:f2:d9:2b:b4:57:f7:d7:89:49:53:70:92:88:f9:
         90:0c:cf:4f:18:bf:3e:36:30:ce:5c:8b:9c:b6:02:e1:ed:2f:
         c6:c0:25:61:d0:3d:77:1a:c4:aa:e6:70:01:0a:67:0f:05:7d:
         32:90:aa:d0:de:3b:48:58:61:1b:a9:f8:96:b4:ce:e0:a1:43:
         c9:25:15:15:33:ea:59:41:ab:d2:e7:06:6c:48:e1:c8:b4:c4:
         42:fe:06:40:89:5b:c6:69:c2:f1:49:51:ea:29:50:de:5e:b0:
         4e:18:82:16:af:d2:ba:9f:c8:a9:c8:30:54:d0:68:96:7a:55:
         a6:73:fe:01:d8:b7:dc:fb:12:2c:15:c6:e4:97:38:c2:c9:5f:
         76:bb:23:d8:5e:92:3d:c8:4e:6f:d5:a7:dc:81:63:c8:62:7a:
         e4:6e:f8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:12:17 2025 by rpki-client