Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
File:                     7XlzzE58-_RHB0eBDEFuzH6YGIU.mft (raw, json)
Hash identifier:          pViNAps7TAUHfSRYE4f5uuJmmSBvq6aQoKxFWTplvKU=
Subject key identifier:   41:81:EA:B2:EF:AF:77:2C:C7:CE:5C:BA:90:A6:75:A1:51:60:31:73
Authority key identifier: ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85
Certificate issuer:       /CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
Certificate serial:       0196470E63F3B09C4B9959FCE7560B9D123A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
Manifest number:          106E
Signing time:             Fri 18 Apr 2025 04:00:47 +0000
Manifest this update:     Fri 18 Apr 2025 04:00:47 +0000
Manifest next update:     Sat 19 Apr 2025 04:00:47 +0000
Files and hashes:         1: 7XlzzE58-_RHB0eBDEFuzH6YGIU.crl (hash: 0Ubh9SJhcR/dRLlXIRo5TL0yI2vsRFEarAbmIFQe940=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:47:0e:63:f3:b0:9c:4b:99:59:fc:e7:56:0b:9d:12:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
        Validity
            Not Before: Apr 18 04:00:47 2025 GMT
            Not After : Apr 19 04:00:47 2025 GMT
        Subject: CN=4181eab2efaf772cc7ce5cba90a675a151603173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8d:ff:67:57:e5:fe:8c:18:61:f9:ea:42:64:
                    10:cd:ee:2e:c9:f0:7b:e8:60:ff:8d:e5:c4:35:a1:
                    ce:de:a5:bf:76:e0:9a:9b:62:24:1d:b4:e7:3d:68:
                    ca:c5:3e:a7:2f:5a:ac:16:bd:d8:22:4e:1e:30:75:
                    c5:69:c3:55:f0:67:21:c8:40:d2:f8:e9:08:72:04:
                    91:42:2e:91:96:ef:0f:3b:da:0c:93:f5:e0:53:22:
                    c6:d2:51:e3:3a:ae:72:f0:f6:d6:4f:38:3e:c3:1e:
                    20:9c:a5:f5:8f:3b:80:aa:2b:83:83:ab:fb:b3:30:
                    8c:e0:3f:dd:da:20:56:39:3f:45:6b:9a:26:60:e4:
                    6a:59:fc:41:4f:c6:43:5a:47:a3:c1:76:a1:d9:e8:
                    2d:3b:6a:e0:08:69:b9:64:33:2e:96:6f:af:84:2c:
                    40:50:c4:91:03:62:96:88:19:a3:5f:67:f1:97:55:
                    01:55:ee:64:9b:1c:0f:48:19:83:9c:8f:11:0a:68:
                    95:24:56:28:1a:70:11:2b:d5:3d:01:2f:fb:59:11:
                    8c:bf:fb:ba:f6:dd:68:b4:dd:4e:f1:2e:a2:10:90:
                    ad:be:1e:4d:8e:62:06:40:81:e5:75:5f:f9:1d:21:
                    c2:74:c9:93:c2:0c:56:49:e6:77:b9:1c:09:c6:55:
                    e0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:81:EA:B2:EF:AF:77:2C:C7:CE:5C:BA:90:A6:75:A1:51:60:31:73
            X509v3 Authority Key Identifier:
                keyid:ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f6:9a:1c:2d:08:4f:8b:10:ff:0f:61:24:1b:cc:3b:44:d9:
         80:36:fb:8d:52:d9:65:74:73:f6:72:cc:a5:24:94:fd:0f:98:
         60:4d:ae:fc:1f:18:7a:6e:82:b4:82:91:0f:e2:ae:af:6b:f8:
         ce:04:92:c6:a7:52:05:a8:d4:93:69:e5:a8:d2:10:16:d3:ad:
         38:23:41:e2:a3:01:c8:d2:7e:d1:3f:76:c2:f7:12:81:d3:c1:
         d4:84:9d:39:8b:1f:6b:79:7e:26:85:06:1e:5e:81:78:4a:a2:
         04:15:1a:92:23:a1:0a:e0:15:c7:01:17:4a:97:f6:e4:e9:5f:
         02:85:10:05:b2:50:cb:3d:7e:1b:14:04:af:ce:a8:3c:20:2e:
         33:fc:35:34:77:61:7d:df:9c:8c:fe:2c:a5:03:d6:22:64:b4:
         31:cb:e8:59:ae:46:6d:09:32:75:63:d0:86:ef:e8:94:64:2c:
         10:27:15:b7:40:3e:66:27:d6:78:8e:0e:a5:ca:2f:b1:d5:54:
         93:19:ec:7e:92:e4:8b:76:e6:b2:89:a3:00:4a:e7:08:f3:c5:
         5d:d8:3b:f6:35:80:8c:47:a6:10:96:44:ae:85:56:47:77:6d:
         54:64:5f:29:11:04:73:4f:db:49:aa:c5:7c:7a:b2:ad:4b:9a:
         04:75:02:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:30:50 2025 by rpki-client