Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft
File:                     txiFnUEvm1hypYl3Mg0tCDvXoEs.mft (raw, json)
Hash identifier:          Nkdv+ZDly5H/fv9Gx5qo3ZiRf8a4EPAz7TlO3g5ySxM=
Subject key identifier:   CE:6A:76:51:D1:A4:F3:70:AF:4F:0C:23:19:59:0D:5C:7F:EA:20:46
Authority key identifier: B7:18:85:9D:41:2F:9B:58:72:A5:89:77:32:0D:2D:08:3B:D7:A0:4B
Certificate issuer:       /CN=b718859d412f9b5872a58977320d2d083bd7a04b
Certificate serial:       01963BE608C3AF674A6393708E3089878B16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft
Manifest number:          0EDA
Signing time:             Wed 16 Apr 2025 00:00:53 +0000
Manifest this update:     Wed 16 Apr 2025 00:00:53 +0000
Manifest next update:     Thu 17 Apr 2025 00:00:53 +0000
Files and hashes:         1: txiFnUEvm1hypYl3Mg0tCDvXoEs.crl (hash: oo7cftCG1+WlQEx9dv1ieFXEOAwTXWLdzN65R/uW0y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 00:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3b:e6:08:c3:af:67:4a:63:93:70:8e:30:89:87:8b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b718859d412f9b5872a58977320d2d083bd7a04b
        Validity
            Not Before: Apr 16 00:00:53 2025 GMT
            Not After : Apr 17 00:00:53 2025 GMT
        Subject: CN=ce6a7651d1a4f370af4f0c2319590d5c7fea2046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:75:a3:8a:41:02:3a:ea:c3:07:52:b4:79:67:
                    3e:0f:19:cb:80:48:dc:90:f0:a7:10:6c:31:ee:1b:
                    67:2c:68:d1:dc:4c:ff:f1:5e:bf:94:98:da:76:30:
                    f0:e4:77:da:72:b3:cd:e0:bb:0e:56:59:d9:12:54:
                    68:77:64:06:33:9d:f0:1d:5f:ed:b2:3d:57:09:d8:
                    3f:94:8d:3b:36:02:ae:5f:22:39:d1:9a:9c:67:de:
                    d1:40:ad:cc:54:65:6b:48:42:c2:4f:47:ed:85:16:
                    11:d4:39:d5:a6:89:eb:21:08:75:ad:6b:f9:26:4c:
                    5b:1c:b6:d3:5d:b0:b5:53:6a:c8:97:cb:47:dd:cd:
                    67:0b:40:fc:9c:dd:ca:72:d1:e3:14:f8:32:08:a5:
                    d7:6a:95:0b:b0:f6:5c:da:3c:b1:e3:27:2d:e2:0f:
                    d9:ce:a3:8e:1d:8c:a1:84:43:2e:0a:cb:76:32:99:
                    a4:1b:9a:7f:51:ca:bb:4f:c2:0a:c8:ce:49:f4:d4:
                    28:de:39:a0:a7:48:66:a8:b2:d6:87:86:0c:e1:8d:
                    28:fc:24:b1:00:dd:b4:45:ae:0f:fa:87:df:09:6e:
                    f1:43:36:f5:1e:7d:cb:8e:82:be:5e:4d:81:64:e2:
                    6a:58:b7:55:bd:ea:99:ea:4c:ed:f6:a5:42:30:e1:
                    f4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6A:76:51:D1:A4:F3:70:AF:4F:0C:23:19:59:0D:5C:7F:EA:20:46
            X509v3 Authority Key Identifier:
                keyid:B7:18:85:9D:41:2F:9B:58:72:A5:89:77:32:0D:2D:08:3B:D7:A0:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:41:31:19:ee:56:a7:f2:2a:56:70:cf:1c:33:3d:9c:a3:f6:
         6f:6d:d0:9d:ef:46:fa:79:14:fc:64:10:2d:9d:bf:12:72:5c:
         6a:ca:bb:52:95:92:1d:81:6b:f9:40:fa:fa:cb:c1:60:bf:a1:
         2a:29:ac:9b:27:61:74:08:b6:28:ab:ad:ca:d7:91:79:41:06:
         c0:40:57:2e:86:c8:89:bb:1d:d6:8d:fe:6e:20:13:b4:ef:34:
         5b:07:49:b1:36:09:99:ec:24:b4:64:8b:76:4e:17:6f:cf:a3:
         f5:f0:ec:7b:50:38:c5:02:19:af:fa:1f:45:60:eb:19:f9:13:
         90:63:d8:8c:e2:8f:ae:1a:59:00:50:f6:0f:37:b8:45:4f:39:
         d1:c1:55:2d:1d:56:f3:b0:ff:77:9c:05:82:72:4c:2f:38:1a:
         88:31:86:bc:dd:52:9d:a8:c2:a1:b1:93:39:3d:93:1b:39:b3:
         47:dd:d3:87:7a:bd:9c:22:41:13:aa:13:11:b0:af:90:38:69:
         cf:06:e1:0c:b5:e0:2f:a3:ba:db:30:59:7c:67:63:bb:ec:e5:
         28:b0:5d:13:92:ee:34:7d:a4:2d:c7:57:81:8c:e8:c6:70:f5:
         c6:a5:a7:4a:f5:0d:4e:4f:98:33:34:a4:e9:bb:f6:ca:c2:bd:
         ae:42:1e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:37:49 2025 by rpki-client