Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
File:                     6X9KenczHtX3zn7oBowu29LQ034.mft (raw, json)
Hash identifier:          L8ylefo+pI9bSAu+aAsTmzjlyjOQiEleFJG8leQD4jc=
Subject key identifier:   24:9B:F0:0C:02:D7:91:1C:F4:AE:B9:5E:9E:98:69:04:B8:C5:23:0F
Authority key identifier: E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E
Certificate issuer:       /CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e
Certificate serial:       01964B8FA6756788ADE9FFBC0E82B5EAEEFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
Manifest number:          14F6
Signing time:             Sat 19 Apr 2025 01:00:27 +0000
Manifest this update:     Sat 19 Apr 2025 01:00:27 +0000
Manifest next update:     Sun 20 Apr 2025 01:00:27 +0000
Files and hashes:         1: 6X9KenczHtX3zn7oBowu29LQ034.crl (hash: pRN770LQdypsZMMSjNYoofKT2m9dR+HCMarxvPszAWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 01:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:8f:a6:75:67:88:ad:e9:ff:bc:0e:82:b5:ea:ee:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e
        Validity
            Not Before: Apr 19 01:00:27 2025 GMT
            Not After : Apr 20 01:00:27 2025 GMT
        Subject: CN=249bf00c02d7911cf4aeb95e9e986904b8c5230f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3b:16:ec:28:4a:13:f8:0e:96:b5:e5:3e:f7:
                    1a:f8:62:d1:9c:1c:72:61:79:c0:a4:80:75:6e:a4:
                    fe:ff:ae:45:e9:66:ab:a0:9f:fb:58:1a:b0:15:c4:
                    c7:d7:00:2d:33:0e:cb:55:16:66:9d:20:fd:81:a7:
                    65:41:af:25:df:62:fe:13:13:46:08:46:14:97:14:
                    17:2d:1c:9a:e9:26:3f:b8:86:c5:41:72:c8:f2:b7:
                    51:10:9f:5c:b0:30:1b:e9:85:5a:9e:03:3f:e4:23:
                    a9:60:68:6b:86:d1:ab:91:2f:2a:40:e9:27:a1:91:
                    f4:13:f0:e5:ab:3e:4a:2c:4d:8a:04:5e:ab:b0:2e:
                    48:c0:44:54:c3:81:c4:0a:f6:3b:a1:0e:83:fc:83:
                    87:ef:bb:96:e5:35:cb:c7:e8:5a:0d:d5:f3:a7:6c:
                    95:8d:9e:bf:11:49:ea:db:60:97:86:ee:03:ef:6f:
                    57:47:52:3d:a5:3a:22:f7:28:77:75:6d:c5:6f:bc:
                    ff:b6:62:f7:e6:46:22:6d:2e:35:ef:84:61:cb:bd:
                    1e:cf:7d:2c:a9:e4:33:33:ea:51:ee:61:db:e2:67:
                    ee:25:48:41:b9:72:9d:7f:a0:42:4e:86:9f:b0:e8:
                    25:31:3f:77:cb:7a:bb:dd:70:30:00:86:54:d7:98:
                    60:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9B:F0:0C:02:D7:91:1C:F4:AE:B9:5E:9E:98:69:04:B8:C5:23:0F
            X509v3 Authority Key Identifier:
                keyid:E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:8c:6d:12:4f:2f:1b:81:eb:ad:ca:f9:18:52:29:ad:4c:d2:
         fe:b8:af:e1:d9:4b:a0:fa:a6:24:a4:0f:9d:b9:e0:a7:51:3b:
         7a:60:64:a6:64:26:ad:2b:e0:17:86:b8:ef:12:bc:3d:62:fd:
         b6:fc:46:3d:e4:9a:40:e0:11:82:f9:6c:31:45:23:8e:db:51:
         1c:78:ae:33:3d:f8:50:c1:38:40:fd:45:83:96:eb:6a:8c:6c:
         40:59:cb:af:15:42:40:ac:93:ae:8f:1f:c8:58:34:e8:f5:a7:
         93:f9:56:e4:08:5e:cc:ac:e7:13:01:88:ef:19:d5:a3:94:47:
         bd:66:e5:60:ee:74:b9:ad:ce:52:3b:1e:e9:b3:ec:be:8f:5e:
         df:49:26:f7:5e:b1:5f:32:87:9b:fb:b4:39:fa:bd:03:cd:cb:
         80:0d:6b:a7:a3:64:bb:e6:35:da:5a:6b:c2:a3:cc:47:38:53:
         00:3c:8a:b4:c8:b2:eb:58:35:7e:f0:11:18:f6:9e:af:78:00:
         1d:f5:97:6a:eb:98:d9:03:64:04:00:98:ac:ee:79:31:5c:1b:
         dd:a3:f0:56:22:6b:03:98:0e:4e:1b:82:47:d2:15:24:10:bf:
         8b:49:fb:34:48:64:8e:ba:5c:1d:e3:17:f9:c5:48:71:6d:3a:
         3d:a9:df:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 09:52:48 2025 by rpki-client