Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
File:                     AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft (raw, json)
Hash identifier:          SKE8G9D1enwKVq4fMbqTIFVk+smnw6a1r9quqCMvxkA=
Subject key identifier:   10:DB:4D:E5:E6:49:2A:D1:E7:A2:8B:FA:8C:22:F9:C6:13:96:63:3D
Authority key identifier: 00:92:6C:A8:C5:1F:D1:EE:B2:7C:2A:78:4D:BF:20:BD:2A:49:91:9E
Certificate issuer:       /CN=00926ca8c51fd1eeb27c2a784dbf20bd2a49919e
Certificate serial:       019645C51A45BA163560FBDE39B0439DDA00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
Manifest number:          14F2
Signing time:             Thu 17 Apr 2025 22:01:07 +0000
Manifest this update:     Thu 17 Apr 2025 22:01:07 +0000
Manifest next update:     Fri 18 Apr 2025 22:01:07 +0000
Files and hashes:         1: AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl (hash: 4OMPINyCX2e+l0ISr/sDnBnevO/5xNnGbwyTE/wKjls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 18:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:c5:1a:45:ba:16:35:60:fb:de:39:b0:43:9d:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00926ca8c51fd1eeb27c2a784dbf20bd2a49919e
        Validity
            Not Before: Apr 17 22:01:07 2025 GMT
            Not After : Apr 18 22:01:07 2025 GMT
        Subject: CN=10db4de5e6492ad1e7a28bfa8c22f9c61396633d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a7:9a:e5:7f:e2:e4:88:9d:b6:42:c3:8a:e8:
                    94:38:ff:5d:29:03:58:2f:30:05:fd:a9:ac:76:8b:
                    12:24:ce:ef:ec:0c:cf:21:9d:cb:c9:ce:02:c7:e2:
                    f7:a1:94:b0:d3:1d:5c:40:87:cb:7b:ef:43:c7:85:
                    0d:9e:5f:7e:04:08:cd:b2:39:55:06:c6:13:b5:07:
                    29:d1:d8:c6:aa:01:5e:7b:60:90:e6:b0:3c:d0:b4:
                    49:f2:dc:f2:a7:7a:9e:2b:c1:6c:a0:ee:c2:d8:38:
                    d1:63:c2:4b:3d:54:84:d3:8d:8d:00:38:8e:54:2c:
                    22:1c:c1:a1:81:bb:d4:e0:a5:88:00:a3:37:8d:9c:
                    61:ea:c3:bf:40:53:a7:21:8f:18:e2:92:66:e4:69:
                    9b:22:de:ad:b5:c9:56:97:a8:77:25:bc:92:50:87:
                    1a:e7:17:1e:55:15:be:f6:d5:6e:2e:fd:e9:45:c4:
                    23:7f:8d:3d:89:32:59:3a:83:9d:60:83:cc:e5:f1:
                    2a:13:ba:8f:b7:ce:58:51:ce:46:0a:b0:0e:5b:43:
                    6c:83:88:ca:53:bf:f4:db:52:21:49:a2:1b:4e:7d:
                    07:dc:de:b0:b8:89:43:f5:68:62:00:77:b8:75:1f:
                    f8:f8:55:a4:22:58:17:7f:64:72:93:71:df:53:b2:
                    85:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DB:4D:E5:E6:49:2A:D1:E7:A2:8B:FA:8C:22:F9:C6:13:96:63:3D
            X509v3 Authority Key Identifier:
                keyid:00:92:6C:A8:C5:1F:D1:EE:B2:7C:2A:78:4D:BF:20:BD:2A:49:91:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e9:26:fc:ce:40:a9:c5:a1:e4:96:7b:f3:1e:c9:38:ae:2e:6e:
         d9:37:0e:d1:44:d1:f3:d9:13:3c:ef:10:a5:44:24:ee:42:15:
         89:bf:fe:2a:68:66:07:b3:79:00:07:56:27:ab:41:da:78:c4:
         2d:86:3e:b6:2a:58:11:05:2d:c5:0d:eb:f5:2a:33:e7:6f:6d:
         40:ad:4a:46:95:de:23:1b:35:20:da:58:3d:d6:0e:cd:a2:30:
         e9:70:7f:9f:45:ec:cc:b1:dd:52:a6:31:f6:05:7b:4a:6a:f7:
         26:b5:44:1d:99:4b:c6:b3:73:28:b3:59:63:a3:9f:45:6f:b9:
         ed:ef:7d:02:b5:91:83:22:5c:14:42:87:d4:ac:3c:b0:9f:68:
         85:74:4d:d1:bd:8f:ba:0f:d5:d9:03:fc:f9:e4:54:bb:9f:54:
         ad:94:f7:1f:fb:0c:d1:d6:15:2a:be:b1:11:ea:a6:dd:82:4b:
         5d:00:58:8a:9b:cf:e5:8f:31:68:dc:64:5d:fb:7d:f7:a6:41:
         90:eb:4d:cc:48:b4:15:53:2a:68:68:0f:b3:ae:c2:19:0e:4b:
         40:27:ee:63:ba:c4:92:e6:07:aa:10:4c:a8:98:04:10:28:67:
         05:8a:35:5f:6d:e7:43:7f:14:82:72:84:83:b6:15:9d:cd:2d:
         8d:4b:3a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:04:35 2025 by rpki-client