Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
File:                     10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft (raw, json)
Hash identifier:          ZlPGAGiUxKp7S8umEhA4vhTiqM2IHuUEnMS6tf+mOaU=
Subject key identifier:   C2:8D:62:92:60:55:02:5B:22:2F:0C:7F:7C:80:D2:D6:F1:43:3B:F4
Authority key identifier: D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64
Certificate issuer:       /CN=d74794f996ac5a3f02b56a75c14949403d02ac64
Certificate serial:       0197CE3B9B7378F173A3759480BD2EDC5743
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
Manifest number:          15BC
Signing time:             Thu 03 Jul 2025 03:01:42 +0000
Manifest this update:     Thu 03 Jul 2025 03:01:42 +0000
Manifest next update:     Fri 04 Jul 2025 03:01:42 +0000
Files and hashes:         1: 10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl (hash: 8o1GiuS7EWv/XM7nxDFqVbBX8f5XwMYSFnFZAAp/9wc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ce:3b:9b:73:78:f1:73:a3:75:94:80:bd:2e:dc:57:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d74794f996ac5a3f02b56a75c14949403d02ac64
        Validity
            Not Before: Jul  3 03:01:42 2025 GMT
            Not After : Jul  4 03:01:42 2025 GMT
        Subject: CN=c28d62926055025b222f0c7f7c80d2d6f1433bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:cd:19:1c:f4:bc:10:0c:ce:20:88:f3:a4:
                    ef:c5:61:9d:4d:cb:d3:ee:66:ea:eb:d4:98:ca:64:
                    f9:28:33:de:7b:fb:55:23:7f:cb:7a:5c:a4:88:e4:
                    5e:65:b3:61:84:0f:5e:ad:2d:1e:77:70:2c:86:df:
                    8b:eb:45:3d:ac:71:e6:a5:19:5b:cb:a1:37:03:e0:
                    18:8e:64:2b:8e:53:1a:a8:bf:72:a7:49:60:52:0d:
                    dc:43:7c:2d:7d:f9:c9:f2:fa:78:c6:33:4d:9e:e7:
                    42:d9:61:e8:ad:ec:c1:ad:d1:ef:de:ee:74:d2:db:
                    f4:9c:5c:20:94:66:33:c0:66:00:7e:7a:3e:8b:31:
                    fd:90:3c:25:6e:ec:0f:0a:67:56:14:1e:69:42:eb:
                    c8:05:06:67:44:7c:04:1f:9f:41:ce:1b:19:95:c0:
                    12:77:42:70:1a:5f:c6:1c:8c:db:a2:0a:f1:e4:b5:
                    f3:00:d5:f6:bd:bc:87:f5:14:45:4d:3a:7b:5d:57:
                    86:c6:42:ef:0e:d0:af:95:58:75:dd:2b:2b:72:60:
                    f1:27:5f:26:c0:3b:6c:26:21:21:d9:26:c0:eb:66:
                    37:ab:26:14:1f:a8:7c:54:0c:80:46:47:6a:e6:ea:
                    46:fd:0d:77:6a:3b:52:ec:dc:b3:28:75:36:22:e1:
                    6f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8D:62:92:60:55:02:5B:22:2F:0C:7F:7C:80:D2:D6:F1:43:3B:F4
            X509v3 Authority Key Identifier:
                keyid:D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:dc:7b:a7:97:0f:1e:9a:da:94:34:5a:03:7b:35:ec:a4:00:
         e9:1b:68:fb:d3:c0:58:b7:b2:45:2b:93:ac:6f:1e:de:8b:9e:
         c0:fd:5a:89:2c:eb:24:4a:e2:8d:6e:cc:7a:4f:a6:f5:88:d0:
         0f:84:ac:31:28:f4:10:ec:af:75:a6:dd:8e:f7:82:ea:de:e1:
         a8:00:b3:d4:d6:e6:89:67:38:6d:bd:3d:54:56:de:06:90:d5:
         ad:d9:ba:1a:98:55:01:64:db:b7:e8:7f:8a:ce:4f:a8:67:cc:
         c5:94:ab:c7:d7:50:1f:7b:e0:d8:09:20:70:eb:f0:79:d0:34:
         fe:62:55:b0:5f:b8:f4:69:05:aa:ac:29:1c:2a:c0:49:9e:13:
         4e:95:31:22:08:f2:3d:68:0f:16:16:4d:d4:c4:75:56:a2:3c:
         a4:08:1a:06:3e:5e:5e:46:bd:e6:ea:27:e0:c3:9b:bf:e9:0f:
         59:1f:c5:06:9e:8d:f1:64:9f:07:0f:ea:38:23:b7:0b:b5:73:
         80:84:1d:62:a0:fd:a4:c2:7f:67:4a:4a:4f:b5:ac:f7:57:51:
         ee:97:52:bb:66:df:91:cb:ca:93:8d:5b:8c:ff:59:92:73:15:
         a5:7d:42:3d:6b:14:40:34:7f:b7:8b:e4:16:0a:01:24:df:ac:
         32:4c:86:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:06:14 2025 by rpki-client