Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
File:                     9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json)
Hash identifier:          qZZHRcCZEEucorVE9e8++o6d/gEjykxO0cwEswcQtVg=
Subject key identifier:   14:C9:91:3C:54:DF:2F:81:0E:E5:28:94:71:95:96:CB:68:4B:24:5C
Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
Certificate issuer:       /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Certificate serial:       01965048C4766A6459D29A7E63407FD0E631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
Manifest number:          10CD
Signing time:             Sat 19 Apr 2025 23:01:08 +0000
Manifest this update:     Sat 19 Apr 2025 23:01:08 +0000
Manifest next update:     Sun 20 Apr 2025 23:01:08 +0000
Files and hashes:         1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: 6fP8SHVZBtZCC3LHe1Wd6BFeHcrpfivMuNj4qo6jSuo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:48:c4:76:6a:64:59:d2:9a:7e:63:40:7f:d0:e6:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
        Validity
            Not Before: Apr 19 23:01:08 2025 GMT
            Not After : Apr 20 23:01:08 2025 GMT
        Subject: CN=14c9913c54df2f810ee52894719596cb684b245c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:68:3c:97:eb:ba:30:26:f1:f8:0b:47:16:88:
                    24:fd:8d:39:6d:a4:5b:1f:88:88:b5:7e:7e:47:b1:
                    68:b3:d8:f6:d7:17:f9:07:c3:c7:ff:a4:3b:b4:d0:
                    2a:b1:a9:58:77:58:f7:98:f4:f3:38:e3:8f:2c:fc:
                    be:85:57:92:b0:97:85:2f:ad:fd:21:e5:55:f6:89:
                    92:f2:7a:bc:ac:57:36:20:e6:89:43:97:da:4b:ca:
                    75:db:ba:14:55:b0:af:ee:4c:79:51:a6:d3:f7:9e:
                    d1:49:3e:6a:f1:1b:ac:c1:af:c9:a2:81:a8:5f:6f:
                    f5:00:8b:df:e7:2c:c7:58:e6:11:0b:aa:6e:ef:42:
                    6d:e1:22:67:ec:fb:1d:e7:21:80:3d:fc:5a:a0:17:
                    8c:68:1a:c8:09:d1:1e:7a:49:e4:f9:c9:0e:c6:24:
                    a3:e0:35:ca:f7:a5:b3:04:56:a6:d8:81:47:e9:fa:
                    cb:1d:b3:cd:45:9b:37:de:51:ac:43:7b:35:b9:de:
                    d0:f9:8d:ab:d2:34:3f:56:39:34:25:f6:9d:35:cc:
                    88:da:5f:70:9c:83:22:03:0b:04:b4:70:e4:53:c5:
                    51:36:3d:d9:af:30:8b:af:94:2e:8b:2a:d6:77:db:
                    23:8c:18:d2:e8:d9:2b:32:31:05:4f:40:db:26:59:
                    37:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C9:91:3C:54:DF:2F:81:0E:E5:28:94:71:95:96:CB:68:4B:24:5C
            X509v3 Authority Key Identifier:
                keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:8e:6c:51:6e:8b:50:e6:32:f9:09:6f:8e:f7:93:b9:fb:59:
         a9:45:7b:5d:03:43:ca:e4:1c:42:a6:dd:d0:61:36:6e:5b:bc:
         eb:45:dc:2e:59:e7:c5:97:ef:7e:11:57:d7:bd:81:ab:f8:d6:
         da:b1:a1:94:cd:e2:bb:c8:15:bc:ae:f9:3c:31:84:a0:cd:50:
         e4:7a:7c:d5:3e:e8:16:7e:25:03:bf:5c:e0:fc:88:0f:ad:b0:
         5d:ff:62:5f:66:20:84:23:76:19:10:50:95:ca:c2:01:74:25:
         ae:8b:68:fa:9d:6f:3f:63:51:fc:67:d7:53:4c:10:53:b0:70:
         d0:e1:8a:2e:67:5c:9a:ee:f0:f1:bb:99:b8:03:32:e4:f8:82:
         93:15:5b:19:9c:b8:c0:7a:98:61:4a:72:8b:37:90:f1:4a:db:
         5c:0b:58:16:70:fc:7e:34:a3:6b:a5:40:0d:e8:ed:f1:f5:76:
         fb:12:e7:f7:a7:f8:aa:6c:ae:c8:b7:96:78:b0:9d:d6:28:c2:
         84:e0:c5:56:e6:c4:30:6a:90:37:54:39:06:8f:03:27:6d:76:
         31:1f:39:ae:92:87:67:2b:13:17:cb:c6:60:a1:d2:bf:1b:31:
         2f:f1:ea:d1:ac:57:a8:dd:23:35:59:f3:5b:bf:3c:d8:e1:06:
         3e:53:e1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:33:52 2025 by rpki-client