Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
File:                     TvYP_RC7937OmKeBY1mERCd9v6Q.mft (raw, json)
Hash identifier:          4EXaGygJ38Ug5HU3Q7R85aZveRdwr3ul8ufXNebNKdo=
Subject key identifier:   6E:D3:EA:0C:A3:B5:D1:4C:CC:B7:9C:95:49:84:E8:FF:6B:60:13:9B
Authority key identifier: 4E:F6:0F:FD:10:BB:F7:7E:CE:98:A7:81:63:59:84:44:27:7D:BF:A4
Certificate issuer:       /CN=4ef60ffd10bbf77ece98a78163598444277dbfa4
Certificate serial:       01964B8FD86836A0755607B7770CFFD817BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
Manifest number:          14F5
Signing time:             Sat 19 Apr 2025 01:00:40 +0000
Manifest this update:     Sat 19 Apr 2025 01:00:40 +0000
Manifest next update:     Sun 20 Apr 2025 01:00:40 +0000
Files and hashes:         1: TvYP_RC7937OmKeBY1mERCd9v6Q.crl (hash: mqmOCNt/z/TWJPSKLdk3f+qws9uSIB3EeN/rC6At/Qk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:8f:d8:68:36:a0:75:56:07:b7:77:0c:ff:d8:17:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ef60ffd10bbf77ece98a78163598444277dbfa4
        Validity
            Not Before: Apr 19 01:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=6ed3ea0ca3b5d14cccb79c954984e8ff6b60139b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:29:f3:ed:62:52:44:7a:3c:00:1c:49:6f:e8:
                    90:43:23:8d:0b:7c:e7:f2:bb:5d:23:15:31:ad:96:
                    dc:f5:55:b3:03:6f:45:df:ee:84:17:29:a5:85:c5:
                    8a:be:bb:57:6a:8a:df:81:35:73:0a:8a:fb:f2:56:
                    c4:f2:c9:f7:da:47:83:40:07:35:6e:3e:d5:75:e6:
                    2a:bb:2a:5e:db:0c:25:a7:21:ca:ba:4f:eb:b0:8c:
                    08:d2:44:19:2b:f8:32:a9:36:1e:4e:41:6c:3d:cd:
                    f3:05:90:bd:f3:e3:07:50:a5:a5:89:79:e2:80:b7:
                    05:dd:42:a7:f4:98:7c:4f:f8:85:2b:c8:65:64:a4:
                    07:49:3c:a6:bf:50:a8:66:4f:3c:7a:ea:03:b0:b7:
                    fc:50:14:2c:b7:cc:54:9d:9e:ce:0a:94:c5:bc:12:
                    31:59:80:90:2b:d2:7b:d6:5a:ce:75:3c:fe:97:be:
                    9c:9e:fd:6b:25:0a:9c:61:4b:0f:ed:9b:e8:39:a3:
                    26:ed:00:0e:36:4b:ca:77:e3:46:16:a9:3f:29:d4:
                    b8:59:71:f0:59:b0:53:b6:0c:b5:ef:6c:2a:e8:58:
                    9b:7c:e3:e7:d3:6c:e4:a9:d5:b2:0b:91:a1:7f:93:
                    64:3e:0f:db:4a:78:12:48:8c:0c:f0:7a:e7:12:65:
                    e9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D3:EA:0C:A3:B5:D1:4C:CC:B7:9C:95:49:84:E8:FF:6B:60:13:9B
            X509v3 Authority Key Identifier:
                keyid:4E:F6:0F:FD:10:BB:F7:7E:CE:98:A7:81:63:59:84:44:27:7D:BF:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f4:00:f1:cb:e0:23:58:3c:ac:02:9b:c8:6c:0f:71:5e:65:
         bc:e9:03:1f:87:1b:92:bc:18:53:2f:e7:53:56:00:49:0c:85:
         01:e9:b9:2f:f2:b1:30:2e:33:ad:6a:e3:a5:63:83:33:4b:4b:
         b0:c7:e8:54:21:72:e2:f5:07:fd:9e:b9:2a:9b:8f:dd:4e:97:
         c6:51:94:15:a4:33:26:73:b8:da:17:6a:01:3d:20:4c:f1:d7:
         0f:91:48:2e:07:01:ea:ec:38:47:e0:74:7d:60:49:9a:3b:ee:
         2f:67:93:6f:af:70:a7:65:47:e8:1c:39:c8:9c:94:e8:6a:28:
         12:05:43:91:e1:75:44:f8:80:87:b3:f8:f9:0e:d6:3e:2f:fe:
         f1:9d:ae:27:e9:80:d5:af:91:9c:51:1f:73:aa:36:3b:27:9f:
         30:cb:f1:7c:21:ca:2c:52:b4:15:f2:ca:a6:8e:b3:ff:d4:43:
         5e:82:a2:da:12:b0:cd:97:36:13:19:85:2d:7d:d4:3a:67:e2:
         22:3f:97:c0:59:d3:c9:be:d5:fe:6f:9f:bd:ef:93:c6:87:73:
         75:7f:86:f8:3a:0e:32:69:7d:9b:8e:c5:87:c4:20:b1:04:a0:
         28:01:c0:bc:16:2c:e4:6f:4f:f4:1d:64:3c:15:11:c6:52:a1:
         3c:0a:56:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:12:21 2025 by rpki-client