Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
File:                     aeoVk9ahKCtuhMLTMlEeoqmahCA.mft (raw, json)
Hash identifier:          +CtrXTiLLwKwaAwmhPXHHtrNSCrr/aO0R660zEdrmDw=
Subject key identifier:   57:34:83:82:94:30:7D:16:D7:EE:6B:F0:87:45:87:0B:83:21:ED:0F
Authority key identifier: 69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20
Certificate issuer:       /CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420
Certificate serial:       0196BA119A54CA6015B368F29AABEB6BD13B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
Manifest number:          073B
Signing time:             Sat 10 May 2025 12:00:37 +0000
Manifest this update:     Sat 10 May 2025 12:00:37 +0000
Manifest next update:     Sun 11 May 2025 12:00:37 +0000
Files and hashes:         1: aeoVk9ahKCtuhMLTMlEeoqmahCA.crl (hash: 2DwnNvPvjExEQmUIV4QQHjqLJJhCcFslBdwUuF1h2QA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 12:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:11:9a:54:ca:60:15:b3:68:f2:9a:ab:eb:6b:d1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420
        Validity
            Not Before: May 10 12:00:37 2025 GMT
            Not After : May 11 12:00:37 2025 GMT
        Subject: CN=5734838294307d16d7ee6bf08745870b8321ed0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f6:09:aa:79:8d:44:6d:93:e8:e6:24:02:fa:
                    95:d8:b4:c4:32:fe:73:5f:06:c5:c9:1f:51:78:ef:
                    35:8f:8c:a6:e4:0d:50:c4:84:77:0d:3b:23:10:ad:
                    37:c8:8d:2a:33:88:eb:3c:41:ae:04:8c:ff:77:8a:
                    4d:53:0f:f6:f7:ce:1c:be:3d:bd:09:8a:23:2a:17:
                    95:78:21:db:31:33:8c:4a:72:e4:b7:2e:43:d3:5a:
                    38:34:cb:bb:7c:fd:ea:56:8d:ad:84:be:10:f6:86:
                    b6:c8:3d:79:a9:ed:5f:50:69:fc:a5:49:84:47:f1:
                    ba:2f:12:ba:e9:94:be:59:af:01:18:78:db:f8:b6:
                    46:be:41:70:40:f3:f7:1a:81:4f:d6:2e:e2:53:8f:
                    c0:d8:38:22:8e:31:ae:90:ae:46:13:d6:6f:2f:17:
                    85:cf:9d:54:f5:7c:25:f3:6d:8d:05:45:0c:a4:70:
                    2e:4f:e1:e0:43:d5:cd:35:a9:36:41:bd:7f:46:7d:
                    38:21:63:58:7a:da:4d:07:18:0a:e3:98:7f:09:35:
                    8b:6a:59:0f:23:59:50:32:d6:4e:2f:50:64:3e:6c:
                    d1:a0:4c:6b:91:b8:6a:c9:58:29:94:23:47:70:5a:
                    d7:d5:68:85:f8:9a:68:b3:d6:0b:4f:c9:c9:9d:73:
                    93:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:34:83:82:94:30:7D:16:D7:EE:6B:F0:87:45:87:0B:83:21:ED:0F
            X509v3 Authority Key Identifier:
                keyid:69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:91:46:13:15:a9:51:0f:bd:14:00:d8:19:80:e1:e0:4e:60:
         cd:9e:09:fd:e0:93:4e:86:b6:da:56:2e:1b:1a:fd:81:8e:42:
         21:5c:ab:e3:0b:cf:42:eb:ef:dc:01:59:e8:c9:4b:f1:36:41:
         fa:4e:d5:5f:1e:1a:ec:da:c0:0e:5b:f0:cd:86:fe:76:c2:90:
         af:99:e4:59:07:02:95:6c:11:f2:f2:68:1c:0e:d4:b3:ca:bb:
         3c:cf:f4:4f:e8:77:e2:1b:46:6e:26:ed:dd:04:ae:18:51:22:
         9a:b0:fa:66:d9:82:81:83:a4:ea:6e:3f:cc:aa:e4:2b:be:60:
         c0:1a:13:ba:c1:bc:d8:dd:22:0a:33:22:a9:76:07:0f:25:eb:
         27:5b:da:8e:a5:69:05:66:79:38:d5:ee:47:54:66:44:6b:80:
         d2:02:ce:46:37:ca:99:a6:8a:1b:cf:47:1c:dd:b7:3a:4b:79:
         9d:d9:bf:47:79:6e:af:0f:86:0a:19:b0:47:8b:9e:ca:46:47:
         9e:1e:61:a6:08:59:73:34:d3:25:90:bd:c2:d1:5a:44:53:5d:
         2a:be:25:ca:f8:c0:85:0c:b8:ea:e5:fd:02:72:88:b3:fb:e0:
         2e:1f:ce:b5:2e:45:83:43:f6:ed:fd:50:76:45:4c:83:da:6b:
         93:df:4c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:11:24 2025 by rpki-client