Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
File:                     9keQtSf6QLqj8ts_oqFL-UzSgv8.mft (raw, json)
Hash identifier:          EVIuBWEUpM72f0m7c1wWZ+YfOm058SWFDpM/E3/IWdM=
Subject key identifier:   E7:78:41:40:DC:D2:19:E1:19:47:A5:77:A5:6F:F0:9E:09:07:41:72
Authority key identifier: F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF
Certificate issuer:       /CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
Certificate serial:       019659F0A07C666AFF4111413C13CB9F5930
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
Manifest number:          0229
Signing time:             Mon 21 Apr 2025 20:01:03 +0000
Manifest this update:     Mon 21 Apr 2025 20:01:03 +0000
Manifest next update:     Tue 22 Apr 2025 20:01:03 +0000
Files and hashes:         1: 9keQtSf6QLqj8ts_oqFL-UzSgv8.crl (hash: EZffop9820hq1fFzslAHAV5KpV+Pkjon2iN28B9g56o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:f0:a0:7c:66:6a:ff:41:11:41:3c:13:cb:9f:59:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
        Validity
            Not Before: Apr 21 20:01:03 2025 GMT
            Not After : Apr 22 20:01:03 2025 GMT
        Subject: CN=e7784140dcd219e11947a577a56ff09e09074172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:55:67:75:d1:11:16:10:57:4b:55:52:72:1c:
                    5d:e7:ee:ed:7d:fc:02:24:13:5a:4b:b9:9d:d6:d2:
                    16:bf:3c:16:f5:2b:df:5d:61:91:08:11:8d:f1:6c:
                    92:36:fe:a9:54:63:d5:01:de:35:2e:54:50:e3:ff:
                    0f:cd:2d:ab:c2:1b:64:67:a5:e4:7d:7d:14:72:24:
                    4f:d8:79:62:32:d1:88:13:31:cc:48:45:aa:ec:ba:
                    9e:3e:15:ed:7c:61:67:7c:c3:1e:a8:8b:91:82:48:
                    68:d5:c2:87:21:f8:c9:33:86:d8:f9:4d:54:79:5b:
                    2d:41:e1:46:c6:76:30:a1:5e:a8:2a:eb:dc:2c:ce:
                    da:34:79:c4:32:8a:bd:21:b5:14:13:64:5c:9f:25:
                    e2:62:65:06:3f:b1:3a:e4:74:88:17:9c:ef:b3:68:
                    58:b5:07:cd:e9:ce:b4:a6:3a:8a:83:a0:dc:0f:c9:
                    c0:19:eb:ee:0a:da:5c:17:d7:5a:3a:cc:ef:f0:fe:
                    88:cd:cf:ed:25:c8:4f:36:38:fb:fd:02:1e:3a:e1:
                    6d:a6:78:87:84:48:b5:ad:e6:78:a9:dd:e5:7a:6e:
                    75:81:60:33:38:c8:b6:02:5f:61:a6:a1:f0:70:e4:
                    8f:72:b5:e1:01:59:a0:c8:aa:b5:cf:54:f3:6d:90:
                    19:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:78:41:40:DC:D2:19:E1:19:47:A5:77:A5:6F:F0:9E:09:07:41:72
            X509v3 Authority Key Identifier:
                keyid:F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:40:b3:d1:d4:ba:e9:2f:a9:8d:13:37:67:41:2a:39:4e:77:
         47:f0:9b:aa:df:9e:1a:9a:bb:72:1b:74:94:6d:f5:96:fd:54:
         52:0a:a9:43:f6:71:1f:9e:30:1c:e0:82:bb:1e:b3:b2:4f:ee:
         e7:03:5f:6d:31:b0:39:06:c3:ed:c6:e1:78:79:63:e9:19:70:
         4f:8d:e8:16:ee:0e:62:93:55:5b:80:6a:cf:72:d3:b4:6f:83:
         d7:96:df:4c:28:e3:8b:df:2b:b1:68:f5:25:31:e4:a7:9a:ad:
         4d:6f:66:6d:e1:30:70:8f:5b:3e:61:ef:e4:a5:41:2a:b5:91:
         a4:69:5f:33:7f:8c:b9:ec:8b:92:f3:7e:80:2b:cb:02:f5:f0:
         42:c7:a7:ad:c5:6f:3d:45:73:7f:45:64:ad:11:43:77:9d:44:
         1f:39:ec:85:9c:08:be:6f:2c:b7:9f:3c:2f:ae:47:35:1f:fe:
         13:bc:a9:74:71:da:4d:b6:70:b4:fc:02:a7:12:2f:d3:b1:12:
         10:88:c7:6e:85:5b:12:43:2a:73:d7:f7:b4:24:ea:e3:b8:30:
         e0:6b:84:7a:da:45:b6:55:4d:e0:3f:cc:40:a1:4b:9b:f6:7f:
         e7:bd:72:b1:7d:47:3b:2e:76:07:9b:7e:58:3c:5d:af:79:90:
         74:23:62:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----