Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
File:                     if4_e4M8MGAut5hY5-r67VVPTFs.mft (raw, json)
Hash identifier:          /wir7nSQ611W6iT/RfdCeZ4jLxCQ8jcy7pu4uvxdIVo=
Subject key identifier:   82:B4:6A:33:A3:E4:86:F3:8C:D1:E5:5C:74:0A:D9:18:97:60:E7:36
Authority key identifier: 89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B
Certificate issuer:       /CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b
Certificate serial:       019655A5C636EAFED41A77F1A24BFFB04AF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
Manifest number:          075A
Signing time:             Mon 21 Apr 2025 00:00:49 +0000
Manifest this update:     Mon 21 Apr 2025 00:00:49 +0000
Manifest next update:     Tue 22 Apr 2025 00:00:49 +0000
Files and hashes:         1: if4_e4M8MGAut5hY5-r67VVPTFs.crl (hash: 1vpHoxVT3ltekGcgOj0VJPmwrjYUVgkKtP9bbqxlKPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 00:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:a5:c6:36:ea:fe:d4:1a:77:f1:a2:4b:ff:b0:4a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b
        Validity
            Not Before: Apr 21 00:00:49 2025 GMT
            Not After : Apr 22 00:00:49 2025 GMT
        Subject: CN=82b46a33a3e486f38cd1e55c740ad9189760e736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b7:e9:64:e4:71:b7:b0:fb:ca:49:7f:93:c8:
                    d3:d8:88:ca:3b:4c:14:c9:f4:96:43:9a:17:79:20:
                    83:13:31:cf:4b:10:90:77:bb:ea:f3:57:f6:35:c6:
                    f8:aa:9f:1e:c8:4c:3a:70:4b:61:22:c8:e4:39:58:
                    88:97:9d:0d:b5:e0:bf:5a:a1:a4:f8:92:0f:ce:64:
                    26:b1:2a:77:92:52:c3:bb:97:41:65:73:c2:38:5b:
                    e4:fa:69:7c:67:56:ae:26:18:16:d6:a3:87:c9:ce:
                    e9:36:29:4f:85:e2:2e:9e:55:14:b5:de:9d:61:a0:
                    08:0c:70:96:2e:d4:e9:3c:fe:95:f0:21:79:49:eb:
                    d2:e7:58:1e:22:10:1f:f0:21:bd:a9:b7:c2:1c:9a:
                    1b:a5:ba:62:89:19:59:ab:da:2a:83:ff:00:3a:7e:
                    7b:c5:4c:9f:8c:3b:93:56:2d:48:1a:00:bb:b7:54:
                    6a:3f:4b:bd:9b:b0:d7:7a:bd:83:5d:a9:06:06:49:
                    8c:af:62:5b:e5:60:5d:07:a8:c6:27:74:f6:94:30:
                    b2:40:0c:34:fc:fa:b8:74:a1:a3:d2:b7:00:16:7f:
                    dd:9c:e3:62:09:b3:ec:48:e0:15:ae:9a:ca:9f:7b:
                    6f:df:be:95:dc:78:cf:45:8a:ef:aa:0a:f2:43:16:
                    f5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B4:6A:33:A3:E4:86:F3:8C:D1:E5:5C:74:0A:D9:18:97:60:E7:36
            X509v3 Authority Key Identifier:
                keyid:89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:e8:6c:21:e3:87:7f:16:f0:a9:aa:39:2c:ac:85:6a:17:26:
         ad:86:27:da:d7:1d:ae:05:39:f3:bd:ad:e5:05:76:93:46:1f:
         69:77:5f:19:09:03:28:47:7f:3b:8b:a0:79:bd:b4:f4:e6:cd:
         20:33:97:94:d2:85:a3:d7:7b:9a:6a:4e:68:fb:43:7c:e5:1b:
         b8:48:a5:45:02:09:22:bc:68:11:4c:e1:bf:a3:e3:17:0b:3d:
         4a:bc:ab:3f:ff:e3:1e:82:d9:70:e3:5d:5c:63:fe:71:77:b3:
         7f:68:1c:80:36:34:e8:de:d3:39:2a:b2:73:22:fc:06:f9:48:
         c8:ab:2f:77:e5:ee:10:b2:0d:ad:19:0b:e0:fb:01:e5:8c:d3:
         d9:a5:57:0e:fd:04:83:85:20:86:d1:6d:d0:bd:c2:d9:54:87:
         97:fe:ea:c5:70:02:49:f3:51:10:50:f4:7d:c3:d3:70:17:64:
         3f:de:ef:a7:9c:58:ea:ce:7c:6d:63:01:48:2c:40:7f:eb:3e:
         e1:ae:87:d2:1c:40:9c:4d:d9:a5:ca:8b:43:c9:9c:48:83:b1:
         16:58:49:7f:fd:32:cd:f4:da:a4:0b:9f:f4:9f:08:a4:28:90:
         2f:36:51:42:14:f8:95:24:56:45:2b:18:02:af:01:6d:1b:f0:
         7e:44:e3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----