Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
File:                     LpRuQzNsoql56Z31z11tXnFVgy0.mft (raw, json)
Hash identifier:          uFy38KTmQy/+UeQ3c0GpOFB9APCbAEzjRfcX1u/YrIE=
Subject key identifier:   B1:95:AD:48:53:4F:93:BD:CA:D4:65:88:D3:1F:87:97:84:02:9A:45
Authority key identifier: 2E:94:6E:43:33:6C:A2:A9:79:E9:9D:F5:CF:5D:6D:5E:71:55:83:2D
Certificate issuer:       /CN=2e946e43336ca2a979e99df5cf5d6d5e7155832d
Certificate serial:       01984777FEF2D9CED03AE721864C3D5B1106
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
Manifest number:          0898
Signing time:             Sat 26 Jul 2025 16:01:43 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:43 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:43 +0000
Files and hashes:         1: LpRuQzNsoql56Z31z11tXnFVgy0.crl (hash: FcC4bhi1BElJy83B/DKeVBuHFq2f7gfY5I6LLQWsgtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:fe:f2:d9:ce:d0:3a:e7:21:86:4c:3d:5b:11:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e946e43336ca2a979e99df5cf5d6d5e7155832d
        Validity
            Not Before: Jul 26 16:01:43 2025 GMT
            Not After : Jul 27 16:01:43 2025 GMT
        Subject: CN=b195ad48534f93bdcad46588d31f879784029a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:47:aa:3e:38:a4:64:2d:22:fd:15:b5:51:a0:
                    8c:02:4f:83:2e:5f:aa:d5:40:60:a5:23:e4:71:69:
                    c9:da:65:c2:bc:41:53:ff:54:c5:69:32:8f:35:b1:
                    ca:c4:ad:54:90:0c:0c:53:7e:bf:55:66:07:7a:8e:
                    6f:1b:a8:0d:a7:1a:22:e4:8e:16:0c:ce:19:93:21:
                    a5:3d:79:bb:94:9c:20:8e:52:f7:e9:c2:51:1e:5a:
                    d5:9a:f8:46:eb:c1:46:ff:00:1e:05:fb:1d:d0:7b:
                    bc:6b:5e:14:f8:c2:f7:a2:43:36:7d:de:1b:a2:d0:
                    bc:39:6a:b9:90:26:79:e0:9f:09:70:30:ef:c0:00:
                    c3:d2:df:e2:a1:38:47:f0:1d:bf:e6:97:87:f3:e9:
                    f2:c4:34:a4:d8:97:a1:24:63:45:55:50:6d:f7:cf:
                    90:67:b0:2c:56:6b:62:07:7d:ba:db:6e:f5:ad:4e:
                    c6:a4:c0:c7:20:ac:75:7a:28:92:a5:7e:a7:88:ef:
                    f1:c8:c2:15:f4:f6:0e:5e:76:e4:58:d1:c1:9d:41:
                    a6:9e:e5:52:a3:6e:e5:60:25:80:ce:b4:97:73:5a:
                    ce:fd:44:7e:f2:2b:dd:a5:83:df:23:0f:e2:40:e6:
                    09:36:de:71:1f:88:62:80:75:aa:8e:29:57:fd:0c:
                    70:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:95:AD:48:53:4F:93:BD:CA:D4:65:88:D3:1F:87:97:84:02:9A:45
            X509v3 Authority Key Identifier:
                keyid:2E:94:6E:43:33:6C:A2:A9:79:E9:9D:F5:CF:5D:6D:5E:71:55:83:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:50:89:74:60:10:44:74:e6:f0:fa:e5:be:3e:69:46:26:84:
         5c:84:45:9a:fb:2a:66:af:bb:87:95:53:de:d7:6c:ed:76:ec:
         8d:60:c2:c4:6e:76:cc:88:8f:7e:5d:7b:f3:ea:57:f6:f4:e9:
         00:70:70:98:43:a1:cf:8d:79:5e:a2:cc:46:98:93:32:69:e5:
         fa:12:ca:88:2d:06:f0:ec:d6:a6:9f:54:ef:0f:c4:22:09:09:
         c1:f1:f2:73:a7:c5:cd:3c:d2:da:d9:4a:23:54:39:33:07:aa:
         f1:fb:70:e4:50:28:cc:51:09:c6:db:73:4d:f1:2b:9d:47:5b:
         c2:8c:9e:22:d7:94:b2:fc:27:55:6b:f8:02:95:30:69:75:c5:
         3e:72:21:1c:0c:ae:d9:2b:ed:00:04:f6:47:14:19:b7:40:63:
         10:04:9c:82:f1:31:db:9e:42:b0:f9:0c:e8:c4:bc:a0:b4:24:
         87:9a:2a:70:7d:96:cd:f2:b2:29:54:fa:77:dd:97:e2:1d:5a:
         d1:1d:fa:6f:cc:1b:08:2d:9a:61:a5:83:5d:fd:52:d5:09:51:
         16:93:76:1a:b3:2b:22:ee:51:d7:d6:0f:5a:c8:f9:65:6e:0f:
         34:7e:6b:af:71:c2:50:24:ed:e2:08:ee:37:4e:07:73:e8:b2:
         6f:38:d4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----