Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
File:                     7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft (raw, json)
Hash identifier:          V0xcQiivMOeW2EplH8fGpWBG/UFL/BYq2oFBjQqb6So=
Subject key identifier:   07:B6:D5:F9:A5:21:C0:2C:59:1D:0D:53:07:3B:E9:1F:EF:EB:3A:AF
Authority key identifier: ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96
Certificate issuer:       /CN=ed740702247a2feaccdebe13a9842cffd3b40c96
Certificate serial:       0198477718F379870395BFD276DD11926A17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
Manifest number:          15FE
Signing time:             Sat 26 Jul 2025 16:00:44 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:44 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:44 +0000
Files and hashes:         1: 7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl (hash: cpKjJBys4xyhxFHzPI160XFcs06hOfXCVf+NEfv9V/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:18:f3:79:87:03:95:bf:d2:76:dd:11:92:6a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed740702247a2feaccdebe13a9842cffd3b40c96
        Validity
            Not Before: Jul 26 16:00:44 2025 GMT
            Not After : Jul 27 16:00:44 2025 GMT
        Subject: CN=07b6d5f9a521c02c591d0d53073be91fefeb3aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e6:eb:de:aa:b2:b7:f2:ee:2d:9a:1e:1b:65:
                    5d:29:75:bd:56:e7:05:cf:1b:29:34:c7:8a:39:40:
                    84:87:65:f1:cc:4e:0f:e7:c5:70:5b:b1:79:04:d7:
                    14:d5:af:f0:d0:47:c4:44:6c:3e:9b:78:74:8b:59:
                    fd:6b:ac:3d:e8:83:90:a1:81:6c:fc:63:23:83:88:
                    5f:44:f6:48:31:c9:01:e6:25:c9:f4:a6:d7:57:54:
                    7c:6a:c4:e8:08:30:66:bf:a3:33:e9:a4:71:7b:88:
                    74:58:12:ca:73:eb:cf:bf:c5:f8:68:a5:e8:68:c0:
                    bb:a9:fc:ee:c8:d1:94:74:2f:94:28:82:fd:80:de:
                    3b:e5:c9:f4:48:ab:00:0b:87:02:95:4f:16:24:2d:
                    57:02:5c:d6:79:6e:4c:97:f5:7e:d2:05:af:ad:0e:
                    9d:53:98:9b:b0:a3:57:17:e1:18:bf:8e:c4:d0:98:
                    2b:00:06:fa:60:5d:1d:be:dc:01:cc:10:2d:eb:ce:
                    6a:e5:67:11:4f:e5:17:31:89:61:42:77:0c:31:93:
                    26:e6:56:fe:ee:c9:5d:d2:f3:a3:fd:18:1b:24:83:
                    ab:53:50:9d:3c:4b:48:12:f8:9f:a9:29:30:db:45:
                    6a:67:9e:26:48:e8:11:a3:d8:91:bf:ad:fa:c8:07:
                    3b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B6:D5:F9:A5:21:C0:2C:59:1D:0D:53:07:3B:E9:1F:EF:EB:3A:AF
            X509v3 Authority Key Identifier:
                keyid:ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:dc:e2:ee:49:15:3b:4b:1e:c3:95:f3:4b:72:f1:e7:fa:cb:
         de:0e:54:8f:70:72:a5:f6:5a:37:9d:55:cb:f6:f0:fb:dc:7d:
         82:40:bf:d1:e7:be:a7:13:df:a4:a6:2e:89:97:38:75:9e:f0:
         3d:1e:b5:1a:4a:13:c0:a7:80:89:1c:a3:c8:e5:e6:3e:8c:8c:
         8f:d4:ae:95:d6:6e:9e:ab:1a:cb:8a:b5:3e:2c:e9:f6:54:c4:
         00:bb:75:fb:ed:59:15:37:0e:9a:cb:fc:11:5f:e7:28:ad:c1:
         37:85:94:60:d1:4b:8c:4e:ec:2a:71:7c:ae:dd:6f:e5:3e:5e:
         12:44:00:0f:58:65:e9:c2:13:f7:1e:07:1f:5b:35:6f:08:f2:
         38:7c:82:d8:0b:3b:df:4e:17:c8:31:d6:ac:98:01:c1:5e:b3:
         f8:16:86:d6:37:7a:83:8d:20:d5:a4:42:84:bc:cd:44:fc:9a:
         79:23:6b:fe:1a:8f:54:3a:c2:3c:10:15:ac:1f:4e:10:cd:ca:
         3b:07:cd:d8:83:20:2b:37:6f:23:87:2d:48:96:f9:d2:54:b2:
         c7:9a:c2:33:96:ca:b3:54:79:16:31:84:3e:a1:57:dd:89:33:
         68:c7:7e:0f:c2:92:c9:63:be:0b:0d:a1:e8:41:79:3c:86:5f:
         64:b7:76:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----