Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/82eed1-d9d5-40d8-ba58-3f9960865d0f/1/yj7NoA-sC_tjsoVD6itdXx5N9ss.mft
File:                     yj7NoA-sC_tjsoVD6itdXx5N9ss.mft (raw, json)
Hash identifier:          YPdBc1vnFXqENHvYqEH+Y9dBqXN7OIxjDHU9szp+otg=
Subject key identifier:   9D:7A:87:26:37:9A:38:26:E8:2F:A6:46:4F:14:9E:AA:9A:1D:04:B3
Authority key identifier: CA:3E:CD:A0:0F:AC:0B:FB:63:B2:85:43:EA:2B:5D:5F:1E:4D:F6:CB
Certificate issuer:       /CN=ca3ecda00fac0bfb63b28543ea2b5d5f1e4df6cb
Certificate serial:       0198469B432793FC301E9E6FD887EAB3CFFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yj7NoA-sC_tjsoVD6itdXx5N9ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/82eed1-d9d5-40d8-ba58-3f9960865d0f/1/yj7NoA-sC_tjsoVD6itdXx5N9ss.mft
Manifest number:          01FC
Signing time:             Sat 26 Jul 2025 12:00:36 +0000
Manifest this update:     Sat 26 Jul 2025 12:00:36 +0000
Manifest next update:     Sun 27 Jul 2025 12:00:36 +0000
Files and hashes:         1: yj7NoA-sC_tjsoVD6itdXx5N9ss.crl (hash: 1/IX9vHLbBKvPuGy1sVGKCDM86OuFsCS0Mc2AyjmeKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/82eed1-d9d5-40d8-ba58-3f9960865d0f/1/yj7NoA-sC_tjsoVD6itdXx5N9ss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/82eed1-d9d5-40d8-ba58-3f9960865d0f/1/yj7NoA-sC_tjsoVD6itdXx5N9ss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yj7NoA-sC_tjsoVD6itdXx5N9ss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:9b:43:27:93:fc:30:1e:9e:6f:d8:87:ea:b3:cf:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3ecda00fac0bfb63b28543ea2b5d5f1e4df6cb
        Validity
            Not Before: Jul 26 12:00:36 2025 GMT
            Not After : Jul 27 12:00:36 2025 GMT
        Subject: CN=9d7a8726379a3826e82fa6464f149eaa9a1d04b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7e:7c:8d:d1:c2:94:ac:a5:f1:e0:36:90:9f:
                    f4:a1:92:94:65:2a:cd:80:c5:5c:5f:64:f9:33:61:
                    6b:68:3d:2f:ba:38:14:60:20:0c:45:e5:bc:19:c1:
                    3f:5e:0f:71:92:80:40:15:3f:50:fe:90:01:04:b7:
                    f3:74:92:e4:9b:0b:52:aa:c9:85:61:a4:80:15:95:
                    21:d9:4f:d3:f6:44:86:95:6e:21:98:f9:09:51:57:
                    2e:83:32:38:6d:c1:3c:8d:85:cc:b1:d9:f8:27:a2:
                    8d:0d:60:a1:f6:92:c3:77:de:7c:00:43:71:09:d9:
                    fb:53:aa:e6:ce:40:79:ca:41:49:09:3c:1c:71:44:
                    82:cd:e6:74:4a:1d:26:86:67:80:8b:ab:17:0b:fb:
                    e7:61:4f:af:e5:59:7a:14:99:31:10:c9:a7:7d:0b:
                    40:8b:e2:ef:a6:bf:18:10:4d:0f:94:1d:83:73:9b:
                    15:b2:62:0b:43:0b:f1:42:c2:e8:78:09:09:97:48:
                    93:62:db:93:e5:61:a4:a7:5b:ec:f2:45:bb:48:70:
                    81:f7:7d:c6:d4:09:38:00:b1:d5:7d:5c:00:20:37:
                    cc:12:dc:d9:b1:ba:69:26:c6:23:fe:b6:7d:d6:64:
                    50:cd:09:9f:7b:ee:55:00:3b:46:f7:2c:a0:42:6f:
                    fa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7A:87:26:37:9A:38:26:E8:2F:A6:46:4F:14:9E:AA:9A:1D:04:B3
            X509v3 Authority Key Identifier:
                keyid:CA:3E:CD:A0:0F:AC:0B:FB:63:B2:85:43:EA:2B:5D:5F:1E:4D:F6:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yj7NoA-sC_tjsoVD6itdXx5N9ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/82eed1-d9d5-40d8-ba58-3f9960865d0f/1/yj7NoA-sC_tjsoVD6itdXx5N9ss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/82eed1-d9d5-40d8-ba58-3f9960865d0f/1/yj7NoA-sC_tjsoVD6itdXx5N9ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:31:7f:7e:9a:f7:70:ad:1c:cd:e6:07:5a:49:96:ca:43:f5:
         39:f3:0a:6b:6c:ff:04:d8:23:59:e7:05:4f:ec:5e:72:89:61:
         9a:90:4a:cc:66:5c:aa:0c:12:7e:43:b0:6d:ef:0f:f3:b4:a4:
         58:f1:58:a2:bc:58:47:43:88:3b:31:87:c5:71:69:b7:00:cf:
         2a:b9:ce:81:d1:26:71:8a:06:fb:6a:78:57:11:74:18:5b:1b:
         bc:e5:54:71:08:3d:16:b0:ec:6f:b7:47:83:57:54:5e:ec:bb:
         2d:f2:dd:b3:ae:74:a3:f3:74:a9:49:a4:52:cd:da:52:8c:f9:
         49:a5:4c:ea:1f:a2:b4:20:61:fe:78:5d:3b:40:b9:b3:1c:d5:
         e7:0c:3f:86:43:c4:b2:5d:48:fe:34:b7:b4:70:7e:51:25:2e:
         52:30:1e:e6:d4:f5:b6:13:07:6b:fb:3d:95:d2:41:e5:05:2c:
         a4:bf:4d:44:6b:f0:73:8e:2f:81:62:99:2f:82:20:ab:cf:a7:
         3c:ea:a6:92:c0:a5:0c:95:c9:ba:fe:61:36:73:2c:90:df:e7:
         e0:7c:2a:de:8e:09:d4:24:73:49:99:05:19:96:da:88:1f:bc:
         49:4e:4f:27:f9:9e:cd:55:0f:a9:e1:df:b1:5a:a8:9e:05:53:
         85:d8:b6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----