Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.mft
File:                     NKh-9PEuNt_cafTUydRQ7us_9tU.mft (raw, json)
Hash identifier:          cA3vL0RBtmJIGPDjULv2299jrk+aSg0mjP/pgO+Z4Ac=
Subject key identifier:   2C:60:B4:FD:8B:19:5A:94:63:30:73:F2:5A:75:3B:A9:E3:19:99:E8
Authority key identifier: 34:A8:7E:F4:F1:2E:36:DF:DC:69:F4:D4:C9:D4:50:EE:EB:3F:F6:D5
Certificate issuer:       /CN=34a87ef4f12e36dfdc69f4d4c9d450eeeb3ff6d5
Certificate serial:       01965CF1EF143213EA9D2CA9B3DBC41CC1D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NKh-9PEuNt_cafTUydRQ7us_9tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.mft
Manifest number:          0BF9
Signing time:             Tue 22 Apr 2025 10:01:21 +0000
Manifest this update:     Tue 22 Apr 2025 10:01:21 +0000
Manifest next update:     Wed 23 Apr 2025 10:01:21 +0000
Files and hashes:         1: NKh-9PEuNt_cafTUydRQ7us_9tU.crl (hash: KFxv4c9cPkwvLew+GyKndHY0jFMye7RdJkqgZPy8zqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NKh-9PEuNt_cafTUydRQ7us_9tU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 10:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5c:f1:ef:14:32:13:ea:9d:2c:a9:b3:db:c4:1c:c1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34a87ef4f12e36dfdc69f4d4c9d450eeeb3ff6d5
        Validity
            Not Before: Apr 22 10:01:21 2025 GMT
            Not After : Apr 23 10:01:21 2025 GMT
        Subject: CN=2c60b4fd8b195a94633073f25a753ba9e31999e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:77:1b:b5:9f:82:f4:a4:04:d8:76:b1:99:4e:
                    60:76:fe:88:a7:44:61:e2:9b:af:c0:19:3a:a0:ab:
                    fe:b9:85:89:87:f1:b6:72:d7:95:06:c1:50:60:99:
                    03:36:af:1b:d1:a6:ee:6a:fd:c5:ee:67:ef:0d:7d:
                    a6:5e:b7:50:c9:f7:aa:54:80:c4:53:e5:7d:68:12:
                    4d:2a:ec:99:a5:30:0c:3e:a6:70:61:c3:67:30:f5:
                    fa:c7:e3:c5:f9:ed:70:9f:ba:3c:c3:d0:9d:02:46:
                    ff:80:79:3a:d6:15:e4:17:78:fd:3c:28:79:2b:99:
                    60:12:d7:8b:99:41:01:60:7b:d4:ed:6a:e8:a6:75:
                    b7:bd:0c:60:e1:4e:43:ed:df:16:eb:60:48:13:ce:
                    25:ce:9b:81:8d:be:df:b8:e1:86:2a:cd:32:96:34:
                    6e:d4:73:79:bb:20:7b:77:4e:4a:79:ed:d6:ea:7a:
                    51:2c:c9:d0:85:b0:2a:3d:de:0d:79:ee:61:28:3a:
                    ff:31:09:34:81:2f:95:34:72:b0:22:9f:eb:92:79:
                    98:d1:ed:7a:c3:5d:eb:47:99:9b:f4:ff:b7:a1:5b:
                    c9:87:de:5a:ca:b8:b6:0d:75:24:72:1e:be:dc:99:
                    b8:1b:36:dd:86:0a:67:1c:18:0e:1d:ef:67:f5:03:
                    7d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:60:B4:FD:8B:19:5A:94:63:30:73:F2:5A:75:3B:A9:E3:19:99:E8
            X509v3 Authority Key Identifier:
                keyid:34:A8:7E:F4:F1:2E:36:DF:DC:69:F4:D4:C9:D4:50:EE:EB:3F:F6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKh-9PEuNt_cafTUydRQ7us_9tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:86:66:d8:28:ca:f2:79:97:16:e5:9e:e3:da:c8:6d:12:ad:
         a9:d6:eb:fa:ea:d8:a8:d4:9b:a3:f8:2f:60:0f:96:2f:69:e2:
         9b:d8:99:3b:c3:6c:ae:17:73:3c:fa:82:63:6d:12:f8:bf:d7:
         ed:1a:3a:0d:1d:82:29:2d:96:d5:f9:95:9a:6c:86:4e:73:a8:
         be:22:54:42:28:41:1f:bf:41:99:36:1c:d9:7b:12:aa:b3:ea:
         68:83:d3:37:01:bb:a3:89:44:e9:d2:69:9a:1d:d5:8d:c4:50:
         fb:88:ed:97:a6:7a:08:fb:ff:8a:c1:d2:b4:d3:55:fb:95:3a:
         46:7b:55:e7:f3:fd:0a:22:f0:3b:a6:cb:7b:0b:fe:45:c9:30:
         62:24:8a:1e:33:a3:e1:1f:8b:3a:ef:2e:be:f6:d6:36:2a:bf:
         d2:5c:f8:40:e0:de:f9:41:28:7a:ba:0d:c3:dc:da:26:2f:ea:
         07:c8:a3:7e:ee:b3:1f:1f:59:87:d5:1e:aa:15:0c:64:3f:45:
         d8:48:ce:0e:c4:cb:54:2a:73:54:1d:91:c3:a7:d6:19:2d:27:
         c4:f8:fa:da:8c:1f:a9:f8:9e:34:b6:a3:67:c2:34:7c:07:c5:
         5a:22:7e:73:16:01:fa:3e:d8:ce:1b:46:f2:33:26:9e:15:21:
         35:b4:51:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----