Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
File:                     zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft (raw, json)
Hash identifier:          MggfL+yHx3QbDSrNTahCyG/WM/rakrDMm8Vd+h0CHMg=
Subject key identifier:   0A:73:46:9D:13:87:37:A2:E0:11:16:F5:58:74:1D:EB:4D:EE:3E:F0
Authority key identifier: CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59
Certificate issuer:       /CN=cea7ccd2aec0bbefc6350856512a95fe02259959
Certificate serial:       01965D95F4F049E5B5616BE91C29E9633F8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
Manifest number:          97
Signing time:             Tue 22 Apr 2025 13:00:30 +0000
Manifest this update:     Tue 22 Apr 2025 13:00:30 +0000
Manifest next update:     Wed 23 Apr 2025 13:00:30 +0000
Files and hashes:         1: zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl (hash: X3sJk4pg2BSigAPHBbFqL/nrCJFpAjncLcWScrL5O0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5d:95:f4:f0:49:e5:b5:61:6b:e9:1c:29:e9:63:3f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea7ccd2aec0bbefc6350856512a95fe02259959
        Validity
            Not Before: Apr 22 13:00:30 2025 GMT
            Not After : Apr 23 13:00:30 2025 GMT
        Subject: CN=0a73469d138737a2e01116f558741deb4dee3ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:67:46:56:85:a9:e2:ca:f6:3b:f5:31:0f:65:
                    88:e9:5e:0c:86:13:07:5a:35:8c:00:90:ce:f3:70:
                    6a:ae:63:eb:ef:3c:6a:c4:42:6a:71:98:92:2e:8f:
                    6a:2a:40:c1:1b:91:76:05:95:7b:91:0d:bd:eb:4f:
                    7b:d7:a1:34:57:a9:6c:cf:2c:e3:a0:20:d1:b3:70:
                    39:61:4d:2a:b5:01:6d:d1:b5:a1:c6:46:55:f2:27:
                    31:33:a3:ae:eb:c4:bf:31:09:54:5d:37:63:1e:d6:
                    56:7b:61:0f:48:25:28:37:3a:23:3b:d2:c6:99:70:
                    d2:ef:12:7d:02:2c:32:45:23:d3:d8:c8:dd:37:d7:
                    44:d9:96:bf:97:20:22:9f:22:30:07:c3:ab:50:16:
                    6a:9f:15:9c:4c:4f:20:02:86:71:b2:dc:f6:fe:3e:
                    06:25:39:b2:a2:00:67:e5:20:93:2b:b7:ad:d2:6e:
                    8f:a5:be:db:fe:27:75:39:97:cb:27:3f:db:3f:cc:
                    be:7d:8a:c5:f4:10:4a:f1:9a:9c:5a:ef:8d:40:85:
                    3a:d0:52:b9:c6:4e:b0:fa:c6:2b:eb:66:51:51:a7:
                    e5:04:64:08:26:af:3e:2e:27:2e:eb:a9:cb:da:39:
                    d7:4c:f9:e7:8a:e4:dc:75:74:86:6d:7c:ce:e5:5d:
                    9a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:73:46:9D:13:87:37:A2:E0:11:16:F5:58:74:1D:EB:4D:EE:3E:F0
            X509v3 Authority Key Identifier:
                keyid:CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:07:b9:07:89:23:ec:c8:0f:89:3d:2b:83:f4:f9:43:f4:8c:
         12:af:10:06:b7:e2:95:7c:2d:a8:4f:ae:be:53:cb:1f:94:6f:
         65:c5:37:dd:82:ba:31:76:74:18:66:e9:4e:39:89:ab:50:c4:
         50:c2:57:f0:dd:69:34:d0:09:b9:80:d2:b4:58:cb:94:bd:8f:
         12:12:9c:c2:31:ef:a5:80:80:98:17:ef:c2:2a:14:6b:e6:d8:
         bf:4c:7a:c4:76:68:bb:0e:99:69:5e:62:4c:28:2b:9b:6c:35:
         a0:1a:74:86:b7:8a:c8:11:ca:bc:89:0a:a0:6d:fd:12:cd:fa:
         3e:b3:6b:52:ae:4f:55:4b:fe:ec:8e:37:ec:9c:ee:08:bd:88:
         fb:b7:28:d3:fc:60:df:e1:a5:12:c8:d7:48:67:b4:fc:ec:0e:
         b9:dd:61:21:c7:bd:f7:19:15:d6:22:b8:fc:fa:e5:c7:bd:2b:
         d4:97:3d:c8:33:54:ad:3f:e4:5b:7d:cc:7a:75:ad:7e:0b:44:
         6a:86:e5:52:fa:46:e1:60:11:c7:13:0c:eb:c0:ba:91:89:b4:
         a2:c3:42:02:3c:18:31:ec:d3:f9:25:82:ab:29:ed:79:0d:c7:
         a0:96:44:93:55:9c:38:f3:b8:d7:f4:0e:05:48:16:0e:81:83:
         eb:f6:3a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----