Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
File:                     6QOzpacoCqn-K_-pBlwrKgGld8w.mft (raw, json)
Hash identifier:          bL8uMtNtetOUMH3i9PEheOZ/Ed+u7B4ZE7dYKS1U9Fg=
Subject key identifier:   EC:AE:E3:E3:12:CD:C1:0D:3D:C2:1E:F5:D8:C1:74:56:F5:9F:0E:EA
Authority key identifier: E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
Certificate issuer:       /CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Certificate serial:       01976DAB253A204E9A67784EEBFDFE75B747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
Manifest number:          158C
Signing time:             Sat 14 Jun 2025 09:00:21 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:21 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:21 +0000
Files and hashes:         1: 6QOzpacoCqn-K_-pBlwrKgGld8w.crl (hash: 943TCnNE1EhoVUMYsTmne0uOg6YY0C3yH3U0fNTSM50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 09:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:25:3a:20:4e:9a:67:78:4e:eb:fd:fe:75:b7:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
        Validity
            Not Before: Jun 14 09:00:21 2025 GMT
            Not After : Jun 15 09:00:21 2025 GMT
        Subject: CN=ecaee3e312cdc10d3dc21ef5d8c17456f59f0eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:07:a4:5e:0c:18:63:03:79:e5:13:e0:30:a3:
                    13:89:cb:ab:de:4d:8c:c6:41:c3:6c:f3:d6:ef:1a:
                    18:1a:f3:40:b6:19:b2:7e:99:1f:b6:7c:5e:b6:a8:
                    bc:79:ef:89:ef:90:7c:fd:52:0a:1e:2c:25:15:7f:
                    28:b3:8e:0a:7f:42:72:93:af:dd:a1:bf:77:9c:3c:
                    50:c0:0b:3b:e2:11:e5:dc:5e:88:a8:62:32:00:e6:
                    d1:f5:c6:4d:4c:2a:ca:5b:1b:ef:21:2c:c4:de:96:
                    b8:3a:ea:1e:44:c7:ab:09:9b:a1:6a:67:41:cd:03:
                    d0:6a:69:59:d8:49:e0:27:97:bf:82:be:a6:3f:a1:
                    9e:cc:30:33:28:c5:71:d2:1c:5f:bf:ba:08:ba:14:
                    4e:43:73:c4:b9:9b:64:15:63:f0:5d:c6:4c:dd:98:
                    3e:90:e3:eb:e5:5b:ad:84:8c:16:3c:0e:48:e4:36:
                    5f:84:9d:b9:57:12:99:0c:62:64:3d:a4:8d:1c:c3:
                    6e:d1:42:52:3d:5a:9d:c3:5f:55:fd:c2:f7:d9:3a:
                    4f:d9:da:c3:82:82:5f:7c:68:58:d9:d5:13:f4:51:
                    62:68:a6:99:c3:4a:18:95:23:79:3a:de:65:3f:aa:
                    de:c5:7a:25:f8:73:92:c1:23:c7:5f:c9:2c:3c:84:
                    45:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AE:E3:E3:12:CD:C1:0D:3D:C2:1E:F5:D8:C1:74:56:F5:9F:0E:EA
            X509v3 Authority Key Identifier:
                keyid:E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:22:e5:84:71:fc:45:e1:0d:72:f5:04:14:bd:6e:a9:53:90:
         d9:4e:9d:ca:31:43:27:ec:ed:2f:57:7a:1b:70:35:bc:68:b5:
         df:4d:42:c0:86:7c:6c:b0:e2:a2:3a:8d:a4:04:bb:d1:d7:ac:
         88:46:f6:3d:72:58:3b:e8:c5:6c:88:05:62:13:b3:dd:da:77:
         ed:19:99:ba:80:60:20:3e:c1:79:99:47:68:38:71:db:bb:60:
         0c:c2:72:63:84:2d:8d:8a:c0:ed:e8:56:2c:bc:35:63:84:c9:
         1a:cc:92:ea:67:ba:85:c1:a8:69:01:61:3c:82:73:27:a3:18:
         11:08:a0:ff:c4:8d:e1:b1:b6:f8:20:c4:12:9a:bf:cf:eb:65:
         c4:79:0e:6b:3e:3b:61:96:a7:8b:6f:89:ab:a8:bb:06:3f:06:
         4d:5f:b7:4b:9a:b2:3f:6e:50:da:33:f9:a8:ce:f1:d1:61:59:
         a0:26:b3:c6:65:1c:22:fd:25:20:d9:6e:77:e6:f2:9c:ee:81:
         73:39:a9:94:d6:c0:30:13:95:99:31:5c:23:32:95:53:a0:9e:
         59:37:8e:0d:c7:1c:52:3e:50:28:92:71:bc:ea:78:9c:a1:50:
         69:bb:c7:9c:de:db:47:2a:4a:b8:5f:1d:2b:b2:9f:f8:4d:05:
         2d:49:e5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----