Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
File:                     X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft (raw, json)
Hash identifier:          5HE+YWlH5kdj79AQEaP19v7xucSl+ST9TyZj3jlLp+s=
Subject key identifier:   B4:76:CF:52:40:21:51:82:47:C8:6C:E6:2C:EE:F4:C0:37:09:28:D1
Authority key identifier: 5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F
Certificate issuer:       /CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f
Certificate serial:       01965538957E5BD424341BB9EA649CD01971
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
Manifest number:          05AA
Signing time:             Sun 20 Apr 2025 22:01:33 +0000
Manifest this update:     Sun 20 Apr 2025 22:01:33 +0000
Manifest next update:     Mon 21 Apr 2025 22:01:33 +0000
Files and hashes:         1: X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl (hash: 42uwIAsf2tX2X3ejEb51IZ/Z4XgCDdi/1c3OcF+1H/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 22:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:38:95:7e:5b:d4:24:34:1b:b9:ea:64:9c:d0:19:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f
        Validity
            Not Before: Apr 20 22:01:33 2025 GMT
            Not After : Apr 21 22:01:33 2025 GMT
        Subject: CN=b476cf524021518247c86ce62ceef4c0370928d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1f:7a:3d:9e:8a:99:6f:ff:bf:4f:98:e1:fd:
                    ed:6a:59:c8:d9:40:6e:1a:6f:9d:5e:3a:d6:e0:3b:
                    0c:ee:bc:11:86:46:02:48:a1:ba:e1:e9:5a:2b:b4:
                    89:1c:41:98:36:5b:04:a5:1a:7c:2f:f9:0d:bc:09:
                    cb:ec:85:a1:66:24:c5:e7:46:e5:56:ac:45:d1:27:
                    37:95:55:1e:40:d1:69:03:af:48:cc:0b:57:31:76:
                    f9:6f:66:b7:b4:20:18:76:b3:28:7f:fd:c7:37:97:
                    7a:be:4b:c7:64:76:1b:b0:79:aa:ff:00:8c:33:32:
                    f2:c2:5a:56:b5:30:be:b8:53:53:12:a4:00:a9:cb:
                    96:d9:c5:6d:39:c3:a9:59:34:99:c4:04:8c:2f:8a:
                    b0:7d:f8:52:b0:65:aa:f6:85:bc:de:1f:77:08:cf:
                    d2:e9:d6:97:32:ec:11:fa:6c:e8:5b:c1:e8:66:f7:
                    8b:6b:1a:cd:3d:d8:e3:49:18:96:61:c5:00:72:94:
                    49:26:da:58:de:17:92:27:aa:10:d0:ee:62:6f:0e:
                    0e:f4:bc:41:5d:24:cb:ff:f1:75:1e:88:1a:ad:ef:
                    88:af:7d:f5:5a:39:d8:27:dc:eb:f4:1b:4e:d4:e1:
                    da:23:83:9f:f6:84:3a:fc:2d:21:a7:db:3c:60:f3:
                    99:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:76:CF:52:40:21:51:82:47:C8:6C:E6:2C:EE:F4:C0:37:09:28:D1
            X509v3 Authority Key Identifier:
                keyid:5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:78:4e:a1:64:f4:51:41:3f:04:e2:8f:62:d9:4b:82:bb:1f:
         ab:b1:84:f4:bf:a4:09:ef:3d:13:02:64:08:2e:ed:dc:23:08:
         72:54:a9:33:51:1e:f4:c8:9e:2e:a4:ab:21:b5:f4:d2:0a:3c:
         08:84:d3:27:33:d4:9a:c9:27:67:3d:d0:9b:2a:d6:33:06:7d:
         b3:0f:a7:d3:7a:74:85:56:a3:e8:2d:36:44:37:06:ec:45:2b:
         30:39:c1:94:c4:c7:3c:78:34:0a:a2:54:57:5e:ea:39:c3:7d:
         40:81:f2:a4:a9:b8:b7:c4:a0:9b:48:98:dd:a2:e9:11:ab:8a:
         12:66:5a:3d:62:82:36:82:f1:b6:6b:dc:3d:c6:01:ec:c2:56:
         25:35:f5:8f:5c:cd:96:c3:6e:bd:8b:59:6b:fd:6b:20:a5:a2:
         fc:37:4f:82:04:dc:01:20:f4:14:12:80:3e:f1:20:9e:62:e8:
         0f:9a:db:ec:70:68:10:ce:14:53:59:bd:fe:e1:b4:58:d8:2a:
         cb:31:b9:a1:df:5b:c9:82:4f:1b:6f:f5:db:6c:f8:12:31:38:
         7d:4e:09:9b:b0:1d:ef:fe:a0:d3:68:54:6e:b1:04:09:3e:f2:
         ec:a8:79:2a:4a:19:40:65:e5:cb:da:63:09:01:49:09:5d:a8:
         7e:f4:af:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----