Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
File:                     4-d1gqvilic_V6RVSq2m-lwf6bA.mft (raw, json)
Hash identifier:          YkLycNx3I+uXiHaGKOiGU8vK+pImBebwWcbMdVpsCgA=
Subject key identifier:   B6:2A:3E:D4:D6:31:36:FB:97:CF:C1:0C:30:F5:4E:2C:2F:F1:DC:17
Authority key identifier: E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0
Certificate issuer:       /CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0
Certificate serial:       01965E03BF903D1072BAFD3BBEE2B2218CC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
Manifest number:          03C9
Signing time:             Tue 22 Apr 2025 15:00:25 +0000
Manifest this update:     Tue 22 Apr 2025 15:00:25 +0000
Manifest next update:     Wed 23 Apr 2025 15:00:25 +0000
Files and hashes:         1: 4-d1gqvilic_V6RVSq2m-lwf6bA.crl (hash: hK9FTh1YVySIw+WrSbW6RiKjEdSPie4LC6OIG87+OIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 14:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5e:03:bf:90:3d:10:72:ba:fd:3b:be:e2:b2:21:8c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0
        Validity
            Not Before: Apr 22 15:00:25 2025 GMT
            Not After : Apr 23 15:00:25 2025 GMT
        Subject: CN=b62a3ed4d63136fb97cfc10c30f54e2c2ff1dc17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:85:b4:fa:70:2d:68:10:da:cc:59:79:35:d4:
                    77:4e:d3:1e:79:8c:29:cb:90:9b:fa:b5:dc:a5:32:
                    c5:83:5a:27:56:09:f1:98:34:84:aa:2a:a4:65:fa:
                    6d:4b:78:9e:df:32:f5:59:e4:13:94:f8:3b:29:e8:
                    87:1b:01:45:bc:04:3f:86:7f:43:66:77:6b:de:77:
                    76:63:19:69:09:9c:f3:9c:e0:ca:e3:72:89:6f:f2:
                    3a:e3:a7:88:cd:7a:9c:18:eb:cb:b8:7d:f9:7c:05:
                    56:95:fc:8c:d0:fd:79:39:2d:af:e7:88:2c:45:b0:
                    09:47:f7:53:e5:3c:97:04:34:bd:4e:0a:bb:13:b6:
                    9f:a8:28:01:1b:62:bf:f9:f5:ed:f4:d1:6d:63:84:
                    db:02:65:15:ef:20:62:71:ea:0c:fb:77:f5:0b:cc:
                    57:2c:fc:8f:93:4d:44:af:8b:64:3e:23:c4:16:6a:
                    3e:85:38:c3:4c:09:12:65:5a:59:e5:ea:90:23:88:
                    3a:19:7b:b9:d4:75:52:37:a5:a1:04:0f:75:cf:b5:
                    00:c3:8b:d4:4e:35:f7:c2:a3:bf:d2:bb:66:bc:96:
                    22:96:4e:25:21:e9:db:43:44:95:99:3b:e0:d6:57:
                    19:70:a3:86:b2:ac:7b:74:ce:27:9f:dd:6d:c3:88:
                    27:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2A:3E:D4:D6:31:36:FB:97:CF:C1:0C:30:F5:4E:2C:2F:F1:DC:17
            X509v3 Authority Key Identifier:
                keyid:E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:61:02:c4:e0:15:33:0d:6c:4d:58:86:eb:27:1b:01:85:3f:
         b7:20:01:e5:18:f8:7e:90:7b:0a:e7:c8:d5:d0:b7:f3:d8:9e:
         b3:cc:1a:d4:99:06:56:70:0c:7a:62:79:a7:c1:5b:43:75:9f:
         79:c9:0f:af:ba:ae:2d:c9:ca:a6:33:28:8b:23:97:25:ae:1e:
         d3:00:66:5e:a0:37:92:2f:0f:99:27:27:59:6c:0e:34:59:b4:
         f7:da:6f:f9:b5:61:55:fe:1c:c7:5f:e6:3d:16:58:53:19:2e:
         cd:fb:b3:e6:6e:19:2f:17:34:1e:57:08:88:47:cf:69:3d:6c:
         4f:1d:e4:93:c1:bd:d4:46:b6:39:57:4c:0f:2c:ea:d4:4a:34:
         45:52:83:76:97:2a:c8:76:0b:e7:57:90:de:e8:e0:c3:a9:b5:
         d0:74:6f:42:ae:1c:e0:b0:c3:71:75:bf:fb:a1:68:80:84:36:
         e2:54:73:c7:e3:ce:a3:aa:20:d0:f7:c7:e5:d9:dc:17:c1:0b:
         65:3d:11:c4:56:b9:8b:38:61:54:fd:07:70:66:50:c8:b6:cd:
         b6:c7:b4:34:1c:72:50:16:0c:33:84:a5:42:e5:50:e2:33:c8:
         77:1e:c2:1b:82:f4:41:19:34:5e:ae:38:64:b5:08:b4:20:7d:
         98:e9:02:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----