Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
File:                     QIS7AapYrpSxMg_UvkIT-TFOkFY.mft (raw, json)
Hash identifier:          WHcxSopvuyESURLMK1cLp014hzKrOWVLENdSSc7GzIs=
Subject key identifier:   01:3C:D5:E0:47:20:60:49:61:7B:3E:19:BD:96:80:E6:41:6D:FC:CE
Authority key identifier: 40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56
Certificate issuer:       /CN=4084bb01aa58ae94b1320fd4be4213f9314e9056
Certificate serial:       019658700B8092E5177872354AE726256801
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
Manifest number:          04EE
Signing time:             Mon 21 Apr 2025 13:01:00 +0000
Manifest this update:     Mon 21 Apr 2025 13:01:00 +0000
Manifest next update:     Tue 22 Apr 2025 13:01:00 +0000
Files and hashes:         1: QIS7AapYrpSxMg_UvkIT-TFOkFY.crl (hash: DmfN7fmbGwSaeBwutp3OUHuKapjzbwcaA92ki6dR2Ag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 13:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:58:70:0b:80:92:e5:17:78:72:35:4a:e7:26:25:68:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4084bb01aa58ae94b1320fd4be4213f9314e9056
        Validity
            Not Before: Apr 21 13:01:00 2025 GMT
            Not After : Apr 22 13:01:00 2025 GMT
        Subject: CN=013cd5e047206049617b3e19bd9680e6416dfcce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f3:47:a4:18:c8:86:fe:07:07:b9:5d:32:75:
                    2d:b9:a8:6d:b0:1a:46:5f:dd:bf:f7:37:a1:cb:14:
                    b4:a3:fb:b6:9c:5c:a1:6c:48:87:82:df:74:e0:74:
                    c9:2f:12:8c:92:be:97:a0:18:1a:5f:c6:75:f5:8f:
                    0c:b6:97:f2:87:4f:0f:c8:54:f2:56:d9:ad:25:e7:
                    3d:75:11:64:3d:e5:1f:4d:e1:ab:24:23:97:e1:c6:
                    c4:92:10:75:15:c2:fb:14:f8:5e:d5:7e:f6:51:f7:
                    53:3b:7d:7a:88:4f:ea:c5:62:f8:17:33:76:1a:90:
                    26:5d:11:7f:d7:be:2c:33:24:82:99:ee:e3:e1:88:
                    49:87:c9:1b:60:66:39:5a:92:25:ea:25:99:97:3c:
                    88:16:02:fb:2a:75:d9:3a:c0:da:b6:55:ce:4d:07:
                    5e:ec:72:6f:65:92:f8:3f:6c:68:99:b0:12:16:29:
                    80:c6:a0:6d:87:ce:66:c7:13:8c:25:9e:8e:3b:a7:
                    98:c5:3d:80:33:90:a0:d1:51:bd:4b:bc:ff:29:62:
                    32:8e:1c:e9:ec:28:f1:94:88:86:38:b3:18:7a:9e:
                    11:ab:fa:a7:ce:dc:90:1e:ca:ca:fc:26:45:d3:fe:
                    16:6a:2a:e6:1c:39:f3:1e:83:61:1c:18:28:37:2b:
                    63:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3C:D5:E0:47:20:60:49:61:7B:3E:19:BD:96:80:E6:41:6D:FC:CE
            X509v3 Authority Key Identifier:
                keyid:40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:94:8b:65:04:22:c0:c9:8e:54:db:ca:10:55:52:49:0f:f8:
         2e:29:4d:bf:7f:e4:3d:19:8a:ed:03:3f:4d:27:90:a7:4b:f2:
         32:3a:23:2a:74:a0:8e:59:91:7f:5d:12:07:63:ef:af:1d:b4:
         37:b8:4a:ce:e9:62:38:05:30:18:cd:3d:e6:9e:45:73:00:ff:
         18:4a:df:d4:0d:5f:d7:f8:d9:34:56:bc:ad:c0:b4:2d:55:34:
         7c:36:8f:4a:05:11:8b:7b:fa:47:54:11:f6:bf:b3:bc:c3:fd:
         f7:6c:fb:8e:c8:fb:d5:06:c5:32:32:f0:61:6d:1d:ce:04:4e:
         9f:dd:b6:70:1c:89:06:d3:d9:a4:19:e1:24:39:e4:80:de:a9:
         56:0c:65:e1:dd:e4:83:94:fe:0e:26:a7:5e:4a:09:95:b6:95:
         fb:28:8a:ac:70:dc:ff:1b:1f:e5:85:3b:38:7b:a5:b4:ca:f7:
         e0:9e:b0:fd:eb:33:fa:fb:b9:58:c1:35:5d:f8:46:0d:f5:42:
         5d:a5:11:81:ed:89:0f:05:5a:27:e5:33:1a:df:2a:a7:e9:da:
         35:4e:b4:36:a1:ac:e9:a2:9b:06:73:31:cb:ee:e1:81:72:79:
         1c:55:29:89:7d:52:90:27:63:1b:44:0b:2d:ba:5a:bf:05:bc:
         78:c0:c0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----