Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
File:                     YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft (raw, json)
Hash identifier:          0kjAL3QNjM+HCRjVLQ6HD0dkHOsXGBKhexi75GBIsHQ=
Subject key identifier:   91:65:C0:E7:0C:6C:28:01:F8:FC:77:95:76:35:0F:76:0D:A6:FC:73
Authority key identifier: 61:9A:79:41:E0:C2:C8:61:32:2F:83:1E:D0:6F:07:FB:70:85:A3:BB
Certificate issuer:       /CN=619a7941e0c2c861322f831ed06f07fb7085a3bb
Certificate serial:       018F9805781804BB0BB8D08F8A8609649482
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
Manifest number:          0D9B
Signing time:             Mon 20 May 2024 22:00:46 +0000
Manifest this update:     Mon 20 May 2024 22:00:46 +0000
Manifest next update:     Tue 21 May 2024 22:00:46 +0000
Files and hashes:         1: YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl (hash: 7g51+YtYr33DjURHTsljHbqJplkF+echTIyeJVXOJOk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:05:78:18:04:bb:0b:b8:d0:8f:8a:86:09:64:94:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=619a7941e0c2c861322f831ed06f07fb7085a3bb
        Validity
            Not Before: May 20 22:00:46 2024 GMT
            Not After : May 21 22:00:46 2024 GMT
        Subject: CN=9165c0e70c6c2801f8fc779576350f760da6fc73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3d:74:48:ae:f0:e1:78:ab:c1:8c:5b:b6:8c:
                    b0:78:77:88:6c:f2:30:80:b1:fa:fa:83:b5:7e:82:
                    d4:d5:40:d7:e9:b6:dc:8c:cf:80:f9:49:50:1f:be:
                    6a:f3:bb:09:3f:99:a6:c3:92:46:27:cc:5f:9d:bf:
                    08:f6:07:fa:6c:a7:cd:b7:0f:8e:4d:ca:8c:39:7a:
                    46:49:3c:6e:81:d6:67:ae:44:65:b3:23:8a:b1:6a:
                    6a:9b:9e:cc:3f:8b:47:89:7a:89:23:5a:8a:a0:a6:
                    13:e9:7a:02:48:91:c5:a4:fc:13:b9:87:40:2c:e0:
                    80:eb:bf:58:b1:12:dd:d1:24:c5:fe:4d:23:a9:e8:
                    e1:8b:95:d0:4f:79:4f:59:63:0a:41:72:e1:b7:b8:
                    1b:d8:65:5b:c5:cc:5f:0e:82:ee:80:d1:bc:ca:f2:
                    cc:b0:dc:5d:e6:78:c2:03:84:8c:3e:cc:db:d5:49:
                    53:1d:c1:64:63:67:3e:c5:f1:04:2d:c4:3b:b5:a8:
                    31:d4:3c:dd:53:a4:c4:58:39:1c:a8:d8:dd:0e:15:
                    e8:1f:ae:8f:17:a5:f3:86:f4:23:ad:c2:69:03:66:
                    0a:39:3a:be:5f:f9:d1:8a:bb:b3:a6:48:c1:c3:52:
                    4f:99:99:17:82:b0:67:e8:79:0d:25:4a:a7:c3:6c:
                    5b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:65:C0:E7:0C:6C:28:01:F8:FC:77:95:76:35:0F:76:0D:A6:FC:73
            X509v3 Authority Key Identifier:
                keyid:61:9A:79:41:E0:C2:C8:61:32:2F:83:1E:D0:6F:07:FB:70:85:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:8a:60:06:cf:23:99:6b:43:fa:0a:46:c9:c3:fd:e7:95:8d:
         fc:0c:13:9d:b8:98:3b:92:44:f7:77:b3:f2:6d:d1:e6:ad:12:
         92:c9:51:1f:63:94:0e:e4:1f:84:f9:9e:71:c3:e0:e2:6c:51:
         89:fa:a7:cc:a9:dc:10:df:15:93:0d:98:ea:fb:fa:bb:7d:9e:
         e3:10:78:99:2b:b2:64:33:29:ab:6b:a0:2f:60:34:59:9b:ef:
         01:9d:3d:8f:6e:7b:20:c1:d5:51:5c:83:7c:53:76:40:bc:51:
         7a:b9:91:b5:62:02:37:c5:d0:71:c8:89:28:17:27:76:4e:e3:
         0b:c5:1f:89:72:2d:c6:c3:a4:69:1b:8e:21:d8:08:6b:dd:5b:
         3f:5a:f7:af:8f:b1:5b:3f:32:7f:c6:fa:7f:69:a7:43:1a:48:
         c7:ef:73:9b:c0:41:d5:fc:6f:fc:92:ce:b7:3b:fc:8a:20:f2:
         79:4b:c1:4b:6d:db:b7:99:55:d5:d6:80:b1:8c:92:45:a7:5e:
         42:07:14:02:b4:e5:0a:d1:fd:76:be:71:da:eb:86:31:6b:4c:
         28:b7:be:87:49:ec:10:36:3c:55:3e:b6:46:e7:af:20:c4:f6:
         b1:1a:16:a4:80:dd:96:04:c6:9e:02:32:c9:64:26:3d:89:e3:
         e3:da:e5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----