Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
File:                     4K4U6GPBsVoeouSaLrUEhT91tr0.mft (raw, json)
Hash identifier:          x+FvJdoYShQrM3XJyFavNuQJ6bRB+JO0YA3w5NdC3VI=
Subject key identifier:   B5:9F:74:9A:18:51:3D:BA:9B:B1:AD:51:69:66:42:EC:EC:D6:58:75
Authority key identifier: E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
Certificate issuer:       /CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Certificate serial:       0196C0B88A9EAA77D12C9A6A816FC54574A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
Manifest number:          05C7
Signing time:             Sun 11 May 2025 19:00:41 +0000
Manifest this update:     Sun 11 May 2025 19:00:41 +0000
Manifest next update:     Mon 12 May 2025 19:00:41 +0000
Files and hashes:         1: 4K4U6GPBsVoeouSaLrUEhT91tr0.crl (hash: knxO7hjhWSVatENd+oiA7AlteCRkFMo/zTFLh0TsweI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 19:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:b8:8a:9e:aa:77:d1:2c:9a:6a:81:6f:c5:45:74:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
        Validity
            Not Before: May 11 19:00:41 2025 GMT
            Not After : May 12 19:00:41 2025 GMT
        Subject: CN=b59f749a18513dba9bb1ad51696642ececd65875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:78:1e:be:e6:d1:ca:4d:04:d4:2a:9f:88:ce:
                    bf:b8:5e:5d:4e:c2:6d:4c:20:9c:98:0e:34:9f:04:
                    67:4a:35:f0:98:f0:ac:7c:50:df:17:0d:32:0e:8a:
                    a9:5f:39:0c:58:4c:65:1c:f1:66:31:3d:85:ee:e2:
                    8d:e4:be:88:e1:c9:01:94:fc:ee:1c:b0:58:f2:f8:
                    c8:6c:3f:80:bd:41:0c:cb:45:09:ff:82:7c:d1:3e:
                    da:0e:16:91:fd:7e:4c:85:ed:aa:ed:3a:30:0b:58:
                    45:56:43:3f:d7:f6:b7:0b:e4:6c:7c:88:9a:42:82:
                    e7:48:2e:4e:b8:bb:55:6f:ce:31:bd:38:6a:64:7e:
                    95:a5:10:f7:ec:4b:99:ad:ab:72:3a:9c:4e:f4:02:
                    6e:e6:d8:0e:ab:7e:ea:a7:b8:06:1a:58:73:94:97:
                    b0:84:f2:57:1c:9a:7e:32:91:3f:71:b1:77:a3:69:
                    92:ed:0c:48:8c:ca:21:32:ff:77:76:7c:73:9c:3c:
                    b8:07:6b:b2:a7:38:8f:35:bb:21:fc:5b:da:b2:77:
                    3c:92:e7:de:a2:aa:11:04:5f:e5:aa:71:cf:3a:4b:
                    2e:bd:94:df:fa:0e:59:83:ef:50:fd:e8:c8:d5:a6:
                    9c:f1:72:46:07:45:d7:0e:bb:6c:4a:48:d0:19:2b:
                    7c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9F:74:9A:18:51:3D:BA:9B:B1:AD:51:69:66:42:EC:EC:D6:58:75
            X509v3 Authority Key Identifier:
                keyid:E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:bf:c4:a1:8d:b9:8f:b6:ce:5c:29:27:44:78:7f:1d:d7:6c:
         42:ae:28:03:f2:25:05:ea:69:c0:e1:ed:27:04:77:72:fd:75:
         af:b3:23:75:0b:4a:8b:cd:3e:45:6a:7c:dd:0d:47:bd:5a:6c:
         b9:b9:df:e6:91:d9:b3:16:ef:e1:c8:2b:b1:3e:6d:e2:d4:22:
         3d:3a:e8:dc:ff:9a:f2:01:05:56:fd:b7:c0:56:99:1b:58:b2:
         76:6d:c3:f0:a5:70:35:d6:29:34:3f:59:19:55:65:db:2a:59:
         f1:30:cf:46:85:49:6a:79:15:99:71:ed:e0:ef:be:ec:69:06:
         b7:c8:28:6b:68:e8:a0:ee:e6:4c:e6:9b:c3:11:95:28:ba:5e:
         4a:61:72:db:b8:ae:d3:4e:94:83:21:51:fc:6e:08:55:15:35:
         b1:66:6e:6b:0b:63:56:f9:53:b5:2f:f8:c4:a4:6d:a6:8b:6e:
         eb:80:d9:de:9e:07:75:d7:9c:60:4b:25:d8:be:af:02:8a:0a:
         37:8e:a4:8a:48:6e:2b:f6:f7:97:79:fd:ba:64:bd:31:9e:2b:
         6a:d3:e0:9b:5b:eb:38:f5:d8:a8:92:1c:6c:77:3d:46:0a:73:
         b9:af:8f:de:ff:2b:ac:03:33:db:f0:0c:f1:46:6f:b8:f3:c9:
         a4:5a:0c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----