Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
File:                     xq11SrfApAHA_x08Ensn1T_cyYE.mft (raw, json)
Hash identifier:          x7y1kWYrWw44cPf3Wq+USbRBY2FWFPezSCtDsjaq/so=
Subject key identifier:   FA:BC:A8:CA:A8:0E:A0:9C:70:7D:64:C1:FF:CA:DC:FB:EA:8A:0B:C0
Authority key identifier: C6:AD:75:4A:B7:C0:A4:01:C0:FF:1D:3C:12:7B:27:D5:3F:DC:C9:81
Certificate issuer:       /CN=c6ad754ab7c0a401c0ff1d3c127b27d53fdcc981
Certificate serial:       0199FF22F070598C4D9B4A0D5F5A35A9EA78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
Manifest number:          16E1
Signing time:             Mon 20 Oct 2025 01:01:43 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:43 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:43 +0000
Files and hashes:         1: xq11SrfApAHA_x08Ensn1T_cyYE.crl (hash: h79SB3wfv7eSTrtTf110cZcmYmIbxdYPaOC/X1DWYGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:f0:70:59:8c:4d:9b:4a:0d:5f:5a:35:a9:ea:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6ad754ab7c0a401c0ff1d3c127b27d53fdcc981
        Validity
            Not Before: Oct 20 01:01:43 2025 GMT
            Not After : Oct 21 01:01:43 2025 GMT
        Subject: CN=fabca8caa80ea09c707d64c1ffcadcfbea8a0bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:26:31:ab:49:3c:97:c5:ee:fd:ab:b2:16:
                    0a:57:6c:98:34:c4:5f:f1:62:72:38:c4:b9:ee:2a:
                    11:21:a6:8a:e5:e6:de:a3:11:4d:4a:98:dc:89:9b:
                    10:d7:56:86:42:00:52:89:fc:d1:83:a8:b4:7c:5a:
                    2e:9b:86:87:ff:d7:41:1e:4b:63:c0:c9:60:ce:ad:
                    2e:3e:9f:83:50:f8:37:4d:69:94:47:63:9b:fc:6f:
                    c7:8e:f1:63:3d:d9:3c:5a:ff:dd:dd:69:cc:4d:56:
                    52:43:2c:91:49:98:95:3e:38:ba:c6:38:d5:df:25:
                    f6:81:5a:a3:65:7d:24:76:ce:b3:6b:7b:f0:1b:7a:
                    49:4a:11:03:b7:dd:30:e2:68:bf:cd:70:39:c1:a8:
                    65:f9:37:15:5e:60:02:c5:05:9e:66:f8:5d:b5:4f:
                    b9:30:c1:50:0c:80:3f:e7:5a:78:38:fc:5e:c6:82:
                    63:d1:f7:81:b1:3c:2f:70:ed:37:e6:06:35:3d:22:
                    a8:3c:57:78:94:37:f6:43:d5:62:5d:c7:e3:61:08:
                    bb:1f:06:3d:46:22:ea:75:93:4c:96:6d:09:e0:2f:
                    55:6d:dd:aa:98:54:f4:62:b9:8f:69:67:43:ae:c3:
                    c0:fa:9d:4a:ca:ba:6a:36:fd:15:9a:96:b0:a6:be:
                    b2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BC:A8:CA:A8:0E:A0:9C:70:7D:64:C1:FF:CA:DC:FB:EA:8A:0B:C0
            X509v3 Authority Key Identifier:
                keyid:C6:AD:75:4A:B7:C0:A4:01:C0:FF:1D:3C:12:7B:27:D5:3F:DC:C9:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f0:99:90:f2:cd:46:08:90:44:52:5e:22:7c:81:5b:6d:6e:
         ba:ef:7e:3a:09:cf:94:f8:a7:61:77:0a:81:20:aa:82:b2:fb:
         35:be:c6:b5:d1:61:0a:0c:6e:0c:b1:93:ca:7f:25:36:8c:90:
         22:5d:93:0e:8b:00:60:d8:19:a8:25:df:95:28:cf:66:39:f0:
         91:08:4f:b8:bc:8f:e3:45:ef:e7:e2:b1:77:2a:a6:d6:9e:d8:
         0b:74:2e:c1:ae:8a:88:81:f3:48:25:14:b1:c9:3f:e2:db:86:
         b4:7a:8d:e0:a5:57:b2:c7:69:14:42:d4:3f:85:78:97:99:c2:
         27:53:dd:5c:a5:40:27:9a:cf:ae:e7:b6:d6:c6:74:0d:e3:a0:
         b5:39:bf:5a:c9:31:75:c7:e3:54:02:44:ac:bb:97:10:17:f3:
         a4:b1:bf:85:fc:d0:9b:5c:79:57:dd:94:25:cd:6e:fb:ff:c8:
         64:76:1d:32:06:b4:b1:1d:f7:26:e4:ec:c4:72:57:b8:be:79:
         b3:04:b5:ad:38:5e:b0:df:bb:5a:1a:1a:d1:fa:57:f4:5b:3d:
         45:19:5d:04:a4:30:c4:e8:14:c3:0f:6b:22:e3:53:36:9c:a5:
         57:1b:0a:c4:b6:dd:f7:33:55:ac:7c:4e:a5:22:95:c3:5d:99:
         35:01:e4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----