Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
File:                     V9minRgOgZpHgvtsbqFtOn0ykQA.mft (raw, json)
Hash identifier:          SoUMzlQo27JuDPybxyZNP7X6dQK7zHL9gLnFVhy4nS4=
Subject key identifier:   C0:33:36:8C:38:33:40:4C:42:74:E2:AE:CA:5F:85:C6:08:62:F9:78
Authority key identifier: 57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00
Certificate issuer:       /CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
Certificate serial:       0197B6A0DED4C87390B0A03BE4590865C231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
Manifest number:          07CA
Signing time:             Sat 28 Jun 2025 13:01:25 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:25 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:25 +0000
Files and hashes:         1: V9minRgOgZpHgvtsbqFtOn0ykQA.crl (hash: pZawl6IPTQCdYRpS1WdYyIKCWtEvcRm3Omi37afdf/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:de:d4:c8:73:90:b0:a0:3b:e4:59:08:65:c2:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
        Validity
            Not Before: Jun 28 13:01:25 2025 GMT
            Not After : Jun 29 13:01:25 2025 GMT
        Subject: CN=c033368c3833404c4274e2aeca5f85c60862f978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c1:df:0c:5c:53:b0:f6:5f:96:05:2f:3a:46:
                    33:03:ac:73:0f:41:b9:e5:23:dc:08:f8:59:4f:c7:
                    ae:f9:c3:5d:54:39:82:d8:36:4e:c6:b3:b9:2c:d2:
                    31:2e:44:05:1c:7f:ea:99:21:91:28:7f:0e:1d:2d:
                    e3:ba:cb:6a:b9:b4:b5:3b:e5:44:04:75:50:38:54:
                    8e:ab:c2:78:7c:69:91:36:bc:b6:0d:d7:a1:e6:29:
                    a9:ed:86:a6:f8:72:79:7b:35:1d:30:a8:4d:0f:ac:
                    0b:10:a6:5b:a3:0c:85:82:03:de:44:70:4f:2b:ae:
                    86:93:48:fb:41:77:cd:1c:96:c7:56:23:24:62:4d:
                    82:c8:0b:e8:78:1b:1f:ea:ad:ed:e9:79:26:05:36:
                    fc:13:2d:0e:fb:d6:f4:ca:fe:a1:06:e4:c4:93:ed:
                    80:23:75:dc:08:bb:02:b6:56:a3:ba:0a:3e:f9:d8:
                    5a:46:69:e7:85:11:26:14:d8:94:65:3e:e6:e0:43:
                    09:b0:3f:2e:83:28:9c:15:e1:bd:36:5b:9f:85:f7:
                    d0:d7:f9:9b:60:79:f9:b2:a3:d3:df:cd:7d:10:f7:
                    3d:d0:2d:3c:85:92:e0:1a:29:cf:86:b2:35:f3:86:
                    c6:f0:5f:d6:a0:49:e8:29:82:1c:e6:74:5d:bb:6e:
                    79:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:33:36:8C:38:33:40:4C:42:74:E2:AE:CA:5F:85:C6:08:62:F9:78
            X509v3 Authority Key Identifier:
                keyid:57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:30:bd:df:ea:8c:f0:96:0e:4e:cf:04:cc:54:24:e3:49:8a:
         fb:a3:93:43:bc:59:39:81:03:93:f1:a0:21:2d:bd:f2:8a:73:
         39:27:52:20:4a:1f:61:2a:26:43:0d:55:37:b0:cc:22:e6:c2:
         86:92:74:c8:0c:60:dd:63:9f:60:d8:a4:c8:9a:ca:1c:33:ef:
         a4:0f:f7:81:72:84:7f:99:4c:58:c4:99:33:71:40:3c:29:0d:
         4d:b7:03:11:da:1a:f1:3e:17:d8:1c:44:02:0b:50:f9:21:64:
         0c:5a:68:9e:0d:6d:e1:0d:ae:b8:f4:5b:0f:d0:c6:93:36:74:
         b5:9b:7c:60:ca:a5:40:99:2a:c0:67:a9:62:1f:fc:97:d0:af:
         2d:a5:58:1f:74:a1:e2:7c:8c:d3:c6:83:70:2f:f3:fe:d9:92:
         e0:cb:2b:90:51:5f:1d:56:d2:8d:75:a2:3c:9a:75:b5:6b:36:
         93:dc:9b:99:ac:b5:d3:06:ee:18:29:f6:41:b0:85:87:6e:34:
         96:f1:57:e9:ee:b2:5e:50:5f:5f:a1:ee:af:2b:6e:b8:cf:15:
         ec:b2:1a:94:e1:19:df:11:6c:b1:68:75:c5:3d:d5:2d:f0:26:
         35:c8:8d:16:e7:0f:cb:23:34:4d:43:d2:f0:ce:d9:e8:bc:1d:
         92:26:94:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----