Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
File:                     mSlM_9YStex7SLhCMqRdarbd_5U.mft (raw, json)
Hash identifier:          N0NudttjnZKXYW69jpVOIjFxDE8Nc46+KwGbQj/BzOI=
Subject key identifier:   F3:BC:C3:D6:CD:E3:71:07:C2:35:79:54:6F:F6:87:57:58:FF:C9:B1
Authority key identifier: 99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
Certificate issuer:       /CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Certificate serial:       0199FFC80FDC9D35723E02B39D15B065A427
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
Manifest number:          0423
Signing time:             Mon 20 Oct 2025 04:02:05 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:05 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:05 +0000
Files and hashes:         1: mSlM_9YStex7SLhCMqRdarbd_5U.crl (hash: AVghndfu8f+QdbmytrghTUomoMaV0x7oQad6hckBxfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:0f:dc:9d:35:72:3e:02:b3:9d:15:b0:65:a4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
        Validity
            Not Before: Oct 20 04:02:05 2025 GMT
            Not After : Oct 21 04:02:05 2025 GMT
        Subject: CN=f3bcc3d6cde37107c23579546ff6875758ffc9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3a:bc:fe:37:85:8a:da:05:15:3a:b4:e8:86:
                    a9:9f:31:42:8d:a9:31:80:97:87:1e:9d:bf:49:ec:
                    4b:18:8d:11:f8:16:75:d5:8a:3c:cf:cb:80:b5:58:
                    bf:4b:11:19:b6:31:67:17:34:6f:9a:cd:f5:d6:2a:
                    32:74:49:3b:3a:5c:b8:95:cb:a4:7f:7d:96:0c:29:
                    f1:ab:0a:4b:3b:3c:3a:ea:29:57:dc:ce:16:25:6f:
                    ae:af:c0:9e:f9:66:6e:9f:07:ca:4a:5b:b8:12:3b:
                    a9:75:8e:f9:91:c1:8b:ab:16:29:df:36:e4:cd:b4:
                    24:ce:63:1d:fd:7c:b3:6f:4a:aa:bc:29:29:8a:0f:
                    12:6e:e9:d4:97:02:0f:57:79:df:3a:85:13:2b:7b:
                    02:00:2b:43:18:12:13:eb:4e:ca:2e:26:e9:87:9f:
                    1d:2e:0c:57:4f:bd:a2:81:1a:81:61:cd:88:c4:55:
                    a6:f5:c3:a0:f0:8a:34:30:5b:df:be:1e:dd:d4:bd:
                    ea:ac:fa:ae:4d:5e:c7:0f:94:8c:9d:7f:3c:3e:2f:
                    a4:a4:7e:88:7c:1d:bb:73:d3:89:e0:cc:46:f2:55:
                    12:68:27:78:8c:39:a9:55:8e:d2:bb:21:ad:82:08:
                    73:a2:d0:09:e5:b7:d3:86:2a:d7:c4:b9:29:42:aa:
                    3b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BC:C3:D6:CD:E3:71:07:C2:35:79:54:6F:F6:87:57:58:FF:C9:B1
            X509v3 Authority Key Identifier:
                keyid:99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a5:61:57:d9:33:92:c7:b8:34:a9:96:ad:ae:3c:ef:f5:17:
         15:49:2f:31:b0:a6:95:bf:6b:19:02:0c:ff:fb:85:7c:79:d5:
         5f:fa:9b:c8:ce:19:08:6a:87:df:11:f7:d9:1c:07:b3:21:b7:
         e1:a6:7c:7d:6f:8e:0d:80:e9:c1:32:d5:a9:44:7d:0d:2d:21:
         12:c4:87:8f:08:c7:fb:6b:5a:49:c6:c6:d6:b5:ba:b6:a7:91:
         ea:56:de:48:2d:c1:79:0c:20:a1:af:0f:cd:9d:f0:b1:c6:3f:
         a6:50:a8:9c:66:19:b3:1b:d1:23:a0:7b:30:2a:74:fd:25:d8:
         01:f1:ce:ba:49:6b:0a:f1:db:97:e1:25:7f:f9:54:59:ba:f4:
         a4:58:e8:14:9a:02:f4:5f:b8:a5:56:66:f2:57:bc:c1:92:9e:
         67:4e:d6:0b:0d:79:8e:c4:06:c0:81:28:43:4f:81:77:d2:3a:
         37:6b:b8:74:af:e9:bf:3b:c4:fe:98:7a:6a:85:9d:18:e3:b6:
         a8:16:1f:d6:80:b3:91:5a:36:95:81:be:06:a4:5e:a5:1f:15:
         91:6c:57:71:58:ed:ce:92:15:92:e5:69:75:7c:bd:80:a9:6a:
         fb:48:63:eb:fa:70:27:e6:25:2f:25:c5:c4:f3:ab:53:ad:89:
         82:07:0f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----