Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
File:                     d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft (raw, json)
Hash identifier:          M1geupmLYDMbTVhKGVU7NwA6dn75VWNyHkpJszFUVM0=
Subject key identifier:   A8:47:2B:AB:9A:61:7E:74:EC:E3:4A:12:CA:DC:60:FC:E1:E6:C6:53
Authority key identifier: 77:FE:97:18:4D:A8:2A:36:D7:EB:E3:F8:58:40:31:5B:8A:B2:21:4C
Certificate issuer:       /CN=77fe97184da82a36d7ebe3f85840315b8ab2214c
Certificate serial:       0197B70EEB320EB9242AEBB7D4782303118A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
Manifest number:          0250
Signing time:             Sat 28 Jun 2025 15:01:37 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:37 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:37 +0000
Files and hashes:         1: d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl (hash: BibRAmBBE+BhNy34Q48E98ZsVOXUN82BIjREmPtvWuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:eb:32:0e:b9:24:2a:eb:b7:d4:78:23:03:11:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77fe97184da82a36d7ebe3f85840315b8ab2214c
        Validity
            Not Before: Jun 28 15:01:37 2025 GMT
            Not After : Jun 29 15:01:37 2025 GMT
        Subject: CN=a8472bab9a617e74ece34a12cadc60fce1e6c653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:23:dc:b0:28:67:fe:f8:84:11:f6:d7:30:92:
                    7d:b3:a8:29:55:54:24:2c:0a:e0:80:01:57:11:a8:
                    11:3f:24:63:4f:5c:55:0e:b4:bc:8c:ca:08:6c:50:
                    6f:0c:45:9c:b8:ad:d8:1d:4e:f7:4a:f6:8f:f7:8f:
                    4e:a6:04:cb:0c:cd:83:02:e6:d8:0d:98:71:7a:fc:
                    d0:c4:5d:98:5b:a6:dd:86:7f:89:b2:17:f5:d7:3c:
                    5a:f2:a2:88:58:f5:08:f4:2d:3c:aa:43:5e:51:c9:
                    4d:d4:37:7a:24:1b:33:3f:fb:9a:f6:1f:cf:fd:67:
                    90:cb:3f:f6:ad:b8:2f:52:74:f4:71:0c:29:fe:e3:
                    7d:c0:b2:e9:fc:01:61:f0:39:f1:71:36:e6:08:6c:
                    53:af:7c:f6:50:95:41:53:85:b0:c4:ea:25:bf:d9:
                    3b:fe:2f:a6:15:14:71:19:04:d4:63:07:0a:d4:c6:
                    62:92:94:a5:e1:64:65:4c:56:73:5e:85:7d:ff:34:
                    82:fa:c7:2f:74:ad:ab:9b:d9:75:f9:2e:14:ae:6a:
                    0d:53:59:a7:4c:39:9c:6e:48:64:e4:f6:76:a9:b4:
                    4c:eb:f5:03:ec:95:76:4c:9b:c6:53:5e:87:07:4e:
                    45:e5:ce:61:e9:5c:a1:7c:bc:c5:be:ad:c8:a4:9f:
                    65:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:47:2B:AB:9A:61:7E:74:EC:E3:4A:12:CA:DC:60:FC:E1:E6:C6:53
            X509v3 Authority Key Identifier:
                keyid:77:FE:97:18:4D:A8:2A:36:D7:EB:E3:F8:58:40:31:5B:8A:B2:21:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:6c:46:7b:14:cc:08:e7:ea:d0:b6:de:f6:51:16:2c:16:2a:
         95:69:2f:69:03:de:24:0a:32:87:3a:66:e8:61:67:f3:11:92:
         f1:46:0b:e8:14:13:99:d3:16:76:37:16:ee:42:cb:0b:70:97:
         81:07:49:13:b4:c3:02:e0:8e:3e:87:40:d7:64:1c:f1:3e:d7:
         31:3a:99:81:15:7f:52:a3:8a:6d:98:f6:a2:bd:c1:e2:3c:45:
         34:33:4e:f4:45:99:67:ad:1b:fd:4b:9c:55:f0:c9:29:ab:58:
         cf:27:71:c3:06:b4:26:cd:9a:50:71:c8:f5:32:21:18:84:b5:
         74:b2:27:2a:db:da:71:b0:f1:83:88:3b:7d:7c:56:91:d0:0a:
         56:68:75:2e:5c:8f:42:bf:17:42:cc:f4:29:d8:9f:cc:ff:7c:
         2b:4b:1c:15:b8:1f:04:61:17:f1:4b:82:a2:5e:a9:8b:64:66:
         23:85:16:b1:25:9e:08:01:50:9c:52:14:62:de:53:7b:04:a8:
         0f:4d:b7:86:ae:60:58:5e:f5:cf:50:82:53:19:f4:08:1a:df:
         2f:8e:ac:30:90:e4:ef:8f:24:b1:45:d1:88:94:e8:ac:24:89:
         a1:39:35:e0:0f:57:3c:55:bb:da:c3:af:1e:2f:97:ea:5b:91:
         80:8a:75:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----