Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
File:                     RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft (raw, json)
Hash identifier:          pmzfLGbD6AOzA2gI2iRavKmgcx4+Vyaiw8W50Yr8O1w=
Subject key identifier:   7A:D3:CA:64:0F:C6:2F:5F:9B:B9:6B:7C:35:73:C6:1B:C1:B3:75:4F
Authority key identifier: 44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
Certificate issuer:       /CN=4410d28a9274f9df1065b7f62f8b8997739c047d
Certificate serial:       0196C4CBE7B91855F184079648F4616FF6D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
Manifest number:          02A7
Signing time:             Mon 12 May 2025 14:00:19 +0000
Manifest this update:     Mon 12 May 2025 14:00:19 +0000
Manifest next update:     Tue 13 May 2025 14:00:19 +0000
Files and hashes:         1: RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl (hash: mLzZ6vmqWz3Lm+TQBdiMinhjC3Sbn5ppZc9NkJNdpMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:cb:e7:b9:18:55:f1:84:07:96:48:f4:61:6f:f6:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4410d28a9274f9df1065b7f62f8b8997739c047d
        Validity
            Not Before: May 12 14:00:19 2025 GMT
            Not After : May 13 14:00:19 2025 GMT
        Subject: CN=7ad3ca640fc62f5f9bb96b7c3573c61bc1b3754f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fb:de:ca:76:2b:48:7d:76:78:12:59:4c:b5:
                    b0:5c:fd:fd:c0:7a:40:35:a2:52:0a:c1:5f:e2:1d:
                    72:ec:df:d3:5c:fc:5d:6a:72:bd:05:a8:36:97:72:
                    8b:9a:0d:a1:d4:98:da:c7:0c:b3:19:ab:a1:30:f4:
                    4c:2e:66:9d:e7:ec:78:ee:b0:fe:48:7b:42:5b:1d:
                    98:22:29:2f:f5:19:4d:ca:b5:f6:f3:30:da:4c:96:
                    40:9c:8b:58:54:4c:23:7e:ea:7c:eb:f2:c3:f5:bf:
                    a7:22:6c:90:cb:f8:a7:82:3a:93:7f:04:b6:33:8e:
                    ab:8f:2d:2f:f7:68:00:08:52:92:64:45:00:74:59:
                    ae:68:bd:b6:e0:45:1d:92:e8:0c:b6:3b:89:b7:88:
                    d3:0a:86:30:b9:1d:6d:ac:5a:32:5a:a0:ce:b8:c1:
                    de:2f:50:35:48:ba:4f:5d:a4:a3:b0:d1:67:5a:50:
                    9e:fb:f9:6b:f7:c5:ae:7d:21:df:08:0c:34:7e:4a:
                    2b:50:75:4d:af:a2:eb:3f:e8:3e:6c:94:3e:35:27:
                    6c:da:6e:87:45:cc:b2:99:75:3e:b0:81:81:27:42:
                    7a:cd:fc:8d:62:d4:14:7c:42:d9:06:53:4c:2a:2f:
                    41:f7:9c:ed:7e:bd:15:a1:41:c1:3e:75:fc:9b:3a:
                    e3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D3:CA:64:0F:C6:2F:5F:9B:B9:6B:7C:35:73:C6:1B:C1:B3:75:4F
            X509v3 Authority Key Identifier:
                keyid:44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:ae:28:75:38:ae:f4:5e:1b:4e:83:bd:16:10:75:07:28:fa:
         cd:96:60:c9:02:cb:27:f1:80:94:71:2e:cf:8c:b9:ae:5b:14:
         cb:e2:18:9a:31:8f:21:ff:64:34:c5:25:63:b0:10:f4:fc:99:
         0b:75:65:fd:7c:e8:02:6d:d2:46:11:bd:7a:d4:f7:60:27:66:
         c9:fb:9d:cf:ac:74:a9:4d:44:ab:0d:05:24:2f:43:4a:94:39:
         cc:b3:39:30:80:bc:81:c3:6d:e4:39:db:15:cc:d0:ec:9a:71:
         2b:8e:f3:55:97:9b:f4:89:39:f2:5f:3d:ca:e3:4d:41:5e:e6:
         87:15:c5:db:66:36:7f:27:de:45:1a:0a:ca:23:e9:3b:fa:91:
         27:6e:4b:b6:67:00:98:de:8d:a7:36:55:31:04:1c:ba:c5:67:
         70:84:45:72:1a:e7:74:af:cc:00:f6:fc:3e:df:6a:05:2d:7f:
         57:2c:35:a7:c6:61:75:7d:10:17:04:21:9c:d6:bd:31:4e:0c:
         d3:1d:71:8d:b8:48:f5:ab:24:c9:39:09:bc:63:d6:00:fd:0d:
         d1:8e:5d:cc:0d:f0:51:1a:9b:75:81:97:f3:a7:bb:13:8a:1d:
         c4:a8:72:ef:55:69:a0:08:2b:e5:e5:5b:4b:7e:52:4f:f1:cf:
         3f:9c:7d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----