Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
File:                     w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft (raw, json)
Hash identifier:          xE/x/vNuWctWAksaMjLuU/OpdEwShmrdx3bRFS96SAI=
Subject key identifier:   31:66:75:D7:54:B8:37:58:29:BA:2D:65:C7:D8:B0:A8:2F:B2:D4:6D
Authority key identifier: C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84
Certificate issuer:       /CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84
Certificate serial:       0197B7B34D6EB29C59EA2B53443161844970
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
Manifest number:          0574
Signing time:             Sat 28 Jun 2025 18:01:10 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:10 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:10 +0000
Files and hashes:         1: w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl (hash: lVQCiQbtilgwgMlTm+fovvL7Rhu/cj50bi/iveMDRO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:4d:6e:b2:9c:59:ea:2b:53:44:31:61:84:49:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84
        Validity
            Not Before: Jun 28 18:01:10 2025 GMT
            Not After : Jun 29 18:01:10 2025 GMT
        Subject: CN=316675d754b8375829ba2d65c7d8b0a82fb2d46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bb:71:d0:c3:7f:48:31:d7:40:63:c4:46:23:
                    30:58:34:cd:70:89:58:ab:16:ae:87:e2:c8:6e:cf:
                    91:ad:dd:ab:67:b4:d6:a7:0e:d6:67:9f:46:8a:b1:
                    be:ba:03:16:9e:4d:f6:e9:6b:ff:f1:f1:9d:85:b9:
                    7f:f3:3a:55:2b:ac:42:ed:ae:cb:ce:df:f1:4b:d9:
                    9e:9d:b5:ee:c8:cd:c5:7f:27:b9:c7:f0:42:44:86:
                    fa:7a:06:c9:2c:10:ca:28:e4:21:44:ad:b3:68:ad:
                    67:ca:bf:48:a6:49:51:d1:ec:c7:3e:17:cb:76:84:
                    ee:29:a3:5a:0a:56:ec:ba:be:e1:c6:1c:fd:5a:4d:
                    5d:c7:b0:45:78:9d:1d:b5:8b:17:fa:57:0d:0c:63:
                    4a:f1:a4:cf:f3:68:f5:ae:7f:4c:0b:f9:e6:c3:12:
                    d2:50:89:17:ca:25:40:c6:dd:10:3e:69:31:02:a2:
                    28:3e:3c:51:95:f0:3e:f0:c9:ff:35:d6:56:df:a9:
                    e5:aa:94:00:d4:49:5e:c3:c4:62:b8:7b:ed:d2:48:
                    ab:ab:cb:c8:cd:c5:3f:51:df:cb:b4:76:33:1c:b5:
                    68:a9:ad:a6:55:8d:3d:d3:24:4f:90:6e:51:b3:7b:
                    82:07:dd:ba:6d:cc:64:1e:3b:3f:97:16:a2:fa:94:
                    27:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:66:75:D7:54:B8:37:58:29:BA:2D:65:C7:D8:B0:A8:2F:B2:D4:6D
            X509v3 Authority Key Identifier:
                keyid:C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:63:c4:c8:2f:32:68:6b:20:b0:61:5b:73:ec:42:e9:30:86:
         22:76:e2:e3:7a:20:cd:b1:f8:b2:dc:0a:6b:02:c6:e6:b8:ed:
         6e:5f:9e:ff:68:5a:21:8d:62:ee:1d:da:12:fb:d7:41:1e:b8:
         a0:15:83:6d:19:5f:06:a6:54:d4:f3:1a:72:c2:ca:a8:27:de:
         a5:08:3a:31:a1:c2:27:c1:70:d0:b9:ed:fb:72:07:1c:f0:bf:
         ec:98:43:ba:99:b3:6c:69:45:60:df:75:f1:88:14:2b:fc:6b:
         31:ac:fa:af:75:43:2f:65:fd:5d:da:a3:c7:6d:c5:30:d8:26:
         f2:6f:68:4b:72:3d:c7:b3:40:bb:4e:aa:3f:ea:b8:71:11:5e:
         9d:a8:c5:a1:03:7c:68:52:d1:57:00:50:80:c4:d9:6b:d0:89:
         00:b0:5c:bc:4c:79:20:85:2f:26:3f:35:2b:01:07:a3:e9:63:
         3c:fd:61:22:ad:0f:e9:1a:96:90:1c:8e:f5:a7:5a:fa:51:d5:
         c8:16:dd:e6:79:56:bf:be:0b:52:a3:1e:2a:88:7f:65:df:3f:
         c3:9f:1d:5c:b6:50:9c:a8:d1:87:a6:fe:a7:43:1e:18:14:8b:
         d8:8d:24:f8:c7:3f:1c:47:68:b7:e5:c6:9c:f8:12:50:4c:12:
         67:a5:55:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----