Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
File:                     1uDRyowZYcCxEoqlW4V5axIECpU.mft (raw, json)
Hash identifier:          vWk4ge24rys3ac2MD3uqBOLvcaFGGHkOfaMO5YA7fBc=
Subject key identifier:   BE:D9:10:0B:99:7E:81:53:A7:B8:ED:DA:1B:A6:C0:C5:F5:AF:51:DD
Authority key identifier: D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
Certificate issuer:       /CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Certificate serial:       0199FDDA6555E51EE50FE7FC9ED25F5A8852
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
Manifest number:          0BEE
Signing time:             Sun 19 Oct 2025 19:02:52 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:52 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:52 +0000
Files and hashes:         1: 1uDRyowZYcCxEoqlW4V5axIECpU.crl (hash: 2wYS7Z2miS2Zauyx7lVdCbaQSOQLXwd/fCE2kQs+gXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:da:65:55:e5:1e:e5:0f:e7:fc:9e:d2:5f:5a:88:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
        Validity
            Not Before: Oct 19 19:02:52 2025 GMT
            Not After : Oct 20 19:02:52 2025 GMT
        Subject: CN=bed9100b997e8153a7b8edda1ba6c0c5f5af51dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:17:ed:d9:cd:55:e5:e9:89:74:bb:b7:83:34:
                    88:93:6d:10:12:37:c4:af:23:d9:f8:ea:92:8d:b8:
                    ab:75:ca:0e:b8:7b:27:4f:db:5d:2e:48:ee:ce:4b:
                    54:4a:0b:2d:a1:ab:c6:39:be:8c:5e:78:b3:5c:99:
                    90:ac:a8:fc:5d:3b:e5:a2:bb:e1:89:1d:e1:f9:0d:
                    2f:0b:78:a1:4b:e0:dd:0f:73:50:70:1e:a0:07:e2:
                    73:64:8e:e5:ef:8e:86:9a:39:06:8d:f9:7f:48:9e:
                    f7:2b:c1:2f:3b:f2:ac:26:2b:f6:0c:97:33:44:01:
                    c6:ea:0a:72:51:f3:38:cf:90:fb:72:1c:45:8d:aa:
                    69:1b:91:34:90:e2:29:f6:3c:20:85:0c:33:bb:94:
                    b6:46:2e:ab:fa:28:f6:15:43:05:86:d2:e0:91:5d:
                    71:33:71:b7:51:2a:eb:d6:0b:ea:fc:a7:c6:e8:fe:
                    41:fe:08:d6:ef:e9:34:39:89:4a:2d:7d:ec:10:71:
                    44:6d:a5:ea:cc:03:7d:78:1a:9e:81:c2:3c:d8:34:
                    4a:b8:13:a2:d4:d3:be:17:0b:41:48:4d:4e:a5:50:
                    54:76:c2:de:4c:15:a3:c5:85:99:91:2e:66:57:e9:
                    eb:33:e7:19:58:d5:73:b5:86:95:6b:20:8b:e0:93:
                    7c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D9:10:0B:99:7E:81:53:A7:B8:ED:DA:1B:A6:C0:C5:F5:AF:51:DD
            X509v3 Authority Key Identifier:
                keyid:D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:08:0c:9f:03:ca:aa:3e:f1:9b:51:c2:61:88:9c:c8:55:92:
         71:9f:25:af:50:27:88:2f:0a:f9:2a:1a:35:b5:f0:e4:76:e6:
         23:0c:53:73:48:d9:1b:c0:cf:96:01:51:36:e4:5d:09:78:11:
         09:9d:8c:20:4b:45:e6:06:14:7c:82:ac:59:7f:8d:0b:f2:80:
         13:9d:cb:9c:91:15:09:36:45:17:64:a4:42:39:79:e4:fd:24:
         a0:df:3c:7f:10:66:1f:de:bc:76:d5:99:38:51:b9:f7:44:b9:
         75:1c:7e:3e:dd:7e:31:90:37:eb:3c:6c:f0:95:3d:a8:1c:8d:
         61:e7:f4:d9:fc:1b:61:52:02:02:e8:10:bd:7d:74:8a:f9:a9:
         d0:56:d2:b7:4b:c2:83:db:4f:bd:78:8d:3e:73:67:0c:ac:0a:
         36:cf:9d:cb:cc:73:ff:38:d9:d4:ec:2c:b7:1b:a5:51:a3:7c:
         56:66:d4:0a:19:fe:c2:a3:1c:3c:9e:18:f5:fc:fd:2a:f1:84:
         03:9f:24:85:a9:46:ae:f1:13:81:17:90:c3:79:a4:6d:29:d5:
         e3:46:8a:84:73:2d:45:75:6a:be:ea:be:38:71:fa:04:98:c9:
         8d:65:52:29:52:84:7f:7c:2a:0a:4c:0d:c1:ce:57:36:5f:13:
         c8:04:73:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----