Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
File:                     d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft (raw, json)
Hash identifier:          3pLu5P8lXNCRW1TH63ZTHrWMuGKB0ORp/VVulh66qhg=
Subject key identifier:   38:B8:91:1B:59:4F:B7:99:94:60:14:E2:08:EC:7F:F1:82:42:37:FC
Authority key identifier: 77:C1:55:21:FE:D9:0D:11:4E:76:35:31:0B:30:7F:55:3F:57:D2:6C
Certificate issuer:       /CN=77c15521fed90d114e7635310b307f553f57d26c
Certificate serial:       0197B6A116886DBE31892FAB11983C41E658
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
Manifest number:          0D9E
Signing time:             Sat 28 Jun 2025 13:01:39 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:39 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:39 +0000
Files and hashes:         1: d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl (hash: fyuofAAvjeR7Mdk4S6rFkJD0gmcZxTAwYYW2neREITE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:16:88:6d:be:31:89:2f:ab:11:98:3c:41:e6:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c15521fed90d114e7635310b307f553f57d26c
        Validity
            Not Before: Jun 28 13:01:39 2025 GMT
            Not After : Jun 29 13:01:39 2025 GMT
        Subject: CN=38b8911b594fb799946014e208ec7ff1824237fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0a:1d:89:ea:ae:ad:c7:dd:53:48:79:4c:36:
                    d6:9a:5a:b5:7a:11:cf:4c:81:9e:31:51:04:27:e9:
                    48:3a:84:45:8c:4f:61:fd:35:d9:f2:ff:ef:29:da:
                    56:91:51:17:ba:70:08:52:65:26:e0:57:84:f2:e2:
                    9b:42:a0:30:a9:9e:45:55:36:de:02:9b:35:11:1c:
                    42:6d:9d:f7:3b:bf:cc:2d:73:2e:8c:59:58:42:c2:
                    96:7c:95:a7:7c:75:5c:90:72:1d:53:02:93:a3:b4:
                    c3:21:fd:4d:eb:3c:11:97:72:ea:ed:e5:36:04:d2:
                    fa:42:45:5f:a1:74:de:05:6f:e2:92:05:00:ff:25:
                    4d:ae:9a:cb:92:b0:10:ae:53:e6:6f:7d:d0:b1:58:
                    85:1e:2b:82:8e:99:6a:a6:45:36:af:5a:0a:4e:a0:
                    23:8d:f3:9a:0d:5d:15:d8:48:07:df:b8:f5:b6:2b:
                    27:07:b8:04:66:bb:16:cf:37:35:a0:4c:7c:cb:5f:
                    14:77:c9:2e:36:65:6f:19:73:2a:1d:8f:cd:b5:cb:
                    c6:9d:ec:43:e3:3c:9c:94:8a:20:7e:0f:6d:a2:1e:
                    a8:cf:c5:21:82:a4:e4:d6:93:ce:d8:2d:e6:26:0d:
                    c0:04:26:c3:c3:60:e6:4f:95:d7:d7:7e:7d:0b:79:
                    fa:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B8:91:1B:59:4F:B7:99:94:60:14:E2:08:EC:7F:F1:82:42:37:FC
            X509v3 Authority Key Identifier:
                keyid:77:C1:55:21:FE:D9:0D:11:4E:76:35:31:0B:30:7F:55:3F:57:D2:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:5b:99:f5:17:98:db:c4:4d:9d:67:a4:d1:63:a9:21:6b:e0:
         8e:60:e9:1f:0f:57:07:04:34:e4:93:75:e1:0e:71:ce:0a:c9:
         81:92:6f:86:34:56:08:13:cb:f7:0c:89:07:2d:1d:a6:29:f6:
         4a:73:76:6d:18:b4:38:c0:47:6e:6b:95:84:ce:2a:44:58:8b:
         a3:a8:cd:24:76:ad:b6:ee:ff:72:6a:88:2d:90:fb:33:e1:8b:
         94:9d:d3:9c:e7:dc:ed:ad:7a:ed:65:c1:e0:0a:14:fe:d0:c5:
         32:8c:45:91:8e:9e:64:aa:08:c7:ee:b1:8c:19:de:07:03:14:
         28:42:73:81:ca:62:ae:28:af:3e:b0:bb:85:dc:63:f1:9c:85:
         35:e9:08:42:47:18:fb:00:20:37:5d:c7:f8:6c:67:e6:d6:80:
         e8:35:de:08:49:87:c7:9d:54:3d:1b:ad:44:61:b9:19:66:d9:
         41:df:50:e3:da:4c:41:c4:ca:90:74:81:58:f3:00:78:f3:82:
         89:c8:27:c3:9a:53:c8:c8:75:e0:c7:6c:e6:e6:b2:ae:c5:2c:
         c9:a7:b9:a2:0a:f7:40:63:c7:ab:f3:a7:71:1a:00:6f:4e:4b:
         44:2f:84:17:f5:c3:55:30:dc:f6:ab:79:6f:d8:20:37:07:2c:
         9c:62:db:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----