Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
File:                     crsdyZa54KP6ZjLPgHp8IFCUnEY.mft (raw, json)
Hash identifier:          awBZfS3q5E6MW5x1GakStj0JbO3qQQS4lcFrQ5ZS9x8=
Subject key identifier:   ED:3B:41:14:F8:06:F8:17:AF:33:7B:1E:8E:91:94:99:39:A4:A0:76
Authority key identifier: 72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46
Certificate issuer:       /CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46
Certificate serial:       0199FF22FB96D1FEC49ADFD506D585FC881A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
Manifest number:          09D2
Signing time:             Mon 20 Oct 2025 01:01:46 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:46 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:46 +0000
Files and hashes:         1: crsdyZa54KP6ZjLPgHp8IFCUnEY.crl (hash: rEI74Tf7Jb6uMMnwuKPKWiohPCZOqJpBFpGXz+2A7LU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:fb:96:d1:fe:c4:9a:df:d5:06:d5:85:fc:88:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46
        Validity
            Not Before: Oct 20 01:01:46 2025 GMT
            Not After : Oct 21 01:01:46 2025 GMT
        Subject: CN=ed3b4114f806f817af337b1e8e91949939a4a076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:47:cb:d1:55:4c:dc:da:dc:24:11:b3:06:49:
                    22:ee:6e:63:2c:d4:38:39:f1:23:b2:ab:04:56:00:
                    b2:fc:b1:fc:5a:6c:89:66:e2:3f:4d:2b:d2:72:eb:
                    9f:48:ec:b0:67:32:e4:38:e9:bf:e0:ae:ed:3b:4f:
                    9d:83:9c:76:b6:dd:4a:87:bb:3a:25:5c:9c:5b:9a:
                    14:f5:80:c4:cb:5b:3e:9a:71:2a:d7:6a:3b:af:de:
                    27:8e:f4:ff:97:c6:e7:89:b0:e3:61:b5:12:2f:97:
                    95:f7:28:bb:94:a5:89:74:d2:54:4a:9e:4f:d0:0f:
                    f0:00:81:d0:e8:41:86:af:44:fa:60:2a:94:f3:ac:
                    16:81:6c:1c:25:9a:0d:7d:3f:78:cb:f4:96:94:55:
                    07:b5:a7:f5:f6:32:97:f1:42:9b:a3:ea:14:a7:55:
                    0b:bb:b6:af:85:b5:5d:45:2e:e9:c9:0e:da:93:eb:
                    c7:01:9d:8b:ac:21:a7:83:80:76:ab:9e:0e:5b:d8:
                    7c:5b:5c:3b:f3:37:ec:cc:12:b5:20:c0:98:64:d1:
                    d4:af:19:de:03:c3:62:ef:50:5e:37:94:c8:9e:ec:
                    2f:a7:40:9b:d3:df:56:4b:3f:f1:c3:bd:5f:0b:11:
                    c0:8d:92:8f:a8:3b:81:b7:f1:7d:52:d2:3a:88:27:
                    40:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3B:41:14:F8:06:F8:17:AF:33:7B:1E:8E:91:94:99:39:A4:A0:76
            X509v3 Authority Key Identifier:
                keyid:72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:7c:ed:43:83:d3:6c:59:9d:d0:4e:f8:2d:ab:9a:a7:15:06:
         fb:80:6d:38:91:05:5f:5d:ab:b0:09:20:18:a7:56:77:f7:ce:
         2c:b8:89:3e:02:0a:6e:e0:c6:a2:d8:bb:86:4a:af:f6:7e:70:
         80:ae:11:7a:33:bf:41:73:02:55:99:8c:d5:67:57:3f:29:16:
         b8:fb:14:8c:34:fc:94:f1:24:44:38:ae:18:f4:8c:04:3a:97:
         ec:00:f3:af:e1:bf:19:9b:32:84:c5:71:da:30:14:82:84:ee:
         a0:75:82:0f:ac:53:5a:46:29:72:50:a2:20:f8:61:57:a3:14:
         cb:47:00:26:72:b0:d6:62:cf:b4:32:b3:80:24:72:6f:0d:95:
         86:af:09:6c:b7:6e:bd:45:c8:37:83:2e:0b:5b:3f:de:2a:b5:
         6d:19:ee:a3:d7:52:d3:4a:5f:53:a3:e0:b5:4f:49:bc:bd:06:
         c0:bc:3d:95:b2:02:87:ef:66:f6:bf:79:ed:33:e2:73:71:4d:
         9a:e6:37:73:5f:0b:10:0e:12:bc:5e:bf:3e:86:99:97:44:90:
         88:29:c7:8a:92:05:20:63:3a:af:03:c4:86:df:48:4b:37:80:
         93:25:c0:5e:0a:e3:9e:17:aa:09:19:b9:e6:9e:de:37:86:e7:
         1b:6f:d5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----