Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft
File:                     0sAfMj0dJYn5qbRi_nDzawn6xjI.mft (raw, json)
Hash identifier:          L/vh1pK0yuqCKhdIgGppYgcjJUBg7hzkn8SBR1MxOpk=
Subject key identifier:   5C:08:A9:1C:88:51:AC:D8:2A:67:84:F9:D5:7D:45:EE:F9:E7:B2:E3
Authority key identifier: D2:C0:1F:32:3D:1D:25:89:F9:A9:B4:62:FE:70:F3:6B:09:FA:C6:32
Certificate issuer:       /CN=d2c01f323d1d2589f9a9b462fe70f36b09fac632
Certificate serial:       0198D583F9171C45D7921FF7A30C48C6E021
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sAfMj0dJYn5qbRi_nDzawn6xjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft
Manifest number:          0676
Signing time:             Sat 23 Aug 2025 06:00:52 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:52 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:52 +0000
Files and hashes:         1: 0sAfMj0dJYn5qbRi_nDzawn6xjI.crl (hash: EOtqHAmoZwpMLIUhuRGiASkbeAf5JzmhMhGor1E4CMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sAfMj0dJYn5qbRi_nDzawn6xjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:f9:17:1c:45:d7:92:1f:f7:a3:0c:48:c6:e0:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c01f323d1d2589f9a9b462fe70f36b09fac632
        Validity
            Not Before: Aug 23 06:00:52 2025 GMT
            Not After : Aug 24 06:00:52 2025 GMT
        Subject: CN=5c08a91c8851acd82a6784f9d57d45eef9e7b2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:49:ba:3b:fb:a4:cd:ed:c8:1a:38:fc:88:02:
                    4e:75:98:ad:30:f0:1b:90:cf:d5:37:0b:69:5d:3d:
                    1c:b9:ca:e4:91:6f:f5:fd:02:de:73:a0:19:fc:ce:
                    c4:e8:10:67:37:22:b4:d4:13:88:73:f3:7d:a6:92:
                    7d:79:ed:e5:8f:20:7f:63:b1:c2:1b:ce:73:07:26:
                    8e:1a:03:50:eb:c1:2f:94:ef:f0:f3:65:57:ca:dc:
                    12:e1:41:bc:28:54:55:ea:d2:d8:c5:f6:aa:1c:a8:
                    ce:a1:e4:d0:d1:12:5c:74:9c:ef:88:b3:33:a7:c3:
                    43:1a:04:95:19:92:94:21:e7:0a:09:98:69:32:42:
                    1f:ea:7a:d2:ef:26:8a:90:7c:6b:2c:04:f7:27:09:
                    52:2f:18:a5:96:e8:e8:ec:e6:10:b6:06:8f:69:5c:
                    b5:da:49:c8:4d:c2:76:67:e1:64:88:1c:83:4e:83:
                    0f:de:4a:44:4f:4e:d2:23:f8:d7:ba:7d:14:33:ef:
                    11:47:d6:39:0b:b6:2b:23:4b:64:45:76:ab:70:06:
                    a0:a2:55:a7:6d:e3:dc:cf:99:45:a2:63:35:d0:f8:
                    d7:0c:d9:85:4d:c3:51:f0:cf:3d:45:6f:b5:44:39:
                    ba:64:68:97:65:c2:7c:f3:14:8c:78:9f:c4:2a:5b:
                    91:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:08:A9:1C:88:51:AC:D8:2A:67:84:F9:D5:7D:45:EE:F9:E7:B2:E3
            X509v3 Authority Key Identifier:
                keyid:D2:C0:1F:32:3D:1D:25:89:F9:A9:B4:62:FE:70:F3:6B:09:FA:C6:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sAfMj0dJYn5qbRi_nDzawn6xjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:52:1e:52:e6:5e:2b:a1:cf:34:57:22:df:c2:7d:3c:75:f0:
         fa:63:c7:72:c3:36:2d:12:cd:c7:5e:15:07:bf:90:85:65:2c:
         1e:f6:93:e3:9b:d1:15:77:04:af:f9:4e:d8:de:89:34:5f:85:
         91:6a:0e:a9:36:61:04:de:63:0d:0f:80:01:48:06:94:d0:49:
         77:15:6b:23:60:55:6c:3f:8d:7c:99:de:fc:6c:27:37:24:db:
         2d:dd:14:b6:5e:65:8d:79:bc:c8:01:57:92:27:0d:f6:de:99:
         e5:f8:a3:12:db:0a:4d:95:b2:12:25:fa:09:ae:3c:ab:1a:57:
         95:59:a4:a8:22:f6:03:4f:1c:67:f9:fd:2f:9b:31:3b:c9:ab:
         6d:5d:ec:61:b7:a5:be:40:6a:19:fb:e8:a3:7a:bc:a8:80:a6:
         80:e8:25:18:64:f4:6d:77:06:bb:5d:00:95:36:3a:c5:84:b9:
         01:9d:7f:2e:4f:1c:31:cf:e2:33:a9:10:cd:53:a1:cd:bd:71:
         1b:11:d6:f0:0d:ec:98:d6:59:f0:89:6f:36:b5:d1:34:b1:57:
         6f:7a:af:9d:ec:38:48:11:5a:fa:f1:0e:e6:6b:2d:78:74:0d:
         ac:43:1f:bd:cd:3a:66:59:0e:20:73:c9:49:90:bd:1d:a3:2b:
         72:b6:c7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----