Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
File:                     v_h00BVAcOlio8hxmCH9ucsQFuE.mft (raw, json)
Hash identifier:          SgKbGQOSa9cVvGCFNS9oDvpq5p9Jumq34RQf9G0LxzA=
Subject key identifier:   B7:AA:97:B8:37:2B:4F:A8:7A:1C:1C:2D:CC:02:23:69:CB:B3:A5:86
Authority key identifier: BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
Certificate issuer:       /CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Certificate serial:       0197B70F477C39052F761BEDAFEEAF98B450
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
Manifest number:          12D4
Signing time:             Sat 28 Jun 2025 15:02:01 +0000
Manifest this update:     Sat 28 Jun 2025 15:02:01 +0000
Manifest next update:     Sun 29 Jun 2025 15:02:01 +0000
Files and hashes:         1: v_h00BVAcOlio8hxmCH9ucsQFuE.crl (hash: 8c7VD8FeIXnAF+JoOvJuN7zrVx8G1NooOGsBtAEk4tg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:47:7c:39:05:2f:76:1b:ed:af:ee:af:98:b4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bff874d0154070e962a3c8719821fdb9cb1016e1
        Validity
            Not Before: Jun 28 15:02:01 2025 GMT
            Not After : Jun 29 15:02:01 2025 GMT
        Subject: CN=b7aa97b8372b4fa87a1c1c2dcc022369cbb3a586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1d:bb:66:ce:dc:b2:b2:51:bf:ca:e7:d6:5b:
                    d3:e9:4f:88:68:b5:96:54:5f:58:c8:0c:cf:8b:69:
                    8c:a1:94:cc:a4:47:57:24:73:a9:87:00:91:13:85:
                    78:1a:68:55:bd:79:69:43:ab:00:ed:5e:6b:98:95:
                    97:78:bc:3e:2e:0b:49:97:54:d9:1f:0d:6b:d7:e8:
                    75:9e:1b:cf:13:e1:6c:09:d8:ab:27:db:e5:50:32:
                    66:0c:32:18:f8:7e:6c:76:5f:c3:ec:a8:78:89:f7:
                    90:16:62:3a:3b:73:40:a4:13:46:18:96:cc:50:4b:
                    b0:e5:4d:21:f4:9d:de:67:54:9d:0f:bd:cd:1b:c1:
                    87:20:6b:ba:7b:be:92:27:83:4f:c3:25:14:89:f8:
                    fa:f2:16:55:f6:21:e4:56:f8:0f:3f:60:18:f8:e4:
                    12:d2:aa:92:0f:fe:70:d0:16:ab:84:e1:3f:1c:f5:
                    c5:b6:93:e4:16:fd:ea:ea:de:e6:e2:d0:4e:43:03:
                    6e:b7:55:72:93:3d:e8:d4:63:6d:74:dc:63:a4:c1:
                    df:af:92:9d:1d:7e:21:5d:a0:a5:62:61:b6:d1:eb:
                    cb:87:51:ff:be:1d:3b:e3:7e:d8:cc:e0:ba:d5:22:
                    6c:8f:14:39:7b:64:98:46:9d:3c:f8:17:c4:14:05:
                    99:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AA:97:B8:37:2B:4F:A8:7A:1C:1C:2D:CC:02:23:69:CB:B3:A5:86
            X509v3 Authority Key Identifier:
                keyid:BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:37:a2:5f:5a:ab:1c:5c:dd:8e:80:59:25:b0:e3:4a:8a:11:
         7b:55:9f:c1:9f:e7:71:95:ba:14:43:88:9f:d0:db:13:84:13:
         a7:9e:0d:31:d1:5e:8e:8f:60:22:30:9c:95:f2:76:2b:53:c3:
         88:7f:21:e1:55:4b:ed:59:01:e9:15:e7:b0:0f:f2:8d:52:6b:
         d7:92:af:87:21:0b:78:36:19:cd:24:d3:8b:ec:4f:e3:56:22:
         d0:3d:2e:aa:78:62:a7:ce:7e:a9:09:75:51:4d:a0:8d:a9:1c:
         a5:7f:6a:69:48:84:1c:d8:3a:3d:d3:a4:d1:6f:12:45:23:49:
         40:c5:f8:fd:f9:79:66:6c:95:76:9d:2b:61:ee:55:c3:6e:81:
         44:95:3c:cc:cf:1f:79:d7:f3:3d:a9:19:7f:0f:9d:8f:79:04:
         b1:73:ea:b7:a4:b9:9d:78:3d:35:cc:2a:31:ea:ee:10:ee:12:
         dd:0a:e8:df:9b:1d:e5:8c:42:62:b1:f9:7e:fb:ec:b4:db:0a:
         e6:cf:06:fe:80:fe:3a:ea:ef:4e:c0:81:67:24:26:c3:29:ed:
         c4:b9:12:42:4d:b4:a4:45:fa:6b:1d:f6:16:52:a1:a1:8b:14:
         da:67:3e:77:f0:02:13:5c:21:2e:f3:01:d3:f4:4b:40:f1:2a:
         35:84:1a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----