Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
File:                     9efoeENmtHGmpODICA-PENrmalA.mft (raw, json)
Hash identifier:          gSHX24jPH1Qn34Jpr5FATUhgDTOWQiFa2ZRSYItKwFU=
Subject key identifier:   DE:5A:8C:96:05:D9:B0:15:C5:67:5C:E4:44:F8:1A:0D:60:BE:B7:1A
Authority key identifier: F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50
Certificate issuer:       /CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
Certificate serial:       0198D73BAD9728E1FBF9C804E59A9124FC54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
Manifest number:          0E4F
Signing time:             Sat 23 Aug 2025 14:01:09 +0000
Manifest this update:     Sat 23 Aug 2025 14:01:09 +0000
Manifest next update:     Sun 24 Aug 2025 14:01:09 +0000
Files and hashes:         1: 9efoeENmtHGmpODICA-PENrmalA.crl (hash: z7nP4xbRCucOt7Drx2+PRDudpo8qUm2L1/8zJbuXySQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:ad:97:28:e1:fb:f9:c8:04:e5:9a:91:24:fc:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
        Validity
            Not Before: Aug 23 14:01:09 2025 GMT
            Not After : Aug 24 14:01:09 2025 GMT
        Subject: CN=de5a8c9605d9b015c5675ce444f81a0d60beb71a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:97:c8:6b:70:73:51:3b:7e:01:4e:dd:57:95:
                    36:d7:a6:68:a9:e4:c1:02:8f:a9:e6:1c:1b:6f:d1:
                    8f:03:5d:0a:8d:6f:27:7e:31:e3:0e:65:6a:fc:27:
                    88:e3:46:0a:3b:e6:3a:2e:b8:46:f2:b1:ce:84:79:
                    53:a3:df:e5:b0:54:42:25:99:04:2c:96:fc:50:61:
                    0a:9c:f1:2d:28:2d:2d:d1:23:f7:48:6d:75:21:fd:
                    a5:b2:80:1b:24:fa:fd:ec:59:11:bd:a5:a7:20:32:
                    46:2a:a1:1b:11:2b:00:60:7f:d4:55:1c:a9:1e:8d:
                    63:b6:cb:38:a8:83:b7:a0:f1:24:af:89:a7:14:02:
                    6a:67:4b:b3:ed:5d:7d:2d:29:ff:62:e2:c0:ce:39:
                    76:7d:8b:81:60:e2:a7:dd:1c:ce:59:f3:dd:12:37:
                    1a:27:3c:f0:8e:34:cd:30:a4:18:e6:9a:a3:d9:4b:
                    9c:37:70:61:75:7d:cc:2f:36:96:f1:26:17:a1:00:
                    9a:00:22:a8:90:87:11:e3:e9:6c:2c:81:74:b9:60:
                    c4:dd:fc:1e:d9:1c:18:24:ba:15:43:a8:bb:74:4b:
                    3d:fe:9d:3b:68:8e:5d:e1:4c:8b:7c:10:ae:67:62:
                    f7:21:6c:17:5a:93:68:4b:fc:06:1b:be:66:38:04:
                    23:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5A:8C:96:05:D9:B0:15:C5:67:5C:E4:44:F8:1A:0D:60:BE:B7:1A
            X509v3 Authority Key Identifier:
                keyid:F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:58:aa:b4:00:e5:a8:eb:7a:df:e4:42:1f:d3:36:3d:d4:5f:
         7b:a6:cc:47:23:68:7f:d6:08:ed:fa:71:fe:a9:6c:97:b6:39:
         88:d1:67:b0:a4:d7:2c:57:f5:d9:5e:66:a2:8b:39:ba:b7:32:
         01:0e:dd:ae:5e:14:97:1d:78:04:92:b2:e7:3d:3a:a7:a1:af:
         15:05:13:d5:99:ae:1c:15:79:bc:81:e8:de:2a:92:e0:21:dc:
         c0:f3:e7:56:86:7a:dc:ac:00:cd:ae:f0:d9:09:32:c1:d2:0e:
         06:d5:39:73:8c:4c:f4:28:38:b1:0e:9a:7d:3d:5a:d4:27:45:
         33:59:2d:4d:a5:e6:fe:d7:96:be:a7:8f:8f:66:f8:aa:33:aa:
         4c:f5:c0:0a:c9:67:2d:8b:b0:7c:f6:66:64:6f:38:f2:49:3a:
         33:aa:0b:65:6d:63:7c:b2:96:26:67:c3:4f:ff:7d:b5:95:d0:
         c7:8d:8b:c1:3b:50:e2:75:1c:05:3b:d6:31:06:67:7f:9a:c2:
         20:84:c9:d0:09:5b:5e:e3:5f:09:9a:45:74:ea:67:ce:b2:a5:
         4f:5b:f6:6c:75:d2:26:84:bc:6b:b7:13:eb:f1:76:c9:33:c4:
         fb:a6:1e:fe:02:50:2d:b9:39:b7:f7:91:ec:11:8e:d6:00:47:
         13:4a:46:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----