Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
File:                     CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json)
Hash identifier:          mUobO5Gj9Pl3M/EtmF9xpZ7r5BYaD6jN+sRLUT7Mjrs=
Subject key identifier:   3C:F2:F6:DB:26:06:D0:F1:97:74:F5:FA:53:77:DE:D6:28:5D:90:FF
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Certificate issuer:       /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial:       019677FB68DDEE296CA9459F28C6BA609217
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
Manifest number:          150C
Signing time:             Sun 27 Apr 2025 16:01:27 +0000
Manifest this update:     Sun 27 Apr 2025 16:01:27 +0000
Manifest next update:     Mon 28 Apr 2025 16:01:27 +0000
Files and hashes:         1: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: YlN32kMYjaZkHXrdDEN76WIrWi5JW4gljMxRwEtaUi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fb:68:dd:ee:29:6c:a9:45:9f:28:c6:ba:60:92:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
        Validity
            Not Before: Apr 27 16:01:27 2025 GMT
            Not After : Apr 28 16:01:27 2025 GMT
        Subject: CN=3cf2f6db2606d0f19774f5fa5377ded6285d90ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:13:7e:f9:e7:f8:b4:72:4a:99:ad:c6:34:a2:
                    97:c4:04:c2:22:7c:86:c7:b9:c3:da:34:49:96:5e:
                    04:7c:50:31:92:18:71:f7:fe:c2:31:78:36:92:93:
                    6d:61:5f:80:3f:7c:0b:a9:12:25:df:13:09:23:27:
                    63:04:1c:88:8c:0f:df:44:e5:d5:4f:dd:80:48:07:
                    4b:8d:10:a8:8b:a3:b2:b7:1a:e1:10:ca:31:8b:61:
                    04:1a:a3:5a:d1:4d:8c:c6:e5:0b:2e:0a:05:7c:e6:
                    43:8c:8e:a0:3b:f1:ab:ae:51:e3:f0:4e:f7:39:c3:
                    16:dc:46:ca:07:d1:f9:9b:9e:aa:c7:e5:e6:4b:b4:
                    67:2f:43:59:e1:b0:f0:64:c0:b1:df:b9:b8:e3:e0:
                    d5:61:fb:9f:1e:76:42:bd:63:ca:24:41:9e:2d:19:
                    7e:cd:61:95:e1:53:9b:3a:bf:d1:21:b2:93:4e:1b:
                    4d:01:e6:17:f1:52:43:48:56:8e:0e:f3:4c:df:dd:
                    f1:d6:3d:72:e8:47:a6:ae:f1:1f:4c:22:97:a7:63:
                    58:96:91:07:28:30:dc:a4:d4:a5:aa:7a:f8:19:7c:
                    79:e1:45:64:90:b5:bc:18:1e:78:a3:a6:49:81:95:
                    c8:17:2c:5c:fc:57:f4:45:dc:a2:6c:8a:92:19:d3:
                    d2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F2:F6:DB:26:06:D0:F1:97:74:F5:FA:53:77:DE:D6:28:5D:90:FF
            X509v3 Authority Key Identifier:
                keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:dc:99:da:76:6a:6c:34:a8:f2:a6:91:71:b5:3d:23:0c:d9:
         f0:8e:64:ee:17:df:a3:48:ce:5d:a7:68:d9:47:30:48:0b:07:
         10:28:8e:46:5f:7f:7f:f4:be:35:8f:3a:47:d9:02:29:9c:2c:
         52:72:de:3c:25:cd:a6:53:f1:c4:30:da:bc:b2:95:b4:c1:1f:
         5f:54:8a:59:83:e1:ea:31:20:6d:d7:3e:0b:10:2d:09:e9:ee:
         7e:1b:b8:ad:42:fe:9d:67:76:63:7c:03:7b:b1:f1:f9:fb:12:
         a5:57:0d:58:61:5d:6c:2d:4e:f4:16:bb:bc:de:3e:30:f2:57:
         07:05:21:ec:c3:79:d9:60:aa:a7:2a:af:42:16:51:69:dc:26:
         e2:bd:7c:0d:ed:91:b8:13:5f:6f:84:03:e5:f6:20:05:87:bb:
         48:8f:ba:b7:1b:46:c6:b3:3c:ea:d1:31:20:ee:ab:68:80:66:
         60:a1:9c:8b:6c:aa:e3:85:11:8a:0c:38:e4:c1:4a:b2:d3:31:
         bd:4a:cd:58:09:ad:b2:2e:05:fe:06:3f:a5:76:97:3e:1b:2f:
         a8:2f:1b:c9:7d:bd:1d:c9:13:5a:a2:a9:6e:7a:50:62:b8:e6:
         d6:5f:6f:38:e1:20:aa:26:15:26:bd:20:c7:0a:f5:31:f4:11:
         9c:ba:d9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----