Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
File:                     ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft (raw, json)
Hash identifier:          QZMkt5dMqpUtxx5h70MOc43HM6WFMwxVoXYl9znsmOE=
Subject key identifier:   2A:2F:AC:0D:AF:7D:7C:99:8D:65:CC:3A:46:81:17:40:85:07:C2:75
Authority key identifier: 01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
Certificate issuer:       /CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Certificate serial:       019769616F09995394A5B0FE0862E9EF2A69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
Manifest number:          11C4
Signing time:             Fri 13 Jun 2025 13:01:22 +0000
Manifest this update:     Fri 13 Jun 2025 13:01:22 +0000
Manifest next update:     Sat 14 Jun 2025 13:01:22 +0000
Files and hashes:         1: ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl (hash: NSve5WIbh8LOHEz8qEfdM563H9RMRr2j40VJOw3/B1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:6f:09:99:53:94:a5:b0:fe:08:62:e9:ef:2a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
        Validity
            Not Before: Jun 13 13:01:22 2025 GMT
            Not After : Jun 14 13:01:22 2025 GMT
        Subject: CN=2a2fac0daf7d7c998d65cc3a468117408507c275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f5:c4:62:e7:14:25:96:1f:2b:e6:a9:43:ff:
                    2d:f5:08:62:49:8f:b9:87:ee:10:bb:3b:7d:04:9e:
                    1a:90:99:d6:ed:64:f8:48:84:5c:a6:97:b9:ad:76:
                    3b:ca:e4:a6:55:a9:f0:e0:93:b4:72:6f:87:38:4c:
                    2b:e0:cf:f2:aa:7a:d0:97:0c:a2:85:c4:6d:40:5e:
                    86:db:65:0a:7c:38:ee:55:76:49:0a:19:d3:1d:f8:
                    35:59:d5:a3:fc:b3:74:05:6d:61:71:d8:a7:4f:ae:
                    eb:d7:12:5d:97:a0:b7:1c:8b:68:12:89:2b:c7:fb:
                    6c:07:95:95:c6:33:4b:0d:f4:1f:e3:1f:f8:f5:b4:
                    23:de:84:ee:96:30:8d:33:79:5d:3b:b9:d5:ce:55:
                    3c:7d:7f:71:2e:cb:71:4c:40:3a:93:12:d1:74:b5:
                    f1:71:f8:b8:ad:41:af:28:7c:3f:2c:07:8e:f6:d4:
                    ee:65:1c:6d:d8:c6:96:c8:f1:24:5d:53:b4:42:4d:
                    07:12:34:40:9f:0e:a8:b4:f7:d8:c5:53:b8:86:dd:
                    0a:19:77:b5:b6:4d:df:46:70:f7:31:ab:30:b8:59:
                    0f:86:c0:3f:d9:85:a7:93:7f:56:a9:62:1e:1f:16:
                    26:fa:a7:75:d8:a4:cd:40:e1:13:8e:8b:1e:66:6c:
                    dc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2F:AC:0D:AF:7D:7C:99:8D:65:CC:3A:46:81:17:40:85:07:C2:75
            X509v3 Authority Key Identifier:
                keyid:01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:eb:6f:80:98:59:58:ae:d2:74:2b:b5:f7:04:05:13:74:d9:
         96:30:2a:a3:85:83:3b:97:e1:49:ae:51:a2:42:7f:87:98:03:
         62:23:0a:27:95:04:a2:66:ec:fe:15:61:96:fa:e5:f6:52:e5:
         d6:5a:30:ca:3c:57:3d:82:1f:b9:4d:08:63:83:9c:f1:07:36:
         d3:e8:cf:dc:84:10:7f:69:ae:bd:0b:a3:47:eb:64:bf:ce:a2:
         ac:f0:08:89:79:20:c6:16:86:cb:1c:72:9d:ba:d6:ae:84:4e:
         ec:e0:17:df:b0:e4:37:b7:3e:8a:da:ec:07:f2:62:bf:d3:e7:
         fe:64:81:a1:91:22:25:e0:42:07:f3:5d:ef:bb:6e:19:e8:75:
         1e:f7:e6:7e:ca:6f:ff:ab:40:8d:43:ed:3e:21:ec:40:de:02:
         ca:e4:7e:35:89:4e:d2:f9:76:37:e2:2d:cf:4a:e8:63:22:ba:
         7a:4b:cd:b6:3c:51:37:ef:11:5c:af:2b:ea:e1:fa:6f:30:e9:
         3f:dd:26:62:4f:cd:5f:13:b8:0a:f6:40:d6:63:dd:94:da:b7:
         b1:b8:5e:45:b3:08:16:f8:31:8c:4f:52:36:16:6c:62:e3:2c:
         36:76:0f:1a:ad:fe:99:7b:15:30:50:fb:a8:25:0d:b4:ac:f9:
         2e:07:8b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----