Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
File:                     me-7KxZTQig3k33SfeNU5o-eAaM.mft (raw, json)
Hash identifier:          G47g8pFAwMlqTbkwtqjPpi2bFRW9WFDLIPvpCgQ9PYg=
Subject key identifier:   05:7E:4F:F6:A0:11:00:71:74:CD:0E:5A:FD:EC:42:1B:AB:E4:E2:E6
Authority key identifier: 99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3
Certificate issuer:       /CN=99efbb2b1653422837937dd27de354e68f9e01a3
Certificate serial:       019848C0937E6469DA05F955E8E0B45F0993
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
Manifest number:          15FF
Signing time:             Sat 26 Jul 2025 22:00:36 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:36 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:36 +0000
Files and hashes:         1: me-7KxZTQig3k33SfeNU5o-eAaM.crl (hash: aedxWi8+LjN5rGutTb3ZxmxTnxJ0OIW73rPWgh0n0Gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:93:7e:64:69:da:05:f9:55:e8:e0:b4:5f:09:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99efbb2b1653422837937dd27de354e68f9e01a3
        Validity
            Not Before: Jul 26 22:00:36 2025 GMT
            Not After : Jul 27 22:00:36 2025 GMT
        Subject: CN=057e4ff6a011007174cd0e5afdec421babe4e2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9b:68:19:e3:11:13:e2:c8:c1:d5:03:ef:01:
                    6f:63:66:05:16:ae:a2:7e:16:a9:4d:71:c3:f2:58:
                    dd:08:2b:3e:ca:79:1a:87:e7:88:eb:90:ac:f0:5a:
                    a5:05:2d:a9:2a:f5:2d:38:87:6c:63:09:46:63:fc:
                    d8:5d:3e:03:29:e3:6e:3b:93:87:5a:0a:7f:49:03:
                    31:98:73:81:29:7e:d2:3a:69:03:b8:91:20:53:d9:
                    e2:9a:c7:00:60:e8:5e:2a:14:99:1c:33:18:ab:33:
                    9d:ab:c7:f7:2e:51:b7:f3:e9:34:ae:06:13:8b:1d:
                    1d:6f:eb:3f:f6:d0:81:71:61:42:38:25:69:ad:6d:
                    77:99:4b:9c:87:bc:3b:19:58:f1:f7:db:9e:e8:b3:
                    e5:83:18:61:26:9d:72:ec:f3:8c:6f:ff:d8:b2:d7:
                    cc:5f:7e:37:da:06:27:c9:9b:0a:6a:38:1f:74:1b:
                    4a:9b:75:00:d4:51:e6:eb:3b:68:5a:b1:d9:63:b2:
                    1e:f8:9d:7d:26:e3:d9:57:50:a7:2f:6e:c4:c4:7c:
                    9e:d5:c9:32:63:6c:4c:7a:1e:bf:b1:03:47:4e:8a:
                    cb:77:a6:3f:73:b7:78:f3:04:1f:3b:00:bd:17:65:
                    4a:07:50:a2:60:04:c4:24:5f:3e:75:19:eb:8c:df:
                    97:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7E:4F:F6:A0:11:00:71:74:CD:0E:5A:FD:EC:42:1B:AB:E4:E2:E6
            X509v3 Authority Key Identifier:
                keyid:99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:42:80:b3:82:8c:96:b6:0f:66:10:9f:df:6b:3a:43:e5:32:
         5d:54:56:ca:da:b8:b1:6c:ff:fe:55:1a:bb:15:d7:bb:b3:d0:
         f1:59:20:07:c9:b8:21:d9:7d:7b:ac:d9:2a:a9:8b:2c:40:b0:
         ce:04:46:9f:4b:24:97:4c:bc:de:15:8d:e3:9c:2a:9e:b4:34:
         fa:d2:ec:3d:b8:88:21:e1:82:b7:6f:ab:cd:87:84:29:69:cd:
         19:88:72:77:94:69:2f:f3:50:79:c2:79:8d:c3:c6:cd:ac:54:
         13:7e:3f:7c:e5:59:14:ad:9a:25:d9:bc:84:74:d5:a0:4e:ae:
         5c:dc:f6:d2:60:9b:19:52:82:c6:42:96:aa:f8:55:cc:59:80:
         14:a8:f9:f2:1d:1e:7d:12:fd:e2:14:07:24:ae:dc:04:73:60:
         a7:ea:b8:df:15:04:5f:34:62:3d:da:51:86:4d:c1:cc:a3:3c:
         08:27:f2:75:a3:37:8a:0d:2a:a4:6f:d3:55:f5:5d:ff:74:e8:
         bb:4b:b3:23:d1:b0:4f:90:0b:44:9d:49:06:29:01:c6:00:be:
         e8:b6:05:f4:aa:74:fc:ec:a1:bd:34:39:25:a5:8e:b5:f7:e3:
         18:c5:b1:d4:12:6c:e0:6d:b9:cd:df:50:5a:bb:0b:41:94:c5:
         6a:5f:cf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----