Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
File:                     gPNFqCznFt0-djMXL4cDBH9rfZQ.mft (raw, json)
Hash identifier:          dsBWuDbTcsFop+BAETPhZkqr3sEMIfbzTQqiNTQpaqw=
Subject key identifier:   28:FD:19:DA:62:B8:14:F0:51:55:C0:7C:53:C7:67:5C:23:F4:6F:5A
Authority key identifier: 80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
Certificate issuer:       /CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Certificate serial:       01964F6D460700AFF6B78C69A4A47BBF353A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
Manifest number:          148B
Signing time:             Sat 19 Apr 2025 19:01:23 +0000
Manifest this update:     Sat 19 Apr 2025 19:01:23 +0000
Manifest next update:     Sun 20 Apr 2025 19:01:23 +0000
Files and hashes:         1: gPNFqCznFt0-djMXL4cDBH9rfZQ.crl (hash: vumfIc5nnioqrnoZjgpeqHSXZ4+PKBPEA3kfcDyMIIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6d:46:07:00:af:f6:b7:8c:69:a4:a4:7b:bf:35:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f345a82ce716dd3e7633172f8703047f6b7d94
        Validity
            Not Before: Apr 19 19:01:23 2025 GMT
            Not After : Apr 20 19:01:23 2025 GMT
        Subject: CN=28fd19da62b814f05155c07c53c7675c23f46f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:87:71:18:cd:7f:4c:45:3c:0d:16:a7:fc:5c:
                    fe:e5:8f:61:b1:e9:90:a3:f9:fe:f7:7c:6e:4c:21:
                    8d:28:e0:61:eb:52:16:48:8e:61:c3:e6:25:79:ff:
                    9d:0f:e9:ec:1c:95:c3:11:c5:29:23:1a:b7:f3:b8:
                    a5:46:79:bc:5c:66:d9:d2:d1:db:81:4a:31:75:a0:
                    97:d0:77:53:30:39:0c:9a:3e:27:91:ec:c0:ef:57:
                    81:97:61:f7:75:70:3d:16:7f:5d:9f:7f:17:11:1e:
                    fe:96:06:91:a1:87:aa:33:fa:a6:d3:3a:8b:dc:4d:
                    3a:14:c0:09:6a:03:11:04:14:6d:bd:68:4d:94:c1:
                    ef:e1:b3:e7:07:e7:99:7d:15:c6:b6:9d:ae:87:60:
                    51:32:2e:58:b7:43:3e:93:85:26:75:c6:90:bd:3d:
                    e1:d8:0f:fb:d8:93:ad:13:f6:fd:be:36:b7:62:07:
                    7a:13:51:e7:10:78:de:a8:66:f0:cb:e2:45:d5:99:
                    dc:4e:3d:62:10:ce:35:1e:cd:c0:9f:46:90:41:b7:
                    5c:4b:05:94:ea:d5:fd:76:b8:42:f3:ee:01:94:4c:
                    89:24:53:d7:c8:cc:66:7e:3a:56:c9:7d:15:35:df:
                    c9:d4:82:bc:4d:1e:c5:7d:df:94:23:e2:7b:ac:91:
                    07:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FD:19:DA:62:B8:14:F0:51:55:C0:7C:53:C7:67:5C:23:F4:6F:5A
            X509v3 Authority Key Identifier:
                keyid:80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:4b:75:3b:eb:fb:3f:0b:f2:a4:69:05:98:b0:65:08:60:22:
         ef:7c:ab:e3:b5:7f:69:49:a5:65:df:cd:b4:9c:8f:c2:3e:d2:
         10:22:5c:14:6b:65:5c:57:3a:7d:c5:37:d5:c6:1c:5d:49:1a:
         04:6c:7e:b5:0c:31:f2:d9:e4:ee:0f:67:69:bc:59:de:14:c4:
         f2:2f:03:33:a0:16:e4:dc:4b:21:17:a3:35:7c:e0:28:bf:f3:
         a4:2c:eb:15:d1:be:06:38:c2:75:b0:b2:3c:66:10:a5:07:e1:
         94:37:1f:a1:7e:aa:83:ff:fb:67:2e:3b:62:51:1e:97:3d:ec:
         e5:6e:f1:ae:72:d2:39:61:57:b7:65:9f:18:41:f6:64:df:13:
         8e:e3:a9:27:16:8b:9c:d5:43:da:4e:d9:32:c7:ab:d6:da:24:
         75:04:43:54:46:39:08:5d:54:96:76:cb:2b:6f:e6:a0:e2:18:
         36:bb:5c:11:dc:2e:0a:b0:8d:fe:f7:11:07:53:cb:3f:8a:c5:
         07:e9:44:25:09:40:2c:e0:21:d3:3f:ee:cb:4e:3e:c5:6a:6b:
         35:c9:8c:c7:d5:e6:e0:24:0f:aa:ed:fe:f0:da:ff:af:73:84:
         45:25:a0:2b:38:89:6a:3f:0a:e8:78:f5:17:3e:1e:de:53:08:
         8f:e9:cf:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbUYHAK/2t4xppKR7vzU6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZjM0NWE4MmNlNzE2ZGQzZTc2MzMxNzJmODcwMzA0N2Y2
YjdkOTQwHhcNMjUwNDE5MTkwMTIzWhcNMjUwNDIwMTkwMTIzWjAzMTEwLwYDVQQD
EygyOGZkMTlkYTYyYjgxNGYwNTE1NWMwN2M1M2M3Njc1YzIzZjQ2ZjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkodxGM1/TEU8DRan/Fz+5Y9hsemQ
o/n+93xuTCGNKOBh61IWSI5hw+Ylef+dD+nsHJXDEcUpIxq387ilRnm8XGbZ0tHb
gUoxdaCX0HdTMDkMmj4nkezA71eBl2H3dXA9Fn9dn38XER7+lgaRoYeqM/qm0zqL
3E06FMAJagMRBBRtvWhNlMHv4bPnB+eZfRXGtp2uh2BRMi5Yt0M+k4UmdcaQvT3h
2A/72JOtE/b9vja3Ygd6E1HnEHjeqGbwy+JF1ZncTj1iEM41Hs3An0aQQbdcSwWU
6tX9drhC8+4BlEyJJFPXyMxmfjpWyX0VNd/J1IK8TR7Ffd+UI+J7rJEHJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCj9GdpiuBTwUVXAfFPHZ1wj9G9aMB8GA1UdIwQY
MBaAFIDzRags5xbdPnYzFy+HAwR/a32UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BORnFDem5GdDAtZGpNWEw0Y0RCSDlyZlpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wOTEzMzAtNWY4My00YWQxLTllMTAt
NzRjNWRiN2MwOTNhLzEvZ1BORnFDem5GdDAtZGpNWEw0Y0RCSDlyZlpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8wOTEzMzAtNWY4My00YWQxLTllMTAtNzRjNWRiN2MwOTNh
LzEvZ1BORnFDem5GdDAtZGpNWEw0Y0RCSDlyZlpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr0t1O+v7
PwvypGkFmLBlCGAi73yr47V/aUmlZd/NtJyPwj7SECJcFGtlXFc6fcU31cYcXUka
BGx+tQwx8tnk7g9nabxZ3hTE8i8DM6AW5NxLIRejNXzgKL/zpCzrFdG+BjjCdbCy
PGYQpQfhlDcfoX6qg//7Zy47YlEelz3s5W7xrnLSOWFXt2WfGEH2ZN8TjuOpJxaL
nNVD2k7ZMser1tokdQRDVEY5CF1UlnbLK2/moOIYNrtcEdwuCrCN/vcRB1PLP4rF
B+lEJQlALOAh0z/uy04+xWprNcmMx9Xm4CQPqu3+8Nr/r3OERSWgKziJaj8K6Hj1
Fz4e3lMIj+nPQg==
-----END CERTIFICATE-----