Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft
File:                     meB6Mav-wkkJsYhGOEb99lWHJCM.mft (raw, json)
Hash identifier:          PpTw5OuhiSDXtUS7TnwFU6n+OGPJdKwfDx3Wu01MU2Y=
Subject key identifier:   69:F4:A9:90:5F:67:C0:E9:8A:BE:73:D0:39:71:A0:7C:FE:2F:FE:7C
Authority key identifier: 99:E0:7A:31:AB:FE:C2:49:09:B1:88:46:38:46:FD:F6:55:87:24:23
Certificate issuer:       /CN=99e07a31abfec24909b188463846fdf655872423
Certificate serial:       019643D6E24B3D80EEEAE6015C40FFF78530
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft
Manifest number:          10D7
Signing time:             Thu 17 Apr 2025 13:01:18 +0000
Manifest this update:     Thu 17 Apr 2025 13:01:18 +0000
Manifest next update:     Fri 18 Apr 2025 13:01:18 +0000
Files and hashes:         1: meB6Mav-wkkJsYhGOEb99lWHJCM.crl (hash: OZ2U3QwFpKdDZV+Pd+91AlXvQKQ1EfrQeF7ao2Wh4RM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:43:d6:e2:4b:3d:80:ee:ea:e6:01:5c:40:ff:f7:85:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99e07a31abfec24909b188463846fdf655872423
        Validity
            Not Before: Apr 17 13:01:18 2025 GMT
            Not After : Apr 18 13:01:18 2025 GMT
        Subject: CN=69f4a9905f67c0e98abe73d03971a07cfe2ffe7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bd:68:99:4d:aa:ec:70:e2:01:ee:33:54:ca:
                    41:75:fb:57:88:70:56:91:7d:30:d2:57:e6:51:00:
                    c0:ba:06:df:0a:54:e5:2f:f3:49:3e:ad:65:b6:40:
                    3e:0a:d5:52:4a:17:63:1f:c9:e2:4d:e0:70:63:36:
                    88:c2:71:7f:2b:82:b8:2b:c7:c9:50:f1:6a:57:fb:
                    03:f2:8e:dd:06:8f:5a:b1:f1:3f:73:e0:4d:b7:6b:
                    5b:f1:46:8e:f3:3e:b8:05:37:82:6d:72:eb:e0:c7:
                    8d:3a:74:81:75:20:1d:e0:10:b7:66:25:70:7a:b3:
                    16:56:c4:bc:8d:66:13:ae:4f:6e:df:6a:b7:5b:48:
                    e7:23:d4:75:98:66:8e:cf:70:61:26:a3:06:fe:5f:
                    8d:1b:57:a7:a8:6c:24:34:03:56:00:c4:cb:c2:bc:
                    78:ae:a9:75:33:26:bb:0b:c7:ce:f6:c0:37:9a:1c:
                    32:d2:89:07:b2:15:79:c8:b7:31:a2:06:e0:a0:d8:
                    dc:fc:f4:43:a4:68:01:d7:4d:bf:58:1c:0c:fe:fa:
                    69:23:f5:cc:49:ae:45:20:b0:3e:a4:73:01:25:54:
                    e2:4c:94:1b:7e:c1:e5:cd:61:b6:41:ec:a2:19:b9:
                    e7:cf:40:cf:9f:ee:c1:84:11:77:d9:ba:be:a7:74:
                    f2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F4:A9:90:5F:67:C0:E9:8A:BE:73:D0:39:71:A0:7C:FE:2F:FE:7C
            X509v3 Authority Key Identifier:
                keyid:99:E0:7A:31:AB:FE:C2:49:09:B1:88:46:38:46:FD:F6:55:87:24:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:c8:a0:67:f0:1e:18:39:64:d2:04:e2:48:fd:2f:90:b9:93:
         80:8f:d9:af:2a:5a:88:2d:0a:0e:e5:79:2b:63:f9:6b:3d:af:
         53:bb:18:83:cd:4f:cc:29:fd:a2:97:0b:02:57:f3:59:6c:9d:
         8e:19:77:6c:dd:49:0f:d5:77:4c:ea:7c:42:49:9c:d1:27:07:
         53:e1:91:bb:6e:eb:17:65:5f:f8:6f:a4:9d:ec:07:2e:1f:cc:
         5c:8f:b8:c9:3a:79:64:0f:19:2d:22:23:31:7f:1a:1e:5e:9b:
         b2:e8:f4:0e:aa:2a:af:e0:aa:42:a3:58:e0:b1:4b:48:40:1b:
         be:65:cf:29:2b:c7:30:91:9d:b3:11:15:f9:e4:8d:d7:fe:41:
         88:e6:e1:19:66:d4:81:ab:74:de:9a:db:b1:f2:62:6f:b6:a3:
         b1:e4:b3:3c:03:0a:ae:4e:81:c1:33:a1:9b:b7:2b:34:bc:6b:
         f6:69:a2:df:37:c3:37:74:e5:a2:c3:78:72:5e:fa:16:41:67:
         da:bd:7e:f2:4d:a3:73:f8:8f:d7:04:1b:df:95:24:51:75:c5:
         2a:12:8a:2b:ac:64:52:10:d6:53:e7:dd:7c:4d:de:62:87:e5:
         4c:e7:16:80:a5:24:cc:5b:53:e2:e4:65:f1:5a:01:75:c1:df:
         b6:26:f5:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZD1uJLPYDu6uYBXED/94UwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZTA3YTMxYWJmZWMyNDkwOWIxODg0NjM4NDZmZGY2NTU4
NzI0MjMwHhcNMjUwNDE3MTMwMTE4WhcNMjUwNDE4MTMwMTE4WjAzMTEwLwYDVQQD
Eyg2OWY0YTk5MDVmNjdjMGU5OGFiZTczZDAzOTcxYTA3Y2ZlMmZmZTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu71omU2q7HDiAe4zVMpBdftXiHBW
kX0w0lfmUQDAugbfClTlL/NJPq1ltkA+CtVSShdjH8niTeBwYzaIwnF/K4K4K8fJ
UPFqV/sD8o7dBo9asfE/c+BNt2tb8UaO8z64BTeCbXLr4MeNOnSBdSAd4BC3ZiVw
erMWVsS8jWYTrk9u32q3W0jnI9R1mGaOz3BhJqMG/l+NG1enqGwkNANWAMTLwrx4
rql1Mya7C8fO9sA3mhwy0okHshV5yLcxogbgoNjc/PRDpGgB102/WBwM/vppI/XM
Sa5FILA+pHMBJVTiTJQbfsHlzWG2QeyiGbnnz0DPn+7BhBF32bq+p3TyxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGn0qZBfZ8Dpir5z0DlxoHz+L/58MB8GA1UdIwQY
MBaAFJngejGr/sJJCbGIRjhG/fZVhyQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWVCNk1hdi13a2tKc1loR09FYjk5bFdISkNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81YTJkYTgtMTVjNy00YmQ5LTk3NmQt
MjE2MjQ1OGVhY2U1LzEvbWVCNk1hdi13a2tKc1loR09FYjk5bFdISkNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS81YTJkYTgtMTVjNy00YmQ5LTk3NmQtMjE2MjQ1OGVhY2U1
LzEvbWVCNk1hdi13a2tKc1loR09FYjk5bFdISkNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMigZ/Ae
GDlk0gTiSP0vkLmTgI/ZrypaiC0KDuV5K2P5az2vU7sYg81PzCn9opcLAlfzWWyd
jhl3bN1JD9V3TOp8Qkmc0ScHU+GRu27rF2Vf+G+knewHLh/MXI+4yTp5ZA8ZLSIj
MX8aHl6bsuj0Dqoqr+CqQqNY4LFLSEAbvmXPKSvHMJGdsxEV+eSN1/5BiObhGWbU
gat03prbsfJib7ajseSzPAMKrk6BwTOhm7crNLxr9mmi3zfDN3TlosN4cl76FkFn
2r1+8k2jc/iP1wQb35UkUXXFKhKKK6xkUhDWU+fdfE3eYoflTOcWgKUkzFtT4uRl
8VoBdcHftib1zw==
-----END CERTIFICATE-----