Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
File:                     mYf1lRU_EX4prIkHh2ZWpLin7GI.mft (raw, json)
Hash identifier:          aw/JvCgQRecsWZ4v/M7078mtVJ+9wsR6szoreiBir7E=
Subject key identifier:   1A:A7:61:1E:19:A0:0F:8F:32:55:6F:A0:7D:1E:19:FD:D7:52:0A:E5
Authority key identifier: 99:87:F5:95:15:3F:11:7E:29:AC:89:07:87:66:56:A4:B8:A7:EC:62
Certificate issuer:       /CN=9987f595153f117e29ac8907876656a4b8a7ec62
Certificate serial:       0197B7EAABA1707C0A22D368666336CDD09E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
Manifest number:          109D
Signing time:             Sat 28 Jun 2025 19:01:39 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:39 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:39 +0000
Files and hashes:         1: mYf1lRU_EX4prIkHh2ZWpLin7GI.crl (hash: /fmziUgbN/T5Jx1fBGX5pgCar4X1qlWnFE55VTiCY70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:ab:a1:70:7c:0a:22:d3:68:66:63:36:cd:d0:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9987f595153f117e29ac8907876656a4b8a7ec62
        Validity
            Not Before: Jun 28 19:01:39 2025 GMT
            Not After : Jun 29 19:01:39 2025 GMT
        Subject: CN=1aa7611e19a00f8f32556fa07d1e19fdd7520ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:af:dd:c1:b2:8e:7b:dc:ad:aa:ef:4d:8a:40:
                    5d:c9:a7:d8:c7:53:d7:38:a5:a6:0d:95:4c:ef:26:
                    65:72:4f:0e:d3:8d:88:7e:84:b2:4e:9a:03:09:17:
                    9f:f8:56:41:1a:09:8e:4b:5f:a0:86:3b:b6:f3:3c:
                    6f:76:34:59:a1:4a:4e:40:5a:a2:73:a4:61:1c:17:
                    52:13:48:cb:18:3d:0b:c2:4d:1a:3f:d3:ce:ec:df:
                    3d:b6:e6:fa:c5:8c:23:0b:df:e9:db:43:02:2a:cb:
                    bd:0a:d9:1d:28:f0:ec:da:b0:de:b2:56:d5:66:14:
                    8a:d3:76:34:92:42:82:14:ba:0a:67:c4:3e:84:f4:
                    c5:d7:32:55:9e:1a:de:2b:78:71:5e:ac:90:07:73:
                    ef:b9:c0:a8:a8:06:ad:f5:84:7f:0a:96:5f:05:92:
                    8c:e2:cd:52:d3:45:51:90:02:e1:16:3a:49:77:9b:
                    dd:c3:64:d0:70:4e:69:b9:25:1c:45:d4:27:cd:1b:
                    c3:ff:79:d0:59:34:c9:8c:0f:c8:39:1c:e9:81:b5:
                    c8:c5:20:63:9a:da:ea:f9:84:48:76:a6:d7:f8:c3:
                    f5:a1:52:21:3b:df:ce:8b:8c:72:0a:c1:d5:b0:42:
                    3c:21:bd:e4:e2:e4:7e:7d:0e:1a:81:3a:a0:71:0a:
                    6c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A7:61:1E:19:A0:0F:8F:32:55:6F:A0:7D:1E:19:FD:D7:52:0A:E5
            X509v3 Authority Key Identifier:
                keyid:99:87:F5:95:15:3F:11:7E:29:AC:89:07:87:66:56:A4:B8:A7:EC:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:43:05:b3:66:3e:b2:bc:5d:66:fa:c7:41:9a:fa:1b:a2:29:
         9f:35:a1:56:62:ad:b9:7a:cd:66:8a:eb:37:77:11:5c:8d:fb:
         8c:e4:50:14:52:65:15:85:13:cf:32:e7:7a:e0:5d:49:1d:58:
         88:6d:4d:d1:24:da:6e:db:0f:e4:2c:ba:c6:34:2e:3d:0d:1e:
         9f:2a:25:21:96:f1:71:e7:01:62:aa:88:d4:49:a8:fc:a2:4b:
         d4:57:69:f0:4b:fb:11:27:19:4c:29:c4:06:ec:cf:8e:ba:ef:
         4e:3f:63:3e:6a:0a:68:0e:4e:76:93:01:6f:e5:80:2a:a3:e7:
         19:89:e1:52:d3:09:ef:79:1c:01:77:7d:c2:4a:f1:be:75:a9:
         d2:f6:8f:05:7a:c5:47:53:05:bb:3b:35:2c:54:04:a7:de:10:
         98:16:8a:fc:fd:b5:2e:ed:c3:0e:ea:d5:b5:ed:3e:a5:d2:3d:
         d2:0c:a7:5b:c9:5f:f3:9e:11:f6:0d:46:ec:68:3a:08:18:29:
         ae:95:f6:2a:3d:f8:64:05:9e:71:85:63:1c:ad:64:69:dc:9b:
         18:19:19:20:ef:e8:9d:49:a5:e9:34:50:29:3d:7b:f5:24:35:
         2d:54:46:e4:81:11:67:b5:a3:ce:32:e5:4b:a6:f2:bd:fd:57:
         3d:e3:8a:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36quhcHwKItNoZmM2zdCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ODdmNTk1MTUzZjExN2UyOWFjODkwNzg3NjY1NmE0Yjhh
N2VjNjIwHhcNMjUwNjI4MTkwMTM5WhcNMjUwNjI5MTkwMTM5WjAzMTEwLwYDVQQD
EygxYWE3NjExZTE5YTAwZjhmMzI1NTZmYTA3ZDFlMTlmZGQ3NTIwYWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta/dwbKOe9ytqu9NikBdyafYx1PX
OKWmDZVM7yZlck8O042IfoSyTpoDCRef+FZBGgmOS1+ghju28zxvdjRZoUpOQFqi
c6RhHBdSE0jLGD0Lwk0aP9PO7N89tub6xYwjC9/p20MCKsu9CtkdKPDs2rDeslbV
ZhSK03Y0kkKCFLoKZ8Q+hPTF1zJVnhreK3hxXqyQB3PvucCoqAat9YR/CpZfBZKM
4s1S00VRkALhFjpJd5vdw2TQcE5puSUcRdQnzRvD/3nQWTTJjA/IORzpgbXIxSBj
mtrq+YRIdqbX+MP1oVIhO9/Oi4xyCsHVsEI8Ib3k4uR+fQ4agTqgcQps/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqnYR4ZoA+PMlVvoH0eGf3XUgrlMB8GA1UdIwQY
MBaAFJmH9ZUVPxF+KayJB4dmVqS4p+xiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVlmMWxSVV9FWDRwcklrSGgyWldwTGluN0dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zNTc0OTItMDdhYi00MTM4LTg0MjYt
YjE2NzRhMzcxNTNiLzEvbVlmMWxSVV9FWDRwcklrSGgyWldwTGluN0dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8zNTc0OTItMDdhYi00MTM4LTg0MjYtYjE2NzRhMzcxNTNi
LzEvbVlmMWxSVV9FWDRwcklrSGgyWldwTGluN0dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUMFs2Y+
srxdZvrHQZr6G6IpnzWhVmKtuXrNZorrN3cRXI37jORQFFJlFYUTzzLneuBdSR1Y
iG1N0STabtsP5Cy6xjQuPQ0enyolIZbxcecBYqqI1Emo/KJL1Fdp8Ev7EScZTCnE
BuzPjrrvTj9jPmoKaA5OdpMBb+WAKqPnGYnhUtMJ73kcAXd9wkrxvnWp0vaPBXrF
R1MFuzs1LFQEp94QmBaK/P21Lu3DDurVte0+pdI90gynW8lf854R9g1G7Gg6CBgp
rpX2Kj34ZAWecYVjHK1kadybGBkZIO/onUml6TRQKT179SQ1LVRG5IERZ7WjzjLl
S6byvf1XPeOK4A==
-----END CERTIFICATE-----