Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
File:                     _1VJGZMcZ70mUPxODHPC-z4ijZU.mft (raw, json)
Hash identifier:          wBxmV+jQ9hg/CtyAiw7/c9FL0+TcdTIg4yesypEoREw=
Subject key identifier:   6D:69:64:07:6F:7E:E4:AC:5F:FC:C6:5B:DA:66:D0:4D:35:1C:20:E9
Authority key identifier: FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95
Certificate issuer:       /CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
Certificate serial:       0197B745587FA6A980F87B50C8D98A500D4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
Manifest number:          15B0
Signing time:             Sat 28 Jun 2025 16:01:04 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:04 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:04 +0000
Files and hashes:         1: _1VJGZMcZ70mUPxODHPC-z4ijZU.crl (hash: JGHrAuJ0GF7SZvQVcAlReL1AbE8HETAHH3n+/BOav0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:58:7f:a6:a9:80:f8:7b:50:c8:d9:8a:50:0d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
        Validity
            Not Before: Jun 28 16:01:04 2025 GMT
            Not After : Jun 29 16:01:04 2025 GMT
        Subject: CN=6d6964076f7ee4ac5ffcc65bda66d04d351c20e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:09:4e:ac:23:ce:6a:8f:b0:fd:f5:54:9e:e7:
                    8f:7e:71:ea:d9:76:72:26:dc:02:dc:e6:df:f0:f0:
                    99:c7:ce:45:6c:1c:8e:37:36:e2:8b:90:d7:1b:3d:
                    f8:b9:aa:de:14:10:00:65:bc:57:cd:ba:46:67:69:
                    e7:3a:ca:a5:fa:9a:76:e5:1f:57:ed:2e:cf:7b:d6:
                    68:ab:7e:4c:5a:6d:df:7d:10:e1:7a:d4:ac:bf:81:
                    d9:21:cb:ce:b0:ea:8c:ef:6a:35:f4:bf:df:ac:78:
                    26:82:c0:13:ed:68:4e:24:17:1e:d4:d2:e4:82:ec:
                    99:71:72:eb:83:7e:83:2f:75:7f:d2:82:48:87:4d:
                    98:df:05:85:e3:05:b3:82:2b:4a:bb:4b:7b:40:db:
                    4b:57:70:89:6a:af:9b:82:dd:56:7c:29:b5:98:01:
                    d9:7b:b6:77:93:49:e6:fe:45:06:81:92:91:5c:f9:
                    d4:20:2f:10:06:34:55:b8:b3:b1:c5:e2:de:46:37:
                    86:d0:37:23:72:81:7e:30:d4:59:b2:21:b4:d3:fd:
                    f2:3d:fc:d2:99:9f:ba:b4:9b:dc:31:06:13:e9:14:
                    f3:9b:58:fd:34:7f:06:c8:1b:96:06:a2:63:9a:b1:
                    25:27:02:62:86:e3:d8:9c:a4:f3:92:5c:ca:7c:88:
                    83:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:69:64:07:6F:7E:E4:AC:5F:FC:C6:5B:DA:66:D0:4D:35:1C:20:E9
            X509v3 Authority Key Identifier:
                keyid:FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:1f:f2:da:04:fa:8b:91:87:81:f0:70:c0:f3:94:16:cb:da:
         28:92:af:72:da:02:54:30:af:6f:18:cd:d2:ec:22:a3:a8:bb:
         d4:7d:41:61:f2:a9:cc:d0:c7:32:b3:ae:21:a8:3e:40:07:ea:
         d9:a4:5f:a2:54:7d:20:fa:90:d2:7d:c0:a9:7b:9e:cb:ee:50:
         ae:93:18:c4:3b:32:f7:0f:2e:c2:e6:dd:40:36:7d:e7:52:4e:
         e6:3b:51:27:fe:37:73:b6:91:b0:3a:cc:42:62:a4:23:f5:5e:
         97:14:bf:41:1b:00:87:f8:0a:32:0c:4c:bd:6b:64:c9:60:98:
         71:81:21:b5:de:01:07:9f:72:aa:9e:f2:73:66:77:9b:e7:05:
         60:8e:36:74:21:5c:aa:b0:3f:6a:91:59:e0:ce:cd:6a:d0:c0:
         2b:ec:79:b9:7f:ca:09:5a:6a:32:23:c7:19:e8:df:3a:3c:12:
         fd:33:fa:3b:93:1f:00:02:01:a8:e2:83:ea:92:20:e0:ed:7d:
         8b:d0:02:51:18:df:11:df:b8:fb:f5:9a:cb:f6:cb:9f:bc:a9:
         ae:28:c4:2a:35:5f:74:22:ca:7c:ed:6f:de:fa:d2:5c:30:34:
         ed:b2:ee:45:be:e1:ec:5b:1b:fc:6d:26:7a:b2:e3:d3:57:dd:
         16:08:e5:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RVh/pqmA+HtQyNmKUA1MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNTU0OTE5OTMxYzY3YmQyNjUwZmM0ZTBjNzNjMmZiM2Uy
MjhkOTUwHhcNMjUwNjI4MTYwMTA0WhcNMjUwNjI5MTYwMTA0WjAzMTEwLwYDVQQD
Eyg2ZDY5NjQwNzZmN2VlNGFjNWZmY2M2NWJkYTY2ZDA0ZDM1MWMyMGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wlOrCPOao+w/fVUnuePfnHq2XZy
JtwC3Obf8PCZx85FbByONzbii5DXGz34uareFBAAZbxXzbpGZ2nnOsql+pp25R9X
7S7Pe9Zoq35MWm3ffRDhetSsv4HZIcvOsOqM72o19L/frHgmgsAT7WhOJBce1NLk
guyZcXLrg36DL3V/0oJIh02Y3wWF4wWzgitKu0t7QNtLV3CJaq+bgt1WfCm1mAHZ
e7Z3k0nm/kUGgZKRXPnUIC8QBjRVuLOxxeLeRjeG0DcjcoF+MNRZsiG00/3yPfzS
mZ+6tJvcMQYT6RTzm1j9NH8GyBuWBqJjmrElJwJihuPYnKTzklzKfIiDxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1pZAdvfuSsX/zGW9pm0E01HCDpMB8GA1UdIwQY
MBaAFP9VSRmTHGe9JlD8Tgxzwvs+Io2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzFWSkdaTWNaNzBtVVB4T0RIUEMtejRpalpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8yMzI0NGQtNDg4Ni00NzBiLWIxZmMt
MjkwYWE0MzE4Y2FhLzEvXzFWSkdaTWNaNzBtVVB4T0RIUEMtejRpalpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8yMzI0NGQtNDg4Ni00NzBiLWIxZmMtMjkwYWE0MzE4Y2Fh
LzEvXzFWSkdaTWNaNzBtVVB4T0RIUEMtejRpalpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmx/y2gT6
i5GHgfBwwPOUFsvaKJKvctoCVDCvbxjN0uwio6i71H1BYfKpzNDHMrOuIag+QAfq
2aRfolR9IPqQ0n3AqXuey+5QrpMYxDsy9w8uwubdQDZ951JO5jtRJ/43c7aRsDrM
QmKkI/VelxS/QRsAh/gKMgxMvWtkyWCYcYEhtd4BB59yqp7yc2Z3m+cFYI42dCFc
qrA/apFZ4M7NatDAK+x5uX/KCVpqMiPHGejfOjwS/TP6O5MfAAIBqOKD6pIg4O19
i9ACURjfEd+4+/Way/bLn7yprijEKjVfdCLKfO1v3vrSXDA07bLuRb7h7Fsb/G0m
erLj01fdFgjleQ==
-----END CERTIFICATE-----