Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
File:                     E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft (raw, json)
Hash identifier:          wgQUuADHSpI0NMcVqnh+4fkPO1fmAFPl5htQ3wvnwPQ=
Subject key identifier:   1D:A1:01:B8:36:D5:59:80:9F:30:B5:C1:D0:94:D3:87:65:49:87:F8
Authority key identifier: 13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
Certificate issuer:       /CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Certificate serial:       0197B7B31211E0210D84FAEE5F98EDC8F291
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
Manifest number:          0537
Signing time:             Sat 28 Jun 2025 18:00:55 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:55 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:55 +0000
Files and hashes:         1: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl (hash: G2BLGVwaOFCtbN1UbKCUtswXsZexEr/+KmDl25Z72IU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:12:11:e0:21:0d:84:fa:ee:5f:98:ed:c8:f2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
        Validity
            Not Before: Jun 28 18:00:55 2025 GMT
            Not After : Jun 29 18:00:55 2025 GMT
        Subject: CN=1da101b836d559809f30b5c1d094d387654987f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:41:98:28:df:c6:25:cb:8e:90:2e:d1:c9:17:
                    74:ef:33:8e:e7:78:47:ab:ad:39:08:93:00:c6:12:
                    e2:cb:e4:cb:85:70:fa:8d:51:5b:4c:8c:3a:79:cd:
                    4a:1f:bd:f9:69:a7:8c:8f:05:35:6e:5c:8b:3f:ee:
                    b1:e0:87:51:a1:f7:a3:30:e8:84:af:69:f0:e0:c7:
                    3c:41:51:0e:67:05:92:8a:3b:9b:58:b2:34:45:3b:
                    f8:0b:b7:3f:c1:77:ae:cb:aa:32:36:9f:b0:be:51:
                    90:bf:5c:b9:90:b2:a4:55:97:aa:0a:f9:11:85:e7:
                    5b:21:e2:1c:af:7d:ff:af:d1:b7:81:81:3f:cf:b8:
                    44:19:5a:8d:e7:b7:66:8f:19:2d:79:08:46:8e:f0:
                    94:c2:13:87:a3:21:de:1e:51:dd:38:0b:e3:d3:3f:
                    91:45:e0:b2:ee:fd:b0:7c:df:d2:83:a3:31:04:47:
                    13:cd:58:18:07:96:4c:a9:64:16:94:ae:3b:fa:2e:
                    a3:50:3b:fb:3d:20:0b:0a:39:51:e4:26:f5:5c:ff:
                    01:7b:4d:9b:43:2a:70:8c:fe:63:4a:a2:f6:51:7f:
                    36:d2:af:1b:55:38:18:d2:df:46:0b:88:9f:3f:b4:
                    3e:f7:c9:74:0a:38:42:51:9f:1d:f0:29:af:ee:c4:
                    f7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A1:01:B8:36:D5:59:80:9F:30:B5:C1:D0:94:D3:87:65:49:87:F8
            X509v3 Authority Key Identifier:
                keyid:13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:18:6d:3a:6c:46:5f:fa:31:df:48:7e:86:d1:ca:b3:b5:be:
         20:6c:09:58:34:68:62:b1:1f:b6:b5:62:a5:06:e6:2a:c5:57:
         9f:f3:cf:fc:f3:ee:e4:e9:fa:fe:b9:b9:b8:af:68:82:2a:4f:
         c4:2b:b0:3d:98:35:6c:71:7a:8e:d1:60:35:c3:8f:b2:ca:87:
         25:41:a9:58:b3:9f:9a:81:7d:0a:f7:be:13:7e:2c:55:42:a9:
         5b:a3:f3:9e:8b:e0:69:bc:94:af:da:e3:ce:bb:da:ef:b4:14:
         0f:c5:63:71:ec:b9:d4:e8:cf:63:f2:dc:b3:c0:d0:76:c9:35:
         b7:36:9d:60:b9:52:ee:ea:58:8e:78:87:26:e7:19:dd:eb:67:
         45:d9:5d:f0:45:68:46:24:f5:13:b5:cc:54:b3:61:79:28:f9:
         e1:27:ad:1f:0a:1f:1e:de:f2:24:73:0e:64:79:ca:eb:84:6f:
         ad:94:74:ed:6d:58:67:a3:02:82:ba:69:30:41:6a:ec:4c:6b:
         f6:27:47:6c:1d:c0:3b:6e:3f:e4:ee:06:a9:8c:79:72:e9:e5:
         5c:eb:40:ae:1c:c7:17:10:92:85:0d:3f:11:c0:bf:6b:77:6d:
         8c:78:05:64:34:56:55:47:4d:85:99:c4:81:4e:a1:2e:b5:ec:
         55:5e:27:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3sxIR4CENhPruX5jtyPKRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzQzZDMwN2E4YjcyYWM1MzJmNGNkODgzZjBjOTQyYmFk
MGY0YmUwHhcNMjUwNjI4MTgwMDU1WhcNMjUwNjI5MTgwMDU1WjAzMTEwLwYDVQQD
EygxZGExMDFiODM2ZDU1OTgwOWYzMGI1YzFkMDk0ZDM4NzY1NDk4N2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkGYKN/GJcuOkC7RyRd07zOO53hH
q605CJMAxhLiy+TLhXD6jVFbTIw6ec1KH735aaeMjwU1blyLP+6x4IdRofejMOiE
r2nw4Mc8QVEOZwWSijubWLI0RTv4C7c/wXeuy6oyNp+wvlGQv1y5kLKkVZeqCvkR
hedbIeIcr33/r9G3gYE/z7hEGVqN57dmjxkteQhGjvCUwhOHoyHeHlHdOAvj0z+R
ReCy7v2wfN/Sg6MxBEcTzVgYB5ZMqWQWlK47+i6jUDv7PSALCjlR5Cb1XP8Be02b
QypwjP5jSqL2UX820q8bVTgY0t9GC4ifP7Q+98l0CjhCUZ8d8Cmv7sT3nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2hAbg21VmAnzC1wdCU04dlSYf4MB8GA1UdIwQY
MBaAFBN0PTB6i3KsUy9M2IPwyUK60PS+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNROU1IcUxjcXhUTDB6WWdfREpRcnJROUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC83ZTE1YzgtOTYzMS00ODM3LWEwNWQt
NDc3ZDFlOWE0MGI4LzEvRTNROU1IcUxjcXhUTDB6WWdfREpRcnJROUw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC83ZTE1YzgtOTYzMS00ODM3LWEwNWQtNDc3ZDFlOWE0MGI4
LzEvRTNROU1IcUxjcXhUTDB6WWdfREpRcnJROUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghhtOmxG
X/ox30h+htHKs7W+IGwJWDRoYrEftrVipQbmKsVXn/PP/PPu5On6/rm5uK9ogipP
xCuwPZg1bHF6jtFgNcOPssqHJUGpWLOfmoF9Cve+E34sVUKpW6PznovgabyUr9rj
zrva77QUD8Vjcey51OjPY/Lcs8DQdsk1tzadYLlS7upYjniHJucZ3etnRdld8EVo
RiT1E7XMVLNheSj54SetHwofHt7yJHMOZHnK64RvrZR07W1YZ6MCgrppMEFq7Exr
9idHbB3AO24/5O4GqYx5cunlXOtArhzHFxCShQ0/EcC/a3dtjHgFZDRWVUdNhZnE
gU6hLrXsVV4nSw==
-----END CERTIFICATE-----