Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft
File:                     Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft (raw, json)
Hash identifier:          QC+c//x8XP7YSp6MclEywLW4R0kx5jolF97Tu8hrcPQ=
Subject key identifier:   F6:1B:90:E0:4F:76:42:AA:E5:18:53:68:16:1F:9D:3A:87:55:B5:86
Authority key identifier: 46:6C:FA:4F:88:47:F1:56:1B:55:97:16:70:16:5C:0E:68:B6:27:99
Certificate issuer:       /CN=466cfa4f8847f1561b55971670165c0e68b62799
Certificate serial:       0198D73BCFBC87CB2A927ED5D53D52D2A686
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft
Manifest number:          0A97
Signing time:             Sat 23 Aug 2025 14:01:17 +0000
Manifest this update:     Sat 23 Aug 2025 14:01:17 +0000
Manifest next update:     Sun 24 Aug 2025 14:01:17 +0000
Files and hashes:         1: Rmz6T4hH8VYbVZcWcBZcDmi2J5k.crl (hash: lL6RX3A1CQGceyV8FvW+rK7Fb6D8K7hdJbneJGrOn/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:cf:bc:87:cb:2a:92:7e:d5:d5:3d:52:d2:a6:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466cfa4f8847f1561b55971670165c0e68b62799
        Validity
            Not Before: Aug 23 14:01:17 2025 GMT
            Not After : Aug 24 14:01:17 2025 GMT
        Subject: CN=f61b90e04f7642aae5185368161f9d3a8755b586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:13:e5:2c:28:53:4b:16:24:7f:d5:e0:7b:67:
                    31:a6:0a:e3:62:e3:96:65:1e:90:9e:27:3e:cf:73:
                    2d:27:38:3f:59:20:9a:21:3d:ee:7f:1f:bb:1b:1a:
                    bc:ea:da:d7:ba:d4:c1:a2:06:c6:d9:a0:db:12:6d:
                    12:5f:9f:61:54:66:21:7d:84:12:ca:f8:8c:e1:d3:
                    b9:e6:88:89:ab:0b:3f:77:16:17:c5:59:61:8f:ae:
                    0f:9f:0c:5a:23:48:26:27:28:83:21:59:f5:d3:e3:
                    24:2f:54:7e:7b:f9:27:3d:da:8b:8a:94:d5:cc:4f:
                    da:12:f9:7b:93:03:0b:a6:70:22:cc:75:2b:ff:26:
                    8d:5e:63:9a:1f:26:a1:98:8f:6b:a3:31:98:80:d5:
                    41:57:09:8a:3b:4b:29:13:a9:e8:ab:ee:92:c2:c8:
                    f3:b9:09:1a:aa:5b:7a:0a:6c:34:82:24:d0:27:ce:
                    4c:c6:48:95:99:f4:60:bd:a9:af:a2:5e:0f:55:4c:
                    e7:9e:5f:f4:d2:6d:de:4f:fa:68:84:a2:1e:d3:b7:
                    5c:3d:73:fa:de:c7:3b:ae:49:1b:8a:ba:be:52:25:
                    1b:0b:12:fc:a3:ed:94:6b:b7:83:27:3a:a7:10:39:
                    98:27:40:b4:89:87:1e:11:5a:a2:c0:bb:20:85:30:
                    f8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1B:90:E0:4F:76:42:AA:E5:18:53:68:16:1F:9D:3A:87:55:B5:86
            X509v3 Authority Key Identifier:
                keyid:46:6C:FA:4F:88:47:F1:56:1B:55:97:16:70:16:5C:0E:68:B6:27:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:31:20:ec:00:b8:c0:3f:07:af:6c:df:a9:94:b7:26:a8:fc:
         f1:8c:08:53:ba:ee:97:c0:d0:22:e4:11:36:88:b2:d9:17:d2:
         e5:42:e1:78:de:24:8e:d5:27:67:4f:47:28:fb:02:5f:03:78:
         05:bb:db:c4:02:46:9f:87:63:84:d4:c2:f4:06:5e:89:a3:da:
         c1:da:14:33:17:d7:b4:b3:cc:e8:52:9b:45:7e:86:f0:6f:b2:
         e9:c8:67:48:0c:be:14:e6:c7:0e:fb:50:9a:26:f5:9a:55:23:
         1b:62:02:43:ac:78:84:e5:e9:21:0b:2d:30:34:3e:04:d0:bb:
         0f:7e:77:92:56:a6:64:20:f2:7e:be:94:e2:91:ba:c9:f5:5b:
         6f:5a:dd:f4:c3:92:71:3f:63:37:ba:76:c2:70:ff:09:6c:9c:
         01:dc:a0:6c:f5:75:a8:a8:42:bc:f7:9c:b0:9f:c1:f5:b9:3a:
         96:ec:1f:7a:ec:49:d4:48:1e:71:4d:63:61:22:b2:37:32:d2:
         08:0e:0f:40:4d:bc:56:55:5b:f7:18:fa:dc:14:4e:a8:ba:40:
         b7:e0:ea:d0:86:39:6d:eb:e3:e9:50:03:2f:8f:fa:a4:e8:cf:
         96:99:5b:b7:eb:cd:cf:22:63:4c:bc:11:e0:f0:e3:90:6f:fa:
         bd:73:64:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO8+8h8sqkn7V1T1S0qaGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NmNmYTRmODg0N2YxNTYxYjU1OTcxNjcwMTY1YzBlNjhi
NjI3OTkwHhcNMjUwODIzMTQwMTE3WhcNMjUwODI0MTQwMTE3WjAzMTEwLwYDVQQD
EyhmNjFiOTBlMDRmNzY0MmFhZTUxODUzNjgxNjFmOWQzYTg3NTViNTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhPlLChTSxYkf9Xge2cxpgrjYuOW
ZR6Qnic+z3MtJzg/WSCaIT3ufx+7Gxq86trXutTBogbG2aDbEm0SX59hVGYhfYQS
yviM4dO55oiJqws/dxYXxVlhj64PnwxaI0gmJyiDIVn10+MkL1R+e/knPdqLipTV
zE/aEvl7kwMLpnAizHUr/yaNXmOaHyahmI9rozGYgNVBVwmKO0spE6noq+6Swsjz
uQkaqlt6Cmw0giTQJ85MxkiVmfRgvamvol4PVUznnl/00m3eT/pohKIe07dcPXP6
3sc7rkkbirq+UiUbCxL8o+2Ua7eDJzqnEDmYJ0C0iYceEVqiwLsghTD4QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYbkOBPdkKq5RhTaBYfnTqHVbWGMB8GA1UdIwQY
MBaAFEZs+k+IR/FWG1WXFnAWXA5otieZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm16NlQ0aEg4VlliVlpjV2NCWmNEbWkySjVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC81MDRmZmEtMjkwNS00Nzg1LTkyOTEt
NWIxMWJiMTc5YThiLzEvUm16NlQ0aEg4VlliVlpjV2NCWmNEbWkySjVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC81MDRmZmEtMjkwNS00Nzg1LTkyOTEtNWIxMWJiMTc5YThi
LzEvUm16NlQ0aEg4VlliVlpjV2NCWmNEbWkySjVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjEg7AC4
wD8Hr2zfqZS3Jqj88YwIU7rul8DQIuQRNoiy2RfS5ULheN4kjtUnZ09HKPsCXwN4
BbvbxAJGn4djhNTC9AZeiaPawdoUMxfXtLPM6FKbRX6G8G+y6chnSAy+FObHDvtQ
mib1mlUjG2ICQ6x4hOXpIQstMDQ+BNC7D353klamZCDyfr6U4pG6yfVbb1rd9MOS
cT9jN7p2wnD/CWycAdygbPV1qKhCvPecsJ/B9bk6luwfeuxJ1EgecU1jYSKyNzLS
CA4PQE28VlVb9xj63BROqLpAt+Dq0IY5bevj6VADL4/6pOjPlplbt+vNzyJjTLwR
4PDjkG/6vXNkqg==
-----END CERTIFICATE-----