Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
File:                     1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json)
Hash identifier:          a10ZHEk5xkVpt7Abn6hcwo83AXd0PfRl9VGmFdN62ts=
Subject key identifier:   D3:22:69:59:A5:AF:66:67:BA:B3:34:82:CA:96:83:66:DA:B7:F1:81
Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
Certificate issuer:       /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Certificate serial:       0197B5FC54C10FE6981BC7162F3DEF4634EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
Manifest number:          1299
Signing time:             Sat 28 Jun 2025 10:01:42 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:42 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:42 +0000
Files and hashes:         1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: iQRnrescyqn6ops71dHueI25sj7u/JQknBVhoJAVlQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fc:54:c1:0f:e6:98:1b:c7:16:2f:3d:ef:46:34:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
        Validity
            Not Before: Jun 28 10:01:42 2025 GMT
            Not After : Jun 29 10:01:42 2025 GMT
        Subject: CN=d3226959a5af6667bab33482ca968366dab7f181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b8:ab:dd:0e:9d:d5:e2:ff:2e:c0:88:0a:c3:
                    35:11:65:1a:0c:24:49:d3:a8:c9:71:f8:00:15:40:
                    74:2f:7b:53:aa:8a:b6:fb:32:b3:2e:2e:d3:d7:ec:
                    c8:f2:2b:86:ae:60:51:b3:c4:00:e1:5e:c6:5c:1a:
                    78:c9:fd:09:d7:ed:d1:ae:20:c5:6d:63:48:9e:35:
                    4b:f7:3b:0b:fd:d4:67:71:f1:29:b7:d5:30:90:9d:
                    78:ec:1f:ad:99:1f:54:68:aa:28:91:2c:8f:ef:e0:
                    18:1c:cd:3b:13:89:22:c0:e3:3e:f5:17:18:9d:29:
                    7b:e0:6c:12:b8:84:93:74:12:c9:ac:15:7c:24:92:
                    ad:e3:31:c3:aa:99:08:45:9a:c6:a8:b0:67:a1:c4:
                    6f:2e:c4:c8:08:c3:01:f0:b9:5a:0a:d6:4b:84:01:
                    35:0b:f8:0a:1d:ee:00:c4:f8:83:3a:48:b0:3b:c0:
                    cb:d6:d1:17:fe:0c:63:64:16:b4:63:96:2c:24:8c:
                    b2:fa:d6:82:28:74:ed:68:87:9c:8b:b2:9d:38:46:
                    31:6d:2f:a1:3d:b0:1f:0a:8c:83:a7:6e:ee:72:e8:
                    7a:6f:81:e7:a6:f4:d4:23:36:06:e9:73:d7:ce:ff:
                    8d:c5:d4:98:c5:0e:b2:d9:b6:a0:4e:22:88:99:d7:
                    e2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:22:69:59:A5:AF:66:67:BA:B3:34:82:CA:96:83:66:DA:B7:F1:81
            X509v3 Authority Key Identifier:
                keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:eb:7c:aa:b5:3a:5f:5e:8d:93:67:7d:5d:ea:9e:fc:97:bb:
         f9:eb:f3:96:09:b5:c7:49:c7:db:4a:5e:f6:c9:46:c1:18:32:
         32:aa:fc:b8:20:0e:0c:32:02:86:98:1f:90:44:ee:4c:6c:4e:
         b4:2e:1c:d9:50:e0:82:ab:95:1f:80:10:54:f5:ea:7b:99:6d:
         3e:19:38:cd:84:b8:46:17:49:8b:27:e2:79:83:0c:2d:d6:3e:
         26:da:62:2d:a2:cb:f3:44:00:a6:ff:a4:66:66:53:6f:1d:ac:
         ee:79:da:13:f4:84:59:87:b9:52:97:68:79:9e:33:d1:63:06:
         f6:4b:9e:07:e3:fb:42:58:26:a6:7a:7e:55:f1:66:4a:74:75:
         17:94:6e:7a:94:b4:4f:b0:69:39:2f:81:a4:b8:31:bb:35:78:
         2b:32:7a:ad:05:75:a8:36:77:d6:03:02:1f:e8:c3:92:0a:45:
         08:fe:ed:82:9b:8f:52:20:5f:30:42:58:1b:b5:e8:8b:5a:58:
         3c:b9:9b:13:af:42:55:99:31:69:ab:db:6f:24:26:50:d2:c2:
         b0:99:0a:eb:34:3b:3d:f6:dd:dc:16:d8:7e:08:ae:9f:8b:95:
         a1:8b:e1:48:c0:3b:09:63:54:98:e3:b0:05:ba:19:12:06:7e:
         f9:43:f0:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/FTBD+aYG8cWLz3vRjTuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ODIzYTRjYTRkNzY4OTdiNWRkZmU3OTg4ZTI3MWZmNjgx
MzE4ZjIwHhcNMjUwNjI4MTAwMTQyWhcNMjUwNjI5MTAwMTQyWjAzMTEwLwYDVQQD
EyhkMzIyNjk1OWE1YWY2NjY3YmFiMzM0ODJjYTk2ODM2NmRhYjdmMTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLir3Q6d1eL/LsCICsM1EWUaDCRJ
06jJcfgAFUB0L3tTqoq2+zKzLi7T1+zI8iuGrmBRs8QA4V7GXBp4yf0J1+3RriDF
bWNInjVL9zsL/dRncfEpt9UwkJ147B+tmR9UaKookSyP7+AYHM07E4kiwOM+9RcY
nSl74GwSuISTdBLJrBV8JJKt4zHDqpkIRZrGqLBnocRvLsTICMMB8LlaCtZLhAE1
C/gKHe4AxPiDOkiwO8DL1tEX/gxjZBa0Y5YsJIyy+taCKHTtaIeci7KdOEYxbS+h
PbAfCoyDp27ucuh6b4HnpvTUIzYG6XPXzv+NxdSYxQ6y2bagTiKImdfiDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMiaVmlr2ZnurM0gsqWg2bat/GBMB8GA1UdIwQY
MBaAFNSCOkyk12iXtd3+eYjicf9oExjyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlJNlRLVFhhSmUxM2Y1NWlPSnhfMmdUR1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81ZTQzYzMtY2FkZi00Mzc0LTk5YWEt
NGUyZjg5Y2FlMWRhLzEvMUlJNlRLVFhhSmUxM2Y1NWlPSnhfMmdUR1BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy81ZTQzYzMtY2FkZi00Mzc0LTk5YWEtNGUyZjg5Y2FlMWRh
LzEvMUlJNlRLVFhhSmUxM2Y1NWlPSnhfMmdUR1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaut8qrU6
X16Nk2d9Xeqe/Je7+evzlgm1x0nH20pe9slGwRgyMqr8uCAODDIChpgfkETuTGxO
tC4c2VDggquVH4AQVPXqe5ltPhk4zYS4RhdJiyfieYMMLdY+JtpiLaLL80QApv+k
ZmZTbx2s7nnaE/SEWYe5UpdoeZ4z0WMG9kueB+P7Qlgmpnp+VfFmSnR1F5RuepS0
T7BpOS+BpLgxuzV4KzJ6rQV1qDZ31gMCH+jDkgpFCP7tgpuPUiBfMEJYG7Xoi1pY
PLmbE69CVZkxaavbbyQmUNLCsJkK6zQ7Pfbd3BbYfgiun4uVoYvhSMA7CWNUmOOw
BboZEgZ++UPwwA==
-----END CERTIFICATE-----