Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
File:                     g5JNIiU91reGmbxdCgEQJ5E-X3A.mft (raw, json)
Hash identifier:          Vve8gzew3lpw26alPw+dUcfSew8/UpEM+/OfkJ14j90=
Subject key identifier:   81:CE:7C:41:68:C7:7A:8F:98:61:8B:CA:0E:B9:BF:99:98:DB:90:C4
Authority key identifier: 83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
Certificate issuer:       /CN=83924d22253dd6b78699bc5d0a011027913e5f70
Certificate serial:       0198A084088BFCFB78A55EBFE85FCD79967D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
Manifest number:          0565
Signing time:             Tue 12 Aug 2025 23:01:03 +0000
Manifest this update:     Tue 12 Aug 2025 23:01:03 +0000
Manifest next update:     Wed 13 Aug 2025 23:01:03 +0000
Files and hashes:         1: g5JNIiU91reGmbxdCgEQJ5E-X3A.crl (hash: o5oOOqT4sHghvpfjHboSZcMIbASWRBtXpWNUsc6PqnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:84:08:8b:fc:fb:78:a5:5e:bf:e8:5f:cd:79:96:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83924d22253dd6b78699bc5d0a011027913e5f70
        Validity
            Not Before: Aug 12 23:01:03 2025 GMT
            Not After : Aug 13 23:01:03 2025 GMT
        Subject: CN=81ce7c4168c77a8f98618bca0eb9bf9998db90c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0e:d7:3f:44:e9:03:32:20:34:3b:01:ed:61:
                    f8:dc:77:19:75:82:8f:de:49:18:b9:c0:0f:f6:c0:
                    73:aa:7f:d4:c9:09:09:d7:17:5c:61:09:fe:c4:ab:
                    ec:b3:8c:8a:3c:a3:b3:6b:48:d3:55:35:d8:1b:9f:
                    2d:87:df:d3:0a:02:d3:47:5e:1f:b4:07:32:0e:a3:
                    49:14:ce:5b:dc:cc:2f:bb:ee:fd:43:61:5d:df:8e:
                    5e:ea:b5:6c:05:95:d1:3a:1f:be:59:04:54:6e:08:
                    83:0d:3c:bd:fb:78:db:9b:71:77:52:a1:6d:63:69:
                    f2:d6:49:0c:a3:4e:48:e3:02:21:ef:dc:eb:44:d5:
                    68:f9:b9:46:f4:ea:e0:80:9e:58:40:bf:26:41:75:
                    75:c4:2f:a8:10:fc:4b:13:d4:e0:d7:6d:a2:96:69:
                    13:69:69:5e:ea:c8:b0:e6:ff:61:80:7c:9c:6e:74:
                    ef:a6:28:04:2c:96:6b:1f:dd:c2:6d:a6:c0:a6:6b:
                    37:94:08:8a:23:73:2c:6a:45:2e:a3:c4:08:e9:38:
                    99:72:bb:51:c6:4f:d4:de:5f:31:a5:b6:ed:4e:b4:
                    a8:a2:13:bb:ce:ed:c0:55:2e:41:7a:1f:ee:93:b1:
                    12:81:f9:c7:89:89:83:9f:d0:26:d4:36:52:54:d1:
                    a9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CE:7C:41:68:C7:7A:8F:98:61:8B:CA:0E:B9:BF:99:98:DB:90:C4
            X509v3 Authority Key Identifier:
                keyid:83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:11:a3:23:4c:5d:1f:cc:f1:85:82:20:17:9d:49:f7:59:c9:
         82:b4:b8:62:b0:c1:f6:bc:b5:a3:79:47:eb:1d:28:57:5c:2b:
         3d:aa:bc:09:17:df:08:3f:20:17:e4:f3:da:49:44:a8:59:20:
         68:2f:92:c7:15:10:a1:07:92:4b:d8:82:a0:76:ed:40:e5:ae:
         1c:7a:47:5c:e8:dc:6a:7f:06:01:c0:57:b5:60:9c:4b:44:42:
         2e:ef:b5:1c:cf:39:99:e1:b0:08:c8:46:8c:b6:88:60:55:69:
         47:6e:b8:a2:11:a1:4e:c6:bd:c4:68:53:07:da:a1:e1:8b:e4:
         e4:01:63:51:02:3b:82:0c:a2:44:7e:2d:c0:c6:78:c9:ee:bf:
         94:cb:8b:05:f3:79:0a:10:c7:62:a2:93:c7:6b:d4:02:7f:47:
         9f:82:39:b2:2b:39:bc:56:9b:e3:a8:ff:a0:c7:52:c3:03:cf:
         1c:ba:a7:74:16:14:be:e3:b0:2f:4d:fd:39:86:60:a6:7a:39:
         e4:43:81:66:e9:ce:fd:ca:b3:79:b3:c5:94:68:8c:73:2e:b0:
         7c:0b:ed:3b:db:44:33:44:01:ea:04:d8:ff:0d:b7:df:f2:b3:
         e1:ab:fb:ac:8e:be:d4:97:ef:66:c9:32:74:d7:70:0b:04:04:
         8a:6a:6e:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZighAiL/Pt4pV6/6F/NeZZ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOTI0ZDIyMjUzZGQ2Yjc4Njk5YmM1ZDBhMDExMDI3OTEz
ZTVmNzAwHhcNMjUwODEyMjMwMTAzWhcNMjUwODEzMjMwMTAzWjAzMTEwLwYDVQQD
Eyg4MWNlN2M0MTY4Yzc3YThmOTg2MThiY2EwZWI5YmY5OTk4ZGI5MGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww7XP0TpAzIgNDsB7WH43HcZdYKP
3kkYucAP9sBzqn/UyQkJ1xdcYQn+xKvss4yKPKOza0jTVTXYG58th9/TCgLTR14f
tAcyDqNJFM5b3Mwvu+79Q2Fd345e6rVsBZXROh++WQRUbgiDDTy9+3jbm3F3UqFt
Y2ny1kkMo05I4wIh79zrRNVo+blG9OrggJ5YQL8mQXV1xC+oEPxLE9Tg122ilmkT
aWle6siw5v9hgHycbnTvpigELJZrH93CbabApms3lAiKI3MsakUuo8QI6TiZcrtR
xk/U3l8xpbbtTrSoohO7zu3AVS5Beh/uk7ESgfnHiYmDn9Am1DZSVNGp+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHOfEFox3qPmGGLyg65v5mY25DEMB8GA1UdIwQY
MBaAFIOSTSIlPda3hpm8XQoBECeRPl9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNTFjNzUtZWY3Yi00OGFiLTg3MGYt
NDYwY2JlNjg4Y2U1LzEvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNTFjNzUtZWY3Yi00OGFiLTg3MGYtNDYwY2JlNjg4Y2U1
LzEvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShGjI0xd
H8zxhYIgF51J91nJgrS4YrDB9ry1o3lH6x0oV1wrPaq8CRffCD8gF+Tz2klEqFkg
aC+SxxUQoQeSS9iCoHbtQOWuHHpHXOjcan8GAcBXtWCcS0RCLu+1HM85meGwCMhG
jLaIYFVpR264ohGhTsa9xGhTB9qh4Yvk5AFjUQI7ggyiRH4twMZ4ye6/lMuLBfN5
ChDHYqKTx2vUAn9Hn4I5sis5vFab46j/oMdSwwPPHLqndBYUvuOwL039OYZgpno5
5EOBZunO/cqzebPFlGiMcy6wfAvtO9tEM0QB6gTY/w233/Kz4av7rI6+1JfvZsky
dNdwCwQEimpuKA==
-----END CERTIFICATE-----