Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
File:                     c3eHzyqHDZGxE2n510WRlXYCgU4.mft (raw, json)
Hash identifier:          pwHUQiVlzLycqmk96A5mqshXoUshSzX0INAakhmJ0f8=
Subject key identifier:   ED:04:F4:85:C7:E4:89:23:A0:14:7F:ED:6D:66:39:D5:C1:D4:75:88
Authority key identifier: 73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
Certificate issuer:       /CN=737787cf2a870d91b11369f9d74591957602814e
Certificate serial:       01977AC20C8701AD400FD3EC4797484CBF0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
Manifest number:          085C
Signing time:             Mon 16 Jun 2025 22:00:26 +0000
Manifest this update:     Mon 16 Jun 2025 22:00:26 +0000
Manifest next update:     Tue 17 Jun 2025 22:00:26 +0000
Files and hashes:         1: c3eHzyqHDZGxE2n510WRlXYCgU4.crl (hash: ZhXLsRsUXFn9YHuoK8zSHsmog/fDpBVBFySsMYVaH20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:c2:0c:87:01:ad:40:0f:d3:ec:47:97:48:4c:bf:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=737787cf2a870d91b11369f9d74591957602814e
        Validity
            Not Before: Jun 16 22:00:26 2025 GMT
            Not After : Jun 17 22:00:26 2025 GMT
        Subject: CN=ed04f485c7e48923a0147fed6d6639d5c1d47588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6d:1b:b1:e6:d6:60:ca:8f:ce:f4:94:ea:3e:
                    a1:e2:6c:75:88:d1:5c:c7:1f:9c:50:fe:51:ef:79:
                    76:65:af:33:9a:0f:ac:a6:51:a3:b1:3d:84:65:d4:
                    08:15:3e:96:4c:4d:0a:75:c7:c4:a8:06:cd:22:6e:
                    b5:2b:cd:04:c3:84:1e:d0:26:fa:63:d3:99:fd:dc:
                    44:8e:61:92:d4:17:a2:ad:99:78:48:dc:d0:bb:9e:
                    b0:df:aa:98:e6:7c:7a:56:8c:ac:ee:e8:71:ec:5f:
                    45:a3:c3:0a:86:0e:bf:9e:68:7e:f6:87:ed:cb:e7:
                    bd:92:a9:d2:b1:66:5b:f1:ae:42:2b:c8:3b:24:35:
                    5e:86:41:31:18:b2:66:7a:40:ab:63:ce:47:eb:1c:
                    b9:9c:6b:76:d6:ad:7b:f9:e7:fb:61:c6:54:c3:09:
                    02:cd:a0:98:4d:aa:df:b7:07:cf:93:30:5e:2b:be:
                    30:34:46:9f:22:3c:24:5b:34:03:b4:63:b2:e0:6b:
                    b5:cc:69:5e:31:cf:3d:6c:f9:b4:ba:9f:6f:8e:1c:
                    8f:0c:08:e1:b1:6b:f9:5f:7a:0c:fc:00:03:2f:78:
                    5d:c0:dc:7e:c6:a1:4b:87:99:fc:46:cc:8d:77:77:
                    e6:5b:68:63:16:97:eb:07:e3:9f:88:26:28:17:fc:
                    d0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:04:F4:85:C7:E4:89:23:A0:14:7F:ED:6D:66:39:D5:C1:D4:75:88
            X509v3 Authority Key Identifier:
                keyid:73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:6d:75:03:50:d7:f8:d2:f9:07:62:43:8a:19:c7:df:e7:0a:
         8a:e1:28:f7:a8:b0:91:69:7e:62:0b:16:f7:6a:11:31:3b:7c:
         5a:34:37:8d:66:f4:b2:44:2e:96:5c:55:4d:b7:c2:ba:7c:bf:
         c0:0f:94:41:08:6e:03:bc:5b:1f:48:3b:02:b3:00:8f:b0:c4:
         d9:5b:35:8b:eb:6a:61:fd:d5:99:c0:6f:01:06:49:4a:59:dc:
         95:a1:7d:ed:c0:8c:27:85:cd:4c:cc:03:1c:83:ae:83:77:c6:
         07:a1:03:c0:8d:f3:9e:5f:a5:bd:cd:ad:21:97:14:2c:09:55:
         00:c8:03:68:16:c9:f8:8a:c6:fb:86:73:dc:88:f5:f9:e5:a4:
         83:49:44:9f:36:a5:64:e2:7a:47:ab:c8:6a:30:40:dd:df:9a:
         12:0f:ac:79:d2:58:49:44:d5:0e:8a:7c:50:98:24:df:6a:eb:
         c1:4c:a4:d6:a0:c3:f9:ab:59:8c:5f:4f:24:65:1d:13:dd:8a:
         6d:6e:0f:63:a3:fc:02:72:5a:9b:d9:df:6e:f0:6f:99:95:e2:
         41:09:35:61:77:ae:fd:76:42:12:80:5a:ce:25:48:e7:eb:ad:
         47:3e:d1:21:60:39:d0:43:85:42:09:b6:68:f9:b6:cf:66:fd:
         d1:56:49:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6wgyHAa1AD9PsR5dITL8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNzc4N2NmMmE4NzBkOTFiMTEzNjlmOWQ3NDU5MTk1NzYw
MjgxNGUwHhcNMjUwNjE2MjIwMDI2WhcNMjUwNjE3MjIwMDI2WjAzMTEwLwYDVQQD
EyhlZDA0ZjQ4NWM3ZTQ4OTIzYTAxNDdmZWQ2ZDY2MzlkNWMxZDQ3NTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm0bsebWYMqPzvSU6j6h4mx1iNFc
xx+cUP5R73l2Za8zmg+splGjsT2EZdQIFT6WTE0KdcfEqAbNIm61K80Ew4Qe0Cb6
Y9OZ/dxEjmGS1BeirZl4SNzQu56w36qY5nx6Voys7uhx7F9Fo8MKhg6/nmh+9oft
y+e9kqnSsWZb8a5CK8g7JDVehkExGLJmekCrY85H6xy5nGt21q17+ef7YcZUwwkC
zaCYTarftwfPkzBeK74wNEafIjwkWzQDtGOy4Gu1zGleMc89bPm0up9vjhyPDAjh
sWv5X3oM/AADL3hdwNx+xqFLh5n8RsyNd3fmW2hjFpfrB+OfiCYoF/zQoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0E9IXH5IkjoBR/7W1mOdXB1HWIMB8GA1UdIwQY
MBaAFHN3h88qhw2RsRNp+ddFkZV2AoFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzNlSHp5cUhEWkd4RTJuNTEwV1JsWFlDZ1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NGEyNjQtZWEyOS00OTFmLWFjNGMt
NjJjMDg1ODM0NGU4LzEvYzNlSHp5cUhEWkd4RTJuNTEwV1JsWFlDZ1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC85NGEyNjQtZWEyOS00OTFmLWFjNGMtNjJjMDg1ODM0NGU4
LzEvYzNlSHp5cUhEWkd4RTJuNTEwV1JsWFlDZ1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGm11A1DX
+NL5B2JDihnH3+cKiuEo96iwkWl+YgsW92oRMTt8WjQ3jWb0skQullxVTbfCuny/
wA+UQQhuA7xbH0g7ArMAj7DE2Vs1i+tqYf3VmcBvAQZJSlnclaF97cCMJ4XNTMwD
HIOug3fGB6EDwI3znl+lvc2tIZcULAlVAMgDaBbJ+IrG+4Zz3Ij1+eWkg0lEnzal
ZOJ6R6vIajBA3d+aEg+sedJYSUTVDop8UJgk32rrwUyk1qDD+atZjF9PJGUdE92K
bW4PY6P8AnJam9nfbvBvmZXiQQk1YXeu/XZCEoBaziVI5+utRz7RIWA50EOFQgm2
aPm2z2b90VZJ7w==
-----END CERTIFICATE-----