Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
File:                     Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json)
Hash identifier:          A8+JzzZYTzuINYxHaPNb7XL3C+tHT49cbWcApWu+Q0Y=
Subject key identifier:   A8:99:CC:2B:61:0A:35:A1:2F:B0:77:68:82:AB:7E:89:55:6E:1F:E8
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Certificate issuer:       /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial:       01901CD80241D2318152D14C277B8ABA5D56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
Manifest number:          0FC5
Signing time:             Sat 15 Jun 2024 17:00:36 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:36 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:36 +0000
Files and hashes:         1: 1-CEbVX9q9sr88-GTGkAnbgtjZMw.roa (hash: G7ontNIpfpUHiCConAhzk/4rwjkx0Aez1nVKE4Ldm/o=)
                          2: 2v4TNX068Xo83QPqOIa37s-1pLs.roa (hash: jXFhED4CLLpO4cI/Q+DRgaIzaN8GzJzoTo3ybXLe9yE=)
                          3: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: XIPlWZKa07WE7LMmWYPTAhS2jhGx/66h5MgjrDKESTc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:02:41:d2:31:81:52:d1:4c:27:7b:8a:ba:5d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
        Validity
            Not Before: Jun 15 17:00:36 2024 GMT
            Not After : Jun 16 17:00:36 2024 GMT
        Subject: CN=a899cc2b610a35a12fb0776882ab7e89556e1fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2b:ba:9b:11:b9:19:d8:4c:88:8b:cf:95:f6:
                    d2:9c:c6:92:ed:3c:81:fc:62:28:7a:3c:0e:8b:a6:
                    0e:4e:79:c3:7a:ba:8b:c2:12:71:ca:94:0b:42:e2:
                    d0:fa:ac:fb:d0:cb:65:9b:05:3f:21:56:03:86:d2:
                    83:d7:47:5d:8c:19:be:7b:8d:4e:27:ff:bf:1b:e2:
                    bf:43:de:b6:7c:2c:1b:f2:82:d2:17:7c:b7:ae:c6:
                    0c:12:76:4c:3f:06:77:df:e1:dd:1a:28:34:1a:8b:
                    2e:60:f1:12:f4:b2:d3:4c:64:19:87:4b:b4:de:e3:
                    bf:a0:74:a6:92:c1:10:32:a2:5f:16:82:ce:52:82:
                    76:d6:07:91:68:65:dc:a8:dc:3d:57:ba:f0:ea:4f:
                    25:56:3e:f1:b1:01:c7:ec:14:2d:16:bf:ab:80:74:
                    43:97:9f:06:8c:ff:fe:6a:d2:f1:b0:23:b0:91:9a:
                    09:d3:aa:5e:ea:a3:b3:27:8e:30:fb:e9:a6:e8:33:
                    3c:e2:80:30:ed:61:58:62:0d:a8:2e:76:02:fd:8b:
                    0e:2c:06:61:73:f6:2d:60:4c:8d:0a:09:67:f3:ce:
                    2b:fd:47:a0:f2:d8:79:37:54:1d:0a:13:b8:27:fd:
                    c5:59:9d:e7:ec:78:19:0d:97:40:1e:51:f2:01:55:
                    07:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:99:CC:2B:61:0A:35:A1:2F:B0:77:68:82:AB:7E:89:55:6E:1F:E8
            X509v3 Authority Key Identifier:
                keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:58:49:8e:b3:6f:68:df:f9:cb:2a:b1:1c:27:e8:e8:a6:97:
         ac:d7:58:f2:9f:48:f4:cd:e5:43:e0:c7:bc:55:3d:04:ca:81:
         24:2e:8c:e1:35:c1:26:ba:42:d7:f7:13:61:8c:37:83:a1:9a:
         b1:9b:6f:3f:93:c1:97:09:c4:b6:bd:af:2b:2d:28:28:3b:1a:
         36:f7:80:7c:68:0e:94:f7:ca:f2:12:68:54:c0:28:90:84:d1:
         71:c0:c9:e3:1f:dc:68:71:6b:9e:65:0d:83:f9:79:e4:a1:2f:
         65:15:84:2f:96:b8:87:51:b2:6d:79:69:3e:e3:09:36:ae:7d:
         7f:77:85:bf:32:6c:dc:02:f9:96:e2:32:1c:79:9f:57:3d:82:
         44:55:64:ba:09:fa:7f:0b:62:29:2b:41:bb:b6:bf:3f:c4:b9:
         5b:7c:3a:5a:a7:96:c6:40:c6:6c:8e:99:15:9b:ce:84:25:5f:
         d7:c9:51:3a:4e:03:6d:35:da:4c:96:96:ca:39:79:8e:cd:88:
         0c:0c:d2:6c:8b:69:7f:a7:e4:fa:3a:72:74:98:c4:19:aa:bf:
         02:00:0a:c7:e3:5c:03:9f:b4:a2:46:3c:95:5b:67:fa:6c:4d:
         49:87:bc:90:32:a7:b8:a3:40:33:48:34:86:9c:7f:e0:a6:50:
         a6:46:4a:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAc2AJB0jGBUtFMJ3uKul1WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZmY1YmNmNzM5YjA3MzJmYjFiY2RiNzE3ZWM3MTdmNmYx
Y2IwZTIwHhcNMjQwNjE1MTcwMDM2WhcNMjQwNjE2MTcwMDM2WjAzMTEwLwYDVQQD
EyhhODk5Y2MyYjYxMGEzNWExMmZiMDc3Njg4MmFiN2U4OTU1NmUxZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyu6mxG5GdhMiIvPlfbSnMaS7TyB
/GIoejwOi6YOTnnDerqLwhJxypQLQuLQ+qz70MtlmwU/IVYDhtKD10ddjBm+e41O
J/+/G+K/Q962fCwb8oLSF3y3rsYMEnZMPwZ33+HdGig0GosuYPES9LLTTGQZh0u0
3uO/oHSmksEQMqJfFoLOUoJ21geRaGXcqNw9V7rw6k8lVj7xsQHH7BQtFr+rgHRD
l58GjP/+atLxsCOwkZoJ06pe6qOzJ44w++mm6DM84oAw7WFYYg2oLnYC/YsOLAZh
c/YtYEyNCgln884r/Ueg8th5N1QdChO4J/3FWZ3n7HgZDZdAHlHyAVUHHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiZzCthCjWhL7B3aIKrfolVbh/oMB8GA1UdIwQY
MBaAFCL/W89zmwcy+xvNtxfscX9vHLDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXY5YnozT2JCekw3RzgyM0YteHhmMjhjc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kN2JmMGYtNjkxYS00Y2VjLWI1Y2Ut
NzYwM2U1ZGQ1NzA3LzEvSXY5YnozT2JCekw3RzgyM0YteHhmMjhjc09JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kN2JmMGYtNjkxYS00Y2VjLWI1Y2UtNzYwM2U1ZGQ1NzA3
LzEvSXY5YnozT2JCekw3RzgyM0YteHhmMjhjc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1hJjrNv
aN/5yyqxHCfo6KaXrNdY8p9I9M3lQ+DHvFU9BMqBJC6M4TXBJrpC1/cTYYw3g6Ga
sZtvP5PBlwnEtr2vKy0oKDsaNveAfGgOlPfK8hJoVMAokITRccDJ4x/caHFrnmUN
g/l55KEvZRWEL5a4h1GybXlpPuMJNq59f3eFvzJs3AL5luIyHHmfVz2CRFVkugn6
fwtiKStBu7a/P8S5W3w6WqeWxkDGbI6ZFZvOhCVf18lROk4DbTXaTJaWyjl5js2I
DAzSbItpf6fk+jpydJjEGaq/AgAKx+NcA5+0okY8lVtn+mxNSYe8kDKnuKNAM0g0
hpx/4KZQpkZKkA==
-----END CERTIFICATE-----