Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File:                     0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier:          ZQxsvH84h+FoeAsn/kWdIPE2bX75SqXyxcZjkYknCwI=
Subject key identifier:   86:F5:40:2D:98:58:93:9A:BB:B3:C3:89:16:D5:72:63:8F:10:20:82
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer:       /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial:       018FB8358AA8F2BE3E4D4C7C017097AF3AA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number:          0EC7
Signing time:             Mon 27 May 2024 04:01:07 +0000
Manifest this update:     Mon 27 May 2024 04:01:07 +0000
Manifest next update:     Tue 28 May 2024 04:01:07 +0000
Files and hashes:         1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: BsvnesX3ZrTLAFL+0fRBibqs3zoB2Hithn8XEJqn2XY=)
                          2: KGGT4Q5LP4GHgLj19xF_a7ML2Nc.roa (hash: 8cO4Ue7QuvPhp1QuXETvB/LofLVNnVzFP/P61drOWac=)
                          3: kcug3U98d9aNnApP3fVfo37Zrts.roa (hash: 56dvQrFdjTn9v7kmKs6MLG+E0XHYanxjVXjmg6gQjZ8=)
                          4: uuUCF0Q7fyLxnw5gq29V6auG-mk.roa (hash: 32g82S4HBlnGOb944vPx/gRbkXDfdcBWgjVyuYLeFFU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 May 2024 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b8:35:8a:a8:f2:be:3e:4d:4c:7c:01:70:97:af:3a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
        Validity
            Not Before: May 27 04:01:07 2024 GMT
            Not After : May 28 04:01:07 2024 GMT
        Subject: CN=86f5402d9858939abbb3c38916d572638f102082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:66:5f:f7:d3:90:fe:41:67:b9:7f:8c:ee:65:
                    39:6a:53:da:26:2a:c7:76:7b:a4:61:a3:5f:a4:82:
                    c5:06:81:cd:73:33:84:a9:71:84:f1:ed:8c:ef:0e:
                    0b:2c:2f:86:ce:95:8e:33:18:d2:48:ee:d6:ab:e1:
                    f1:5f:3c:75:91:ae:80:c3:1c:2a:71:83:c3:c5:6a:
                    00:73:a1:95:f3:67:6e:65:29:6b:a3:ba:d1:a6:8b:
                    7b:b8:be:d3:75:fa:bc:8e:c8:e5:e4:a7:bf:38:22:
                    e1:96:9c:14:f8:40:ee:9d:c3:0c:6c:a4:db:26:40:
                    54:d6:e7:c2:f3:ef:42:38:ff:18:c4:af:00:bd:d4:
                    e1:34:24:76:b7:a9:f6:72:70:ff:01:78:73:24:57:
                    f8:3d:d8:be:ce:03:6d:b0:b7:31:e1:c7:c0:3a:ac:
                    ce:47:ac:ce:02:97:ef:1d:ed:ff:48:2e:48:a3:09:
                    cc:58:06:cf:36:6e:a4:27:8a:97:8c:c0:03:42:90:
                    0b:53:d7:04:4b:48:e3:cd:fa:6a:d7:2b:75:0f:8d:
                    d4:72:3b:96:88:20:3a:96:9c:3d:c7:e8:fa:9b:7f:
                    4f:78:57:0f:1a:21:81:3e:93:fd:2e:36:8c:48:c4:
                    3f:1e:96:40:0c:33:0e:86:b3:05:34:2a:52:fe:b0:
                    c3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F5:40:2D:98:58:93:9A:BB:B3:C3:89:16:D5:72:63:8F:10:20:82
            X509v3 Authority Key Identifier:
                keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:68:f9:c7:ff:99:05:a9:0b:02:6f:38:79:58:7c:2c:31:c2:
         c9:9f:93:3c:f6:79:2d:c6:d2:a2:51:90:85:82:0f:6e:81:a6:
         d5:db:7a:d4:2b:e2:7d:47:0f:53:b7:24:2d:b0:d2:0d:e3:8a:
         ed:0d:f8:97:af:d8:e7:98:aa:a8:16:50:5c:f3:42:95:a2:fe:
         84:01:27:f0:a9:c9:32:8b:4e:bd:c4:f9:2c:e3:0f:5c:dc:e8:
         53:6a:0e:97:18:f6:3f:ec:96:f2:58:29:b5:f4:bf:c6:a6:dd:
         30:26:21:ed:c0:6b:f9:44:56:07:2f:1f:44:7c:3a:7e:6c:b6:
         b1:6c:f3:7e:14:c8:4b:44:b9:37:cd:53:ce:42:92:11:b7:b1:
         54:a6:20:a7:21:40:41:a0:f1:0c:63:82:0a:ff:8c:18:2c:fa:
         8e:7f:ea:de:db:51:68:4d:07:b6:6c:ea:0b:9d:16:60:b6:80:
         39:9c:91:37:23:68:c9:33:5e:78:7f:31:8e:00:a9:3d:21:7d:
         4a:69:52:46:4b:89:30:df:a0:6f:49:d6:21:fb:b5:1b:56:c0:
         e8:dd:d9:08:bc:54:72:21:de:f8:24:bf:62:9e:b1:b7:f4:f4:
         5c:53:3c:f4:cf:60:de:38:d3:57:e1:95:8f:b6:c6:76:55:6d:
         08:ac:97:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+4NYqo8r4+TUx8AXCXrzqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyODM2MTZmMTM2MmMyNWQ4MmVjMmE3MGM0Yjk3NTA1NjVi
MTE5N2YwHhcNMjQwNTI3MDQwMTA3WhcNMjQwNTI4MDQwMTA3WjAzMTEwLwYDVQQD
Eyg4NmY1NDAyZDk4NTg5MzlhYmJiM2MzODkxNmQ1NzI2MzhmMTAyMDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGZf99OQ/kFnuX+M7mU5alPaJirH
dnukYaNfpILFBoHNczOEqXGE8e2M7w4LLC+GzpWOMxjSSO7Wq+HxXzx1ka6Awxwq
cYPDxWoAc6GV82duZSlro7rRpot7uL7Tdfq8jsjl5Ke/OCLhlpwU+EDuncMMbKTb
JkBU1ufC8+9COP8YxK8AvdThNCR2t6n2cnD/AXhzJFf4Pdi+zgNtsLcx4cfAOqzO
R6zOApfvHe3/SC5IownMWAbPNm6kJ4qXjMADQpALU9cES0jjzfpq1yt1D43UcjuW
iCA6lpw9x+j6m39PeFcPGiGBPpP9LjaMSMQ/HpZADDMOhrMFNCpS/rDD9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIb1QC2YWJOau7PDiRbVcmOPECCCMB8GA1UdIwQY
MBaAFNKDYW8TYsJdguwqcMS5dQVlsRl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5Njkt
YTZkMjdjNDMxODE4LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5NjktYTZkMjdjNDMxODE4
LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2j5x/+Z
BakLAm84eVh8LDHCyZ+TPPZ5LcbSolGQhYIPboGm1dt61CvifUcPU7ckLbDSDeOK
7Q34l6/Y55iqqBZQXPNClaL+hAEn8KnJMotOvcT5LOMPXNzoU2oOlxj2P+yW8lgp
tfS/xqbdMCYh7cBr+URWBy8fRHw6fmy2sWzzfhTIS0S5N81TzkKSEbexVKYgpyFA
QaDxDGOCCv+MGCz6jn/q3ttRaE0HtmzqC50WYLaAOZyRNyNoyTNeeH8xjgCpPSF9
SmlSRkuJMN+gb0nWIfu1G1bA6N3ZCLxUciHe+CS/Yp6xt/T0XFM89M9g3jjTV+GV
j7bGdlVtCKyXOQ==
-----END CERTIFICATE-----