Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft
File:                     7WRpHDGJLMmRrU6alnEUd1nkF6s.mft (raw, json)
Hash identifier:          89Bi1XxQCh+tIVhxGk4ORcUsxgw60Vk9Uyjho6KxPjU=
Subject key identifier:   FA:41:7D:B1:B2:CA:45:0F:42:94:FF:D4:2B:73:C1:A0:D0:FE:B7:9A
Authority key identifier: ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
Certificate issuer:       /CN=ed64691c31892cc991ad4e9a9671147759e417ab
Certificate serial:       018F701D1978121BA5BCE980F3E7649011B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft
Manifest number:          0426
Signing time:             Mon 13 May 2024 04:01:46 +0000
Manifest this update:     Mon 13 May 2024 04:01:46 +0000
Manifest next update:     Tue 14 May 2024 04:01:46 +0000
Files and hashes:         1: 0nP54OB7eLtKipqoeFdQi2g6jgA.roa (hash: MxVKs4LPXDkTZ6NJBcmBW3o8kgM6RTumioJMJVGpqqI=)
                          2: 7WRpHDGJLMmRrU6alnEUd1nkF6s.crl (hash: FVgQVWB7NNDgmohPJbpOk6NL99eWgeVLvWOPi2ph7EE=)
                          3: CNh5wrj3ok4m1mH0k8-JVfQ2g6w.roa (hash: LlnpXbCBGIVkqWqLoOzFauoqC3vwq/wMerRRjSnw3Js=)
                          4: ggQrHKs_Dp1NAlIqtr-utBTO5JM.roa (hash: dXqkufzflOQEsjww3aohgBgvzVkH/a897FtMA7jyVY0=)
                          5: ny7-igJNQBjysNNiAv0-3-Tqdcs.roa (hash: zNHnHDXhBVRaqYhXuaxTAvoXyydZBjiNv/HF1ohA0qM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:70:1d:19:78:12:1b:a5:bc:e9:80:f3:e7:64:90:11:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed64691c31892cc991ad4e9a9671147759e417ab
        Validity
            Not Before: May 13 04:01:46 2024 GMT
            Not After : May 14 04:01:46 2024 GMT
        Subject: CN=fa417db1b2ca450f4294ffd42b73c1a0d0feb79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a4:06:f8:ee:6c:04:d9:d0:d9:07:3a:f1:c0:
                    b2:f9:63:05:28:b4:22:f4:93:b0:69:3a:83:85:04:
                    3a:2e:36:e1:37:4d:3e:ea:33:b3:56:2b:7e:ea:eb:
                    25:05:19:65:78:e3:88:7e:f6:ce:8a:94:11:1a:a8:
                    8a:b9:4f:17:75:f4:6d:66:bb:e8:8e:af:0c:0d:9d:
                    0c:72:e2:42:7f:0d:63:16:bc:a5:48:93:69:c1:94:
                    6a:99:7c:ae:fd:4f:f7:84:b8:7b:6e:e7:98:35:89:
                    03:d1:a7:5f:53:12:b5:f8:68:16:d0:e1:55:b7:5c:
                    eb:3b:3b:7f:71:20:bd:bb:ec:a4:16:33:c4:bb:ef:
                    48:c8:ad:8d:9c:cf:e9:fc:ae:49:da:4f:27:b0:30:
                    87:60:ba:bb:30:93:2b:63:8b:7c:ba:5a:fd:6f:03:
                    ca:17:8e:30:ff:fb:97:1a:c2:c3:4c:22:5f:0a:ce:
                    04:ab:fa:1c:11:86:eb:a9:2c:38:b0:e4:53:0a:3c:
                    d2:24:4f:7e:4c:64:45:66:53:cf:f6:fc:c4:3f:f5:
                    d2:4e:e6:0e:fd:44:7d:ff:99:ca:71:8d:fd:e4:ad:
                    cc:6a:c8:12:f4:25:1a:c9:b8:0b:0f:4f:cf:8f:85:
                    6d:68:1d:e2:6c:2e:91:26:60:51:aa:a9:1e:c1:a9:
                    be:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:41:7D:B1:B2:CA:45:0F:42:94:FF:D4:2B:73:C1:A0:D0:FE:B7:9A
            X509v3 Authority Key Identifier:
                keyid:ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:42:74:fd:92:d6:37:b5:43:ad:05:25:4f:00:e9:ab:42:6b:
         66:40:d5:56:62:b0:c8:e0:e8:14:89:9b:2a:22:6c:d7:01:a3:
         57:1f:56:4c:e0:00:fa:c5:49:b7:5c:29:c3:41:de:6c:0a:ef:
         f4:cf:6c:7f:01:e6:67:7f:a7:6b:d9:ed:e2:5b:d8:21:19:e4:
         0d:67:95:d6:81:41:ce:a2:56:be:eb:52:78:d2:f3:be:3a:64:
         44:2d:e9:58:ad:9e:fb:38:48:24:43:ea:90:bd:81:71:c9:56:
         59:8d:be:46:e3:54:22:a3:9c:0c:92:ef:32:b7:e7:81:a5:ca:
         6f:7c:0d:91:70:99:ac:6f:b3:de:5a:f6:d6:61:03:b2:2a:33:
         d2:66:76:09:73:78:7d:06:a6:73:a5:f0:b5:6c:83:90:58:30:
         84:a5:86:e1:73:e6:d8:8c:d7:2e:1c:0f:d2:21:63:c9:74:c9:
         d0:80:9f:db:a0:11:43:f6:74:8f:fa:53:19:3b:6e:ef:97:24:
         8e:d3:0f:08:b6:a0:4b:a4:d9:1c:de:eb:4b:9a:10:13:b2:e8:
         e1:6d:cb:da:d4:a7:e0:bb:87:bf:3a:18:d0:c0:fa:18:7f:20:
         f1:8e:f0:e4:f8:91:26:9e:df:0d:5c:b8:7c:01:73:33:b7:82:
         6b:08:36:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----