Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft
File:                     cke6Q-JwyYvcZCqePCGMpSTrD1M.mft (raw, json)
Hash identifier:          4X2W0DYaHtx1rSxCXpq9EORbnFYUHkqeiU+l7kDwN7c=
Subject key identifier:   97:97:14:06:2F:CA:D5:AB:66:D4:46:F8:C6:A2:C7:CB:F8:91:4F:F7
Authority key identifier: 72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53
Certificate issuer:       /CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
Certificate serial:       018F8E267D207AC058BEE2696F898FD734EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft
Manifest number:          117A
Signing time:             Sun 19 May 2024 00:00:38 +0000
Manifest this update:     Sun 19 May 2024 00:00:38 +0000
Manifest next update:     Mon 20 May 2024 00:00:38 +0000
Files and hashes:         1: AV-Iyb5pnoaCOLuONsU77Wq2eMU.roa (hash: ztmXQ/kaOTwMKH91gWWMW0ypvPigN9QKS+WEiWDxbKw=)
                          2: I75AFHQZs2FHHKbxdiP8IKUp57o.roa (hash: WDJu9DJCgr3zQeIgNRzXfP6ircNnDksOs987YAq+0Qs=)
                          3: cke6Q-JwyYvcZCqePCGMpSTrD1M.crl (hash: YoGKG5EhGao134tVCLAiKp97tIJhesMJsUyTEKqUC1s=)
                          4: jCm3iogaNC5EfoK_D_WzeOEl-zU.roa (hash: Dy+sEqMils9nsxbNPnAVtZ5GffRZj+kOWcM6XPT8TlM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8e:26:7d:20:7a:c0:58:be:e2:69:6f:89:8f:d7:34:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
        Validity
            Not Before: May 19 00:00:38 2024 GMT
            Not After : May 20 00:00:38 2024 GMT
        Subject: CN=979714062fcad5ab66d446f8c6a2c7cbf8914ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:e8:ed:d0:15:bb:c9:60:a8:1d:a1:df:ce:
                    9d:e7:83:cf:c5:12:eb:29:50:42:f0:7f:c7:c8:4d:
                    7f:f1:59:57:df:e0:67:f3:6c:47:8c:66:15:55:48:
                    84:62:17:d1:5d:1e:bb:79:8f:b3:91:6e:b6:5b:3a:
                    f4:88:4d:09:88:ec:b5:3c:da:7e:b6:af:26:9b:97:
                    a0:3c:f9:0a:ec:01:55:0f:5f:6b:47:9e:c2:69:df:
                    1d:1c:78:f6:68:c4:9d:71:71:88:c5:1d:85:2d:b7:
                    a9:70:fa:99:60:bb:0f:13:b5:df:e3:49:47:dd:a8:
                    2e:c4:b3:9e:7f:a3:8d:e1:c6:e0:49:b5:b2:45:cb:
                    1a:da:2f:02:be:3a:00:08:e6:c1:22:49:d6:05:ad:
                    41:fe:f7:de:6d:c6:c0:d8:4c:ad:72:f0:94:47:79:
                    39:95:b0:5d:cf:ac:a8:a1:50:9e:8f:d6:d9:46:b3:
                    57:07:bb:72:93:ed:e3:09:70:aa:88:82:44:20:b4:
                    48:1d:49:48:3c:d6:70:05:ba:10:a4:6f:5e:00:94:
                    7b:d4:9c:f7:ad:00:06:59:9a:0c:fe:82:97:09:72:
                    4f:8b:ba:9f:f6:56:9b:41:41:42:87:54:b0:b1:99:
                    6b:dc:91:c9:46:6f:01:01:56:08:59:bd:31:03:71:
                    68:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:97:14:06:2F:CA:D5:AB:66:D4:46:F8:C6:A2:C7:CB:F8:91:4F:F7
            X509v3 Authority Key Identifier:
                keyid:72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:84:2a:01:be:45:4d:9e:12:73:ef:92:88:f4:f8:60:a4:a2:
         84:77:b8:73:af:88:a9:11:15:f3:8e:13:63:f0:08:96:d5:68:
         7f:bc:be:10:89:fd:83:f5:66:7c:b6:96:05:43:63:49:9d:eb:
         d6:83:af:1c:28:bd:c3:31:98:92:34:fe:5e:53:fa:7a:25:36:
         21:cb:8f:a4:9c:c9:29:f0:4e:4b:14:1d:15:35:fd:2c:49:f5:
         46:79:51:b7:78:ce:a4:d2:86:f2:44:dd:da:f4:fa:fb:a5:ed:
         98:f5:13:7d:da:60:b3:21:1d:de:1c:12:2b:fe:fa:5c:88:ac:
         90:d9:0f:7d:8c:31:0e:d7:82:05:b7:5c:ef:3c:b8:d6:e4:cb:
         f4:a3:55:f6:dd:1e:c0:37:bb:99:96:87:87:e7:91:50:52:b9:
         28:06:03:d5:42:60:0f:c7:8a:b4:ca:9e:4a:f3:bb:13:ef:19:
         03:24:dc:39:a7:14:40:55:7f:53:b7:6c:29:89:29:53:9e:a5:
         95:88:f2:c7:6f:fb:d8:87:3b:d2:10:06:23:ae:40:bd:e3:e5:
         d7:03:03:80:56:b0:5f:e9:00:50:33:81:3e:c6:34:c9:be:2a:
         13:c0:72:ac:0d:0d:cd:34:f6:f5:b0:47:0a:0a:01:d2:82:32:
         87:5e:80:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+OJn0gesBYvuJpb4mP1zTrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNDdiYTQzZTI3MGM5OGJkYzY0MmE5ZTNjMjE4Y2E1MjRl
YjBmNTMwHhcNMjQwNTE5MDAwMDM4WhcNMjQwNTIwMDAwMDM4WjAzMTEwLwYDVQQD
Eyg5Nzk3MTQwNjJmY2FkNWFiNjZkNDQ2ZjhjNmEyYzdjYmY4OTE0ZmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvXo7dAVu8lgqB2h386d54PPxRLr
KVBC8H/HyE1/8VlX3+Bn82xHjGYVVUiEYhfRXR67eY+zkW62Wzr0iE0JiOy1PNp+
tq8mm5egPPkK7AFVD19rR57Cad8dHHj2aMSdcXGIxR2FLbepcPqZYLsPE7Xf40lH
3aguxLOef6ON4cbgSbWyRcsa2i8CvjoACObBIknWBa1B/vfebcbA2EytcvCUR3k5
lbBdz6yooVCej9bZRrNXB7tyk+3jCXCqiIJEILRIHUlIPNZwBboQpG9eAJR71Jz3
rQAGWZoM/oKXCXJPi7qf9labQUFCh1SwsZlr3JHJRm8BAVYIWb0xA3FoawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJeXFAYvytWrZtRG+Maix8v4kU/3MB8GA1UdIwQY
MBaAFHJHukPicMmL3GQqnjwhjKUk6w9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2tlNlEtSnd5WXZjWkNxZVBDR01wU1RyRDFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zNDEwNjgtMjhmNi00ZjgxLTk5M2Yt
Mjc5MjAzYjFkOTJjLzEvY2tlNlEtSnd5WXZjWkNxZVBDR01wU1RyRDFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8zNDEwNjgtMjhmNi00ZjgxLTk5M2YtMjc5MjAzYjFkOTJj
LzEvY2tlNlEtSnd5WXZjWkNxZVBDR01wU1RyRDFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIQqAb5F
TZ4Sc++SiPT4YKSihHe4c6+IqREV844TY/AIltVof7y+EIn9g/VmfLaWBUNjSZ3r
1oOvHCi9wzGYkjT+XlP6eiU2IcuPpJzJKfBOSxQdFTX9LEn1RnlRt3jOpNKG8kTd
2vT6+6XtmPUTfdpgsyEd3hwSK/76XIiskNkPfYwxDteCBbdc7zy41uTL9KNV9t0e
wDe7mZaHh+eRUFK5KAYD1UJgD8eKtMqeSvO7E+8ZAyTcOacUQFV/U7dsKYkpU56l
lYjyx2/72Ic70hAGI65AvePl1wMDgFawX+kAUDOBPsY0yb4qE8ByrA0NzTT29bBH
CgoB0oIyh16ALg==
-----END CERTIFICATE-----