Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
File:                     diZWxeZrgsBGVL4aJWKbH9allFY.mft (raw, json)
Hash identifier:          2fwS5gdgoH77ayPmL6+EWWuQ1BKrD5bAyPrxt1l2LO4=
Subject key identifier:   B5:E9:B4:42:C3:4A:DE:AD:B1:C8:F6:7F:4C:13:CA:71:10:6F:AB:91
Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
Certificate issuer:       /CN=762656c5e66b82c04654be1a25629b1fd6a59456
Certificate serial:       01901DEB60D8695BA6CD5B00AD754F02DF56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
Manifest number:          0CC5
Signing time:             Sat 15 Jun 2024 22:01:23 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:23 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:23 +0000
Files and hashes:         1: F5NyqIjyyPZnKsCCdiWO_H8G2XU.roa (hash: vgiQCZAfspEC6Evs7FQd/Se0WU3+AYLlPCfH0tvquSI=)
                          2: PRVW7Y7RBC_IeiHGrg1YmVghN0U.roa (hash: +B8nCqi6fDzZ3hYs6jG/wAdeE7lrYJ+EYbQ7BxH9dz0=)
                          3: RSGS_A9ZhHfhPs-Xd-2yBhaUx04.roa (hash: 9DeIEWauvtB5gVJpol9lD4tGpJrhuAMpwlj+8F7c68c=)
                          4: diZWxeZrgsBGVL4aJWKbH9allFY.crl (hash: hDJIy9YRT/4tk+Ld8e5+z2AcHhvit0Elp/6spaTFAmw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:60:d8:69:5b:a6:cd:5b:00:ad:75:4f:02:df:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456
        Validity
            Not Before: Jun 15 22:01:23 2024 GMT
            Not After : Jun 16 22:01:23 2024 GMT
        Subject: CN=b5e9b442c34adeadb1c8f67f4c13ca71106fab91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:63:a1:bd:c2:ac:4c:a5:d0:31:3b:fd:76:95:
                    9c:0b:8e:a3:16:d8:2b:15:f4:26:38:5e:d0:fa:db:
                    f8:0b:d2:38:88:c4:ba:8c:b4:f5:02:3b:89:6e:2b:
                    f2:eb:32:f0:64:9f:1e:ce:c8:d5:bf:0e:63:6d:26:
                    bd:54:65:7d:d0:4e:5d:f1:87:73:c3:da:ef:06:46:
                    56:3e:c5:db:23:31:70:01:2e:d6:0a:88:bb:9f:2a:
                    11:b8:73:24:2c:1a:a5:2a:0c:84:4f:3d:f5:56:c6:
                    79:fe:e2:94:fc:2b:56:ce:7c:43:6d:1f:1c:86:69:
                    c3:2d:e2:9f:0e:09:c2:72:28:0f:c7:73:c1:9a:00:
                    14:af:f2:54:0d:dd:33:bf:4e:86:39:5f:e9:00:45:
                    1f:f7:41:6e:87:bf:69:8d:90:33:a0:fc:fe:3f:c4:
                    db:28:66:fb:43:a4:92:c2:f3:06:01:15:a7:d7:d6:
                    6e:9d:d5:06:90:ea:eb:aa:09:2f:a9:a0:e2:54:d4:
                    14:62:86:97:12:1e:fe:ac:9b:3f:78:5f:18:ab:ad:
                    95:ed:c4:e5:77:00:13:ed:b5:f9:3b:d9:9c:f8:f5:
                    70:f5:46:9c:3d:36:95:c5:5b:0e:b2:a6:f7:fe:99:
                    7d:84:ce:3b:da:e2:c5:86:f9:5d:60:47:e1:43:06:
                    fb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E9:B4:42:C3:4A:DE:AD:B1:C8:F6:7F:4C:13:CA:71:10:6F:AB:91
            X509v3 Authority Key Identifier:
                keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:29:7b:46:05:a6:97:99:28:d5:af:2d:e4:61:e0:73:b6:e1:
         10:ba:6b:a9:59:da:8b:85:6a:f3:42:ec:3e:49:82:3a:47:84:
         d7:f8:c5:90:3e:83:50:8a:9c:76:8f:e5:31:64:74:ed:0c:7e:
         74:34:8d:7e:b8:cc:c1:03:1c:84:c8:47:af:45:8e:7a:43:d0:
         b5:a3:5f:9e:0a:21:71:13:27:64:bb:d9:4a:8c:da:ab:4a:7a:
         8d:25:a2:28:0b:aa:d1:f8:a7:1e:e9:43:13:e9:6b:5a:f1:7f:
         4c:ce:67:4d:96:a5:f6:41:ef:2d:a7:6e:6e:ff:8c:e1:03:f2:
         49:6a:00:4b:b8:4b:f2:7e:fb:68:df:c4:cb:c6:92:a1:f6:38:
         10:60:1b:19:85:4b:13:bf:9f:9d:1c:f7:e8:8a:8f:d9:e4:89:
         e6:80:d5:b2:7a:84:63:63:c4:d8:aa:99:50:0a:7b:55:ca:be:
         a8:a1:eb:3b:10:c2:a8:8a:5d:18:84:e0:ef:3e:18:16:82:f6:
         84:8f:80:9d:93:fb:6f:2c:9e:22:57:02:af:af:ab:e4:8a:ca:
         b1:b9:d2:f5:73:44:3a:c8:60:5b:62:87:21:5a:50:d9:e6:85:
         9f:0d:12:27:58:e4:0d:60:88:13:18:da:08:31:cd:e4:4d:34:
         7a:b6:5c:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd62DYaVumzVsArXVPAt9WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MjY1NmM1ZTY2YjgyYzA0NjU0YmUxYTI1NjI5YjFmZDZh
NTk0NTYwHhcNMjQwNjE1MjIwMTIzWhcNMjQwNjE2MjIwMTIzWjAzMTEwLwYDVQQD
EyhiNWU5YjQ0MmMzNGFkZWFkYjFjOGY2N2Y0YzEzY2E3MTEwNmZhYjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mOhvcKsTKXQMTv9dpWcC46jFtgr
FfQmOF7Q+tv4C9I4iMS6jLT1AjuJbivy6zLwZJ8ezsjVvw5jbSa9VGV90E5d8Ydz
w9rvBkZWPsXbIzFwAS7WCoi7nyoRuHMkLBqlKgyETz31VsZ5/uKU/CtWznxDbR8c
hmnDLeKfDgnCcigPx3PBmgAUr/JUDd0zv06GOV/pAEUf90Fuh79pjZAzoPz+P8Tb
KGb7Q6SSwvMGARWn19ZundUGkOrrqgkvqaDiVNQUYoaXEh7+rJs/eF8Yq62V7cTl
dwAT7bX5O9mc+PVw9UacPTaVxVsOsqb3/pl9hM472uLFhvldYEfhQwb7wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXptELDSt6tscj2f0wTynEQb6uRMB8GA1UdIwQY
MBaAFHYmVsXma4LARlS+GiVimx/WpZRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xOThjNmItZDcxNS00N2I2LTg2YzAt
NGQyMmM2YjViMWZlLzEvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8xOThjNmItZDcxNS00N2I2LTg2YzAtNGQyMmM2YjViMWZl
LzEvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyl7RgWm
l5ko1a8t5GHgc7bhELprqVnai4Vq80LsPkmCOkeE1/jFkD6DUIqcdo/lMWR07Qx+
dDSNfrjMwQMchMhHr0WOekPQtaNfngohcRMnZLvZSozaq0p6jSWiKAuq0finHulD
E+lrWvF/TM5nTZal9kHvLadubv+M4QPySWoAS7hL8n77aN/Ey8aSofY4EGAbGYVL
E7+fnRz36IqP2eSJ5oDVsnqEY2PE2KqZUAp7Vcq+qKHrOxDCqIpdGITg7z4YFoL2
hI+AnZP7byyeIlcCr6+r5IrKsbnS9XNEOshgW2KHIVpQ2eaFnw0SJ1jkDWCIExja
CDHN5E00erZcSQ==
-----END CERTIFICATE-----