Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft
File:                     MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft (raw, json)
Hash identifier:          cSTX5k2y3r71RvznTTxAY5tCQZFgGS327yyiR7l/2uM=
Subject key identifier:   47:D3:B0:4E:88:B6:E2:D4:70:BD:59:72:15:AB:12:42:8B:2D:3D:64
Authority key identifier: 30:75:D8:7C:19:7A:0F:A0:4D:A8:F2:25:35:8D:3F:AF:78:6F:7D:0B
Certificate issuer:       /CN=3075d87c197a0fa04da8f225358d3faf786f7d0b
Certificate serial:       0193696AA3724C3825B728D9AF727E87BFC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHXYfBl6D6BNqPIlNY0_r3hvfQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft
Manifest number:          0165
Signing time:             Tue 26 Nov 2024 17:00:16 +0000
Manifest this update:     Tue 26 Nov 2024 17:00:16 +0000
Manifest next update:     Wed 27 Nov 2024 17:00:16 +0000
Files and hashes:         1: MHXYfBl6D6BNqPIlNY0_r3hvfQs.crl (hash: k9gK9z9cWoy7+2yD//jSwqACK5+F9oDfoAiXY53BCrI=)
                          2: qJOnZ7dYiFv49AbH62Kw6Osb4eM.roa (hash: UntCKVoK9Hko62xqcTATbMht5i7k706QWCya0Z7jPCQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MHXYfBl6D6BNqPIlNY0_r3hvfQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 17:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:6a:a3:72:4c:38:25:b7:28:d9:af:72:7e:87:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3075d87c197a0fa04da8f225358d3faf786f7d0b
        Validity
            Not Before: Nov 26 17:00:16 2024 GMT
            Not After : Nov 27 17:00:16 2024 GMT
        Subject: CN=47d3b04e88b6e2d470bd597215ab12428b2d3d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f5:9e:75:ec:e5:15:ab:e8:d1:59:93:c8:a4:
                    26:ae:27:3c:e9:49:ec:ba:ff:6b:5f:db:f9:6c:30:
                    af:7f:9e:02:d9:67:ef:63:24:69:77:66:a8:70:5a:
                    30:d8:9e:99:f4:4f:8e:ab:18:b0:2a:41:09:9c:74:
                    8f:ec:9b:cf:8c:dd:e8:ab:56:e7:34:77:37:30:53:
                    7a:d2:1b:c9:b1:78:ad:9a:a0:27:2c:2c:66:7a:d8:
                    b2:9f:da:e6:2f:97:e7:c8:00:69:c4:9f:1f:79:5d:
                    c6:4b:e0:87:ad:4a:b6:4f:62:2a:53:9f:d2:9c:9f:
                    1d:42:fc:77:a5:36:83:f0:6b:0b:c0:d6:d9:ad:2b:
                    44:63:60:ca:b3:3a:3d:7c:ff:23:b7:57:05:a8:d0:
                    43:d0:4d:eb:45:52:16:56:d2:47:aa:2d:97:90:ef:
                    19:f8:03:b3:7a:20:6c:6f:20:fc:58:7b:e6:29:00:
                    d7:94:1a:0d:53:9a:3d:a6:a7:16:7b:00:11:8f:59:
                    bb:37:9c:d9:9c:d1:5d:13:33:79:23:2b:bd:71:2a:
                    d0:43:66:3c:e0:46:ec:1b:44:59:49:4c:7d:73:83:
                    42:42:88:df:65:6a:6c:3c:ef:62:de:c5:3d:69:0a:
                    1f:21:a2:52:90:54:47:e3:56:61:68:55:96:0c:8d:
                    69:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D3:B0:4E:88:B6:E2:D4:70:BD:59:72:15:AB:12:42:8B:2D:3D:64
            X509v3 Authority Key Identifier:
                keyid:30:75:D8:7C:19:7A:0F:A0:4D:A8:F2:25:35:8D:3F:AF:78:6F:7D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHXYfBl6D6BNqPIlNY0_r3hvfQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:e0:4f:f7:a9:2f:73:4f:52:9d:e4:8a:84:83:ac:73:37:4e:
         61:19:d8:cd:ff:7b:bb:7f:b4:49:cd:28:9e:33:b6:04:ba:54:
         83:99:43:44:e1:61:fc:f8:98:13:78:59:df:34:ee:e6:4d:3c:
         eb:b4:31:60:0f:5e:25:3c:86:f5:62:33:e1:16:9c:e4:24:38:
         2a:9e:e2:88:a5:91:bd:b2:09:ae:e0:81:35:a3:b0:c5:ba:64:
         3f:52:d7:7e:b0:66:cc:6b:af:2d:47:b4:f1:08:74:4a:b3:54:
         2f:3a:57:60:bd:21:ee:d6:f3:d7:e7:0e:e2:16:44:ed:54:8d:
         f1:5a:4a:53:dd:ab:b0:16:40:9e:16:eb:69:fc:4d:9b:85:4f:
         a7:0a:0d:2f:94:80:7a:a6:b6:e5:6a:7d:aa:52:8b:b8:46:d2:
         ef:b7:a6:21:25:b7:14:ce:1f:77:72:9d:83:b8:f3:b8:01:91:
         88:3d:d6:3c:f5:3d:97:34:d4:a9:a8:1c:68:0a:13:20:93:8a:
         9e:06:6e:59:d8:9b:fc:f2:57:21:a2:82:d0:c6:55:55:dd:24:
         ea:ed:b0:72:40:fd:f5:84:f9:23:4d:22:e9:70:06:15:13:0a:
         5e:61:87:d0:6f:4a:9d:1f:b0:e3:6b:7c:50:c2:6b:ff:e2:47:
         ac:38:57:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNpaqNyTDgltyjZr3J+h7/AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzVkODdjMTk3YTBmYTA0ZGE4ZjIyNTM1OGQzZmFmNzg2
ZjdkMGIwHhcNMjQxMTI2MTcwMDE2WhcNMjQxMTI3MTcwMDE2WjAzMTEwLwYDVQQD
Eyg0N2QzYjA0ZTg4YjZlMmQ0NzBiZDU5NzIxNWFiMTI0MjhiMmQzZDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvWedezlFavo0VmTyKQmric86Uns
uv9rX9v5bDCvf54C2WfvYyRpd2aocFow2J6Z9E+OqxiwKkEJnHSP7JvPjN3oq1bn
NHc3MFN60hvJsXitmqAnLCxmetiyn9rmL5fnyABpxJ8feV3GS+CHrUq2T2IqU5/S
nJ8dQvx3pTaD8GsLwNbZrStEY2DKszo9fP8jt1cFqNBD0E3rRVIWVtJHqi2XkO8Z
+AOzeiBsbyD8WHvmKQDXlBoNU5o9pqcWewARj1m7N5zZnNFdEzN5Iyu9cSrQQ2Y8
4EbsG0RZSUx9c4NCQojfZWpsPO9i3sU9aQofIaJSkFRH41ZhaFWWDI1pmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfTsE6ItuLUcL1ZchWrEkKLLT1kMB8GA1UdIwQY
MBaAFDB12HwZeg+gTajyJTWNP694b30LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhYWWZCbDZENkJOcVBJbE5ZMF9yM2h2ZlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hNDAwYjItYmFiNC00MTE5LWEzZDEt
ODk5ODFjOGY5ZTdiLzEvTUhYWWZCbDZENkJOcVBJbE5ZMF9yM2h2ZlFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9hNDAwYjItYmFiNC00MTE5LWEzZDEtODk5ODFjOGY5ZTdi
LzEvTUhYWWZCbDZENkJOcVBJbE5ZMF9yM2h2ZlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAteBP96kv
c09SneSKhIOsczdOYRnYzf97u3+0Sc0onjO2BLpUg5lDROFh/PiYE3hZ3zTu5k08
67QxYA9eJTyG9WIz4Rac5CQ4Kp7iiKWRvbIJruCBNaOwxbpkP1LXfrBmzGuvLUe0
8Qh0SrNULzpXYL0h7tbz1+cO4hZE7VSN8VpKU92rsBZAnhbrafxNm4VPpwoNL5SA
eqa25Wp9qlKLuEbS77emISW3FM4fd3Kdg7jzuAGRiD3WPPU9lzTUqagcaAoTIJOK
ngZuWdib/PJXIaKC0MZVVd0k6u2wckD99YT5I00i6XAGFRMKXmGH0G9KnR+w42t8
UMJr/+JHrDhXdA==
-----END CERTIFICATE-----