Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
File:                     5qowZQKj7IBJPXU0jChYsa9-z4A.mft (raw, json)
Hash identifier:          iQfTRSJ4lgwY+59JZBZTxGuVUZaIp9Noda0bctrHYd8=
Subject key identifier:   83:66:90:2E:CB:58:53:2D:53:0A:18:83:8C:9B:E5:FA:9F:FE:91:50
Authority key identifier: E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
Certificate issuer:       /CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Certificate serial:       0191FAED4D8EE3221897FFAACB8136B2E402
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
Manifest number:          0142
Signing time:             Mon 16 Sep 2024 13:02:21 +0000
Manifest this update:     Mon 16 Sep 2024 13:02:21 +0000
Manifest next update:     Tue 17 Sep 2024 13:02:21 +0000
Files and hashes:         1: 5qowZQKj7IBJPXU0jChYsa9-z4A.crl (hash: N7iHqJ5zmIaCSaQFb8Oclu5kSCFtWdD48VMUFaUlPk4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ed:4d:8e:e3:22:18:97:ff:aa:cb:81:36:b2:e4:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
        Validity
            Not Before: Sep 16 13:02:21 2024 GMT
            Not After : Sep 17 13:02:21 2024 GMT
        Subject: CN=8366902ecb58532d530a18838c9be5fa9ffe9150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fe:91:90:f2:e1:96:97:53:6d:00:01:f8:1f:
                    a5:8d:e8:25:bb:b5:91:d8:af:45:09:b2:f3:9c:33:
                    cf:48:35:c0:55:a2:46:f7:c8:55:e3:cc:0a:27:5f:
                    5f:2e:9b:ca:ab:26:fd:7e:19:ce:d8:6c:40:8d:10:
                    5e:6a:06:ee:db:79:75:7c:74:f4:2f:94:6c:25:28:
                    76:a9:a5:41:42:e0:6e:69:ae:0c:24:bc:f5:01:75:
                    89:6e:69:cc:8a:d1:1b:89:62:e7:f7:6f:78:7e:3b:
                    95:d1:8a:9d:39:51:59:b6:97:76:70:5d:43:f3:c5:
                    a9:68:d6:b0:21:ee:5f:a0:2d:2b:a6:3d:e6:77:f0:
                    31:82:e3:9d:ce:ee:9d:c5:1d:38:76:07:c4:53:d3:
                    17:ad:ff:20:34:19:44:d7:53:db:9e:7a:cc:fb:56:
                    3b:1c:b0:b0:ba:1b:f5:a5:7a:7a:4b:7d:2b:1d:31:
                    85:9f:b1:5a:a5:42:c6:01:25:b6:52:91:27:97:17:
                    ff:7e:7d:cf:35:8a:b7:c0:dc:ef:a1:17:61:fe:e4:
                    fc:7f:bf:eb:14:3a:a9:73:15:b8:80:d6:27:82:b5:
                    75:1a:58:9b:3f:44:d0:a7:2a:20:2f:6c:ff:ca:f6:
                    48:c7:1a:ff:e2:f7:1f:66:c2:b2:9a:74:2a:12:8d:
                    4f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:66:90:2E:CB:58:53:2D:53:0A:18:83:8C:9B:E5:FA:9F:FE:91:50
            X509v3 Authority Key Identifier:
                keyid:E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ed:81:a7:12:2d:7a:3d:4c:be:c8:c1:42:7d:e7:24:b4:b5:
         6b:29:3e:1e:d0:30:62:a4:66:85:7b:43:0a:94:51:ae:4b:81:
         87:ad:8d:d4:71:11:b7:1d:a2:46:fd:f9:46:44:f7:df:f5:e3:
         35:bb:e0:be:05:a3:a3:55:fd:20:29:1e:33:bb:ca:d6:75:44:
         0a:4d:d2:88:e0:58:70:4c:b9:25:22:bc:3f:48:a4:68:dc:39:
         11:fd:6d:8f:b8:02:c6:7b:df:a1:e9:0a:12:dc:51:3b:e8:0e:
         94:54:1d:5a:c3:e6:50:df:63:cd:dd:94:bc:12:af:0f:c4:eb:
         9a:59:e9:83:57:31:81:40:5b:54:f8:82:c6:22:f3:98:9c:3c:
         99:bb:f1:6b:cb:52:e8:5d:c9:d7:30:3d:0e:89:c4:13:36:bb:
         cb:76:46:a3:4b:46:bf:67:0f:49:ae:a1:39:dd:96:13:9b:dc:
         55:1f:81:01:7e:71:e9:34:5a:99:58:ec:d5:23:41:9b:73:f4:
         ae:58:c3:6c:4e:7b:c1:64:93:3e:5d:12:85:b0:bb:19:72:65:
         c0:e6:a1:66:9b:4f:b3:aa:71:8d:c1:d8:16:ea:ff:79:2a:9f:
         1b:e7:f3:19:f0:5e:8c:11:c4:bd:78:7b:69:51:96:b7:ee:7a:
         58:ff:73:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH67U2O4yIYl/+qy4E2suQCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YWEzMDY1MDJhM2VjODA0OTNkNzUzNDhjMjg1OGIxYWY3
ZWNmODAwHhcNMjQwOTE2MTMwMjIxWhcNMjQwOTE3MTMwMjIxWjAzMTEwLwYDVQQD
Eyg4MzY2OTAyZWNiNTg1MzJkNTMwYTE4ODM4YzliZTVmYTlmZmU5MTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1f6RkPLhlpdTbQAB+B+ljeglu7WR
2K9FCbLznDPPSDXAVaJG98hV48wKJ19fLpvKqyb9fhnO2GxAjRBeagbu23l1fHT0
L5RsJSh2qaVBQuBuaa4MJLz1AXWJbmnMitEbiWLn9294fjuV0YqdOVFZtpd2cF1D
88WpaNawIe5foC0rpj3md/AxguOdzu6dxR04dgfEU9MXrf8gNBlE11PbnnrM+1Y7
HLCwuhv1pXp6S30rHTGFn7FapULGASW2UpEnlxf/fn3PNYq3wNzvoRdh/uT8f7/r
FDqpcxW4gNYngrV1GlibP0TQpyogL2z/yvZIxxr/4vcfZsKymnQqEo1P+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINmkC7LWFMtUwoYg4yb5fqf/pFQMB8GA1UdIwQY
MBaAFOaqMGUCo+yAST11NIwoWLGvfs+AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXFvd1pRS2o3SUJKUFhVMGpDaFlzYTktejRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xZGM3MzItODg4ZS00MmViLThkOGMt
ZmYwMGYyYWM4Yzc4LzEvNXFvd1pRS2o3SUJKUFhVMGpDaFlzYTktejRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8xZGM3MzItODg4ZS00MmViLThkOGMtZmYwMGYyYWM4Yzc4
LzEvNXFvd1pRS2o3SUJKUFhVMGpDaFlzYTktejRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbO2BpxIt
ej1MvsjBQn3nJLS1ayk+HtAwYqRmhXtDCpRRrkuBh62N1HERtx2iRv35RkT33/Xj
NbvgvgWjo1X9ICkeM7vK1nVECk3SiOBYcEy5JSK8P0ikaNw5Ef1tj7gCxnvfoekK
EtxRO+gOlFQdWsPmUN9jzd2UvBKvD8Trmlnpg1cxgUBbVPiCxiLzmJw8mbvxa8tS
6F3J1zA9DonEEza7y3ZGo0tGv2cPSa6hOd2WE5vcVR+BAX5x6TRamVjs1SNBm3P0
rljDbE57wWSTPl0ShbC7GXJlwOahZptPs6pxjcHYFur/eSqfG+fzGfBejBHEvXh7
aVGWt+56WP9zvw==
-----END CERTIFICATE-----