Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
File:                     bYvF0sabkWFcyibbtupwV3A24m0.mft (raw, json)
Hash identifier:          fTX3LJkkuTBrTpD+wuj0F6pzzMrV96NsAJGvZsTZheo=
Subject key identifier:   C6:4F:AA:63:8F:5E:CF:B5:D6:3D:F2:1E:EE:75:7C:0D:C7:19:39:38
Authority key identifier: 6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
Certificate issuer:       /CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Certificate serial:       018F87B689672BBFFD67AA704E8A37A90CDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
Manifest number:          0940
Signing time:             Fri 17 May 2024 18:00:37 +0000
Manifest this update:     Fri 17 May 2024 18:00:37 +0000
Manifest next update:     Sat 18 May 2024 18:00:37 +0000
Files and hashes:         1: bYvF0sabkWFcyibbtupwV3A24m0.crl (hash: En5ZguKYL9LZh99nW2N/ba3JNc96HWaV7iX5ZxuecvA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:89:67:2b:bf:fd:67:aa:70:4e:8a:37:a9:0c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
        Validity
            Not Before: May 17 18:00:37 2024 GMT
            Not After : May 18 18:00:37 2024 GMT
        Subject: CN=c64faa638f5ecfb5d63df21eee757c0dc7193938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c3:80:bb:c9:28:1d:8c:0e:87:ab:86:26:a8:
                    41:b3:2e:1f:0c:02:3b:a9:d5:fb:36:63:76:0d:ef:
                    a6:ec:c8:60:01:5f:59:cc:8b:62:69:85:4d:ce:5d:
                    0f:bc:26:4b:3e:a8:6a:6b:3a:dd:3a:71:16:98:01:
                    9f:19:4f:97:4a:f8:f7:f2:d2:5f:fe:e5:95:4b:9d:
                    e5:0f:4b:b5:55:51:8a:2e:40:ec:30:84:84:fc:4f:
                    5a:a4:56:f5:89:3f:10:4d:12:9e:77:98:4c:ed:68:
                    d5:b0:53:2e:24:dd:e7:c9:85:4d:96:7b:1f:4c:33:
                    06:9d:91:e6:7f:49:15:45:31:12:56:e0:62:bc:4b:
                    4a:18:67:d4:46:f1:cd:9b:0c:a6:0c:8d:d3:82:c3:
                    1e:08:17:fa:89:ab:b5:9e:db:ab:36:69:2b:ae:ad:
                    af:3a:23:6e:b2:39:fa:37:0b:ab:f5:fa:6a:9c:56:
                    47:6b:94:d1:ae:0d:9d:cb:10:38:1b:b3:cb:e5:71:
                    3d:07:e6:a3:a8:1c:9a:00:13:77:5a:2e:c2:84:2a:
                    2f:4f:23:7e:20:c1:95:4d:b9:b1:c0:8a:29:0f:92:
                    17:cf:47:7c:76:1a:bb:76:8c:36:e6:f1:9f:ba:09:
                    ff:1f:85:1d:af:a3:08:04:5d:7b:6b:91:d0:ca:42:
                    d7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4F:AA:63:8F:5E:CF:B5:D6:3D:F2:1E:EE:75:7C:0D:C7:19:39:38
            X509v3 Authority Key Identifier:
                keyid:6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ba:1d:95:f0:22:c9:2d:2d:ec:e5:7d:02:6c:d5:aa:23:69:
         00:db:38:56:4d:cb:a2:c1:3d:5a:d8:6f:c0:06:67:cc:b7:4e:
         9d:58:cd:14:3a:90:b4:23:6e:e2:26:4c:7a:6f:39:f6:bd:13:
         9b:86:63:bd:17:18:e7:4a:43:0e:29:87:44:fb:dd:75:01:67:
         43:72:6e:b0:5f:d6:20:4a:0b:18:76:ab:1e:e0:ed:e0:76:4b:
         06:6b:24:4e:05:49:7c:b7:a4:94:bb:d8:2c:fc:8a:cb:fa:ec:
         b1:ad:98:4f:c9:7c:13:2c:ef:40:14:83:64:f9:fb:8c:51:f8:
         5e:69:d4:83:d9:f9:d0:ea:de:49:9c:fa:6c:5b:74:61:0d:bb:
         e6:80:af:b8:4f:3b:f5:8b:42:f3:ba:c5:af:ce:ac:a2:4a:bc:
         71:ac:91:f5:b5:e6:8d:bd:5d:96:15:c7:32:13:21:92:dd:f4:
         ae:cc:ce:cb:f8:f2:30:8d:c5:6e:c6:53:78:6f:fc:dc:70:54:
         84:aa:7d:f3:07:b7:6d:b6:ab:95:af:fa:ef:f6:2c:8b:77:5f:
         21:10:7b:bf:ed:39:80:f6:77:04:3f:e1:c2:e7:ae:06:b7:a8:
         8f:46:3b:fe:59:13:73:44:5c:b6:b2:1f:4c:fc:dd:05:da:3d:
         e2:6d:3c:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtolnK7/9Z6pwToo3qQzdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkOGJjNWQyYzY5YjkxNjE1Y2NhMjZkYmI2ZWE3MDU3NzAz
NmUyNmQwHhcNMjQwNTE3MTgwMDM3WhcNMjQwNTE4MTgwMDM3WjAzMTEwLwYDVQQD
EyhjNjRmYWE2MzhmNWVjZmI1ZDYzZGYyMWVlZTc1N2MwZGM3MTkzOTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsOAu8koHYwOh6uGJqhBsy4fDAI7
qdX7NmN2De+m7MhgAV9ZzItiaYVNzl0PvCZLPqhqazrdOnEWmAGfGU+XSvj38tJf
/uWVS53lD0u1VVGKLkDsMISE/E9apFb1iT8QTRKed5hM7WjVsFMuJN3nyYVNlnsf
TDMGnZHmf0kVRTESVuBivEtKGGfURvHNmwymDI3TgsMeCBf6iau1nturNmkrrq2v
OiNusjn6Nwur9fpqnFZHa5TRrg2dyxA4G7PL5XE9B+ajqByaABN3Wi7ChCovTyN+
IMGVTbmxwIopD5IXz0d8dhq7dow25vGfugn/H4Udr6MIBF17a5HQykLXTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZPqmOPXs+11j3yHu51fA3HGTk4MB8GA1UdIwQY
MBaAFG2LxdLGm5FhXMom27bqcFdwNuJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYll2RjBzYWJrV0ZjeWliYnR1cHdWM0EyNG0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2UxOTYtZmMyOC00M2FkLWJkNTEt
NzFjMjk2ZDQ5NjlmLzEvYll2RjBzYWJrV0ZjeWliYnR1cHdWM0EyNG0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wM2UxOTYtZmMyOC00M2FkLWJkNTEtNzFjMjk2ZDQ5Njlm
LzEvYll2RjBzYWJrV0ZjeWliYnR1cHdWM0EyNG0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrodlfAi
yS0t7OV9AmzVqiNpANs4Vk3LosE9WthvwAZnzLdOnVjNFDqQtCNu4iZMem859r0T
m4ZjvRcY50pDDimHRPvddQFnQ3JusF/WIEoLGHarHuDt4HZLBmskTgVJfLeklLvY
LPyKy/rssa2YT8l8EyzvQBSDZPn7jFH4XmnUg9n50OreSZz6bFt0YQ275oCvuE87
9YtC87rFr86sokq8cayR9bXmjb1dlhXHMhMhkt30rszOy/jyMI3FbsZTeG/83HBU
hKp98we3bbarla/67/Ysi3dfIRB7v+05gPZ3BD/hwueuBreoj0Y7/lkTc0RctrIf
TPzdBdo94m08KQ==
-----END CERTIFICATE-----