Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
File:                     7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft (raw, json)
Hash identifier:          E92db5Elvl4Se6aO1lIHwGvFkpUIPp8+neQMvZ7DEXc=
Subject key identifier:   AE:5A:33:55:1A:C0:DF:FF:7E:7C:6B:69:A4:0F:00:B4:E4:47:6B:CA
Authority key identifier: EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66
Certificate issuer:       /CN=eeaa52416313b7643ed28d43bc3c4661f46ab366
Certificate serial:       0191F96B73C7975DAABA40FCB379539A1EE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
Manifest number:          0117
Signing time:             Mon 16 Sep 2024 06:00:54 +0000
Manifest this update:     Mon 16 Sep 2024 06:00:54 +0000
Manifest next update:     Tue 17 Sep 2024 06:00:54 +0000
Files and hashes:         1: 7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl (hash: 8/WA9lKhbJCwvu+L6udazlmld5YXbuPgPtF05Wtz2Pc=)
                          2: tBctdcfUyjjmYs10CYzTyXmpUWI.roa (hash: br5FLdAbF+6Tn4iN+8Q+Z93ieo9WXS7lM/ByPWRwQbo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 06:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:6b:73:c7:97:5d:aa:ba:40:fc:b3:79:53:9a:1e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeaa52416313b7643ed28d43bc3c4661f46ab366
        Validity
            Not Before: Sep 16 06:00:54 2024 GMT
            Not After : Sep 17 06:00:54 2024 GMT
        Subject: CN=ae5a33551ac0dfff7e7c6b69a40f00b4e4476bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e7:da:6c:03:f0:a9:4c:e3:63:5f:65:10:60:
                    4c:4b:2b:71:fe:3b:09:7b:eb:1d:de:f7:ce:40:fd:
                    a8:cb:fa:fd:49:5f:5e:96:65:79:31:4d:13:1b:fe:
                    87:97:75:29:b4:49:87:1c:52:ad:52:67:91:48:29:
                    16:6a:4d:c9:60:4b:be:8e:83:3b:cf:09:c6:96:84:
                    42:bf:8d:31:39:c4:f6:b1:4c:3b:ef:84:8d:95:b8:
                    33:36:c0:72:2b:56:a3:37:95:f7:70:10:fd:a5:03:
                    2d:f2:30:33:f7:d2:2c:7b:c9:9b:0c:5c:01:58:bb:
                    88:81:4d:5f:d9:2d:c5:d6:08:73:7b:e8:57:2a:33:
                    28:4c:db:fc:01:1f:10:e9:88:60:a2:03:fb:3e:85:
                    25:df:d7:3a:e7:bd:3d:50:99:0e:3b:56:8f:bc:4d:
                    d2:73:42:a4:ed:1b:d6:cd:c1:09:19:27:d1:34:0e:
                    dc:37:9a:85:a0:5d:8d:3b:a4:14:86:b1:c1:91:a1:
                    87:15:46:3d:a1:26:3c:73:5b:39:11:c6:95:94:97:
                    3d:e7:8a:c8:f7:cf:af:53:cf:b7:04:3c:da:84:07:
                    f1:e6:37:f8:16:fa:73:3e:a5:1c:86:05:87:d3:f8:
                    f5:1b:98:91:81:86:d2:04:17:42:15:f6:59:20:82:
                    07:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5A:33:55:1A:C0:DF:FF:7E:7C:6B:69:A4:0F:00:B4:E4:47:6B:CA
            X509v3 Authority Key Identifier:
                keyid:EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d3:a3:46:02:70:8d:85:dc:e5:56:f3:09:9d:33:c3:4c:57:
         a4:39:e1:2a:c0:30:e5:7c:dc:ed:ae:2a:c4:fc:a4:77:b0:e7:
         78:0b:4e:44:7c:d9:fe:6a:a3:74:4a:24:65:68:61:5d:40:8d:
         8c:5a:9f:30:34:6f:7e:2d:57:b3:c5:63:2c:f8:b0:1f:de:4b:
         18:f7:8b:c5:ea:95:d2:df:7b:47:ae:79:2e:b9:d4:c0:1f:83:
         96:3e:62:d2:a9:ac:bd:09:4f:a3:f8:b8:b0:1c:4f:7c:1d:24:
         8c:84:e6:e4:32:d2:12:91:02:94:62:31:5e:00:88:f1:01:60:
         c6:01:49:ed:08:23:3c:78:f5:13:87:cc:98:34:ef:65:ff:e7:
         8b:fd:81:d3:96:bd:7a:5f:70:d8:fc:53:a6:ae:7b:c6:4f:39:
         03:56:2f:d1:2d:11:62:cf:6b:fc:e6:f3:b4:33:bb:a0:8d:ef:
         95:44:5a:74:5c:03:a8:d7:42:e9:40:29:4d:34:ae:e4:f2:7a:
         83:8a:76:27:d0:96:df:2d:bc:47:74:46:f7:49:89:69:a7:7f:
         d1:57:d7:cc:56:41:45:d5:31:78:ef:2e:a2:e1:26:7f:8c:ca:
         67:6a:b4:01:fe:67:bc:83:59:d6:9b:92:a7:9f:07:43:a1:9c:
         87:ef:fe:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----