Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
File:                     0Q1bMLRse5ey28RYnOo2Iq11YVY.mft (raw, json)
Hash identifier:          7x7bWzTBZdV8Hf/21yZiDjPjzAweK31LiKjNfO0I6NM=
Subject key identifier:   16:A0:FF:66:CF:F2:11:D0:4C:3D:23:4F:AA:86:97:8D:6F:AE:77:74
Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
Certificate issuer:       /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Certificate serial:       019350BF0E770F72666E24C73F4930EE7A31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
Manifest number:          136C
Signing time:             Thu 21 Nov 2024 22:01:58 +0000
Manifest this update:     Thu 21 Nov 2024 22:01:58 +0000
Manifest next update:     Fri 22 Nov 2024 22:01:58 +0000
Files and hashes:         1: 0Q1bMLRse5ey28RYnOo2Iq11YVY.crl (hash: Xxq8/IgT0/8SAe/T6U8a37Uevoh3Ilh/ICEa7u0LZE8=)
                          2: ECHKwWWJLDt_9gXV_TfltqPmATU.roa (hash: oqg7TTEMNnBkXPEKhDtwDAjoa3VS5TBz5PuWODnEQy0=)
                          3: Glr0pxpXKUvkQiBq0__UGqpEZNQ.roa (hash: 3I1JzdFBx95hXYXMbZglQbQ7A9UO7sJL3pCjLgGLHwk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:bf:0e:77:0f:72:66:6e:24:c7:3f:49:30:ee:7a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
        Validity
            Not Before: Nov 21 22:01:58 2024 GMT
            Not After : Nov 22 22:01:58 2024 GMT
        Subject: CN=16a0ff66cff211d04c3d234faa86978d6fae7774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:63:eb:00:82:d6:db:86:46:87:94:66:4e:43:
                    dc:2b:7c:d0:80:bc:fd:ad:8f:9f:a8:d8:45:fc:54:
                    e8:44:88:db:82:2e:a9:ea:ff:5b:8d:ea:48:ea:3a:
                    b0:d8:fa:d4:99:40:48:fa:e9:c4:ec:ab:21:75:13:
                    11:bf:0e:30:b7:b3:bc:28:7e:c2:81:92:94:4a:b5:
                    67:73:0f:42:82:6b:2b:4d:08:bf:13:0e:e3:88:c1:
                    ac:54:c0:d6:c4:79:7e:17:59:8a:71:d4:53:ad:fa:
                    eb:56:2f:65:5f:d6:b4:69:c5:18:cd:fa:58:e6:c9:
                    66:56:47:38:b3:92:59:00:90:51:78:bc:0e:3e:43:
                    bd:d2:1c:98:2c:e5:17:05:01:bf:5c:58:47:d0:9c:
                    a1:b0:08:ee:c1:c9:19:2f:1c:85:d8:aa:41:5b:ea:
                    f8:f7:55:ba:19:74:2e:21:25:7d:72:95:0b:87:4f:
                    c5:1b:31:49:ba:93:67:22:9e:ff:fb:61:f2:02:fa:
                    69:51:73:01:5b:25:79:5e:66:e6:b8:8c:22:49:00:
                    cc:f7:7a:07:0b:c2:ae:e3:a6:ea:c9:aa:4f:9d:f4:
                    06:a7:ce:52:39:08:27:43:09:91:2b:ee:33:b5:b5:
                    84:ad:7f:44:1b:3c:7b:c0:7e:44:bc:62:54:cf:07:
                    93:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A0:FF:66:CF:F2:11:D0:4C:3D:23:4F:AA:86:97:8D:6F:AE:77:74
            X509v3 Authority Key Identifier:
                keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:20:b4:1d:58:3b:d1:05:27:32:5d:9e:b0:b2:46:a6:95:87:
         79:11:b4:d3:11:b4:ea:2a:2e:63:d1:06:c0:ab:71:c7:a3:04:
         2f:a3:00:97:c0:f4:7e:77:08:84:cd:bf:4a:0e:4d:1a:50:2c:
         91:4e:ba:ea:6d:c1:ef:ca:60:3e:b6:42:83:d1:42:91:74:ac:
         25:92:41:22:70:a4:25:64:73:f6:db:76:23:64:b1:7e:fb:4f:
         82:42:8b:3e:10:28:2e:42:2b:58:6d:b2:47:83:c0:c1:f7:b4:
         8c:65:12:40:44:58:8f:ba:76:37:c1:32:98:09:b2:0d:6d:0f:
         72:7e:34:7b:85:cd:1d:e4:ad:49:a0:0b:50:74:ae:03:c0:af:
         53:3b:74:6d:10:40:07:0d:0e:b0:98:2a:18:a4:cb:ba:41:c1:
         98:74:31:bd:ae:12:6d:19:77:3d:aa:4e:2c:65:3f:a6:5e:47:
         dd:32:90:d1:5a:5a:72:b0:7f:30:5f:55:b4:c5:cc:a0:a6:a3:
         48:32:15:22:90:07:b8:67:97:fa:7c:f2:cb:48:a4:80:66:22:
         b2:17:a7:97:ce:d5:72:c0:20:3a:e9:df:74:ca:17:08:15:45:
         a7:93:ac:7c:1f:42:53:bf:bd:fb:17:15:e3:e9:54:d1:27:bd:
         6d:85:db:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----