Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
File:                     EX-Mmn_H8TZY1ir76285iC2lEcw.mft (raw, json)
Hash identifier:          W8dhTnkJ7bQHDBxlbvGq5/2P24coq2w2Ohw7c0M9Nvc=
Subject key identifier:   40:D2:36:F4:D6:E5:C2:67:46:3B:AC:8A:D3:8B:47:69:D9:CB:25:29
Authority key identifier: 11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC
Certificate issuer:       /CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
Certificate serial:       0193535101EA98CCD56309D7CEE58C670516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 10:00:38 +0000
Manifest this update:     Fri 22 Nov 2024 10:00:38 +0000
Manifest next update:     Sat 23 Nov 2024 10:00:38 +0000
Files and hashes:         1: EX-Mmn_H8TZY1ir76285iC2lEcw.crl (hash: frtjSn+gOv+TkbvokHo6Dy/qvAWvBztfX0BFfk0bdeo=)
                          2: FLWVEOzqRjxSad206noxqkwfu9g.roa (hash: cdsUBTvMXZlUz3k0UCTn+EQ4p+gKtZV59WlpuCdduaU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:51:01:ea:98:cc:d5:63:09:d7:ce:e5:8c:67:05:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
        Validity
            Not Before: Nov 22 10:00:38 2024 GMT
            Not After : Nov 23 10:00:38 2024 GMT
        Subject: CN=40d236f4d6e5c267463bac8ad38b4769d9cb2529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:30:a6:97:9f:5b:37:fa:6c:d9:f4:ce:a9:
                    82:07:a1:69:a9:56:02:d4:91:20:27:1a:81:3a:ee:
                    9e:ab:21:b4:43:61:ab:07:31:e8:a3:d8:65:93:59:
                    48:f5:48:75:9e:99:2b:b6:a9:bf:8c:24:07:78:45:
                    dc:08:3c:1f:16:39:6b:11:ab:59:5a:c7:19:a7:ad:
                    ca:94:ef:07:be:55:52:ce:b8:22:f8:50:0c:f4:10:
                    f4:5c:0a:ab:c8:38:e0:45:e3:ec:05:a1:d7:e6:1d:
                    23:40:2f:aa:15:c3:f6:87:89:ca:8b:fb:ac:3a:12:
                    8b:f6:79:ed:b1:ef:74:d3:0f:4e:58:c9:fb:ed:22:
                    2c:23:7c:be:f8:4c:b1:e4:56:0b:11:37:ae:4b:00:
                    e5:48:a9:2c:87:23:3a:cd:da:1e:a5:1c:b8:3e:b5:
                    da:ce:89:23:a9:6b:14:d0:b1:0f:65:12:e4:9e:12:
                    15:e6:fc:a8:d4:eb:4d:2d:79:e0:b1:74:ca:c3:fb:
                    5c:b2:89:3e:63:87:93:9e:3e:73:c0:56:6a:49:dd:
                    3f:83:8c:84:27:f2:f8:e9:7c:c6:c0:1b:e3:68:fd:
                    da:33:9f:b6:a3:13:b1:33:dd:65:81:fe:b7:cf:cd:
                    f2:f6:e7:e2:3b:67:5b:bd:1e:6f:90:69:7d:c0:ad:
                    3b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D2:36:F4:D6:E5:C2:67:46:3B:AC:8A:D3:8B:47:69:D9:CB:25:29
            X509v3 Authority Key Identifier:
                keyid:11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:99:fc:4c:f5:6f:cb:25:21:cc:c9:f4:f4:52:5b:ae:54:20:
         70:76:ae:35:5b:c3:0e:3c:82:4b:65:b2:30:ed:19:06:f5:26:
         8a:a0:33:b6:8d:3a:e3:19:63:c4:fa:76:4d:35:f7:6a:ce:14:
         7a:b3:bd:b5:9b:35:6c:16:b2:63:53:bb:03:1b:2e:d1:ae:36:
         93:0c:93:09:d1:c5:6a:9c:59:fd:82:23:c2:be:cd:4f:35:11:
         c6:33:a3:cd:61:23:dc:f7:2f:b1:4a:a6:98:eb:63:1d:cb:86:
         bc:60:95:c6:d5:b4:a2:55:28:38:49:de:7a:18:ce:04:ec:fe:
         3f:ad:a4:45:24:24:b4:22:2e:62:e4:ff:fc:e5:2f:22:46:6f:
         79:4b:4a:da:e2:49:4d:96:90:bb:c0:de:92:80:0b:cf:f0:38:
         23:e9:12:32:13:04:7f:b2:53:38:9c:85:bc:8e:cf:44:24:b7:
         9f:94:6d:e0:1c:19:51:f6:bd:cd:ad:5c:11:35:e7:4a:ca:fe:
         88:b5:47:9c:37:41:26:25:b1:c3:1a:67:0c:f3:6e:04:61:dc:
         ba:e4:a4:77:95:71:f8:fc:75:3d:9d:5e:26:3b:b5:6c:cc:27:
         90:a1:71:df:54:f1:83:03:4d:68:97:3b:6c:65:c9:be:65:3d:
         7c:da:50:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNTUQHqmMzVYwnXzuWMZwUWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExN2Y4YzlhN2ZjN2YxMzY1OGQ2MmFmYmViNmYzOTg4MmRh
NTExY2MwHhcNMjQxMTIyMTAwMDM4WhcNMjQxMTIzMTAwMDM4WjAzMTEwLwYDVQQD
Eyg0MGQyMzZmNGQ2ZTVjMjY3NDYzYmFjOGFkMzhiNDc2OWQ5Y2IyNTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEMwppefWzf6bNn0zqmCB6FpqVYC
1JEgJxqBOu6eqyG0Q2GrBzHoo9hlk1lI9Uh1npkrtqm/jCQHeEXcCDwfFjlrEatZ
WscZp63KlO8HvlVSzrgi+FAM9BD0XAqryDjgRePsBaHX5h0jQC+qFcP2h4nKi/us
OhKL9nntse900w9OWMn77SIsI3y++Eyx5FYLETeuSwDlSKkshyM6zdoepRy4PrXa
zokjqWsU0LEPZRLknhIV5vyo1OtNLXngsXTKw/tcsok+Y4eTnj5zwFZqSd0/g4yE
J/L46XzGwBvjaP3aM5+2oxOxM91lgf63z83y9ufiO2dbvR5vkGl9wK073wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDSNvTW5cJnRjusitOLR2nZyyUpMB8GA1UdIwQY
MBaAFBF/jJp/x/E2WNYq++tvOYgtpRHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVgtTW1uX0g4VFpZMWlyNzYyODVpQzJsRWN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xMjJiMmQtNWQ4Ny00NzhjLTg1MjIt
ODlkNjZhYzcyZTAyLzEvRVgtTW1uX0g4VFpZMWlyNzYyODVpQzJsRWN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8xMjJiMmQtNWQ4Ny00NzhjLTg1MjItODlkNjZhYzcyZTAy
LzEvRVgtTW1uX0g4VFpZMWlyNzYyODVpQzJsRWN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJn8TPVv
yyUhzMn09FJbrlQgcHauNVvDDjyCS2WyMO0ZBvUmiqAzto064xljxPp2TTX3as4U
erO9tZs1bBayY1O7Axsu0a42kwyTCdHFapxZ/YIjwr7NTzURxjOjzWEj3PcvsUqm
mOtjHcuGvGCVxtW0olUoOEneehjOBOz+P62kRSQktCIuYuT//OUvIkZveUtK2uJJ
TZaQu8DekoALz/A4I+kSMhMEf7JTOJyFvI7PRCS3n5Rt4BwZUfa9za1cETXnSsr+
iLVHnDdBJiWxwxpnDPNuBGHcuuSkd5Vx+Px1PZ1eJju1bMwnkKFx31TxgwNNaJc7
bGXJvmU9fNpQMQ==
-----END CERTIFICATE-----