Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft
File:                     NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json)
Hash identifier:          F7iqllsNHgMry/wtsw76qcCM3ZRAUlWf1IEhmz5xMIA=
Subject key identifier:   80:DC:8C:C6:9F:D3:82:F9:A0:2F:D4:64:5E:A1:B6:B6:78:68:88:44
Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
Certificate issuer:       /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Certificate serial:       0193516292119580638B565A47E2A0C32C43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft
Manifest number:          10A9
Signing time:             Fri 22 Nov 2024 01:00:34 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:34 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:34 +0000
Files and hashes:         1: 98_9CoAMX8vA5L3MYhfBSBgXfro.roa (hash: IwsJMuEY5xWJbdx7MeR39o7So0mLisUmoGY6ITCrBvA=)
                          2: AIpnQMeGHFVQY9kyWMKEUvA7GYk.roa (hash: +tHz4QUGRwtz9pgY5wrXeTpRh6ChmvrwdsFN3JYemak=)
                          3: EStMkQNsaAUNugMHWcUUmUGRd5Y.roa (hash: BmfnQVJUbzTVrPnURQaE2FANFrkJ40gg3mpiKwSBcpY=)
                          4: IZ0aT9r6slKc2ejZ33smDqZji30.roa (hash: zBodWuQQWiLp31i/PFzDqwgn84LKWjZxxdQCWwRb+dg=)
                          5: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: m6IphPDGV8wH01rmAAoYr/5v2DkKs2G9yvI4rVoPe74=)
                          6: PT2U70hZCuZnaYziH6MoTZd24LI.roa (hash: X0h4jJds2AEW8Bu/ILBnzPT0GXMkGXVc5PPzRuCvChU=)
                          7: U0SSKgPDMmVFomhihIMu8PYtQnM.roa (hash: PJNEf5OwPTDHhNy+rf6ie6uy8JOauKbSToGOs4WxfWM=)
                          8: birz4Ut0IdAeA4AG5Saz_dgkPzY.roa (hash: NFkOkkBJpfWDah6+4r0MNiX29vPes7DkDOfhwhOANMQ=)
                          9: dHtPKlL-LW1SCev9joX7i4AD3rc.roa (hash: O3ebPBiWGqkEjSgUMJOqtgt83PH9+sZLimIHiI6HIUI=)
                          10: nIHQVUFj1kVIS5V6jICu6mVlUFY.roa (hash: 9g4Lao/DzmFhufOPmiSUlpSRlN0noeOnjfUVNj95Deo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:92:11:95:80:63:8b:56:5a:47:e2:a0:c3:2c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
        Validity
            Not Before: Nov 22 01:00:34 2024 GMT
            Not After : Nov 23 01:00:34 2024 GMT
        Subject: CN=80dc8cc69fd382f9a02fd4645ea1b6b678688844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5d:bc:5c:77:e6:9b:a9:1f:a8:22:85:15:37:
                    20:73:15:67:f4:ca:cb:39:f5:7e:38:8a:6c:7d:ab:
                    d1:ee:1e:71:d2:b7:7d:d9:ed:91:3e:c1:10:68:c0:
                    42:f1:f1:4f:66:e4:c9:6e:5f:f2:8a:79:e5:d8:fd:
                    68:32:46:36:2c:05:83:61:0d:54:f8:38:80:1c:09:
                    0d:19:eb:11:9e:68:4f:56:e4:7e:39:9a:c3:e5:2a:
                    7e:04:c6:ab:68:16:5a:1a:e1:27:51:2f:21:37:cd:
                    2f:a3:5a:d0:62:78:2b:d6:de:ed:e5:d9:41:79:86:
                    5b:ae:c9:62:7d:f4:18:ab:59:76:83:78:b8:da:11:
                    6d:5c:74:ea:b8:68:53:ab:82:d9:f6:eb:ba:81:00:
                    50:82:81:9d:fb:71:9d:01:6d:04:11:13:5e:f8:d6:
                    aa:b2:e3:b8:e9:dc:cd:1d:d7:dd:f5:05:d6:c0:fb:
                    9e:83:c8:80:cb:c2:b8:1f:de:ac:cb:dd:34:7a:24:
                    1b:f1:33:46:4f:94:57:d7:81:65:13:10:67:fe:9b:
                    71:12:d0:c1:5d:26:90:d0:92:1e:d2:4c:f7:e3:3f:
                    c0:a7:56:4b:87:31:2b:01:fb:51:90:14:b1:23:90:
                    7a:84:a0:1f:ba:9e:d4:58:6a:c1:fe:5d:77:7e:53:
                    6f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DC:8C:C6:9F:D3:82:F9:A0:2F:D4:64:5E:A1:B6:B6:78:68:88:44
            X509v3 Authority Key Identifier:
                keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:43:da:40:a5:d3:fb:6d:57:0b:19:dc:fe:20:43:18:8e:e7:
         89:e0:da:19:2d:c0:b1:68:36:b0:91:6e:f5:39:40:06:f9:77:
         a9:3a:d8:04:4b:9b:c5:c8:e0:68:40:ee:e4:0b:63:7c:9a:f8:
         39:57:d6:4b:ed:65:cd:90:28:d7:32:9e:19:1e:69:0b:c3:a5:
         9b:b9:f9:5b:68:00:88:6c:8f:3a:53:92:ea:20:6d:0c:30:f1:
         cb:13:c2:99:96:ad:d1:49:d7:31:0d:10:b0:18:a8:16:cf:ee:
         05:49:c2:c6:82:6d:85:9d:81:86:be:67:ce:2a:e3:0f:0f:50:
         62:5b:fe:07:86:f0:59:bb:6f:ea:e7:65:6a:a4:89:2f:a6:14:
         38:de:40:12:b4:e1:d2:96:1a:b8:31:0a:83:69:4e:d5:d9:a7:
         80:71:3b:48:72:d4:e6:82:90:4b:78:45:d8:d5:40:bc:21:62:
         33:b7:c8:71:35:a4:61:de:cc:05:ab:3a:41:54:27:3d:40:6e:
         80:ef:5e:eb:07:35:5a:74:69:c3:81:3c:b7:2c:88:c2:90:4d:
         35:54:b8:9a:df:2b:a6:62:78:a4:32:73:13:d9:3d:44:c4:42:
         8e:46:6e:58:8c:38:d9:13:8c:64:1c:6e:1d:39:3b:a1:4f:5d:
         ac:61:c8:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRYpIRlYBji1ZaR+KgwyxDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl
MzU5YTIwHhcNMjQxMTIyMDEwMDM0WhcNMjQxMTIzMDEwMDM0WjAzMTEwLwYDVQQD
Eyg4MGRjOGNjNjlmZDM4MmY5YTAyZmQ0NjQ1ZWExYjZiNjc4Njg4ODQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz128XHfmm6kfqCKFFTcgcxVn9MrL
OfV+OIpsfavR7h5x0rd92e2RPsEQaMBC8fFPZuTJbl/yinnl2P1oMkY2LAWDYQ1U
+DiAHAkNGesRnmhPVuR+OZrD5Sp+BMaraBZaGuEnUS8hN80vo1rQYngr1t7t5dlB
eYZbrsliffQYq1l2g3i42hFtXHTquGhTq4LZ9uu6gQBQgoGd+3GdAW0EERNe+Naq
suO46dzNHdfd9QXWwPueg8iAy8K4H96sy900eiQb8TNGT5RX14FlExBn/ptxEtDB
XSaQ0JIe0kz34z/Ap1ZLhzErAftRkBSxI5B6hKAfup7UWGrB/l13flNvBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDcjMaf04L5oC/UZF6htrZ4aIhEMB8GA1UdIwQY
MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt
ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl
LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUPaQKXT
+21XCxnc/iBDGI7nieDaGS3AsWg2sJFu9TlABvl3qTrYBEubxcjgaEDu5AtjfJr4
OVfWS+1lzZAo1zKeGR5pC8Olm7n5W2gAiGyPOlOS6iBtDDDxyxPCmZat0UnXMQ0Q
sBioFs/uBUnCxoJthZ2Bhr5nzirjDw9QYlv+B4bwWbtv6udlaqSJL6YUON5AErTh
0pYauDEKg2lO1dmngHE7SHLU5oKQS3hF2NVAvCFiM7fIcTWkYd7MBas6QVQnPUBu
gO9e6wc1WnRpw4E8tyyIwpBNNVS4mt8rpmJ4pDJzE9k9RMRCjkZuWIw42ROMZBxu
HTk7oU9drGHI9g==
-----END CERTIFICATE-----