Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
File:                     RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json)
Hash identifier:          x8Pb1jcqt9WH+AfomvPcIC2oA9Okkd7iIfzdeNA7l24=
Subject key identifier:   EC:DE:E6:BE:38:26:25:FC:62:4C:B2:29:73:B3:7B:9D:F8:22:F8:28
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Certificate issuer:       /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial:       019357D26ADAF43733CE0A855C8BC2651856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
Manifest number:          113F
Signing time:             Sat 23 Nov 2024 07:00:27 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:27 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:27 +0000
Files and hashes:         1: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: az6z2nO1sJma2kePAwCZL2s0nMuYEs4NgLxvbG/QVWo=)
                          2: xOU8WGeaKCTIaagVVJXs8IbZKek.roa (hash: DMu+9VZ9vA2R5n5W/jVrNGIuCE6BO6SAJI0hZimAk4c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:6a:da:f4:37:33:ce:0a:85:5c:8b:c2:65:18:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
        Validity
            Not Before: Nov 23 07:00:27 2024 GMT
            Not After : Nov 24 07:00:27 2024 GMT
        Subject: CN=ecdee6be382625fc624cb22973b37b9df822f828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f3:db:da:ef:60:87:1a:0e:ab:7c:d7:2e:ab:
                    41:d6:40:ff:12:4c:a1:f5:b2:6e:d6:62:65:6a:36:
                    22:b1:32:de:0d:62:b7:f9:02:31:62:df:bb:78:40:
                    ae:da:af:5c:32:31:0e:c2:10:6a:27:59:d3:17:5c:
                    3c:41:d2:e1:6e:72:9e:e0:3b:60:28:1a:49:b0:02:
                    45:b5:c9:7d:82:9b:da:c8:c8:31:4c:eb:98:ec:9e:
                    66:70:7c:44:31:5f:91:66:bc:12:bd:df:68:ce:1a:
                    a0:19:fb:29:90:94:88:ef:0b:2a:0a:e7:b5:8e:6a:
                    9f:88:67:06:9a:04:a7:31:a0:4e:b1:cc:fa:a9:84:
                    1c:b5:83:51:15:fe:30:67:c5:9e:e4:2e:43:06:1a:
                    e8:f5:f3:3d:f9:25:a5:e5:2f:4a:76:ba:9a:0e:bd:
                    80:c4:c5:f2:15:9b:63:b7:ac:cb:77:ff:69:26:b6:
                    12:bd:03:65:b6:73:f5:4d:8f:b8:47:11:00:7f:c8:
                    b7:cb:4e:78:68:b0:ef:30:e9:ae:6f:7a:1b:63:f1:
                    08:39:d6:0f:a8:ee:4e:14:d1:b5:39:15:42:54:ea:
                    ee:41:34:24:e8:4d:49:84:00:e8:31:44:ae:4b:8a:
                    96:7a:54:bf:e4:84:a1:95:d1:c9:d8:ad:45:e2:48:
                    f1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DE:E6:BE:38:26:25:FC:62:4C:B2:29:73:B3:7B:9D:F8:22:F8:28
            X509v3 Authority Key Identifier:
                keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:be:67:8c:a5:ad:8f:d3:6c:b9:f1:b4:20:5a:e1:e9:6e:6b:
         d6:01:d2:73:e5:88:c9:ab:27:31:dc:08:be:62:8a:28:bd:70:
         91:a2:a7:b6:99:ac:53:37:37:5c:08:46:02:b3:75:8e:fa:13:
         af:12:d5:f3:4b:d8:bf:98:2a:58:fe:59:38:76:b8:45:4e:db:
         bb:64:35:88:f8:c9:c8:43:e8:69:8b:3b:1b:82:5a:44:29:ef:
         03:67:67:af:6a:52:00:ac:18:31:f0:34:0a:12:e7:ee:90:a0:
         6b:6e:37:64:48:cd:45:f6:fe:99:a7:09:3c:78:14:3b:05:4e:
         31:98:08:5b:cf:37:2a:d4:1a:b6:60:1f:1f:d1:19:7c:9d:f4:
         7b:d5:4c:5c:3c:c5:7c:ef:7e:1a:44:da:d9:fb:82:ec:60:2a:
         58:ff:4c:b5:f0:c2:82:fd:fe:7a:d0:0d:a9:e3:81:3a:ce:b7:
         b1:2a:fc:39:bf:c0:20:bd:ef:93:18:b8:a1:23:e7:1e:06:0a:
         b0:9a:a0:39:f0:3a:d8:65:ef:3a:f2:24:85:bb:38:62:c0:6f:
         fd:4c:1b:18:86:31:26:24:70:f5:f5:48:fe:44:58:47:a1:a9:
         fd:14:b0:49:64:c9:43:0f:83:00:02:89:53:14:43:3f:2b:6a:
         74:3c:3a:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0mra9DczzgqFXIvCZRhWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YzI5NWNhNmVlOGNhZTcwMDZiNTc3YWY1NGUzNzY2MjNk
Zjc3OTkwHhcNMjQxMTIzMDcwMDI3WhcNMjQxMTI0MDcwMDI3WjAzMTEwLwYDVQQD
EyhlY2RlZTZiZTM4MjYyNWZjNjI0Y2IyMjk3M2IzN2I5ZGY4MjJmODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/Pb2u9ghxoOq3zXLqtB1kD/Ekyh
9bJu1mJlajYisTLeDWK3+QIxYt+7eECu2q9cMjEOwhBqJ1nTF1w8QdLhbnKe4Dtg
KBpJsAJFtcl9gpvayMgxTOuY7J5mcHxEMV+RZrwSvd9ozhqgGfspkJSI7wsqCue1
jmqfiGcGmgSnMaBOscz6qYQctYNRFf4wZ8We5C5DBhro9fM9+SWl5S9KdrqaDr2A
xMXyFZtjt6zLd/9pJrYSvQNltnP1TY+4RxEAf8i3y054aLDvMOmub3obY/EIOdYP
qO5OFNG1ORVCVOruQTQk6E1JhADoMUSuS4qWelS/5IShldHJ2K1F4kjxbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOze5r44JiX8YkyyKXOze534IvgoMB8GA1UdIwQY
MBaAFETClcpu6MrnAGtXevVON2Yj33eZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUt
NzU5OWI0NDFjZDFjLzEvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUtNzU5OWI0NDFjZDFj
LzEvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgL5njKWt
j9NsufG0IFrh6W5r1gHSc+WIyasnMdwIvmKKKL1wkaKntpmsUzc3XAhGArN1jvoT
rxLV80vYv5gqWP5ZOHa4RU7bu2Q1iPjJyEPoaYs7G4JaRCnvA2dnr2pSAKwYMfA0
ChLn7pCga243ZEjNRfb+macJPHgUOwVOMZgIW883KtQatmAfH9EZfJ30e9VMXDzF
fO9+GkTa2fuC7GAqWP9MtfDCgv3+etANqeOBOs63sSr8Ob/AIL3vkxi4oSPnHgYK
sJqgOfA62GXvOvIkhbs4YsBv/UwbGIYxJiRw9fVI/kRYR6Gp/RSwSWTJQw+DAAKJ
UxRDPytqdDw6tQ==
-----END CERTIFICATE-----