Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
File:                     d1xabqkPXz0AfBDkROO5Y7bTDMU.mft (raw, json)
Hash identifier:          /9Fg8zyZqGYXyS6EOkgVQl6ItOjZQmZbXJHRRyIdaCA=
Subject key identifier:   0B:61:8C:62:E6:32:C8:D3:86:CE:A9:75:5C:1C:00:12:07:2F:E1:A0
Authority key identifier: 77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5
Certificate issuer:       /CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5
Certificate serial:       0191FA10844F4FA9017425A85AAA800B8009
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
Manifest number:          96
Signing time:             Mon 16 Sep 2024 09:01:11 +0000
Manifest this update:     Mon 16 Sep 2024 09:01:11 +0000
Manifest next update:     Tue 17 Sep 2024 09:01:11 +0000
Files and hashes:         1: d1xabqkPXz0AfBDkROO5Y7bTDMU.crl (hash: TIU25QkaS/EuZLvAdFS9o62KBGBK+IoZA5WZjByOCZI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:84:4f:4f:a9:01:74:25:a8:5a:aa:80:0b:80:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5
        Validity
            Not Before: Sep 16 09:01:11 2024 GMT
            Not After : Sep 17 09:01:11 2024 GMT
        Subject: CN=0b618c62e632c8d386cea9755c1c0012072fe1a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4c:9e:95:ad:af:41:cd:5f:5f:73:0a:7d:66:
                    40:bc:6e:98:98:00:9e:b4:b0:e2:38:dc:58:a3:c1:
                    fd:89:75:f2:97:fe:26:a5:fc:89:cb:0e:70:08:a4:
                    1a:42:7e:ea:d6:23:fc:eb:67:76:20:00:d1:36:c6:
                    8b:b2:95:b1:2a:1b:bd:7f:cc:23:1b:20:9c:57:f5:
                    45:eb:37:6e:22:b1:f8:cd:53:1c:dd:56:b7:35:a9:
                    d2:e1:33:52:cc:92:fc:5a:8e:ae:39:b2:0a:02:bb:
                    c7:9e:8a:01:00:73:ca:4d:88:31:86:fb:e9:00:cc:
                    d5:01:a8:b7:92:d3:9c:29:b7:b1:0d:59:25:23:f4:
                    3b:42:b2:14:1b:34:8d:fc:e0:e9:51:56:73:2f:b8:
                    e4:25:50:38:fd:b1:3b:74:c1:0a:21:57:27:75:26:
                    af:4c:fe:15:10:e3:76:19:df:79:6e:47:fe:b6:42:
                    23:8b:7b:ad:93:79:bd:90:46:12:85:d6:3d:77:31:
                    73:96:23:9b:16:5a:ef:7b:bd:fb:69:3b:08:11:49:
                    2c:d8:0f:7c:87:3c:90:e8:cf:15:12:ff:dd:21:9d:
                    71:df:c9:57:b1:3a:e3:cd:ab:b2:4d:d5:f2:c0:b0:
                    d5:0f:76:dd:98:59:35:ef:08:a5:63:eb:bd:3e:26:
                    3a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:61:8C:62:E6:32:C8:D3:86:CE:A9:75:5C:1C:00:12:07:2F:E1:A0
            X509v3 Authority Key Identifier:
                keyid:77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:df:06:44:8a:ae:3d:a7:e9:c8:19:42:a8:a9:12:9b:60:eb:
         b4:f8:81:99:55:6b:82:56:8f:8b:bc:27:21:5c:ee:c8:b7:06:
         5e:4b:50:35:7a:cf:c2:c4:7d:ba:84:ee:0e:a5:a5:ff:8b:e3:
         ad:4e:fe:52:99:0b:c8:4d:4a:bb:46:95:0f:21:22:e6:24:9b:
         4e:12:7a:51:b7:b1:a3:c5:94:af:6c:80:5a:72:bd:6f:6f:fe:
         5c:5a:6c:f1:c5:e9:4c:58:06:fd:79:09:7f:81:3d:5a:11:13:
         48:a7:31:f0:f8:e3:e7:1d:2c:64:cc:50:3f:a6:fa:76:f9:49:
         9f:86:06:9f:7d:27:9b:f2:84:a7:9a:26:a8:88:6f:ed:f8:b5:
         49:10:ff:a4:8e:d0:bc:cf:ae:6f:83:53:64:03:99:59:23:bb:
         a7:2d:fd:98:03:c3:22:b2:81:e6:4b:ac:5d:ed:2b:fa:7c:39:
         23:35:c9:7c:7e:cb:fb:77:60:d9:af:07:4e:39:30:24:45:9b:
         c9:ec:a6:0f:32:6a:3e:07:a4:27:c3:a5:07:55:ed:ad:87:70:
         cf:28:dc:ac:0c:f1:c8:e3:f4:99:e0:42:6f:f9:5f:5e:7c:3f:
         05:ad:45:e3:0e:51:2f:d1:6e:fa:ee:85:46:b8:bd:b8:6e:4f:
         e9:20:c8:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH6EIRPT6kBdCWoWqqAC4AJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NWM1YTZlYTkwZjVmM2QwMDdjMTBlNDQ0ZTNiOTYzYjZk
MzBjYzUwHhcNMjQwOTE2MDkwMTExWhcNMjQwOTE3MDkwMTExWjAzMTEwLwYDVQQD
EygwYjYxOGM2MmU2MzJjOGQzODZjZWE5NzU1YzFjMDAxMjA3MmZlMWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Eyela2vQc1fX3MKfWZAvG6YmACe
tLDiONxYo8H9iXXyl/4mpfyJyw5wCKQaQn7q1iP862d2IADRNsaLspWxKhu9f8wj
GyCcV/VF6zduIrH4zVMc3Va3NanS4TNSzJL8Wo6uObIKArvHnooBAHPKTYgxhvvp
AMzVAai3ktOcKbexDVklI/Q7QrIUGzSN/ODpUVZzL7jkJVA4/bE7dMEKIVcndSav
TP4VEON2Gd95bkf+tkIji3utk3m9kEYShdY9dzFzliObFlrve737aTsIEUks2A98
hzyQ6M8VEv/dIZ1x38lXsTrjzauyTdXywLDVD3bdmFk17wilY+u9PiY6YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAthjGLmMsjThs6pdVwcABIHL+GgMB8GA1UdIwQY
MBaAFHdcWm6pD189AHwQ5ETjuWO20wzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDF4YWJxa1BYejBBZkJEa1JPTzVZN2JURE1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85Njg3MzItNmQ3Ni00NjRkLTk3YzQt
ZTQwYTMzNDY5MWM5LzEvZDF4YWJxa1BYejBBZkJEa1JPTzVZN2JURE1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My85Njg3MzItNmQ3Ni00NjRkLTk3YzQtZTQwYTMzNDY5MWM5
LzEvZDF4YWJxa1BYejBBZkJEa1JPTzVZN2JURE1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeN8GRIqu
PafpyBlCqKkSm2DrtPiBmVVrglaPi7wnIVzuyLcGXktQNXrPwsR9uoTuDqWl/4vj
rU7+UpkLyE1Ku0aVDyEi5iSbThJ6Ubexo8WUr2yAWnK9b2/+XFps8cXpTFgG/XkJ
f4E9WhETSKcx8Pjj5x0sZMxQP6b6dvlJn4YGn30nm/KEp5omqIhv7fi1SRD/pI7Q
vM+ub4NTZAOZWSO7py39mAPDIrKB5kusXe0r+nw5IzXJfH7L+3dg2a8HTjkwJEWb
yeymDzJqPgekJ8OlB1XtrYdwzyjcrAzxyOP0meBCb/lfXnw/Ba1F4w5RL9Fu+u6F
Rri9uG5P6SDIbw==
-----END CERTIFICATE-----