Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
File:                     __N-YUS-f13ZOtubq9g9SNUYlP0.mft (raw, json)
Hash identifier:          gM3AZORjczHXF5hvUbNrWDV8t6XF3tzy5i9dZ8Lq+mw=
Subject key identifier:   81:3C:9F:3E:89:6F:6F:73:8A:58:6C:75:AA:FE:48:CA:F0:DD:91:85
Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
Certificate issuer:       /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Certificate serial:       018F885B219E728BA320BF410FB035B8E4BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 21:00:24 +0000
Manifest this update:     Fri 17 May 2024 21:00:24 +0000
Manifest next update:     Sat 18 May 2024 21:00:24 +0000
Files and hashes:         1: 1tJ6tx_OhaNeQcvWEkIQFm9ybbw.roa (hash: E7rCT+8Zdc0u0F9rqJQY+NedDT+3a4FxS56pBuDRAgU=)
                          2: Ajvlgk29yZFTcQvAbsIrCSzw6Bs.roa (hash: 4L/k51BNzKihGUV7xUoInBQ548iErhf2q88rgV12xSo=)
                          3: __N-YUS-f13ZOtubq9g9SNUYlP0.crl (hash: Kd2Nd3cd2SOmu2CwuHTWMXXRGWdxl7R+eE6heY/dHSo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:21:9e:72:8b:a3:20:bf:41:0f:b0:35:b8:e4:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
        Validity
            Not Before: May 17 21:00:24 2024 GMT
            Not After : May 18 21:00:24 2024 GMT
        Subject: CN=813c9f3e896f6f738a586c75aafe48caf0dd9185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3a:9e:8d:11:53:64:dc:5f:8e:17:80:7e:48:
                    6c:e1:ca:6c:e1:80:e0:30:de:75:61:d6:9d:21:14:
                    c2:93:d6:c9:dc:e5:7b:72:18:97:1b:1c:c0:f7:ee:
                    4b:a9:81:cc:0d:23:92:16:86:73:dc:6c:fa:8c:d2:
                    f7:47:0b:cb:2f:12:3b:07:3f:f6:da:1c:4d:df:18:
                    b4:44:8d:45:16:bb:b5:09:d8:c5:d5:6f:51:78:68:
                    31:82:4d:86:f5:14:14:b3:5a:99:21:e9:df:6c:79:
                    53:2d:07:b1:16:a0:89:65:92:eb:5d:0a:72:90:1d:
                    83:56:84:d3:7f:f8:8d:1c:fb:c1:37:20:24:f1:2c:
                    eb:8e:85:ce:0f:df:3b:d4:b2:49:97:8f:87:cf:05:
                    73:66:e2:5e:b6:ad:86:f6:ef:f0:fb:03:9d:cb:44:
                    5f:9f:cf:4e:02:6d:45:a6:5f:9b:22:cb:1d:75:d7:
                    70:67:d6:f6:df:98:e3:7f:5c:a1:cc:4e:93:db:56:
                    aa:0c:5a:c1:9f:4e:ed:40:4a:62:3a:d0:78:0e:92:
                    43:a6:16:93:5f:dd:a8:1c:ab:9c:a2:5f:65:95:47:
                    ae:a2:2f:8d:4c:fe:6d:e6:4c:1b:b8:9e:e0:68:6d:
                    6e:18:07:e1:23:ff:97:63:51:b6:8a:69:a7:01:91:
                    a7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3C:9F:3E:89:6F:6F:73:8A:58:6C:75:AA:FE:48:CA:F0:DD:91:85
            X509v3 Authority Key Identifier:
                keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:01:bc:16:b1:00:ad:b2:29:e2:f1:dd:d7:b0:bf:7f:d2:e3:
         65:93:dc:99:52:ae:a0:3b:98:7f:7d:e0:9e:a2:9b:1c:ca:d4:
         e2:91:cf:0f:81:44:7c:b4:bc:97:9f:17:ca:c1:f3:0b:69:f5:
         08:0b:c4:7d:3b:a4:1d:b1:f8:f1:cd:27:1d:cd:ad:ca:a7:c2:
         ca:c0:16:b5:09:cf:2e:b1:49:30:4b:59:d3:ee:ad:10:23:6e:
         64:0f:82:c3:f9:1a:82:59:f2:1b:04:dc:79:b7:7a:34:62:8f:
         4e:bf:84:3f:8d:9f:c3:3f:ae:b5:f0:a5:91:d7:c8:52:69:73:
         10:9a:86:0d:6d:a6:83:22:37:46:6c:75:db:df:3a:8a:c5:57:
         bf:a5:53:53:cb:ff:d3:44:50:26:67:88:46:3b:57:2d:13:e4:
         0a:12:d3:70:70:b8:66:b6:74:fc:89:41:ad:ad:f0:df:8d:51:
         df:b4:3f:36:bf:ae:a9:69:08:4b:c1:55:ec:1d:93:5e:5e:30:
         60:7d:6b:48:6b:8f:a1:1d:4f:7c:d6:6f:bf:22:75:f0:a9:df:
         7f:fd:ea:58:58:cf:c2:8e:68:7d:cd:91:3f:50:4f:09:34:f1:
         2d:91:aa:02:71:5b:b0:59:10:45:6e:48:c1:46:a2:0d:f4:eb:
         4e:90:f3:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IWyGecoujIL9BD7A1uOS9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZjM3ZTYxNDRiZTdmNWRkOTNhZGI5YmFiZDgzZDQ4ZDUx
ODk0ZmQwHhcNMjQwNTE3MjEwMDI0WhcNMjQwNTE4MjEwMDI0WjAzMTEwLwYDVQQD
Eyg4MTNjOWYzZTg5NmY2ZjczOGE1ODZjNzVhYWZlNDhjYWYwZGQ5MTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zqejRFTZNxfjheAfkhs4cps4YDg
MN51YdadIRTCk9bJ3OV7chiXGxzA9+5LqYHMDSOSFoZz3Gz6jNL3RwvLLxI7Bz/2
2hxN3xi0RI1FFru1CdjF1W9ReGgxgk2G9RQUs1qZIenfbHlTLQexFqCJZZLrXQpy
kB2DVoTTf/iNHPvBNyAk8SzrjoXOD9871LJJl4+HzwVzZuJetq2G9u/w+wOdy0Rf
n89OAm1Fpl+bIssddddwZ9b235jjf1yhzE6T21aqDFrBn07tQEpiOtB4DpJDphaT
X92oHKucol9llUeuoi+NTP5t5kwbuJ7gaG1uGAfhI/+XY1G2immnAZGn7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIE8nz6Jb29zilhsdar+SMrw3ZGFMB8GA1UdIwQY
MBaAFP/zfmFEvn9d2Trbm6vYPUjVGJT9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX19OLVlVUy1mMTNaT3R1YnE5ZzlTTlVZbFAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zMmZlMGYtYmNjOS00MmJjLTkyMjYt
MGJjZTgwZDRkZmY5LzEvX19OLVlVUy1mMTNaT3R1YnE5ZzlTTlVZbFAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zMmZlMGYtYmNjOS00MmJjLTkyMjYtMGJjZTgwZDRkZmY5
LzEvX19OLVlVUy1mMTNaT3R1YnE5ZzlTTlVZbFAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAG8FrEA
rbIp4vHd17C/f9LjZZPcmVKuoDuYf33gnqKbHMrU4pHPD4FEfLS8l58XysHzC2n1
CAvEfTukHbH48c0nHc2tyqfCysAWtQnPLrFJMEtZ0+6tECNuZA+Cw/kaglnyGwTc
ebd6NGKPTr+EP42fwz+utfClkdfIUmlzEJqGDW2mgyI3Rmx12986isVXv6VTU8v/
00RQJmeIRjtXLRPkChLTcHC4ZrZ0/IlBra3w341R37Q/Nr+uqWkIS8FV7B2TXl4w
YH1rSGuPoR1PfNZvvyJ18Knff/3qWFjPwo5ofc2RP1BPCTTxLZGqAnFbsFkQRW5I
wUaiDfTrTpDz2g==
-----END CERTIFICATE-----