Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
File:                     IE19hlKpn8F__y197MSeVWqg64A.mft (raw, json)
Hash identifier:          NFSiadxpfeD0mpoPUBt2oMT/T6tI6Z/AOtpKP+MnWDA=
Subject key identifier:   F7:F0:94:70:C4:D0:98:C5:20:D7:F7:90:C9:97:D6:A2:34:EF:77:03
Authority key identifier: 20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80
Certificate issuer:       /CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
Certificate serial:       0192B63F6811D7712DE5985913AFCC8BAA20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
Manifest number:          22
Signing time:             Tue 22 Oct 2024 22:01:01 +0000
Manifest this update:     Tue 22 Oct 2024 22:01:01 +0000
Manifest next update:     Wed 23 Oct 2024 22:01:01 +0000
Files and hashes:         1: 1srYH8Osh-RP_71MbwSfIzbM-ZY.roa (hash: j3oFf9wPBHjhJIZYrnm/15tSmF325ETmu17GUrAlZ50=)
                          2: 30d1hW24Aylm59hecsAGnA8GugU.roa (hash: wdk8L2GtSGr8MrtztT7/u5++FvD0KrIjTBLw6MIKZAc=)
                          3: IE19hlKpn8F__y197MSeVWqg64A.crl (hash: gKNfVl7JK2zCJSK4Npg5yZInHKfzLFBy2T4lNgvZU4I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Oct 2024 14:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:b6:3f:68:11:d7:71:2d:e5:98:59:13:af:cc:8b:aa:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
        Validity
            Not Before: Oct 22 22:01:01 2024 GMT
            Not After : Oct 23 22:01:01 2024 GMT
        Subject: CN=f7f09470c4d098c520d7f790c997d6a234ef7703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8e:16:73:16:85:66:9b:f8:54:c6:06:3d:dd:
                    2f:8b:2c:cc:9f:f7:a3:ef:64:70:13:e5:6b:79:ff:
                    a9:27:3e:54:f6:ad:b2:5a:cf:dc:54:ba:f0:88:6f:
                    58:e5:0e:39:41:ae:79:91:65:2f:c4:fb:bd:60:a4:
                    83:5b:7e:24:96:12:16:28:90:61:f9:75:8f:f0:73:
                    06:8c:9a:b5:7b:a3:d8:6c:9e:3a:78:8a:bc:c0:0a:
                    be:e4:6f:db:03:5a:c7:e3:a7:05:3b:5d:c3:eb:b1:
                    a5:05:80:3e:71:15:52:ba:81:cf:0d:af:23:a3:fc:
                    28:4c:b4:d3:23:65:b9:bb:41:34:02:67:56:28:12:
                    6f:07:e4:2a:43:d8:9a:05:20:64:de:9d:57:50:c5:
                    60:95:5e:66:04:a0:e1:1a:b6:6e:0b:b2:e4:e0:b9:
                    f5:bf:7c:d5:1c:f4:a2:85:f2:f6:7d:8b:d8:7d:71:
                    13:48:9d:bd:68:62:75:b2:60:76:1f:be:b2:50:d2:
                    d3:c6:0f:cc:98:e9:cd:b9:c5:35:08:53:bf:4e:89:
                    56:9f:cb:81:60:e8:33:22:9b:08:81:3f:b4:bf:35:
                    73:fa:f9:76:37:6c:43:59:af:5c:63:4c:dd:c0:f5:
                    14:1c:dd:7c:3c:e4:ee:fb:18:88:e9:fa:b9:50:10:
                    38:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F0:94:70:C4:D0:98:C5:20:D7:F7:90:C9:97:D6:A2:34:EF:77:03
            X509v3 Authority Key Identifier:
                keyid:20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:23:4c:13:e2:83:db:77:78:92:30:ca:f5:52:ce:89:9e:19:
         74:ef:2b:ff:cf:57:95:97:d7:27:57:c4:5a:21:dc:8f:cf:d9:
         ce:8f:e8:be:d2:e8:05:53:88:c4:de:16:b3:c9:0b:fa:cd:45:
         72:52:d7:23:79:b1:bb:6a:5a:67:62:e0:82:2a:4f:91:a3:80:
         c0:45:c0:7a:5a:5d:dd:84:d4:19:cb:b2:d9:64:14:84:bd:5c:
         b9:9e:f2:16:6b:b4:f7:47:73:c8:04:bc:c3:82:d0:ef:68:e1:
         aa:25:b1:ad:a9:ba:62:11:69:fc:8e:b8:b0:61:1c:7d:45:88:
         39:ff:ff:3b:a8:ff:6e:bf:c2:a7:59:89:20:08:de:e6:3a:12:
         a6:83:49:06:1e:1c:6f:67:18:0f:26:f6:c9:9c:44:76:56:df:
         b4:99:ba:6f:cc:d0:de:69:62:7b:6b:a4:b3:06:66:78:3f:79:
         37:23:34:c7:da:7d:d7:b3:69:cb:2b:5e:0c:5a:df:61:63:47:
         d3:94:8b:84:c5:0a:5b:d6:67:67:31:9f:fa:4f:f6:61:90:34:
         58:20:28:43:45:b0:33:2d:26:b5:62:ef:7e:15:63:18:e3:7e:
         e3:d8:0d:6c:b7:1b:cd:ef:18:60:59:3d:52:eb:82:d9:0a:6d:
         11:1a:61:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZK2P2gR13Et5ZhZE6/Mi6ogMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNGQ3ZDg2NTJhOTlmYzE3ZmZmMmQ3ZGVjYzQ5ZTU1NmFh
MGViODAwHhcNMjQxMDIyMjIwMTAxWhcNMjQxMDIzMjIwMTAxWjAzMTEwLwYDVQQD
EyhmN2YwOTQ3MGM0ZDA5OGM1MjBkN2Y3OTBjOTk3ZDZhMjM0ZWY3NzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio4WcxaFZpv4VMYGPd0viyzMn/ej
72RwE+Vref+pJz5U9q2yWs/cVLrwiG9Y5Q45Qa55kWUvxPu9YKSDW34klhIWKJBh
+XWP8HMGjJq1e6PYbJ46eIq8wAq+5G/bA1rH46cFO13D67GlBYA+cRVSuoHPDa8j
o/woTLTTI2W5u0E0AmdWKBJvB+QqQ9iaBSBk3p1XUMVglV5mBKDhGrZuC7Lk4Ln1
v3zVHPSihfL2fYvYfXETSJ29aGJ1smB2H76yUNLTxg/MmOnNucU1CFO/TolWn8uB
YOgzIpsIgT+0vzVz+vl2N2xDWa9cY0zdwPUUHN18POTu+xiI6fq5UBA48wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfwlHDE0JjFINf3kMmX1qI073cDMB8GA1UdIwQY
MBaAFCBNfYZSqZ/Bf/8tfezEnlVqoOuAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUUxOWhsS3BuOEZfX3kxOTdNU2VWV3FnNjRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hYzA2OTQtMWUyMi00MzZkLTgyYzkt
MTdjZTYyMGU3NGYxLzEvSUUxOWhsS3BuOEZfX3kxOTdNU2VWV3FnNjRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9hYzA2OTQtMWUyMi00MzZkLTgyYzktMTdjZTYyMGU3NGYx
LzEvSUUxOWhsS3BuOEZfX3kxOTdNU2VWV3FnNjRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCNME+KD
23d4kjDK9VLOiZ4ZdO8r/89XlZfXJ1fEWiHcj8/Zzo/ovtLoBVOIxN4Ws8kL+s1F
clLXI3mxu2paZ2LggipPkaOAwEXAelpd3YTUGcuy2WQUhL1cuZ7yFmu090dzyAS8
w4LQ72jhqiWxram6YhFp/I64sGEcfUWIOf//O6j/br/Cp1mJIAje5joSpoNJBh4c
b2cYDyb2yZxEdlbftJm6b8zQ3mlie2ukswZmeD95NyM0x9p917NpyyteDFrfYWNH
05SLhMUKW9ZnZzGf+k/2YZA0WCAoQ0WwMy0mtWLvfhVjGON+49gNbLcbze8YYFk9
UuuC2QptERph+A==
-----END CERTIFICATE-----