Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
File:                     N09vPjy5c7rIpD9sC4BrPRHJrcM.mft (raw, json)
Hash identifier:          wK1FhxM9ZLPb/voKH0JMxcKF9djPD+GX51xKPeTCwT8=
Subject key identifier:   F9:BE:5F:96:6E:2E:5D:03:4E:E1:DF:F9:EA:05:81:9D:BC:4C:39:CA
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Certificate issuer:       /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial:       0193647B735530897766049915F906A505AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
Manifest number:          032A
Signing time:             Mon 25 Nov 2024 18:00:32 +0000
Manifest this update:     Mon 25 Nov 2024 18:00:32 +0000
Manifest next update:     Tue 26 Nov 2024 18:00:32 +0000
Files and hashes:         1: 1-tzBf-Wr3oKV0iv3bsRKuDgYGdA.roa (hash: 5JSPTdWpNRdccxfShq3u2dljPvCcARVXkF0fKieXVC8=)
                          2: N09vPjy5c7rIpD9sC4BrPRHJrcM.crl (hash: gYp0cH/EWCHCEZ3/BbNDIi38NDSxq6wPa5Mw4hk+zk0=)
                          3: NSHEaaCBXTNz8CpvUtelrzzw0dw.roa (hash: J3vuWkEa9l3hsKKpcMLH9LuIPxogUD1PlFZMGFFJidg=)
                          4: hEsT4nq2POMNMSgena1zDS9L0RA.roa (hash: +cARdSWQUiU67KF99S8NG/nQAX9WC+AtaZe38triRWk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:7b:73:55:30:89:77:66:04:99:15:f9:06:a5:05:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
        Validity
            Not Before: Nov 25 18:00:32 2024 GMT
            Not After : Nov 26 18:00:32 2024 GMT
        Subject: CN=f9be5f966e2e5d034ee1dff9ea05819dbc4c39ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:87:22:89:ce:e8:0d:77:11:3b:a7:7f:23:99:
                    cf:65:13:17:2e:4f:93:22:ea:1a:c8:b9:5f:ec:cf:
                    93:4c:75:bc:2d:40:47:cf:39:17:1a:6f:51:ba:48:
                    77:6b:4d:1a:8e:65:62:0c:af:6a:07:6b:96:94:11:
                    e5:64:97:e1:96:f7:f5:a0:98:8c:a9:e4:d1:8a:8f:
                    26:ac:37:ff:b2:8a:c9:05:80:e5:4b:9a:94:f3:24:
                    de:b5:cd:18:dc:9f:5e:fd:28:3f:31:1b:15:b6:d4:
                    25:36:77:3f:f6:eb:4b:76:ce:17:e4:f6:03:d8:cf:
                    5a:57:ad:b7:41:c1:b2:52:51:80:a9:6f:c4:ca:f9:
                    d9:34:72:40:a3:bd:4c:8a:31:8c:e4:fc:3b:6c:bb:
                    99:af:cb:f8:f5:80:74:27:75:de:a3:22:c4:4b:34:
                    28:30:14:e9:e7:67:bf:95:75:8f:c2:a5:fc:0d:b2:
                    28:bd:9b:eb:41:d0:a3:cb:06:fa:0e:79:15:e3:d7:
                    6a:83:17:00:22:3a:32:4f:ce:4b:04:63:c7:b6:92:
                    22:03:5e:29:5c:54:89:c4:22:98:b7:5a:ac:dd:d1:
                    4e:0b:6b:fd:f0:8d:c9:a9:ac:22:cc:8b:50:67:9b:
                    18:e5:ba:ac:4a:23:09:92:3c:95:e4:5e:e4:61:9e:
                    8e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BE:5F:96:6E:2E:5D:03:4E:E1:DF:F9:EA:05:81:9D:BC:4C:39:CA
            X509v3 Authority Key Identifier:
                keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:be:fa:48:8a:88:e5:87:c1:17:3f:45:29:7e:07:dd:8c:01:
         0d:51:0c:8e:1a:4e:9f:10:1d:31:45:46:b1:f9:66:4c:6e:e7:
         14:79:d2:35:8d:cd:16:39:67:60:43:1d:db:37:11:8d:3b:4b:
         84:7f:0a:1f:75:0c:4e:5d:b0:35:ce:08:22:3f:b8:ca:19:28:
         a7:c4:4a:2d:05:22:77:ed:c4:4d:04:6e:79:50:07:5b:a5:c1:
         eb:ed:94:ba:aa:1a:02:d3:27:6c:e8:8c:8c:82:2b:c0:a3:57:
         a8:ef:a3:a7:ba:03:40:fa:6a:22:dd:bf:aa:58:9b:59:8a:ff:
         47:c9:52:3e:e0:39:25:8e:37:0b:87:60:71:5e:b7:dc:d9:9d:
         82:82:55:5c:6c:0b:b8:ba:08:fb:ae:31:6d:22:29:51:cd:9e:
         99:c7:c2:6a:d1:fa:ce:2b:c6:ad:ea:09:4c:66:25:d1:85:56:
         01:fa:b7:e8:4e:b0:11:6b:18:09:bb:69:74:26:08:2e:1e:2c:
         94:bb:ed:79:7a:32:ec:3e:87:c1:aa:bb:a4:f0:a4:b7:89:1b:
         86:94:0a:62:74:08:49:02:69:86:6c:a9:e7:7d:32:b2:ee:d3:
         b9:05:a6:3b:34:fe:e6:72:d8:14:ab:49:db:d8:a2:1a:67:98:
         94:d2:70:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNke3NVMIl3ZgSZFfkGpQWvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NGY2ZjNlM2NiOTczYmFjOGE0M2Y2YzBiODA2YjNkMTFj
OWFkYzMwHhcNMjQxMTI1MTgwMDMyWhcNMjQxMTI2MTgwMDMyWjAzMTEwLwYDVQQD
EyhmOWJlNWY5NjZlMmU1ZDAzNGVlMWRmZjllYTA1ODE5ZGJjNGMzOWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIciic7oDXcRO6d/I5nPZRMXLk+T
IuoayLlf7M+TTHW8LUBHzzkXGm9Rukh3a00ajmViDK9qB2uWlBHlZJfhlvf1oJiM
qeTRio8mrDf/sorJBYDlS5qU8yTetc0Y3J9e/Sg/MRsVttQlNnc/9utLds4X5PYD
2M9aV623QcGyUlGAqW/EyvnZNHJAo71MijGM5Pw7bLuZr8v49YB0J3XeoyLESzQo
MBTp52e/lXWPwqX8DbIovZvrQdCjywb6DnkV49dqgxcAIjoyT85LBGPHtpIiA14p
XFSJxCKYt1qs3dFOC2v98I3JqawizItQZ5sY5bqsSiMJkjyV5F7kYZ6OBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPm+X5ZuLl0DTuHf+eoFgZ28TDnKMB8GA1UdIwQY
MBaAFDdPbz48uXO6yKQ/bAuAaz0Rya3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjA5dlBqeTVjN3JJcEQ5c0M0QnJQUkhKcmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi84ZDExNjctMGM0ZC00ODhmLTlhODMt
YzAxNzdkZmRhODQ3LzEvTjA5dlBqeTVjN3JJcEQ5c0M0QnJQUkhKcmNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi84ZDExNjctMGM0ZC00ODhmLTlhODMtYzAxNzdkZmRhODQ3
LzEvTjA5dlBqeTVjN3JJcEQ5c0M0QnJQUkhKcmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA776SIqI
5YfBFz9FKX4H3YwBDVEMjhpOnxAdMUVGsflmTG7nFHnSNY3NFjlnYEMd2zcRjTtL
hH8KH3UMTl2wNc4IIj+4yhkop8RKLQUid+3ETQRueVAHW6XB6+2UuqoaAtMnbOiM
jIIrwKNXqO+jp7oDQPpqIt2/qlibWYr/R8lSPuA5JY43C4dgcV633NmdgoJVXGwL
uLoI+64xbSIpUc2emcfCatH6zivGreoJTGYl0YVWAfq36E6wEWsYCbtpdCYILh4s
lLvteXoy7D6Hwaq7pPCkt4kbhpQKYnQISQJphmyp530ysu7TuQWmOzT+5nLYFKtJ
29iiGmeYlNJwyA==
-----END CERTIFICATE-----