Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
File:                     3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json)
Hash identifier:          9ptapVJfjnf89T29zrLRK1kicJ4KEY/XX9FsQZtqViE=
Subject key identifier:   F2:6E:FA:44:F1:42:23:DC:71:81:FE:B7:DF:A0:0C:0A:0B:E5:4D:D1
Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
Certificate issuer:       /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Certificate serial:       0193557645A741A72CFB564A528D2E73A330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
Manifest number:          025E
Signing time:             Fri 22 Nov 2024 20:00:34 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:34 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:34 +0000
Files and hashes:         1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: yXzqGgKPgFJ+oHfzBgByykgKQIqb9iMvWpIKb0iMAVA=)
                          2: 5wH8s5sykmJncbbk2xEtBOxl1Os.roa (hash: i3H1P/MvuUg6+5HDwcuPK1qE/R5L0S/LE0JV59S3IKY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:45:a7:41:a7:2c:fb:56:4a:52:8d:2e:73:a3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
        Validity
            Not Before: Nov 22 20:00:34 2024 GMT
            Not After : Nov 23 20:00:34 2024 GMT
        Subject: CN=f26efa44f14223dc7181feb7dfa00c0a0be54dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7d:48:cd:7b:81:b1:c6:ad:35:4b:4f:9e:c8:
                    23:8b:ad:d5:53:64:f0:01:0b:1c:ad:ca:a9:76:3d:
                    d4:0a:1a:e8:f3:c5:4e:0a:24:85:41:7c:ee:32:12:
                    f7:87:7f:9b:0c:a9:f1:05:c7:4d:17:54:77:57:f3:
                    18:7d:d7:f5:ff:b9:b4:9d:d0:ba:41:ab:f0:6c:40:
                    1b:f7:e9:ed:31:dc:f4:a3:db:ea:ef:a7:6d:15:5e:
                    c6:94:28:92:0f:8a:48:c4:76:0c:68:83:73:9c:56:
                    8d:eb:42:88:59:d0:b0:7f:e8:fc:90:44:a9:34:46:
                    81:59:1a:fa:44:26:d3:ce:18:4d:75:ca:93:90:0f:
                    1d:bb:76:98:02:ba:f0:53:94:bb:24:8c:27:e3:6c:
                    42:23:79:92:32:af:24:d8:86:de:e3:77:55:96:c6:
                    55:4f:77:c1:4c:94:65:e5:89:88:5d:a3:25:7f:84:
                    f8:2a:f1:d0:a8:04:59:fe:d4:b3:52:21:22:13:2f:
                    10:e1:0b:45:ce:0a:1c:40:54:b8:d8:d9:eb:d3:aa:
                    a8:27:5f:42:a4:99:9f:8b:15:01:ec:09:56:3a:a5:
                    5a:2f:f2:09:f3:d8:37:71:61:82:6c:04:b3:8c:e5:
                    b2:85:30:27:4d:fe:d2:72:d8:0b:cd:8b:0e:93:75:
                    48:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6E:FA:44:F1:42:23:DC:71:81:FE:B7:DF:A0:0C:0A:0B:E5:4D:D1
            X509v3 Authority Key Identifier:
                keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:b4:a5:b8:37:48:7a:90:6a:28:8d:c7:85:26:95:b2:3c:91:
         be:79:8c:5b:b6:21:65:7b:7e:50:e9:c0:f9:4f:25:ad:6c:53:
         85:a4:68:d6:81:b2:26:42:b4:b0:35:f1:89:ed:41:b6:b0:f1:
         6f:ae:da:b4:90:31:99:eb:92:3a:4f:3f:24:a8:87:e1:b4:b1:
         06:21:9d:18:91:2d:3a:ea:8d:6c:08:25:53:45:5a:9d:07:98:
         01:de:f1:ee:62:05:a4:67:cb:dc:fa:27:4d:f8:94:7c:1d:c5:
         19:81:5f:05:45:38:a5:4b:67:84:16:c8:f3:bf:fc:27:8c:fd:
         4c:7d:32:10:95:50:fe:00:95:44:1e:eb:c8:90:b7:17:ea:74:
         b2:0e:52:82:47:b9:d0:14:a0:27:4b:e7:07:16:a2:d4:1d:7b:
         83:36:db:b6:f3:23:59:2d:4a:ef:c2:65:be:97:92:95:34:6c:
         aa:93:6b:ca:33:09:46:df:99:43:2b:0e:4c:c7:2f:6f:a6:5d:
         89:6c:43:62:0c:54:b6:e3:40:94:b3:06:b4:2c:41:30:fa:45:
         86:c8:4a:84:99:06:9c:cf:92:82:d3:38:a4:29:c3:27:82:c2:
         44:9f:b0:ce:44:dd:5e:6d:0d:c3:d8:f8:81:38:7e:69:a9:99:
         60:e3:3c:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVdkWnQacs+1ZKUo0uc6MwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYWZhZGExMGUyY2UyMGUxYzk2Zjg5NWJiOGVjMzJhNTgw
OGY2M2YwHhcNMjQxMTIyMjAwMDM0WhcNMjQxMTIzMjAwMDM0WjAzMTEwLwYDVQQD
EyhmMjZlZmE0NGYxNDIyM2RjNzE4MWZlYjdkZmEwMGMwYTBiZTU0ZGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H1IzXuBscatNUtPnsgji63VU2Tw
AQscrcqpdj3UChro88VOCiSFQXzuMhL3h3+bDKnxBcdNF1R3V/MYfdf1/7m0ndC6
QavwbEAb9+ntMdz0o9vq76dtFV7GlCiSD4pIxHYMaINznFaN60KIWdCwf+j8kESp
NEaBWRr6RCbTzhhNdcqTkA8du3aYArrwU5S7JIwn42xCI3mSMq8k2Ibe43dVlsZV
T3fBTJRl5YmIXaMlf4T4KvHQqARZ/tSzUiEiEy8Q4QtFzgocQFS42Nnr06qoJ19C
pJmfixUB7AlWOqVaL/IJ89g3cWGCbASzjOWyhTAnTf7SctgLzYsOk3VImQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJu+kTxQiPccYH+t9+gDAoL5U3RMB8GA1UdIwQY
MBaAFNyvraEOLOIOHJb4lbuOwypYCPY/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81ZDYyMzQtMTczNS00YmYwLTg1MDQt
YTY2Zjg0ZWRiZDZkLzEvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS81ZDYyMzQtMTczNS00YmYwLTg1MDQtYTY2Zjg0ZWRiZDZk
LzEvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvLSluDdI
epBqKI3HhSaVsjyRvnmMW7YhZXt+UOnA+U8lrWxThaRo1oGyJkK0sDXxie1BtrDx
b67atJAxmeuSOk8/JKiH4bSxBiGdGJEtOuqNbAglU0VanQeYAd7x7mIFpGfL3Pon
TfiUfB3FGYFfBUU4pUtnhBbI87/8J4z9TH0yEJVQ/gCVRB7ryJC3F+p0sg5Sgke5
0BSgJ0vnBxai1B17gzbbtvMjWS1K78JlvpeSlTRsqpNryjMJRt+ZQysOTMcvb6Zd
iWxDYgxUtuNAlLMGtCxBMPpFhshKhJkGnM+SgtM4pCnDJ4LCRJ+wzkTdXm0Nw9j4
gTh+aamZYOM8gg==
-----END CERTIFICATE-----