Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
File:                     tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft (raw, json)
Hash identifier:          XcgF6HAaGvNM4nI7Zw+RNrtsY3PiAevn1U7L3uVtwVs=
Subject key identifier:   95:59:1B:69:A8:EC:30:08:53:C1:31:79:35:74:73:07:26:D4:E5:D5
Authority key identifier: B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
Certificate issuer:       /CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Certificate serial:       0193549AF6F657F5A444F8A157CEE3CDCA6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
Manifest number:          105C
Signing time:             Fri 22 Nov 2024 16:01:02 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:02 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:02 +0000
Files and hashes:         1: mFuhnZUkeDGT8o4gYDcs3Hg2H2o.roa (hash: OSY7eDraQxHqvBGXL4gNoNoDYFnImBvsM3ay3NATKPo=)
                          2: pu_g_GlUavg5iRMGZrkYeZflKqc.roa (hash: KSEvf9/lZ617kiaibzQw0p+KVkzlX0BxGwRJ18ZIGRM=)
                          3: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl (hash: k/wvrj1LkAH6SwTwdigFqU5RfX4qoQ84x9FjRzV9jqU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:f6:f6:57:f5:a4:44:f8:a1:57:ce:e3:cd:ca:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
        Validity
            Not Before: Nov 22 16:01:02 2024 GMT
            Not After : Nov 23 16:01:02 2024 GMT
        Subject: CN=95591b69a8ec300853c131793574730726d4e5d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:58:2d:c0:b6:8b:d8:e3:7f:dd:0c:28:c5:4e:
                    08:a4:23:ab:c2:7a:bd:b8:50:98:2f:e8:c8:83:ad:
                    a8:f4:de:1a:5e:9f:7f:7d:58:39:ea:c9:4e:68:46:
                    0c:0b:d1:aa:df:cd:21:69:d6:c3:6b:76:08:69:68:
                    38:37:44:45:13:b5:69:d5:e8:13:b3:15:90:38:01:
                    29:cb:3f:0b:51:07:be:31:89:0a:e8:c8:2d:db:7f:
                    cd:d8:be:18:cc:8b:48:ff:c1:74:3e:46:f1:e3:eb:
                    20:3b:6d:0a:2d:20:83:0f:71:80:a3:49:a1:93:8c:
                    7d:b2:69:c6:57:b7:c6:8a:e8:d2:70:a1:0d:66:db:
                    22:0c:8b:65:03:86:26:87:63:2f:66:a8:4f:87:c3:
                    b2:ce:f5:34:ad:6a:8a:16:98:9d:3e:56:92:0f:56:
                    25:fb:67:6d:b4:dd:6f:2c:5a:d9:78:af:e1:81:d8:
                    af:f0:78:af:fb:ed:7e:bd:fa:01:60:60:84:70:4f:
                    c3:4c:f1:e9:23:6f:bf:67:5e:d0:4e:54:46:8f:7e:
                    0f:08:cc:a3:a0:85:db:86:53:e6:f9:ed:d9:72:28:
                    24:27:45:97:b0:8c:52:ed:1c:1b:c5:95:81:9d:96:
                    a2:7f:23:15:9e:c2:57:1d:ef:4d:23:fa:af:4d:cb:
                    cb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:59:1B:69:A8:EC:30:08:53:C1:31:79:35:74:73:07:26:D4:E5:D5
            X509v3 Authority Key Identifier:
                keyid:B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:09:ee:8f:ae:9e:0a:8f:f2:44:4a:85:48:d3:3a:22:41:42:
         01:2a:77:e0:be:87:df:9d:f9:5c:11:3e:bf:93:0a:8c:3f:85:
         c5:80:2f:3b:3a:07:18:54:91:7d:30:db:53:2c:03:27:7f:36:
         0a:a4:b7:e6:1a:57:b3:01:a5:85:84:66:8d:56:89:09:95:be:
         48:61:32:dc:e3:a6:0c:29:43:51:e3:c7:31:dc:91:b3:95:1e:
         da:9c:ff:1c:fb:03:52:78:45:cf:41:c9:83:72:fd:3f:9f:94:
         ae:63:37:f0:18:8d:9f:8f:d4:25:85:6c:59:56:ba:ca:ad:b8:
         8a:62:07:12:a0:8a:84:26:52:d9:c2:8c:12:e4:e4:48:73:21:
         0a:da:0f:d4:67:76:59:75:ff:3d:b6:36:69:cf:1e:0c:b6:c1:
         e2:3a:76:f6:4f:f2:4d:5a:0a:a0:ac:21:ca:50:28:af:10:11:
         f8:ac:ce:f7:f3:32:31:2e:8c:26:dc:7c:ae:c4:2c:c4:aa:e4:
         bd:02:2c:a0:a5:42:a2:94:e1:44:2e:00:e8:b8:06:15:29:5a:
         f6:a6:6a:59:01:93:3f:45:a6:57:cc:4a:8e:83:f3:23:f8:de:
         9d:33:3b:00:9c:62:e0:0e:84:d5:f5:43:c4:9d:f2:e9:e4:28:
         4f:eb:67:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUmvb2V/WkRPihV87jzcpuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MzIxZWViZjRmOTViZTlmODFmMGYyMzNmODlmMzYwMmQy
ZjAwNzQwHhcNMjQxMTIyMTYwMTAyWhcNMjQxMTIzMTYwMTAyWjAzMTEwLwYDVQQD
Eyg5NTU5MWI2OWE4ZWMzMDA4NTNjMTMxNzkzNTc0NzMwNzI2ZDRlNWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVgtwLaL2ON/3QwoxU4IpCOrwnq9
uFCYL+jIg62o9N4aXp9/fVg56slOaEYMC9Gq380hadbDa3YIaWg4N0RFE7Vp1egT
sxWQOAEpyz8LUQe+MYkK6Mgt23/N2L4YzItI/8F0Pkbx4+sgO20KLSCDD3GAo0mh
k4x9smnGV7fGiujScKENZtsiDItlA4Ymh2MvZqhPh8OyzvU0rWqKFpidPlaSD1Yl
+2dttN1vLFrZeK/hgdiv8Hiv++1+vfoBYGCEcE/DTPHpI2+/Z17QTlRGj34PCMyj
oIXbhlPm+e3ZcigkJ0WXsIxS7RwbxZWBnZaifyMVnsJXHe9NI/qvTcvLmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVZG2mo7DAIU8ExeTV0cwcm1OXVMB8GA1UdIwQY
MBaAFLYyHuv0+Vvp+B8PIz+J82AtLwB0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGpJZTZfVDVXLW40SHc4alA0bnpZQzB2QUhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81YzkyZDEtNDFlNS00NDNlLWEyNTAt
MDFiYWY3OGVjNzNmLzEvdGpJZTZfVDVXLW40SHc4alA0bnpZQzB2QUhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81YzkyZDEtNDFlNS00NDNlLWEyNTAtMDFiYWY3OGVjNzNm
LzEvdGpJZTZfVDVXLW40SHc4alA0bnpZQzB2QUhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZAnuj66e
Co/yREqFSNM6IkFCASp34L6H3535XBE+v5MKjD+FxYAvOzoHGFSRfTDbUywDJ382
CqS35hpXswGlhYRmjVaJCZW+SGEy3OOmDClDUePHMdyRs5Ue2pz/HPsDUnhFz0HJ
g3L9P5+UrmM38BiNn4/UJYVsWVa6yq24imIHEqCKhCZS2cKMEuTkSHMhCtoP1Gd2
WXX/PbY2ac8eDLbB4jp29k/yTVoKoKwhylAorxAR+KzO9/MyMS6MJtx8rsQsxKrk
vQIsoKVCopThRC4A6LgGFSla9qZqWQGTP0WmV8xKjoPzI/jenTM7AJxi4A6E1fVD
xJ3y6eQoT+tnDQ==
-----END CERTIFICATE-----