Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
File:                     tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft (raw, json)
Hash identifier:          HHAsp/Y0kXQd0DQoMZYKSxBJ/+9/jgUx8OqW5ybNFT0=
Subject key identifier:   29:F0:53:9B:9D:51:42:5D:6F:4E:FE:AD:97:47:B0:5E:62:F1:D2:D6
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Certificate issuer:       /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial:       018F96170CB5545D9B78908E1D9D50642656
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
Manifest number:          0848
Signing time:             Mon 20 May 2024 13:00:43 +0000
Manifest this update:     Mon 20 May 2024 13:00:43 +0000
Manifest next update:     Tue 21 May 2024 13:00:43 +0000
Files and hashes:         1: G0T19j2zeSNOlMAbHy9S-7zVNyw.roa (hash: TmolmNnu/buqAUWFCUEJXljRbpJNZ5W8EUTKoo35U4k=)
                          2: VpMdeuXl-C_ErRqb_iOyMlXRyjk.roa (hash: Sb5EvJip94fFKKW9hcAcGUGdSztfoZRXcHOa5GEZV80=)
                          3: fpgr5aQ1jQ4PrAX4Fh6eKOPCZHY.roa (hash: ltN7gZIISH8XuRK4BfGGjerFQdiOtmwoDJYsNHrXMaA=)
                          4: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl (hash: zKWVMjbfhslJ5mptVC6QOD32aL4al4B+2IjG5oRQqIk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:17:0c:b5:54:5d:9b:78:90:8e:1d:9d:50:64:26:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
        Validity
            Not Before: May 20 13:00:43 2024 GMT
            Not After : May 21 13:00:43 2024 GMT
        Subject: CN=29f0539b9d51425d6f4efead9747b05e62f1d2d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c7:1e:3e:61:c7:c5:83:82:79:64:8a:a2:a5:
                    9a:21:8f:ce:d5:e8:59:02:d2:50:4e:41:96:cb:02:
                    dd:ca:57:38:a0:a5:f3:82:83:00:b5:5b:35:de:b5:
                    8d:18:8c:b4:a3:60:a4:e6:21:39:e6:7c:db:8a:9d:
                    34:94:89:6a:d8:f2:03:f9:84:fe:a6:49:03:43:1d:
                    0e:b8:75:a0:b3:09:0e:55:2a:91:dd:84:e0:35:74:
                    c6:50:58:05:b2:6a:1a:86:41:6d:6e:8f:35:5e:7a:
                    38:c8:fe:29:12:1b:29:c7:8d:b0:69:1b:f1:49:9a:
                    86:f4:06:25:a5:66:89:03:94:7e:01:33:12:96:f9:
                    cb:5a:41:06:44:c1:1c:69:28:66:e5:08:58:26:c3:
                    07:11:cf:4e:59:2d:7a:99:a3:c9:28:9e:c4:f9:fc:
                    18:3e:ae:53:d1:3d:e5:49:41:85:cc:97:ac:5f:bf:
                    96:f6:1b:7f:08:d9:ca:80:24:2d:a2:8e:46:b0:50:
                    25:b8:18:71:a0:92:6a:e3:bf:ce:58:7a:22:48:fa:
                    37:2f:7e:b1:dc:bb:4a:e8:eb:4b:7e:69:7c:06:57:
                    ac:4e:6c:14:08:c2:75:86:98:e1:fb:34:71:f3:8e:
                    1a:8d:aa:7d:94:0a:40:67:d8:76:b5:3d:a3:9f:96:
                    2e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F0:53:9B:9D:51:42:5D:6F:4E:FE:AD:97:47:B0:5E:62:F1:D2:D6
            X509v3 Authority Key Identifier:
                keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:8d:1f:6f:b9:19:e4:09:ef:9e:89:cd:b3:57:02:6f:68:c8:
         f1:8d:6d:c7:b7:3a:73:3d:94:28:53:ab:7a:b0:3b:2b:9d:3a:
         5c:00:7e:e6:63:03:eb:21:04:cc:f1:96:ce:0d:d7:17:75:36:
         d6:a7:58:0c:15:99:28:db:c9:c5:ab:09:a0:94:39:a8:e7:55:
         52:92:49:a8:de:a0:d2:fd:09:36:24:b3:ef:a5:1e:61:aa:35:
         c1:05:90:d2:d2:c3:cc:d6:6e:fc:cd:71:e0:7e:db:3a:cc:53:
         1f:5e:fe:ab:91:b4:74:d8:68:69:28:eb:0c:2f:21:3d:81:54:
         7a:f3:9a:6d:8a:53:f9:4f:66:8d:aa:f1:bd:d8:fc:9f:61:1a:
         3c:4f:59:d2:bf:a1:bc:94:ed:e6:ac:4d:68:a2:f1:eb:32:7f:
         54:f1:de:e8:64:0e:03:5c:2c:83:b3:e0:a3:f8:38:5b:6e:34:
         93:57:4b:64:e6:14:48:de:52:f0:da:e3:99:15:ea:82:2f:a8:
         ac:62:20:f5:fa:22:3b:40:0e:15:26:2d:ab:fe:ab:4f:18:0e:
         5a:15:a5:7c:46:fe:9a:8e:37:06:e3:5f:bc:69:92:dc:bd:cc:
         76:05:86:05:81:9e:be:e3:bd:68:a6:5a:bc:07:21:ac:93:55:
         28:2a:ed:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+WFwy1VF2beJCOHZ1QZCZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MDkxNjhmZGI1MmU5YjdkMWE3YTVlOGY1MThlZGZiYzJj
M2Y5YWYwHhcNMjQwNTIwMTMwMDQzWhcNMjQwNTIxMTMwMDQzWjAzMTEwLwYDVQQD
EygyOWYwNTM5YjlkNTE0MjVkNmY0ZWZlYWQ5NzQ3YjA1ZTYyZjFkMmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMcePmHHxYOCeWSKoqWaIY/O1ehZ
AtJQTkGWywLdylc4oKXzgoMAtVs13rWNGIy0o2Ck5iE55nzbip00lIlq2PID+YT+
pkkDQx0OuHWgswkOVSqR3YTgNXTGUFgFsmoahkFtbo81Xno4yP4pEhspx42waRvx
SZqG9AYlpWaJA5R+ATMSlvnLWkEGRMEcaShm5QhYJsMHEc9OWS16maPJKJ7E+fwY
Pq5T0T3lSUGFzJesX7+W9ht/CNnKgCQtoo5GsFAluBhxoJJq47/OWHoiSPo3L36x
3LtK6OtLfml8BlesTmwUCMJ1hpjh+zRx844ajap9lApAZ9h2tT2jn5YukwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnwU5udUUJdb07+rZdHsF5i8dLWMB8GA1UdIwQY
MBaAFLQJFo/bUum30ael6PUY7fvCw/mvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEFrV2o5dFM2YmZScDZYbzlSanQtOExELWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNmJhOWQtMzNhZi00Y2YzLWEyN2Qt
ZmE3MThhYzlkNzU4LzEvdEFrV2o5dFM2YmZScDZYbzlSanQtOExELWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8zNmJhOWQtMzNhZi00Y2YzLWEyN2QtZmE3MThhYzlkNzU4
LzEvdEFrV2o5dFM2YmZScDZYbzlSanQtOExELWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAco0fb7kZ
5AnvnonNs1cCb2jI8Y1tx7c6cz2UKFOrerA7K506XAB+5mMD6yEEzPGWzg3XF3U2
1qdYDBWZKNvJxasJoJQ5qOdVUpJJqN6g0v0JNiSz76UeYao1wQWQ0tLDzNZu/M1x
4H7bOsxTH17+q5G0dNhoaSjrDC8hPYFUevOabYpT+U9mjarxvdj8n2EaPE9Z0r+h
vJTt5qxNaKLx6zJ/VPHe6GQOA1wsg7Pgo/g4W240k1dLZOYUSN5S8NrjmRXqgi+o
rGIg9foiO0AOFSYtq/6rTxgOWhWlfEb+mo43BuNfvGmS3L3MdgWGBYGevuO9aKZa
vAchrJNVKCrtBA==
-----END CERTIFICATE-----