Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
File:                     E5Mngu53WJkEBPocz7CewjqGEj8.mft (raw, json)
Hash identifier:          zOjOX0NHpqVYSJN6To7voASL1Gl2fkjEKWgxedixBbo=
Subject key identifier:   92:F4:6C:3D:55:A1:AE:63:93:B5:5A:28:49:85:55:DD:D9:5D:66:E1
Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Certificate issuer:       /CN=13932782ee7758990404fa1ccfb09ec23a86123f
Certificate serial:       01936632B84FAA2E86DC8E73DF2FA0F0B3EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
Manifest number:          0FC6
Signing time:             Tue 26 Nov 2024 02:00:20 +0000
Manifest this update:     Tue 26 Nov 2024 02:00:20 +0000
Manifest next update:     Wed 27 Nov 2024 02:00:20 +0000
Files and hashes:         1: 6O-ssgyv4uDj9gjAGfGDpntn_HE.roa (hash: bj+KbZN/XGAx6jN6wWbalzFeZ7iQ0IGY+PDOYBfiDCc=)
                          2: BhKmizTredwkE4q_1uJc2fYiW0o.roa (hash: /S0LinKtlC9PzvL9xi2n6Rx+UUbak1qg3zgNRKfxZUQ=)
                          3: E5Mngu53WJkEBPocz7CewjqGEj8.crl (hash: Q+L91plKJ5T1BvQO+er8fx9kL29W/PV+dOzwHWACbJ8=)
                          4: Ty30HsF_aCkxmY1eweIhUpYX34k.roa (hash: Rce4Boyc5PXsQsYuEZ1Jtra4IP8qyAhAg/pGUgoiAQQ=)
                          5: U8R_8L0WNaA37PASe46kO1tZToY.roa (hash: fUWy+VFNtMseRGxHndUNu3LhomS0T0yME5+f3u2hOWE=)
                          6: aau-fpFSztPOTByUgJQrl7P_er4.roa (hash: Nj9Knnv9khxk8wfC9aAne1rmBQNIR08PmJgrIA3DjhY=)
                          7: tO5DfkvPyCWTB8u0GhiyAZJit3k.roa (hash: MPPWpG0RUmdMbW92FQxuX3eIPBkDN2g2X/LGEx/jq4M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:32:b8:4f:aa:2e:86:dc:8e:73:df:2f:a0:f0:b3:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f
        Validity
            Not Before: Nov 26 02:00:20 2024 GMT
            Not After : Nov 27 02:00:20 2024 GMT
        Subject: CN=92f46c3d55a1ae6393b55a28498555ddd95d66e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f8:dc:47:ff:b5:5b:a5:53:c7:ee:20:b4:8d:
                    5d:69:5e:8c:f5:9c:6c:f1:7a:82:9c:3a:bb:97:d2:
                    d0:bf:88:3e:7b:89:a7:e3:61:12:7d:33:fa:29:f7:
                    db:0b:9e:8b:90:4f:b3:01:0e:c9:23:03:d6:36:4d:
                    c5:ef:52:17:de:e9:80:85:c5:af:2d:50:27:eb:32:
                    5a:1f:8c:6c:d8:90:1c:03:2c:fe:74:2a:05:3a:01:
                    de:ab:60:a3:ce:49:54:70:e8:5c:88:c5:f7:d6:d5:
                    a5:a9:32:2b:22:3c:ad:94:67:7c:6f:3f:c3:ec:d2:
                    58:8a:48:7e:30:ac:e4:9d:cb:09:cb:b2:ae:81:d1:
                    a3:7f:45:a6:bc:11:7e:57:49:0f:bb:a9:96:89:4b:
                    16:b4:50:fb:be:f0:6b:ca:6b:c0:27:19:bf:1b:a5:
                    c2:90:2f:39:16:88:1f:7b:ec:99:7d:92:59:8f:04:
                    88:e4:7b:3b:46:f9:12:a2:6e:bd:6f:0d:d2:6a:ac:
                    e4:48:b9:17:2f:0b:34:b6:c0:2c:16:69:ec:b1:0b:
                    4d:ae:98:2f:97:6a:73:9e:e6:03:cd:5b:c0:92:94:
                    6b:20:8e:28:61:b7:09:79:fe:12:3f:31:ee:e7:05:
                    24:f2:39:67:f4:8f:1a:21:86:26:80:a0:09:d2:9c:
                    06:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F4:6C:3D:55:A1:AE:63:93:B5:5A:28:49:85:55:DD:D9:5D:66:E1
            X509v3 Authority Key Identifier:
                keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:4f:61:c2:12:09:02:fe:2a:d2:94:53:04:b0:6f:93:fc:cf:
         06:18:61:d7:7e:f1:25:ac:28:a9:8d:4c:c6:52:10:b6:0f:bb:
         26:ef:28:4d:f6:0e:e9:77:2d:f1:72:0f:f8:84:2b:fa:f6:87:
         d6:ca:9a:a5:6b:92:73:48:b4:4f:c5:93:cd:69:46:4f:26:74:
         46:89:62:49:f3:dc:a9:e2:4d:e7:85:b2:c0:8a:d1:f1:9a:bf:
         74:34:38:81:37:f4:19:9e:24:b7:4a:6f:a5:f8:1c:0f:1b:a3:
         a6:cf:ac:37:06:89:a8:d0:e5:04:58:d8:fc:34:37:26:8c:7b:
         b2:b3:d8:e3:df:99:5b:2b:74:28:70:ec:ef:28:5d:1e:20:8a:
         e5:ec:79:ef:f7:c1:42:c5:a6:bb:88:f4:f4:08:70:57:c1:87:
         d4:3d:5c:fb:3b:08:61:ca:42:e7:46:a7:7f:81:f5:a5:57:38:
         a0:3a:c9:68:e4:2d:c2:cd:cf:1a:ef:92:3d:eb:b5:26:8e:9c:
         e4:0b:35:5f:1f:a1:a3:67:36:d2:c5:1c:e5:9d:7f:9d:b8:c8:
         0a:25:9f:7e:91:68:b7:34:d3:aa:bf:25:49:87:2d:3e:85:a8:
         ad:6d:f0:01:96:dc:0a:bd:54:16:4a:50:93:8a:5c:8c:f3:0a:
         b7:b3:26:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNmMrhPqi6G3I5z3y+g8LPsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzOTMyNzgyZWU3NzU4OTkwNDA0ZmExY2NmYjA5ZWMyM2E4
NjEyM2YwHhcNMjQxMTI2MDIwMDIwWhcNMjQxMTI3MDIwMDIwWjAzMTEwLwYDVQQD
Eyg5MmY0NmMzZDU1YTFhZTYzOTNiNTVhMjg0OTg1NTVkZGQ5NWQ2NmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/jcR/+1W6VTx+4gtI1daV6M9Zxs
8XqCnDq7l9LQv4g+e4mn42ESfTP6KffbC56LkE+zAQ7JIwPWNk3F71IX3umAhcWv
LVAn6zJaH4xs2JAcAyz+dCoFOgHeq2CjzklUcOhciMX31tWlqTIrIjytlGd8bz/D
7NJYikh+MKzkncsJy7KugdGjf0WmvBF+V0kPu6mWiUsWtFD7vvBrymvAJxm/G6XC
kC85Fogfe+yZfZJZjwSI5Hs7RvkSom69bw3SaqzkSLkXLws0tsAsFmnssQtNrpgv
l2pznuYDzVvAkpRrII4oYbcJef4SPzHu5wUk8jln9I8aIYYmgKAJ0pwGAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJL0bD1Voa5jk7VaKEmFVd3ZXWbhMB8GA1UdIwQY
MBaAFBOTJ4Lud1iZBAT6HM+wnsI6hhI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84Mjg2NTItYWRkZi00ZmU4LTlmZTYt
NGIxZjYxNjUzZjNkLzEvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84Mjg2NTItYWRkZi00ZmU4LTlmZTYtNGIxZjYxNjUzZjNk
LzEvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANk9hwhIJ
Av4q0pRTBLBvk/zPBhhh137xJawoqY1MxlIQtg+7Ju8oTfYO6Xct8XIP+IQr+vaH
1sqapWuSc0i0T8WTzWlGTyZ0RoliSfPcqeJN54WywIrR8Zq/dDQ4gTf0GZ4kt0pv
pfgcDxujps+sNwaJqNDlBFjY/DQ3Jox7srPY49+ZWyt0KHDs7yhdHiCK5ex57/fB
QsWmu4j09AhwV8GH1D1c+zsIYcpC50anf4H1pVc4oDrJaOQtws3PGu+SPeu1Jo6c
5As1Xx+ho2c20sUc5Z1/nbjICiWffpFotzTTqr8lSYctPoWorW3wAZbcCr1UFkpQ
k4pcjPMKt7MmKQ==
-----END CERTIFICATE-----