Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File:                     I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier:          IkdlbmCOmzV489GnmIEWT8GZiSRdjrVXq95JZvNJFdw=
Subject key identifier:   1F:A2:3D:FA:8C:E3:19:01:DA:65:25:47:03:EE:4D:36:DA:A1:1E:A2
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer:       /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial:       018F20EF2D1D47847FD2675C164FA03BA7DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number:          0D2F
Signing time:             Sat 27 Apr 2024 19:01:36 +0000
Manifest this update:     Sat 27 Apr 2024 19:01:36 +0000
Manifest next update:     Sun 28 Apr 2024 19:01:36 +0000
Files and hashes:         1: 0zttnUwcisQjkckLW6EIbpUbobs.roa (hash: n9y9JjNO6LnNNE6XAfwPARanyrp87r0naRByvo0BdO4=)
                          2: 18VWCQlISKjgnNFShnUEviO5Mtg.roa (hash: GmAGlXvn75m4SwBbrAisbA3Wa0iSPFOubY4UkkNm+ng=)
                          3: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: R74+d2xE4ZCSZ17RadYzl/JTBS0vwR4kOpqHi42KHFM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 19:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:20:ef:2d:1d:47:84:7f:d2:67:5c:16:4f:a0:3b:a7:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
        Validity
            Not Before: Apr 27 19:01:36 2024 GMT
            Not After : Apr 28 19:01:36 2024 GMT
        Subject: CN=1fa23dfa8ce31901da65254703ee4d36daa11ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:02:c5:b1:3d:bb:94:94:e8:2c:c4:cb:79:bd:
                    12:11:bc:6f:47:ad:bc:f6:2f:4e:20:b9:18:41:84:
                    aa:65:32:8c:ad:7d:48:74:53:ed:45:b2:f7:d8:ec:
                    41:97:7c:33:53:46:75:56:d9:21:b5:7c:66:d8:10:
                    98:a6:a1:d4:2e:6e:00:1b:9f:67:d9:c7:2a:fa:76:
                    90:c9:c7:87:ac:6a:56:ec:e5:29:3e:8f:57:31:26:
                    ac:9e:e7:25:96:22:6a:3d:0a:df:4e:0f:34:50:f9:
                    c6:82:82:4c:0a:18:5c:8e:32:aa:2a:ba:b7:ec:f0:
                    89:de:14:47:12:83:58:a2:09:42:46:a7:73:56:63:
                    b5:74:77:46:74:af:a7:75:1b:62:50:e0:14:d7:9c:
                    9b:3f:e7:2a:0f:b0:e0:0f:6a:69:a5:0c:28:b8:49:
                    ea:b1:be:39:a4:0f:f7:04:e4:15:2c:bc:8e:bc:08:
                    c0:ec:44:7d:15:6f:9f:64:93:61:a3:60:17:3a:97:
                    bf:f6:52:d8:8d:23:3e:0c:c4:90:0c:d8:88:9a:83:
                    98:60:40:08:9f:d7:3f:b0:20:94:c3:5b:66:78:42:
                    cc:11:16:a5:f3:dd:2c:d5:76:1d:b8:79:c3:02:3f:
                    9b:39:ba:c6:f5:73:3f:26:9c:c4:2f:13:3e:13:b5:
                    bd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A2:3D:FA:8C:E3:19:01:DA:65:25:47:03:EE:4D:36:DA:A1:1E:A2
            X509v3 Authority Key Identifier:
                keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:5a:b5:a2:fc:29:3b:75:2f:de:a3:8f:2c:05:e6:58:1f:e2:
         63:19:df:5f:55:1c:2c:9a:d6:dd:35:00:54:37:73:fc:39:bd:
         e9:cd:72:9a:b6:8a:e6:ec:08:ec:8c:0f:ba:ce:dd:6a:a5:a8:
         fb:18:0b:5c:26:2a:cc:b2:ac:5f:79:47:01:40:89:92:aa:91:
         73:fa:ad:3d:75:b8:bd:20:e0:6e:4e:ad:e1:67:c8:85:e3:cd:
         b9:b6:ad:2b:ce:92:73:7a:1a:6f:da:91:a9:3b:e6:f4:5d:5d:
         09:d0:70:e2:2c:56:53:69:3a:1f:ba:2b:7f:92:ad:f8:79:e8:
         69:1b:4f:0e:dd:32:c6:9c:02:76:45:db:30:d5:8d:a1:09:da:
         85:33:59:1a:52:49:c1:4f:d6:d0:0b:85:1a:12:d9:75:ad:4b:
         b7:14:aa:b4:72:e2:55:30:23:a4:9f:89:0c:2c:f5:39:82:61:
         8f:1b:9d:8c:46:87:95:87:a1:70:46:54:b4:f5:da:77:63:d9:
         a0:e3:d0:17:09:bc:eb:fd:97:d9:22:52:93:1c:a6:3c:17:83:
         25:26:41:1b:3f:a0:71:f9:74:60:77:b3:a7:c8:9c:d2:5f:33:
         c8:8a:33:7c:ef:75:f6:c3:2c:ce:77:d1:50:62:f1:f8:33:cc:
         a8:07:7b:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8g7y0dR4R/0mdcFk+gO6faMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZDhmNjIwOTk5NTA2Y2M4NmQ3NTQ4ZWE3MjgyYmIxMjlm
MDJkNjgwHhcNMjQwNDI3MTkwMTM2WhcNMjQwNDI4MTkwMTM2WjAzMTEwLwYDVQQD
EygxZmEyM2RmYThjZTMxOTAxZGE2NTI1NDcwM2VlNGQzNmRhYTExZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QLFsT27lJToLMTLeb0SEbxvR628
9i9OILkYQYSqZTKMrX1IdFPtRbL32OxBl3wzU0Z1VtkhtXxm2BCYpqHULm4AG59n
2ccq+naQyceHrGpW7OUpPo9XMSasnuclliJqPQrfTg80UPnGgoJMChhcjjKqKrq3
7PCJ3hRHEoNYoglCRqdzVmO1dHdGdK+ndRtiUOAU15ybP+cqD7DgD2pppQwouEnq
sb45pA/3BOQVLLyOvAjA7ER9FW+fZJNho2AXOpe/9lLYjSM+DMSQDNiImoOYYEAI
n9c/sCCUw1tmeELMERal890s1XYduHnDAj+bObrG9XM/JpzELxM+E7W92QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+iPfqM4xkB2mUlRwPuTTbaoR6iMB8GA1UdIwQY
MBaAFCPY9iCZlQbMhtdUjqcoK7Ep8C1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2Et
NGZkYzQ4ZGE4ZjMzLzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2EtNGZkYzQ4ZGE4ZjMz
LzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlq1ovwp
O3Uv3qOPLAXmWB/iYxnfX1UcLJrW3TUAVDdz/Dm96c1ymraK5uwI7IwPus7daqWo
+xgLXCYqzLKsX3lHAUCJkqqRc/qtPXW4vSDgbk6t4WfIhePNubatK86Sc3oab9qR
qTvm9F1dCdBw4ixWU2k6H7orf5Kt+HnoaRtPDt0yxpwCdkXbMNWNoQnahTNZGlJJ
wU/W0AuFGhLZda1LtxSqtHLiVTAjpJ+JDCz1OYJhjxudjEaHlYehcEZUtPXad2PZ
oOPQFwm86/2X2SJSkxymPBeDJSZBGz+gcfl0YHezp8ic0l8zyIozfO919sMsznfR
UGLx+DPMqAd7Dg==
-----END CERTIFICATE-----