Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft
File:                     7WRpHDGJLMmRrU6alnEUd1nkF6s.mft (raw, json)
Hash identifier:          2wlkCtXEWy08EwMEsoqAZG7OxCC+jDDTGlW/RqUVxxU=
Subject key identifier:   ED:82:AF:EA:65:99:09:C7:D9:B6:3C:A7:22:7B:25:19:2C:A2:73:0B
Authority key identifier: ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
Certificate issuer:       /CN=ed64691c31892cc991ad4e9a9671147759e417ab
Certificate serial:       018FBA91CA96BEE6D17504320C6748CE02BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft
Manifest number:          044E
Signing time:             Mon 27 May 2024 15:01:07 +0000
Manifest this update:     Mon 27 May 2024 15:01:07 +0000
Manifest next update:     Tue 28 May 2024 15:01:07 +0000
Files and hashes:         1: 0nP54OB7eLtKipqoeFdQi2g6jgA.roa (hash: MxVKs4LPXDkTZ6NJBcmBW3o8kgM6RTumioJMJVGpqqI=)
                          2: 7WRpHDGJLMmRrU6alnEUd1nkF6s.crl (hash: jJeEefvVEJ/pyCmPx9HlyeYcnTXOOOxxP6I/rj7610c=)
                          3: CNh5wrj3ok4m1mH0k8-JVfQ2g6w.roa (hash: LlnpXbCBGIVkqWqLoOzFauoqC3vwq/wMerRRjSnw3Js=)
                          4: QaqIsgGjcHCn9KS1_cFXGKONuIo.roa (hash: 3vtK7r2wsb7JKsyVWZ7iNbUkA93nnzWoRKOLgtCvABw=)
                          5: ggQrHKs_Dp1NAlIqtr-utBTO5JM.roa (hash: dXqkufzflOQEsjww3aohgBgvzVkH/a897FtMA7jyVY0=)
                          6: hy6t2HsHws40PnPv5E-a9Cb7Py0.roa (hash: HhFNvzaNFMEcjQQepGvHlTUJiHJEuPRN2SkO8dFu1i4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 May 2024 14:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:ba:91:ca:96:be:e6:d1:75:04:32:0c:67:48:ce:02:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed64691c31892cc991ad4e9a9671147759e417ab
        Validity
            Not Before: May 27 15:01:07 2024 GMT
            Not After : May 28 15:01:07 2024 GMT
        Subject: CN=ed82afea659909c7d9b63ca7227b25192ca2730b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:96:c4:2f:1d:9e:16:dd:92:80:29:0c:06:88:
                    34:98:67:55:bc:0d:a0:31:1e:41:00:06:02:8f:5b:
                    75:b8:fc:87:dd:a7:df:6d:00:a7:b1:6e:58:46:81:
                    fd:cc:7a:a6:63:02:06:fa:92:14:09:97:52:c7:d6:
                    15:40:43:d6:ca:4b:39:cf:03:cb:1f:b4:98:b2:20:
                    f0:3e:e1:f3:c7:6f:85:eb:5f:77:46:93:a6:5e:3e:
                    c6:df:4a:6b:ea:5b:30:a0:79:07:6e:a6:aa:4b:d0:
                    df:b2:b4:7a:19:fc:6e:ae:bc:bd:63:e9:35:84:62:
                    a1:de:df:19:c4:44:a5:b1:72:9d:c9:2a:b3:6e:da:
                    73:b2:d3:8b:77:9c:fc:33:a2:1f:87:ee:a3:1f:49:
                    d0:87:49:49:7e:11:b1:a4:19:18:c7:59:72:86:ab:
                    ec:83:78:cd:37:1a:1f:cb:94:c9:b5:f6:00:9c:8f:
                    4b:0a:c3:c3:7a:1a:74:7d:2c:df:42:95:82:5a:a5:
                    ac:9f:d3:5b:71:54:25:9f:2b:7c:e4:87:2a:f8:19:
                    ff:b1:4e:da:8d:33:dd:03:cc:35:9c:04:cc:e4:be:
                    f4:82:16:45:70:35:f7:e6:71:70:25:f1:47:52:93:
                    89:ed:fc:99:04:fa:01:ba:9b:c2:1b:94:68:44:3f:
                    1b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:82:AF:EA:65:99:09:C7:D9:B6:3C:A7:22:7B:25:19:2C:A2:73:0B
            X509v3 Authority Key Identifier:
                keyid:ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b9:c2:0a:d4:60:fb:be:a4:18:19:81:3c:80:52:63:5b:64:
         4d:b6:ea:0e:b0:35:35:24:b3:0f:a0:a2:f6:99:42:9c:10:77:
         ca:c1:d3:a7:b7:99:3d:e5:6f:4b:7b:9c:97:2b:dc:ec:4a:bb:
         21:a8:ef:3e:6c:80:0a:7f:de:4f:5e:4c:95:ce:d4:75:5a:5f:
         07:9d:76:a6:78:f4:2e:a2:81:0a:79:10:3b:35:fe:3e:ae:ce:
         14:fc:96:8e:0a:ef:a6:97:fd:02:c8:ce:87:c5:00:cc:ac:03:
         35:66:c3:75:70:c5:27:e7:de:c4:a3:93:fc:1f:25:92:47:35:
         28:e3:23:5c:3b:ec:22:92:7f:d2:ac:6c:cf:26:69:5c:3d:52:
         15:78:38:2c:53:36:08:4f:14:05:b3:70:36:01:23:43:0b:1f:
         42:15:09:58:83:55:6a:b2:07:42:86:90:dc:db:73:bf:d8:51:
         22:a1:b1:32:ce:54:0a:05:19:3c:15:da:ba:dc:84:3a:a5:02:
         34:cb:e1:ee:b9:c2:f3:14:87:97:53:88:35:4a:b4:88:f1:4d:
         96:35:e5:c8:be:78:15:2a:27:d1:63:7f:25:d0:11:b3:c2:a5:
         0e:3c:0d:46:3c:c5:32:ef:77:cb:52:a1:5a:2b:cb:09:eb:86:
         dd:0c:75:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----