Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
File:                     pi8tPCadk1InaQsot_vdlT4entw.mft (raw, json)
Hash identifier:          2GM5QQOJTYvmjBh2VsHQ633NURuehb72SgvMsr/W1gU=
Subject key identifier:   06:F3:8A:34:3A:4D:01:46:88:64:BF:EB:A2:14:01:B2:47:40:2E:34
Authority key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
Certificate issuer:       /CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Certificate serial:       018F885B55282AA0AD1F5C935E2420443F3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
Manifest number:          0635
Signing time:             Fri 17 May 2024 21:00:37 +0000
Manifest this update:     Fri 17 May 2024 21:00:37 +0000
Manifest next update:     Sat 18 May 2024 21:00:37 +0000
Files and hashes:         1: 0O7Twe2r1fydOKfu9ni1bOpXdtQ.roa (hash: YS/yzbHMCPkMo7y4Wr8Txe3bDnQWg0yjc6svGkXc1pg=)
                          2: FE9lL77pIOSWfFw82hjoFGHGAH8.roa (hash: VOtH+pcsdiqI7XGAZ6Q7w/pDTq3Dz6gLm0FVrWm/33o=)
                          3: Tvgg7IDhGckS6IOIrDOKSeFdQRc.roa (hash: VDrgkWytudhz3tnsjE3jFjnypPU3YiV7lUzrE424GDo=)
                          4: pi8tPCadk1InaQsot_vdlT4entw.crl (hash: nlbQyMV9wv2L4dK4+/kgdEL/P0DWlOte+pT3vnZYvH0=)
                          5: qcVjtKh7SO5NBnWSuI5FdpFeXMs.roa (hash: baqSXyOhvun7Ggj0VfeuV+5KHvtIDYKeQdL+Qn39CUM=)
                          6: rEjSOzJIwjQmPWvGE8ZJu_oQl3Q.roa (hash: o5EAAqiwz83GvbFO2byEhhtESghe3FaPvPBoxxW37qg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:55:28:2a:a0:ad:1f:5c:93:5e:24:20:44:3f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
        Validity
            Not Before: May 17 21:00:37 2024 GMT
            Not After : May 18 21:00:37 2024 GMT
        Subject: CN=06f38a343a4d01468864bfeba21401b247402e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3e:ae:12:47:2f:fc:b5:e1:ed:67:03:54:c3:
                    e4:ee:03:26:71:e0:81:4b:53:9f:70:1a:60:93:86:
                    f2:5b:cb:9e:57:0a:8a:9b:6a:b9:9d:30:f9:68:71:
                    87:50:61:bf:0b:ea:9a:97:48:4d:6f:7b:8c:8e:40:
                    da:a3:b5:9f:5a:81:a2:d3:96:7f:18:d0:a9:dd:b4:
                    c9:f7:cc:d5:d3:8b:cd:64:84:0b:3c:4e:5d:76:43:
                    35:73:44:74:0e:64:e9:b9:df:67:b9:7d:61:e1:27:
                    c5:58:26:e5:9b:a4:39:ca:63:7d:a6:a2:ee:79:01:
                    c8:8a:ff:ff:ad:9b:67:6a:c3:47:83:20:82:d3:68:
                    34:4a:e6:db:4d:e8:c0:d1:0b:5b:96:1d:05:a4:c6:
                    74:1e:9b:c1:5c:d3:45:4c:59:fc:ee:0b:02:72:9c:
                    d3:f6:b5:ef:51:53:38:b7:96:24:f4:e7:9d:55:07:
                    66:f3:b3:f8:3a:fb:6c:ac:c4:db:22:cb:80:ad:ec:
                    dd:d9:b3:c8:a7:75:8d:40:97:83:83:d1:a4:3d:a2:
                    cf:cf:b1:ca:ea:95:39:75:bc:99:51:41:39:0f:92:
                    31:a7:eb:84:60:d3:eb:eb:84:bd:c7:b2:55:07:36:
                    36:e2:42:e3:b4:c2:b8:27:cd:18:1a:3c:a8:41:42:
                    70:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F3:8A:34:3A:4D:01:46:88:64:BF:EB:A2:14:01:B2:47:40:2E:34
            X509v3 Authority Key Identifier:
                keyid:A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:08:e4:a7:ab:35:d5:ba:bb:1c:a7:1e:9a:04:e0:b5:c1:b2:
         3e:a0:0c:41:b8:97:9b:51:ec:24:dd:30:6a:d7:df:24:c8:e6:
         1d:9c:57:75:25:f6:98:f3:b1:bd:8e:53:ac:c6:8f:a2:ae:e8:
         45:52:ed:21:8e:97:d9:47:ea:7d:eb:ba:87:0d:0d:4e:68:b8:
         52:ac:39:9a:c5:11:f6:2b:e5:75:40:40:aa:64:58:d4:fc:bf:
         76:4e:6f:7f:a7:1a:fe:93:e4:75:0a:9c:1a:7f:f4:58:ef:42:
         50:1f:58:3f:f8:a1:bc:7c:41:7c:3f:b2:8a:73:27:34:8d:03:
         4d:8e:60:fd:2b:71:92:91:c8:64:ab:ce:ac:11:de:62:dd:9a:
         c7:79:1f:22:0d:2c:0f:0c:24:8c:2b:fc:62:62:18:29:7a:fe:
         94:e7:e9:99:6b:af:19:00:dc:19:60:76:ea:01:5b:08:f7:62:
         9f:d3:a2:0f:ae:4e:34:c2:c2:81:9e:aa:4f:11:e0:fa:e1:d9:
         65:3f:14:d2:c7:ba:bd:76:06:35:12:de:7e:31:23:59:ae:2c:
         86:b0:d9:c7:71:3a:d0:4b:1c:43:ee:c3:02:ac:8e:22:0b:04:
         b9:46:5d:1e:45:d9:a6:79:47:64:36:fb:a4:d5:45:8f:68:4b:
         86:7d:83:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IW1UoKqCtH1yTXiQgRD87MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MmYyZDNjMjY5ZDkzNTIyNzY5MGIyOGI3ZmJkZDk1M2Ux
ZTllZGMwHhcNMjQwNTE3MjEwMDM3WhcNMjQwNTE4MjEwMDM3WjAzMTEwLwYDVQQD
EygwNmYzOGEzNDNhNGQwMTQ2ODg2NGJmZWJhMjE0MDFiMjQ3NDAyZTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj6uEkcv/LXh7WcDVMPk7gMmceCB
S1OfcBpgk4byW8ueVwqKm2q5nTD5aHGHUGG/C+qal0hNb3uMjkDao7WfWoGi05Z/
GNCp3bTJ98zV04vNZIQLPE5ddkM1c0R0DmTpud9nuX1h4SfFWCblm6Q5ymN9pqLu
eQHIiv//rZtnasNHgyCC02g0SubbTejA0Qtblh0FpMZ0HpvBXNNFTFn87gsCcpzT
9rXvUVM4t5Yk9OedVQdm87P4OvtsrMTbIsuArezd2bPIp3WNQJeDg9GkPaLPz7HK
6pU5dbyZUUE5D5Ixp+uEYNPr64S9x7JVBzY24kLjtMK4J80YGjyoQUJwnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbzijQ6TQFGiGS/66IUAbJHQC40MB8GA1UdIwQY
MBaAFKYvLTwmnZNSJ2kLKLf73ZU+Hp7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGk4dFBDYWRrMUluYVFzb3RfdmRsVDRlbnR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zMjViODQtMmVkNC00MDkyLTkwNmMt
MTAwZWVkODEyYzQwLzEvcGk4dFBDYWRrMUluYVFzb3RfdmRsVDRlbnR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8zMjViODQtMmVkNC00MDkyLTkwNmMtMTAwZWVkODEyYzQw
LzEvcGk4dFBDYWRrMUluYVFzb3RfdmRsVDRlbnR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawjkp6s1
1bq7HKcemgTgtcGyPqAMQbiXm1HsJN0watffJMjmHZxXdSX2mPOxvY5TrMaPoq7o
RVLtIY6X2Ufqfeu6hw0NTmi4Uqw5msUR9ivldUBAqmRY1Py/dk5vf6ca/pPkdQqc
Gn/0WO9CUB9YP/ihvHxBfD+yinMnNI0DTY5g/StxkpHIZKvOrBHeYt2ax3kfIg0s
DwwkjCv8YmIYKXr+lOfpmWuvGQDcGWB26gFbCPdin9OiD65ONMLCgZ6qTxHg+uHZ
ZT8U0se6vXYGNRLefjEjWa4shrDZx3E60EscQ+7DAqyOIgsEuUZdHkXZpnlHZDb7
pNVFj2hLhn2DiA==
-----END CERTIFICATE-----