Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
File:                     0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft (raw, json)
Hash identifier:          J9DYUkyOOL1R6MtLS7UzZWhCCTmWE4WId8cDJgArzd4=
Subject key identifier:   66:1B:5B:21:E0:EA:18:03:63:1E:F5:DF:FA:0B:7D:AB:C4:DC:5E:9D
Authority key identifier: D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
Certificate issuer:       /CN=d26e4538f1ddea77f57396bb93b907f152df697c
Certificate serial:       0191F9A27B74DF9568D9F849A10DC5A37B68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
Manifest number:          A4
Signing time:             Mon 16 Sep 2024 07:01:00 +0000
Manifest this update:     Mon 16 Sep 2024 07:01:00 +0000
Manifest next update:     Tue 17 Sep 2024 07:01:00 +0000
Files and hashes:         1: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl (hash: obk+6vCryV2sOBkzG5DAPyu7jmeozVNNdQyj3tKj9zU=)
                          2: BQnbCWl-cPlM4zrT8VIY2RHKhXk.roa (hash: W9ZhNmf0hRR7munYawsHSh9RHgGz6uZbLE/wbKMgH7U=)
                          3: kulmMUKXDkb1sHf07hU3PGDx5GU.roa (hash: SLpOP1yaeujk+Mmef6e4rVPSYH0F+KNHwUTshCM/NJY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:7b:74:df:95:68:d9:f8:49:a1:0d:c5:a3:7b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26e4538f1ddea77f57396bb93b907f152df697c
        Validity
            Not Before: Sep 16 07:01:00 2024 GMT
            Not After : Sep 17 07:01:00 2024 GMT
        Subject: CN=661b5b21e0ea1803631ef5dffa0b7dabc4dc5e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e4:64:6e:2c:e3:14:80:15:3e:e5:e4:1c:0f:
                    52:98:2f:07:f9:7d:08:ec:8e:16:29:b8:d8:08:62:
                    19:99:7d:7e:6f:6f:f6:c0:ab:11:da:5b:e2:a9:22:
                    96:07:7e:85:71:a2:83:5b:e6:e9:b0:a0:27:11:85:
                    49:5c:9e:51:d9:a4:85:87:0c:64:db:45:15:a1:55:
                    89:d1:d1:20:8a:02:d5:b1:ca:fd:31:de:20:3a:f9:
                    6a:cc:60:0a:f8:2f:45:e4:3e:d1:c4:cb:22:b3:0c:
                    8e:1b:60:0e:2f:74:65:74:54:65:ea:1d:13:18:3b:
                    f7:9d:9f:61:d4:5a:86:14:2f:5d:be:2f:fc:ff:66:
                    da:b4:39:06:09:8c:47:ca:dc:7e:14:61:f7:31:b5:
                    c1:f2:f8:a2:91:aa:f9:24:bb:0e:0e:26:a5:4b:7e:
                    1e:df:75:f0:81:72:96:5b:c8:9c:66:12:19:43:09:
                    2f:9a:57:10:58:10:8f:e6:0c:c5:7b:6e:ec:6f:ba:
                    0f:72:9e:94:06:87:60:09:2e:47:91:64:c0:7e:4b:
                    71:0d:9f:a4:8b:8e:36:3e:a0:b0:a8:4f:83:20:4e:
                    61:e8:ae:b4:f4:61:3c:37:bd:e7:bf:02:b5:06:be:
                    15:cc:8e:7b:bd:52:fa:95:8a:ce:9b:e6:b1:b7:02:
                    ec:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1B:5B:21:E0:EA:18:03:63:1E:F5:DF:FA:0B:7D:AB:C4:DC:5E:9D
            X509v3 Authority Key Identifier:
                keyid:D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:b5:12:7e:4d:77:04:ed:08:90:f0:cb:d3:05:b1:3d:82:c2:
         b7:ff:b3:9a:1a:39:33:95:50:b1:c3:de:08:08:8f:d7:e2:70:
         72:7c:b5:3e:a8:c0:5e:cc:4f:5f:3f:b3:1f:24:f5:de:0e:e1:
         ac:2b:6d:85:30:da:5c:99:d4:91:4c:b1:88:76:ee:b6:b7:58:
         7c:7d:85:e0:ea:b3:59:0a:ae:c3:7c:8c:8d:2a:ce:f2:86:da:
         f7:06:56:ff:44:89:4a:d4:2c:73:33:32:b8:36:cb:bf:89:b8:
         6b:70:d8:8d:d1:cb:a4:74:83:63:cd:28:41:66:79:71:be:1c:
         16:19:cf:ea:d2:b7:e3:83:fa:41:3b:1b:d3:41:5c:d3:14:78:
         90:8e:2e:60:8d:b3:0e:9f:3e:6d:46:e7:4e:5b:d6:aa:fc:6c:
         d6:fa:14:8d:10:98:a9:b4:0c:b8:32:c5:07:f6:e4:8e:60:0e:
         f9:13:43:d4:6d:37:40:e8:bb:9d:9e:a3:10:ba:29:ab:53:8e:
         8c:4b:50:4c:70:1d:52:72:52:5f:87:ec:61:16:ef:13:2b:ab:
         de:31:db:64:13:13:ff:80:11:4f:f7:23:87:7a:4d:ad:fe:f4:
         55:ef:55:ae:f2:ba:12:1c:75:f9:b3:83:1e:67:be:08:ca:a8:
         42:47:30:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH5ont035Vo2fhJoQ3Fo3toMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNmU0NTM4ZjFkZGVhNzdmNTczOTZiYjkzYjkwN2YxNTJk
ZjY5N2MwHhcNMjQwOTE2MDcwMTAwWhcNMjQwOTE3MDcwMTAwWjAzMTEwLwYDVQQD
Eyg2NjFiNWIyMWUwZWExODAzNjMxZWY1ZGZmYTBiN2RhYmM0ZGM1ZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmORkbizjFIAVPuXkHA9SmC8H+X0I
7I4WKbjYCGIZmX1+b2/2wKsR2lviqSKWB36FcaKDW+bpsKAnEYVJXJ5R2aSFhwxk
20UVoVWJ0dEgigLVscr9Md4gOvlqzGAK+C9F5D7RxMsiswyOG2AOL3RldFRl6h0T
GDv3nZ9h1FqGFC9dvi/8/2batDkGCYxHytx+FGH3MbXB8viikar5JLsODialS34e
33XwgXKWW8icZhIZQwkvmlcQWBCP5gzFe27sb7oPcp6UBodgCS5HkWTAfktxDZ+k
i442PqCwqE+DIE5h6K609GE8N73nvwK1Br4VzI57vVL6lYrOm+axtwLshwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYbWyHg6hgDYx713/oLfavE3F6dMB8GA1UdIwQY
MBaAFNJuRTjx3ep39XOWu5O5B/FS32l8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG01Rk9QSGQ2bmYxYzVhN2s3a0g4VkxmYVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82NDY2NmUtYWYxYi00MTE4LTgyM2Qt
NWRlOTlhNTJhYTM5LzEvMG01Rk9QSGQ2bmYxYzVhN2s3a0g4VkxmYVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS82NDY2NmUtYWYxYi00MTE4LTgyM2QtNWRlOTlhNTJhYTM5
LzEvMG01Rk9QSGQ2bmYxYzVhN2s3a0g4VkxmYVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLUSfk13
BO0IkPDL0wWxPYLCt/+zmho5M5VQscPeCAiP1+Jwcny1PqjAXsxPXz+zHyT13g7h
rCtthTDaXJnUkUyxiHbutrdYfH2F4OqzWQquw3yMjSrO8oba9wZW/0SJStQsczMy
uDbLv4m4a3DYjdHLpHSDY80oQWZ5cb4cFhnP6tK344P6QTsb00Fc0xR4kI4uYI2z
Dp8+bUbnTlvWqvxs1voUjRCYqbQMuDLFB/bkjmAO+RND1G03QOi7nZ6jELopq1OO
jEtQTHAdUnJSX4fsYRbvEyur3jHbZBMT/4ART/cjh3pNrf70Ve9VrvK6Ehx1+bOD
Hme+CMqoQkcweA==
-----END CERTIFICATE-----