Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
File:                     _zLWRjYhsT945TDRRP6sAj4eRYI.mft (raw, json)
Hash identifier:          NCohHHQKfzwAyVLu6Mh6YKALlQyfBYPjsm5PJDHbMBU=
Subject key identifier:   95:FB:83:4A:18:43:92:A9:FA:B0:F9:BF:66:27:D7:43:66:08:D8:9B
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Certificate issuer:       /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial:       0191F9D9B703A07ADF4FFE349848F751D2E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
Manifest number:          A7
Signing time:             Mon 16 Sep 2024 08:01:20 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:20 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:20 +0000
Files and hashes:         1: _zLWRjYhsT945TDRRP6sAj4eRYI.crl (hash: AuBmrzKvCLUr+z9liEyePokwgryN/hZKpU8/aqcxBno=)
                          2: c4wvkMwuKsC24dUJqKCOfzLsw5U.roa (hash: eW0iXNFXUwKprxjEO7MVkMxN91unqsE9oMqztGcfaBg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:b7:03:a0:7a:df:4f:fe:34:98:48:f7:51:d2:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
        Validity
            Not Before: Sep 16 08:01:20 2024 GMT
            Not After : Sep 17 08:01:20 2024 GMT
        Subject: CN=95fb834a184392a9fab0f9bf6627d7436608d89b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c2:9f:cf:9c:77:7d:84:49:84:bb:26:b6:6b:
                    4f:d8:cd:c3:a5:4e:87:e9:3a:7c:c8:86:aa:45:f8:
                    b8:f9:00:af:ec:61:52:15:6a:2b:b0:38:0d:8a:54:
                    b1:5a:37:76:a8:3e:51:b2:91:66:bb:c7:5f:5b:a4:
                    95:30:2d:b1:51:41:80:a5:1f:7c:99:bc:d3:6c:f2:
                    ed:04:33:e2:05:64:b2:ed:a6:85:7d:da:10:75:63:
                    00:a2:f7:50:cf:c2:0d:d8:56:d2:f4:c0:ea:6f:ba:
                    ef:ec:16:7e:8f:12:04:df:e0:c6:48:f4:d3:e8:e8:
                    5d:2c:5b:2f:e2:7d:44:21:55:9a:77:ec:66:de:12:
                    cb:ee:24:cb:99:2d:17:15:b6:2c:95:2e:94:b7:75:
                    b0:59:51:77:d1:5b:66:95:8e:3f:0e:00:22:d0:ad:
                    a7:a5:53:fe:f1:2c:4d:ca:0a:41:ae:0b:02:8f:a7:
                    fa:f5:85:1d:8e:99:49:34:54:6e:21:6b:65:b3:89:
                    5f:ba:66:cc:0d:38:ce:75:d4:07:18:78:3e:b1:8d:
                    0d:4a:dc:da:2a:92:45:ff:ed:18:b9:93:d8:ae:7e:
                    9a:a8:39:3e:68:b3:92:df:94:81:7e:6f:6f:10:56:
                    22:aa:88:04:71:58:93:73:31:d9:4d:6c:47:ac:7b:
                    e3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FB:83:4A:18:43:92:A9:FA:B0:F9:BF:66:27:D7:43:66:08:D8:9B
            X509v3 Authority Key Identifier:
                keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c0:1a:8c:97:bc:aa:60:8f:b2:fe:9d:09:b7:ad:75:e9:ae:
         b7:c1:af:f2:29:ed:1f:55:13:df:40:c0:5a:44:8f:12:60:6b:
         3e:49:39:01:96:13:60:d8:a8:6a:58:ab:e6:c7:db:5d:e8:93:
         75:2e:c0:3f:45:e8:86:1d:e2:80:d4:36:40:ea:44:89:c4:39:
         43:ba:6c:b5:9d:3e:c3:fa:bf:d2:f0:85:f7:ed:56:63:56:b9:
         d2:6f:be:f3:25:1a:b8:32:ab:f7:00:03:cb:0b:0e:51:d6:a1:
         7d:d2:84:65:af:a7:fd:bb:af:f6:b3:af:d0:11:50:2c:63:7c:
         09:bf:4e:b1:38:9a:65:d3:84:ed:9f:1c:42:d8:67:93:38:f1:
         c8:c4:42:e8:c0:52:6e:25:aa:8d:eb:c8:ab:00:36:db:45:4c:
         5f:b8:c2:1f:bb:5a:e6:ec:dc:27:84:1a:6a:37:19:cc:c9:a6:
         1e:d9:ff:09:5d:bc:34:66:c9:1b:c1:e0:91:d3:a5:4e:74:87:
         77:07:6b:41:c2:1f:4d:f3:ec:1f:14:59:c5:be:4d:ee:65:2b:
         a2:aa:c7:0b:89:b9:8e:03:00:32:ae:a5:46:51:ba:c6:24:09:
         69:05:1b:4b:03:fd:0e:79:f0:b2:fe:c0:a2:be:e9:7d:bf:85:
         b3:6b:e8:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH52bcDoHrfT/40mEj3UdLkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMzJkNjQ2MzYyMWIxM2Y3OGU1MzBkMTQ0ZmVhYzAyM2Ux
ZTQ1ODIwHhcNMjQwOTE2MDgwMTIwWhcNMjQwOTE3MDgwMTIwWjAzMTEwLwYDVQQD
Eyg5NWZiODM0YTE4NDM5MmE5ZmFiMGY5YmY2NjI3ZDc0MzY2MDhkODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8Kfz5x3fYRJhLsmtmtP2M3DpU6H
6Tp8yIaqRfi4+QCv7GFSFWorsDgNilSxWjd2qD5RspFmu8dfW6SVMC2xUUGApR98
mbzTbPLtBDPiBWSy7aaFfdoQdWMAovdQz8IN2FbS9MDqb7rv7BZ+jxIE3+DGSPTT
6OhdLFsv4n1EIVWad+xm3hLL7iTLmS0XFbYslS6Ut3WwWVF30VtmlY4/DgAi0K2n
pVP+8SxNygpBrgsCj6f69YUdjplJNFRuIWtls4lfumbMDTjOddQHGHg+sY0NStza
KpJF/+0YuZPYrn6aqDk+aLOS35SBfm9vEFYiqogEcViTczHZTWxHrHvjgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJX7g0oYQ5Kp+rD5v2Yn10NmCNibMB8GA1UdIwQY
MBaAFP8y1kY2IbE/eOUw0UT+rAI+HkWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3pMV1JqWWhzVDk0NVREUlJQNnNBajRlUllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mOTY5MDAtY2YxNy00MWY1LWFlMjgt
MmIwMGVhMzI5MzdiLzEvX3pMV1JqWWhzVDk0NVREUlJQNnNBajRlUllJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9mOTY5MDAtY2YxNy00MWY1LWFlMjgtMmIwMGVhMzI5Mzdi
LzEvX3pMV1JqWWhzVDk0NVREUlJQNnNBajRlUllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsAajJe8
qmCPsv6dCbetdemut8Gv8intH1UT30DAWkSPEmBrPkk5AZYTYNioalir5sfbXeiT
dS7AP0Xohh3igNQ2QOpEicQ5Q7pstZ0+w/q/0vCF9+1WY1a50m++8yUauDKr9wAD
ywsOUdahfdKEZa+n/buv9rOv0BFQLGN8Cb9OsTiaZdOE7Z8cQthnkzjxyMRC6MBS
biWqjevIqwA220VMX7jCH7ta5uzcJ4QaajcZzMmmHtn/CV28NGbJG8HgkdOlTnSH
dwdrQcIfTfPsHxRZxb5N7mUroqrHC4m5jgMAMq6lRlG6xiQJaQUbSwP9Dnnwsv7A
or7pfb+Fs2voIA==
-----END CERTIFICATE-----