Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
File:                     ieIaK4oluXG9t0GgquMlmSMEGU4.mft (raw, json)
Hash identifier:          4qwgJrf33Zhf367pA/lwyF9jZ+jyr/k3mpjPasqbJ9I=
Subject key identifier:   29:47:D3:18:6E:A5:E4:2F:35:D9:60:C5:73:50:07:9C:64:98:9A:B1
Authority key identifier: 89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
Certificate issuer:       /CN=89e21a2b8a25b971bdb741a0aae325992304194e
Certificate serial:       019353F5D20AA9B364154D206F6D0E43541F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
Manifest number:          137F
Signing time:             Fri 22 Nov 2024 13:00:39 +0000
Manifest this update:     Fri 22 Nov 2024 13:00:39 +0000
Manifest next update:     Sat 23 Nov 2024 13:00:39 +0000
Files and hashes:         1: Yji0ysXxdxsre9I3lR8kIhIWorM.roa (hash: PlldFOpxboOulIuhDSr1XBDFUckW0OEzjI51JfGCmzs=)
                          2: b7K1_UVEn1n2g8BrclTekmvxed8.roa (hash: R3FNJZu3Usxohmx6UqriFXbGXpTpUlmFVoTCnZP4Nrc=)
                          3: ieIaK4oluXG9t0GgquMlmSMEGU4.crl (hash: uDFHP0l9b5WPnZmlwlpFKirnuXMDXIV77MZzLtDNnhk=)
                          4: kTN5uCN1kBVIV9ML4QW_okwLWRY.roa (hash: VU4ByTwJlQqqbN++NzQJIy+V8pIa/KVYoUbzEOum8W0=)
                          5: llyABaxc7xX_nMz8DCgCvXCVo0s.roa (hash: plbTySM/epDZlmaVZFfKZCe0Y+gaAiF9FXCw68kC550=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:f5:d2:0a:a9:b3:64:15:4d:20:6f:6d:0e:43:54:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89e21a2b8a25b971bdb741a0aae325992304194e
        Validity
            Not Before: Nov 22 13:00:39 2024 GMT
            Not After : Nov 23 13:00:39 2024 GMT
        Subject: CN=2947d3186ea5e42f35d960c57350079c64989ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e6:cc:bc:b6:88:5c:f3:b5:bf:ae:6c:fd:d0:
                    c2:92:62:bf:34:df:62:a1:2b:73:b4:84:1f:c2:ab:
                    13:14:ec:d4:24:2a:f7:4e:28:82:e0:48:b6:f3:34:
                    a3:ef:5c:52:42:a8:2f:3e:97:44:72:aa:f4:df:25:
                    18:9f:2b:f1:01:39:ec:da:c2:7b:3c:73:9c:90:24:
                    39:5c:28:77:47:7a:6d:c7:0f:01:30:ec:0f:af:4c:
                    16:16:82:ff:ef:2b:e6:e7:da:ea:fb:33:d2:c4:d7:
                    32:af:34:68:bb:92:d7:66:2f:1a:32:7d:c7:4f:1d:
                    b6:95:73:34:63:da:fc:b2:7b:b4:75:e4:88:ba:c4:
                    d6:ec:4e:cf:d7:f8:61:18:05:89:48:b4:20:7b:83:
                    f1:b8:32:4f:a9:8a:c3:a5:59:c2:d1:6d:2e:6e:e3:
                    3b:12:22:e2:ce:73:6d:7f:47:42:89:e5:da:58:2a:
                    38:0d:54:c8:b2:ee:6d:14:3c:6a:67:53:77:46:d0:
                    81:6c:8c:b6:a9:93:bc:98:4f:f6:b2:d3:22:ba:3f:
                    6a:57:dc:3a:6b:68:26:b0:85:a0:6a:e9:3d:c0:bf:
                    27:f5:b3:e3:e5:89:18:8d:10:6c:a2:b0:e0:98:d4:
                    a3:b0:d4:73:71:98:54:99:56:2d:26:56:ac:95:e2:
                    60:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:47:D3:18:6E:A5:E4:2F:35:D9:60:C5:73:50:07:9C:64:98:9A:B1
            X509v3 Authority Key Identifier:
                keyid:89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:83:ec:29:cb:88:e1:39:42:bd:78:18:df:bd:94:0a:e9:b7:
         df:7a:33:ff:5a:2d:af:db:8b:a8:09:54:ab:8a:f4:e7:85:e4:
         04:64:05:a5:07:6e:8d:06:ce:16:17:9d:67:e5:30:e8:ff:24:
         a4:a3:ef:99:62:bc:4a:43:a7:b5:1d:4f:5a:da:56:21:08:ae:
         c2:4f:bb:7d:29:6f:dd:90:6b:af:41:5b:58:62:c2:5a:1c:12:
         3a:75:11:c2:f2:55:5d:44:ea:a5:9b:48:94:b1:d4:b3:d9:4a:
         9a:70:30:e5:38:0b:eb:df:62:5e:21:58:78:5d:34:4e:92:e3:
         e4:e0:35:e6:b9:9f:45:67:8f:3b:31:7e:c4:5d:e0:90:92:38:
         f6:b4:74:13:60:de:4a:f5:8b:6e:29:2a:8c:80:80:d2:fa:90:
         d8:ef:e2:56:1c:9b:55:35:62:ed:e6:ec:3e:3e:ef:b7:1d:15:
         43:7b:d0:d3:c4:e9:a3:f3:7c:37:23:91:e6:87:c9:a4:3c:45:
         e4:98:0d:06:75:15:b4:72:cb:a0:d9:fc:d1:e5:1d:ac:2c:4d:
         6c:ea:98:43:8f:25:a6:c0:c8:ce:3d:52:9f:93:5f:b7:35:63:
         84:41:ba:b5:56:6e:f6:df:43:4f:66:85:1d:c2:97:3f:56:47:
         44:1f:a4:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNT9dIKqbNkFU0gb20OQ1QfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZTIxYTJiOGEyNWI5NzFiZGI3NDFhMGFhZTMyNTk5MjMw
NDE5NGUwHhcNMjQxMTIyMTMwMDM5WhcNMjQxMTIzMTMwMDM5WjAzMTEwLwYDVQQD
EygyOTQ3ZDMxODZlYTVlNDJmMzVkOTYwYzU3MzUwMDc5YzY0OTg5YWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ebMvLaIXPO1v65s/dDCkmK/NN9i
oStztIQfwqsTFOzUJCr3TiiC4Ei28zSj71xSQqgvPpdEcqr03yUYnyvxATns2sJ7
PHOckCQ5XCh3R3ptxw8BMOwPr0wWFoL/7yvm59rq+zPSxNcyrzRou5LXZi8aMn3H
Tx22lXM0Y9r8snu0deSIusTW7E7P1/hhGAWJSLQge4PxuDJPqYrDpVnC0W0ubuM7
EiLiznNtf0dCieXaWCo4DVTIsu5tFDxqZ1N3RtCBbIy2qZO8mE/2stMiuj9qV9w6
a2gmsIWgauk9wL8n9bPj5YkYjRBsorDgmNSjsNRzcZhUmVYtJlasleJgVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClH0xhupeQvNdlgxXNQB5xkmJqxMB8GA1UdIwQY
MBaAFIniGiuKJblxvbdBoKrjJZkjBBlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80MDY5OTEtNWJlMy00YTA1LWFjYjIt
MWFkNDdjY2QyZDlhLzEvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi80MDY5OTEtNWJlMy00YTA1LWFjYjItMWFkNDdjY2QyZDlh
LzEvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIPsKcuI
4TlCvXgY372UCum333oz/1otr9uLqAlUq4r054XkBGQFpQdujQbOFhedZ+Uw6P8k
pKPvmWK8SkOntR1PWtpWIQiuwk+7fSlv3ZBrr0FbWGLCWhwSOnURwvJVXUTqpZtI
lLHUs9lKmnAw5TgL699iXiFYeF00TpLj5OA15rmfRWePOzF+xF3gkJI49rR0E2De
SvWLbikqjICA0vqQ2O/iVhybVTVi7ebsPj7vtx0VQ3vQ08Tpo/N8NyOR5ofJpDxF
5JgNBnUVtHLLoNn80eUdrCxNbOqYQ48lpsDIzj1Sn5NftzVjhEG6tVZu9t9DT2aF
HcKXP1ZHRB+kbg==
-----END CERTIFICATE-----