Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
File:                     Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft (raw, json)
Hash identifier:          UOT4VUurJa6eBi/yKzFECX5k79HSIfwxUibYWCDeWwc=
Subject key identifier:   3C:F5:28:48:60:A7:BB:29:A9:49:A6:07:AD:F9:A2:DF:72:96:0B:59
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Certificate issuer:       /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial:       01935274EDE57F7F1C8A89144D0C43FC2761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
Manifest number:          10B0
Signing time:             Fri 22 Nov 2024 06:00:14 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:14 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:14 +0000
Files and hashes:         1: PgJWXwBQaCHbRRP-IotpZ92QIBQ.roa (hash: xYQsy3pMjN7C/C6gSmAGmRi3MkJ/N6wrKk6aQury8e0=)
                          2: Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl (hash: pO3x3tG2iTYt/RBtjgdi7BbNtmsX4LOA6BhTo2qoelE=)
                          3: zVk__Sv-FlDWYrXiGunT6Cnrv5c.roa (hash: 2lQOD+2E6e0QdP8zVQmLdmGqD7H6nt76qjEZRZp8RRc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:74:ed:e5:7f:7f:1c:8a:89:14:4d:0c:43:fc:27:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
        Validity
            Not Before: Nov 22 06:00:14 2024 GMT
            Not After : Nov 23 06:00:14 2024 GMT
        Subject: CN=3cf5284860a7bb29a949a607adf9a2df72960b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:34:50:64:4c:4a:99:c6:ff:3d:c9:d5:43:a1:
                    06:d0:72:81:4c:40:d3:dc:f9:04:06:a6:be:ba:a8:
                    d8:da:c9:a0:81:96:68:1b:95:c5:2e:72:79:39:dd:
                    76:29:86:e5:b4:31:08:88:5c:51:b5:44:9f:f1:17:
                    40:2c:e8:ab:aa:d1:58:17:37:91:a1:ea:00:0c:e4:
                    e0:c0:84:2d:13:3b:a9:34:5a:a0:c7:c1:1a:f6:96:
                    6c:da:7a:f7:26:85:62:fd:76:55:3f:08:21:c4:04:
                    c0:74:ae:34:57:3e:7f:98:98:ff:85:c9:52:18:43:
                    82:42:d1:f4:cc:68:67:00:a4:30:e7:8d:57:30:92:
                    24:32:04:fc:76:4b:3b:a7:8c:88:82:e4:bf:63:13:
                    94:87:64:9c:38:4c:28:36:61:28:f0:77:e2:f1:0c:
                    45:0e:18:74:eb:3a:72:35:a3:2d:ce:dc:37:4e:06:
                    d4:8e:37:4a:dd:07:8c:cf:90:8b:9c:4a:89:b0:e5:
                    27:48:5c:5a:30:a2:95:67:b1:8b:2f:7f:3e:0f:24:
                    70:3d:b0:47:ce:69:a6:2f:b4:cf:d2:8a:d3:45:5e:
                    df:aa:31:c8:bc:ea:b6:cd:7f:ac:65:37:d7:9f:97:
                    5a:39:10:97:c9:8e:5d:5e:e1:0a:f4:89:d8:52:dc:
                    f6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F5:28:48:60:A7:BB:29:A9:49:A6:07:AD:F9:A2:DF:72:96:0B:59
            X509v3 Authority Key Identifier:
                keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:c0:cb:d6:88:df:e7:e7:a2:79:8c:cb:be:b1:65:01:ab:45:
         ce:2a:c2:89:8f:f4:52:c2:3f:fe:a4:22:6c:a0:02:3b:c1:62:
         5a:8c:44:f7:e9:61:61:01:ec:d6:5f:32:52:cb:78:30:b2:d7:
         6e:3f:79:b7:88:5b:eb:b8:32:5c:21:a3:4b:d2:4d:6e:b2:5a:
         80:41:9d:66:7e:a3:66:31:0d:1e:73:d6:76:54:12:ec:a9:b1:
         01:d2:ba:1d:ea:0d:bf:67:f4:14:fd:4c:4f:99:04:d1:95:65:
         29:34:1f:62:ec:8a:38:68:86:98:8c:f0:3b:bf:6c:0f:fa:34:
         c5:ac:97:5c:2d:5c:f6:5e:7a:d1:8b:76:99:f8:08:de:8a:4e:
         d4:51:b2:0a:24:32:92:7c:a7:86:28:1d:50:3c:8b:46:8e:c4:
         0c:14:a5:6a:8a:d2:00:91:d6:b1:c7:5c:02:4c:44:96:5c:72:
         a9:82:60:9d:f9:7f:80:f4:f8:1c:59:b8:f0:f7:ed:c7:21:0f:
         07:71:65:2f:21:d0:6a:d9:33:bf:09:3e:dc:67:60:a0:cb:e7:
         58:ad:0e:f0:61:6b:38:39:3a:84:b3:d1:73:76:0c:d0:7d:50:
         b0:81:fa:d1:d0:0e:12:92:b7:eb:59:79:88:d2:e3:b5:38:0b:
         66:ee:ad:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSdO3lf38ciokUTQxD/CdhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MmY1NWQzNzcxMjdmMjhjZTI2Yjc4ZmQ4M2JlY2Y0MWJl
Y2FkNGIwHhcNMjQxMTIyMDYwMDE0WhcNMjQxMTIzMDYwMDE0WjAzMTEwLwYDVQQD
EygzY2Y1Mjg0ODYwYTdiYjI5YTk0OWE2MDdhZGY5YTJkZjcyOTYwYjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjRQZExKmcb/PcnVQ6EG0HKBTEDT
3PkEBqa+uqjY2smggZZoG5XFLnJ5Od12KYbltDEIiFxRtUSf8RdALOirqtFYFzeR
oeoADOTgwIQtEzupNFqgx8Ea9pZs2nr3JoVi/XZVPwghxATAdK40Vz5/mJj/hclS
GEOCQtH0zGhnAKQw541XMJIkMgT8dks7p4yIguS/YxOUh2ScOEwoNmEo8Hfi8QxF
Dhh06zpyNaMtztw3TgbUjjdK3QeMz5CLnEqJsOUnSFxaMKKVZ7GLL38+DyRwPbBH
zmmmL7TP0orTRV7fqjHIvOq2zX+sZTfXn5daORCXyY5dXuEK9InYUtz2EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDz1KEhgp7spqUmmB635ot9ylgtZMB8GA1UdIwQY
MBaAFGYvVdN3En8ozia3j9g77PQb7K1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmk5VjAzY1NmeWpPSnJlUDJEdnM5QnZzclVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zODhjNzAtZTRjNy00MjBkLTgxODgt
OGJlMTQ2MjUzMzU2LzEvWmk5VjAzY1NmeWpPSnJlUDJEdnM5QnZzclVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zODhjNzAtZTRjNy00MjBkLTgxODgtOGJlMTQ2MjUzMzU2
LzEvWmk5VjAzY1NmeWpPSnJlUDJEdnM5QnZzclVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMDL1ojf
5+eieYzLvrFlAatFzirCiY/0UsI//qQibKACO8FiWoxE9+lhYQHs1l8yUst4MLLX
bj95t4hb67gyXCGjS9JNbrJagEGdZn6jZjENHnPWdlQS7KmxAdK6HeoNv2f0FP1M
T5kE0ZVlKTQfYuyKOGiGmIzwO79sD/o0xayXXC1c9l560Yt2mfgI3opO1FGyCiQy
knynhigdUDyLRo7EDBSlaorSAJHWscdcAkxEllxyqYJgnfl/gPT4HFm48PftxyEP
B3FlLyHQatkzvwk+3GdgoMvnWK0O8GFrODk6hLPRc3YM0H1QsIH60dAOEpK361l5
iNLjtTgLZu6tuA==
-----END CERTIFICATE-----