Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
File:                     Z8fCgrBpftBVTIBfUACrEro7nH4.mft (raw, json)
Hash identifier:          Y+nM0KjiD1+VNoLpMF1gcegVJdbsa25stGHMwbMhyIw=
Subject key identifier:   8B:AE:F5:43:1E:03:6B:1C:BD:BB:81:11:1F:E9:3C:63:BC:F2:7F:09
Authority key identifier: 67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
Certificate issuer:       /CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Certificate serial:       01936B221A1CCA6934402A43021CB0B8945F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
Manifest number:          03B7
Signing time:             Wed 27 Nov 2024 01:00:17 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:17 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:17 +0000
Files and hashes:         1: X5vjGxFTz6PxQ9gVXrqw6e_N06c.roa (hash: SV56lSzCbD4GTXAsCvSCsD5HUdWxTttzmUxtkwsokQs=)
                          2: Z8fCgrBpftBVTIBfUACrEro7nH4.crl (hash: VM4mkforS4q1OqYL+wT2mTmPcA+8ZWzT65bmXtLAr14=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:1a:1c:ca:69:34:40:2a:43:02:1c:b0:b8:94:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
        Validity
            Not Before: Nov 27 01:00:17 2024 GMT
            Not After : Nov 28 01:00:17 2024 GMT
        Subject: CN=8baef5431e036b1cbdbb81111fe93c63bcf27f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d7:7c:f0:03:3c:22:3b:77:11:63:d3:b4:d9:
                    02:2e:db:4f:5d:e8:aa:51:30:a9:8d:75:f6:15:5d:
                    c7:1b:11:2b:a5:c3:96:5f:7c:fb:38:bc:b8:03:02:
                    98:bd:eb:3b:19:90:85:47:59:e0:54:ca:8e:a2:89:
                    1e:70:2f:69:d9:88:60:2e:a7:fe:58:4e:5c:a8:12:
                    43:4e:6b:0d:42:d9:5c:4a:26:b5:38:c4:3d:1a:f8:
                    df:0f:6d:00:6e:d5:d2:2a:66:43:ed:fd:8f:a3:b8:
                    db:97:55:44:44:13:89:ea:2f:a8:b9:8e:ef:74:3d:
                    19:a1:85:ea:05:1a:0c:30:18:37:cd:83:7a:1d:34:
                    75:22:ee:50:1f:c5:6d:a8:79:72:2c:c8:85:78:dd:
                    cc:33:8f:94:bc:96:89:d7:3a:01:3d:ef:49:3e:3b:
                    7e:f6:f7:55:0d:ca:35:f1:e5:03:0c:11:f6:67:76:
                    79:e4:47:b5:04:16:16:27:21:0f:6c:fd:a5:fa:ca:
                    da:04:30:81:58:bc:70:43:94:53:64:00:c3:24:c3:
                    b1:41:14:39:52:de:23:c9:2b:8a:ce:ef:3e:26:4c:
                    d3:81:19:eb:8b:3b:37:c8:ce:0a:a9:4c:9d:12:58:
                    88:81:34:fa:28:b4:33:ff:09:b5:64:f5:ef:7a:77:
                    16:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AE:F5:43:1E:03:6B:1C:BD:BB:81:11:1F:E9:3C:63:BC:F2:7F:09
            X509v3 Authority Key Identifier:
                keyid:67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:c7:55:d6:15:70:52:a6:7f:19:44:fe:01:1b:a4:61:29:ca:
         87:e1:08:26:a9:71:90:c4:9f:25:09:6e:04:68:b4:4e:b5:b4:
         c1:b4:91:2f:4d:2a:e9:92:66:67:bc:dc:82:c1:18:50:1d:15:
         c2:7a:86:b2:d8:b3:ae:1d:7d:00:cc:7f:69:19:d1:84:12:8b:
         e2:df:f7:3e:be:65:47:fb:71:38:37:83:29:15:32:14:03:9d:
         f2:7c:41:5f:46:2a:02:a0:b8:27:9c:c9:9c:81:35:70:22:d3:
         60:46:5f:4d:a0:eb:e3:43:82:90:9f:96:9a:c2:8d:82:61:38:
         25:c2:5a:16:66:c4:51:bb:fd:f0:02:88:30:84:1f:4b:72:d7:
         6e:4f:45:a2:0b:a7:ae:28:3b:da:bc:a5:e1:04:37:2b:11:9c:
         05:15:de:5f:0d:a2:b2:a0:3f:98:09:c0:9f:48:4c:95:0c:78:
         cc:5b:9e:9b:9a:df:51:f8:8e:d7:ae:23:5e:19:61:86:5c:80:
         92:27:e3:ca:09:ab:89:4c:cd:aa:cc:22:0e:5d:9c:5f:54:01:
         67:67:4e:30:c2:4a:71:a0:55:ae:81:74:9a:d6:c5:45:e2:6a:
         19:5e:30:af:a2:85:48:8b:7b:7e:6e:a9:a8:8e:c8:79:5e:23:
         49:5d:b4:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNrIhocymk0QCpDAhywuJRfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzdjMjgyYjA2OTdlZDA1NTRjODA1ZjUwMDBhYjEyYmEz
YjljN2UwHhcNMjQxMTI3MDEwMDE3WhcNMjQxMTI4MDEwMDE3WjAzMTEwLwYDVQQD
Eyg4YmFlZjU0MzFlMDM2YjFjYmRiYjgxMTExZmU5M2M2M2JjZjI3ZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNd88AM8Ijt3EWPTtNkCLttPXeiq
UTCpjXX2FV3HGxErpcOWX3z7OLy4AwKYves7GZCFR1ngVMqOookecC9p2YhgLqf+
WE5cqBJDTmsNQtlcSia1OMQ9GvjfD20AbtXSKmZD7f2Po7jbl1VERBOJ6i+ouY7v
dD0ZoYXqBRoMMBg3zYN6HTR1Iu5QH8VtqHlyLMiFeN3MM4+UvJaJ1zoBPe9JPjt+
9vdVDco18eUDDBH2Z3Z55Ee1BBYWJyEPbP2l+sraBDCBWLxwQ5RTZADDJMOxQRQ5
Ut4jySuKzu8+JkzTgRnrizs3yM4KqUydEliIgTT6KLQz/wm1ZPXvencWvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuu9UMeA2scvbuBER/pPGO88n8JMB8GA1UdIwQY
MBaAFGfHwoKwaX7QVUyAX1AAqxK6O5x+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhmQ2dyQnBmdEJWVElCZlVBQ3JFcm83bkg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9mMmNjNTQtNzIyYS00OTVmLWE5NGMt
MjgzNmFkMWMzMjFlLzEvWjhmQ2dyQnBmdEJWVElCZlVBQ3JFcm83bkg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9mMmNjNTQtNzIyYS00OTVmLWE5NGMtMjgzNmFkMWMzMjFl
LzEvWjhmQ2dyQnBmdEJWVElCZlVBQ3JFcm83bkg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyMdV1hVw
UqZ/GUT+ARukYSnKh+EIJqlxkMSfJQluBGi0TrW0wbSRL00q6ZJmZ7zcgsEYUB0V
wnqGstizrh19AMx/aRnRhBKL4t/3Pr5lR/txODeDKRUyFAOd8nxBX0YqAqC4J5zJ
nIE1cCLTYEZfTaDr40OCkJ+WmsKNgmE4JcJaFmbEUbv98AKIMIQfS3LXbk9Fogun
rig72ryl4QQ3KxGcBRXeXw2isqA/mAnAn0hMlQx4zFuem5rfUfiO164jXhlhhlyA
kifjygmriUzNqswiDl2cX1QBZ2dOMMJKcaBVroF0mtbFReJqGV4wr6KFSIt7fm6p
qI7IeV4jSV20LQ==
-----END CERTIFICATE-----