Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
File:                     qcxE1_HQ3Apavyd2SVth3kgZkl8.mft (raw, json)
Hash identifier:          PuCs84b6Cpste3CsW74u1WwxDWGxTA+UjK07SYM+BJ4=
Subject key identifier:   C0:12:35:5B:6A:C1:DD:FB:74:5F:22:3B:81:1D:0A:D7:B2:73:1C:C1
Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
Certificate issuer:       /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Certificate serial:       018F82900EF95AB89AB24A73AC6C4A938DF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
Manifest number:          0D0E
Signing time:             Thu 16 May 2024 18:00:30 +0000
Manifest this update:     Thu 16 May 2024 18:00:30 +0000
Manifest next update:     Fri 17 May 2024 18:00:30 +0000
Files and hashes:         1: GrRTpPGSrNX1n5buF4jDIsY9v_U.roa (hash: 4is0a/T3hJhqUz9abou0yPYM++0OM70kVUSAS6HTQIY=)
                          2: LgFG4nODBuEfMap_0EB0I6AzIf0.roa (hash: B1An4w+sAzqzQenFANWrQdGmOyYJaC6movEK2Yx+y7s=)
                          3: qcxE1_HQ3Apavyd2SVth3kgZkl8.crl (hash: zMXtT9zYSdLVnkMZufTESTqMv9MCS0xBx30gIaE+l0s=)
                          4: xZ26ns_1kDHZ6uBhgP0Ykgwyrgk.roa (hash: aHHB4PS4ysoKd3giF6e1vK4TqqMZY3nj5Sf4M+UA81k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:82:90:0e:f9:5a:b8:9a:b2:4a:73:ac:6c:4a:93:8d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
        Validity
            Not Before: May 16 18:00:30 2024 GMT
            Not After : May 17 18:00:30 2024 GMT
        Subject: CN=c012355b6ac1ddfb745f223b811d0ad7b2731cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:21:71:f7:6e:e2:f3:02:f9:22:87:d6:b6:9e:
                    7b:75:29:7e:2f:9d:7b:22:7c:f5:45:ac:5e:50:2e:
                    15:7c:a7:b4:6a:aa:7f:96:37:03:47:a4:fb:5d:b4:
                    8b:21:bd:a5:36:d8:dd:bb:53:3a:4f:12:8d:d1:f5:
                    94:b0:c9:75:53:75:f3:29:d3:ee:dd:06:6f:88:19:
                    48:32:78:9d:9b:d1:82:88:97:1c:44:0c:b7:5e:e1:
                    11:2f:55:3f:0b:f3:a2:fe:0d:2c:2b:a1:ff:1e:c1:
                    69:47:3b:b7:46:c6:45:3a:c1:e3:87:0f:6d:80:ae:
                    fb:16:bd:e6:d0:30:f6:b9:4d:52:43:d8:7f:c3:61:
                    19:02:90:5d:9d:54:70:49:93:40:91:7a:a9:3c:35:
                    ff:49:59:32:dd:e6:b4:7c:26:8d:e1:a9:5e:27:ca:
                    8e:27:97:2a:53:2a:21:75:89:4a:7f:73:52:0d:2a:
                    62:71:79:1e:08:83:5c:d6:d7:2b:53:c0:c4:41:31:
                    9f:af:f7:0b:03:cc:ac:60:a8:e0:3a:2c:c0:02:04:
                    8c:90:fb:27:6d:97:3b:26:90:e5:e1:57:7c:7f:8f:
                    6c:1a:5b:06:6c:bd:c4:b6:70:9a:73:80:74:cb:af:
                    57:89:87:2b:94:93:af:90:94:08:28:bd:9a:1f:f9:
                    f5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:12:35:5B:6A:C1:DD:FB:74:5F:22:3B:81:1D:0A:D7:B2:73:1C:C1
            X509v3 Authority Key Identifier:
                keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:bb:6d:5f:36:a3:1c:d5:e8:14:d3:ae:e3:ae:6c:08:cd:01:
         c0:1c:89:9a:5b:46:40:6b:50:18:71:97:18:70:76:e6:87:bf:
         78:2a:47:80:00:de:2b:35:5c:da:31:96:e9:51:71:98:fa:8d:
         31:44:bb:66:fb:67:87:5d:b8:5d:bc:70:bf:97:6f:5f:98:6d:
         1e:c7:8a:0c:09:32:43:0a:71:61:04:4e:ed:c9:a2:c8:ee:8e:
         49:f5:ac:f3:c5:a7:dd:f3:bf:9e:65:cf:14:27:0d:0d:4e:a8:
         c5:88:ef:21:b9:52:7c:b7:06:e8:95:20:84:0c:88:1f:fb:96:
         d1:0c:ed:f3:81:58:a5:8c:15:20:0c:34:f5:6e:40:0b:4b:5b:
         f5:d3:b7:37:5b:dc:1f:18:49:78:54:25:fd:59:a9:63:6a:9e:
         77:29:ce:ce:a5:a6:8f:14:84:bc:b1:52:90:2e:ee:c1:4a:90:
         85:f4:ef:d2:4d:0b:ad:70:81:47:3f:a2:26:a6:52:64:e7:8e:
         0b:31:78:79:5f:99:62:52:47:a3:42:2b:f2:f6:20:19:76:fe:
         61:74:28:07:a7:9e:72:c3:4b:7d:f3:61:b2:7d:8c:bc:34:06:
         0a:a8:7c:c8:3d:8a:6f:f2:c0:1a:64:7e:e9:7f:4a:bb:72:2c:
         a1:80:c7:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+CkA75WriaskpzrGxKk434MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5Y2M0NGQ3ZjFkMGRjMGE1YWJmMjc3NjQ5NWI2MWRlNDgx
OTkyNWYwHhcNMjQwNTE2MTgwMDMwWhcNMjQwNTE3MTgwMDMwWjAzMTEwLwYDVQQD
EyhjMDEyMzU1YjZhYzFkZGZiNzQ1ZjIyM2I4MTFkMGFkN2IyNzMxY2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyFx927i8wL5IofWtp57dSl+L517
Inz1RaxeUC4VfKe0aqp/ljcDR6T7XbSLIb2lNtjdu1M6TxKN0fWUsMl1U3XzKdPu
3QZviBlIMnidm9GCiJccRAy3XuERL1U/C/Oi/g0sK6H/HsFpRzu3RsZFOsHjhw9t
gK77Fr3m0DD2uU1SQ9h/w2EZApBdnVRwSZNAkXqpPDX/SVky3ea0fCaN4aleJ8qO
J5cqUyohdYlKf3NSDSpicXkeCINc1tcrU8DEQTGfr/cLA8ysYKjgOizAAgSMkPsn
bZc7JpDl4Vd8f49sGlsGbL3EtnCac4B0y69XiYcrlJOvkJQIKL2aH/n11QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMASNVtqwd37dF8iO4EdCteycxzBMB8GA1UdIwQY
MBaAFKnMRNfx0NwKWr8ndklbYd5IGZJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWN4RTFfSFEzQXBhdnlkMlNWdGgza2daa2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9kYWI4NjctYTU3OS00YTk1LWFlZjct
MTYxN2YzOGE2ZGZjLzEvcWN4RTFfSFEzQXBhdnlkMlNWdGgza2daa2w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9kYWI4NjctYTU3OS00YTk1LWFlZjctMTYxN2YzOGE2ZGZj
LzEvcWN4RTFfSFEzQXBhdnlkMlNWdGgza2daa2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrttXzaj
HNXoFNOu465sCM0BwByJmltGQGtQGHGXGHB25oe/eCpHgADeKzVc2jGW6VFxmPqN
MUS7Zvtnh124Xbxwv5dvX5htHseKDAkyQwpxYQRO7cmiyO6OSfWs88Wn3fO/nmXP
FCcNDU6oxYjvIblSfLcG6JUghAyIH/uW0Qzt84FYpYwVIAw09W5AC0tb9dO3N1vc
HxhJeFQl/VmpY2qedynOzqWmjxSEvLFSkC7uwUqQhfTv0k0LrXCBRz+iJqZSZOeO
CzF4eV+ZYlJHo0Ir8vYgGXb+YXQoB6eecsNLffNhsn2MvDQGCqh8yD2Kb/LAGmR+
6X9Ku3IsoYDHcQ==
-----END CERTIFICATE-----