Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
File:                     gKn_9jo0d5V_91zNwAPatoz50VU.mft (raw, json)
Hash identifier:          9qn0VLCHIc08o/KUuZMSAEp76L5anpB6v31n2+YZ/Bo=
Subject key identifier:   16:B0:EA:5F:43:1B:00:DE:A6:E6:9B:34:4F:16:F8:19:12:60:48:44
Authority key identifier: 80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
Certificate issuer:       /CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Certificate serial:       019364B2A4F9F9F4F10010EFBD94FF35FEF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
Manifest number:          13A7
Signing time:             Mon 25 Nov 2024 19:00:49 +0000
Manifest this update:     Mon 25 Nov 2024 19:00:49 +0000
Manifest next update:     Tue 26 Nov 2024 19:00:49 +0000
Files and hashes:         1: Om4v8oe3ndQRMcxlAIEEdyAfNYw.roa (hash: Lxs/rrQf2ldIx/IDkPGUxYKz/hCHJzwSh8KMUnuJjoU=)
                          2: gKn_9jo0d5V_91zNwAPatoz50VU.crl (hash: noEfT6QBgTBUicSWk4HtAdVI8HWS1jN7KpTd5S0MxGw=)
                          3: j5UhJzsP_ya2a0WO2rj2n4AvqJc.roa (hash: gG+xa7dijUN+p29g7uWwE4tr0xXeU+oOuJHvjB0P3SQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:b2:a4:f9:f9:f4:f1:00:10:ef:bd:94:ff:35:fe:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
        Validity
            Not Before: Nov 25 19:00:49 2024 GMT
            Not After : Nov 26 19:00:49 2024 GMT
        Subject: CN=16b0ea5f431b00dea6e69b344f16f81912604844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9c:71:96:be:10:73:a4:27:c6:5a:66:73:84:
                    b4:9d:79:79:ce:50:79:b2:0e:49:ae:23:8e:18:49:
                    a7:c4:f1:16:97:e8:af:fc:47:5e:1d:3b:f4:95:eb:
                    15:d9:e7:b7:26:7e:a8:be:7c:fc:0a:c7:00:4a:34:
                    48:db:9e:e4:f8:ab:37:90:a3:0b:53:58:f5:ae:79:
                    70:64:d0:0c:08:c6:d3:e7:2d:ba:82:d5:76:b0:62:
                    3c:e0:e1:b3:0f:6e:24:01:b6:dc:25:de:89:94:2e:
                    56:23:01:b9:02:43:e9:a2:b5:dd:50:99:87:32:92:
                    3a:4c:c1:2d:f7:3b:e8:ff:82:13:7d:d8:c3:0a:80:
                    eb:3e:11:9e:f1:32:8b:e6:68:ed:52:28:8f:6b:3f:
                    df:56:16:39:16:b6:02:e5:e2:2d:3b:71:d7:68:91:
                    a8:41:e4:02:66:87:74:5d:25:e8:da:b6:f7:f9:61:
                    d8:59:ca:58:c1:d4:96:86:57:1d:bd:93:db:09:0a:
                    92:e7:df:da:da:63:42:11:ec:1a:52:18:75:a9:4f:
                    e4:3a:d8:ce:2d:68:d2:12:70:5c:07:44:2b:6c:4d:
                    23:62:00:5a:14:94:4f:8c:5a:3d:8c:ad:d7:21:c1:
                    6e:4a:b8:59:5c:1b:30:c6:4a:b9:d4:09:71:cf:1f:
                    81:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B0:EA:5F:43:1B:00:DE:A6:E6:9B:34:4F:16:F8:19:12:60:48:44
            X509v3 Authority Key Identifier:
                keyid:80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:73:72:8a:c9:47:30:f1:2c:b4:cd:db:6c:39:fd:25:3a:69:
         e9:2a:cc:78:60:a5:e3:cc:c9:77:69:29:17:92:79:df:00:13:
         e7:84:36:9a:6a:b1:7f:f4:b0:6d:92:66:62:d3:84:06:a9:4f:
         72:e8:19:3b:a8:00:cd:d7:48:33:09:10:73:4b:66:e7:41:8a:
         ff:84:7a:e4:99:9d:10:0a:44:89:97:ca:a8:7c:ff:47:be:66:
         46:aa:9c:67:31:97:3d:e3:d0:56:1f:48:32:4e:1e:6e:8b:8d:
         82:55:6c:7a:56:a6:e8:ef:ed:3c:b4:8a:da:56:10:d1:17:6c:
         aa:3e:a9:d9:e8:ed:a6:54:41:90:7c:fc:79:15:15:72:62:13:
         a5:b1:df:0d:ae:35:99:9e:73:fb:e4:cc:e4:7d:0d:bd:09:d3:
         53:8c:c7:0d:12:ce:1f:24:61:0e:00:ae:f7:96:d9:bb:89:46:
         a4:1d:39:16:2c:f5:69:c1:19:81:01:24:2f:5e:c0:6e:58:28:
         f5:f6:d2:81:de:7c:92:80:50:2f:8c:8a:de:ef:4f:83:99:d0:
         03:77:9a:01:9e:97:9a:68:81:62:1b:e0:ed:89:71:58:34:ed:
         64:3c:b8:44:55:a9:2b:7f:85:3f:88:2d:02:65:16:33:56:9a:
         be:0f:f7:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNksqT5+fTxABDvvZT/Nf71MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYTlmZmY2M2EzNDc3OTU3ZmY3NWNjZGMwMDNkYWI2OGNm
OWQxNTUwHhcNMjQxMTI1MTkwMDQ5WhcNMjQxMTI2MTkwMDQ5WjAzMTEwLwYDVQQD
EygxNmIwZWE1ZjQzMWIwMGRlYTZlNjliMzQ0ZjE2ZjgxOTEyNjA0ODQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65xxlr4Qc6Qnxlpmc4S0nXl5zlB5
sg5JriOOGEmnxPEWl+iv/EdeHTv0lesV2ee3Jn6ovnz8CscASjRI257k+Ks3kKML
U1j1rnlwZNAMCMbT5y26gtV2sGI84OGzD24kAbbcJd6JlC5WIwG5AkPporXdUJmH
MpI6TMEt9zvo/4ITfdjDCoDrPhGe8TKL5mjtUiiPaz/fVhY5FrYC5eItO3HXaJGo
QeQCZod0XSXo2rb3+WHYWcpYwdSWhlcdvZPbCQqS59/a2mNCEewaUhh1qU/kOtjO
LWjSEnBcB0QrbE0jYgBaFJRPjFo9jK3XIcFuSrhZXBswxkq51Alxzx+B5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaw6l9DGwDepuabNE8W+BkSYEhEMB8GA1UdIwQY
MBaAFICp//Y6NHeVf/dczcAD2raM+dFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0tuXzlqbzBkNVZfOTF6TndBUGF0b3o1MFZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iMDg0YmYtYTQ1NC00M2NmLWFjOTIt
NDdkOThlNTg1NDVhLzEvZ0tuXzlqbzBkNVZfOTF6TndBUGF0b3o1MFZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iMDg0YmYtYTQ1NC00M2NmLWFjOTItNDdkOThlNTg1NDVh
LzEvZ0tuXzlqbzBkNVZfOTF6TndBUGF0b3o1MFZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXNyislH
MPEstM3bbDn9JTpp6SrMeGCl48zJd2kpF5J53wAT54Q2mmqxf/SwbZJmYtOEBqlP
cugZO6gAzddIMwkQc0tm50GK/4R65JmdEApEiZfKqHz/R75mRqqcZzGXPePQVh9I
Mk4ebouNglVselam6O/tPLSK2lYQ0Rdsqj6p2ejtplRBkHz8eRUVcmITpbHfDa41
mZ5z++TM5H0NvQnTU4zHDRLOHyRhDgCu95bZu4lGpB05Fiz1acEZgQEkL17Ablgo
9fbSgd58koBQL4yK3u9Pg5nQA3eaAZ6XmmiBYhvg7YlxWDTtZDy4RFWpK3+FP4gt
AmUWM1aavg/3tw==
-----END CERTIFICATE-----