Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4043b0-a30a-4147-8ef1-482548f52da6/1/rIv6hmGKvX-rWVP3tWX8tuS0aFE.mft
File:                     rIv6hmGKvX-rWVP3tWX8tuS0aFE.mft (raw, json)
Hash identifier:          J0SmAdOp6l1KDZX+dZAB/i3BzhNsrwXcUU+EL0Ed5vQ=
Subject key identifier:   D5:84:2C:19:C9:7E:27:DB:F4:3F:DF:63:63:C0:CB:9E:9D:15:34:B3
Authority key identifier: AC:8B:FA:86:61:8A:BD:7F:AB:59:53:F7:B5:65:FC:B6:E4:B4:68:51
Certificate issuer:       /CN=ac8bfa86618abd7fab5953f7b565fcb6e4b46851
Certificate serial:       019369DA0C7A304FC0DFD37003BE5A095682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rIv6hmGKvX-rWVP3tWX8tuS0aFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/4043b0-a30a-4147-8ef1-482548f52da6/1/rIv6hmGKvX-rWVP3tWX8tuS0aFE.mft
Manifest number:          1254
Signing time:             Tue 26 Nov 2024 19:01:57 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:57 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:57 +0000
Files and hashes:         1: 6Uasqdjz4u0EQOPHAa-vY6UgkMw.roa (hash: EQpWbM+uvwzTgDXslIGQiJkvuA38Mcj2NnliA16QYBQ=)
                          2: rIv6hmGKvX-rWVP3tWX8tuS0aFE.crl (hash: R0iZ70zvIbuOAdTquEeQ7KYLn0vbvZTvUAHpbn35weo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/4043b0-a30a-4147-8ef1-482548f52da6/1/rIv6hmGKvX-rWVP3tWX8tuS0aFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/4043b0-a30a-4147-8ef1-482548f52da6/1/rIv6hmGKvX-rWVP3tWX8tuS0aFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rIv6hmGKvX-rWVP3tWX8tuS0aFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:0c:7a:30:4f:c0:df:d3:70:03:be:5a:09:56:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac8bfa86618abd7fab5953f7b565fcb6e4b46851
        Validity
            Not Before: Nov 26 19:01:57 2024 GMT
            Not After : Nov 27 19:01:57 2024 GMT
        Subject: CN=d5842c19c97e27dbf43fdf6363c0cb9e9d1534b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c3:97:d9:13:80:a7:bc:0c:16:10:ff:5d:01:
                    c3:fe:6b:0f:84:86:6a:f3:c0:e8:b5:4d:dd:d1:20:
                    99:71:b9:0e:b4:d1:56:ba:4d:ea:ce:72:37:d8:bc:
                    b0:51:6a:ef:64:14:a7:55:d3:b5:0c:5c:68:6a:2b:
                    21:b6:3d:61:b1:bd:26:35:ad:f3:b9:47:60:87:0b:
                    a8:0c:14:51:50:ad:22:02:e1:a4:99:0e:5c:87:1a:
                    e9:25:9d:f3:df:de:d9:15:e5:dd:1d:4b:27:aa:ab:
                    89:1d:33:7c:62:89:88:86:66:c9:3d:8a:88:4d:9d:
                    2c:8f:62:31:0b:d5:0a:cc:44:90:a8:70:9d:6d:96:
                    30:2e:8a:c0:ad:21:00:41:74:a1:92:36:a1:ff:b3:
                    4d:98:16:07:47:eb:e2:63:57:68:ef:91:91:56:1f:
                    d2:f3:7e:ad:b5:8f:80:ec:7d:cc:15:33:75:72:c0:
                    ca:7a:5c:21:31:a1:e0:a6:c6:b6:5b:c9:06:ba:69:
                    d9:8b:62:c0:77:cc:2a:6e:21:26:11:d7:5f:8d:7b:
                    02:f3:5c:2a:b1:c7:2b:1a:7a:73:41:cb:c4:4d:f4:
                    19:2a:e9:62:6e:04:1d:cc:01:56:be:0c:6f:2f:ac:
                    75:d5:cb:b5:cd:cc:b3:51:08:b2:3e:b7:f1:24:a4:
                    7a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:84:2C:19:C9:7E:27:DB:F4:3F:DF:63:63:C0:CB:9E:9D:15:34:B3
            X509v3 Authority Key Identifier:
                keyid:AC:8B:FA:86:61:8A:BD:7F:AB:59:53:F7:B5:65:FC:B6:E4:B4:68:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIv6hmGKvX-rWVP3tWX8tuS0aFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4043b0-a30a-4147-8ef1-482548f52da6/1/rIv6hmGKvX-rWVP3tWX8tuS0aFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4043b0-a30a-4147-8ef1-482548f52da6/1/rIv6hmGKvX-rWVP3tWX8tuS0aFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:73:da:f5:2c:44:9a:e5:11:d5:46:30:ac:ea:50:6b:2b:ee:
         09:96:3f:63:c6:ce:1b:c5:14:3c:38:b6:be:bb:7a:8c:49:94:
         52:10:80:fd:98:87:1c:d5:f6:07:9f:65:4e:81:25:6c:ec:1a:
         0e:e5:6b:a6:6a:5c:40:51:8e:0a:34:13:a1:01:cf:c8:69:26:
         1e:54:17:6c:0b:fc:b2:9f:c1:69:3d:53:3d:7c:d0:39:e9:6d:
         9c:78:a0:9f:89:43:90:3d:b5:a8:d4:b1:1b:12:80:69:73:09:
         97:de:92:d3:89:21:78:ba:15:1e:18:57:da:c1:04:f8:34:92:
         40:0c:69:19:66:ed:53:a9:bb:05:9c:0c:85:0a:ee:44:5f:54:
         cb:33:26:60:49:dc:27:db:e8:3c:ca:81:bb:5a:cb:c0:93:08:
         60:f8:88:d4:fc:01:a2:51:74:57:06:df:40:49:c1:19:e6:0f:
         2c:4b:6c:69:bf:11:6e:01:cc:75:23:98:d7:af:d2:e9:90:5b:
         11:92:f3:1f:59:d7:24:66:32:c0:e0:1b:c6:d7:0a:8d:90:07:
         27:d2:af:92:a2:3c:5b:a1:0c:0f:2b:bb:0e:e1:9c:96:82:66:
         c4:b2:75:07:c3:22:24:91:df:c6:a9:0c:24:22:ea:6b:0f:1c:
         9b:74:4d:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2gx6ME/A39NwA75aCVaCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOGJmYTg2NjE4YWJkN2ZhYjU5NTNmN2I1NjVmY2I2ZTRi
NDY4NTEwHhcNMjQxMTI2MTkwMTU3WhcNMjQxMTI3MTkwMTU3WjAzMTEwLwYDVQQD
EyhkNTg0MmMxOWM5N2UyN2RiZjQzZmRmNjM2M2MwY2I5ZTlkMTUzNGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscOX2ROAp7wMFhD/XQHD/msPhIZq
88DotU3d0SCZcbkOtNFWuk3qznI32LywUWrvZBSnVdO1DFxoaishtj1hsb0mNa3z
uUdghwuoDBRRUK0iAuGkmQ5chxrpJZ3z397ZFeXdHUsnqquJHTN8YomIhmbJPYqI
TZ0sj2IxC9UKzESQqHCdbZYwLorArSEAQXShkjah/7NNmBYHR+viY1do75GRVh/S
836ttY+A7H3MFTN1csDKelwhMaHgpsa2W8kGumnZi2LAd8wqbiEmEddfjXsC81wq
sccrGnpzQcvETfQZKulibgQdzAFWvgxvL6x11cu1zcyzUQiyPrfxJKR6qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWELBnJfifb9D/fY2PAy56dFTSzMB8GA1UdIwQY
MBaAFKyL+oZhir1/q1lT97Vl/LbktGhRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckl2NmhtR0t2WC1yV1ZQM3RXWDh0dVMwYUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80MDQzYjAtYTMwYS00MTQ3LThlZjEt
NDgyNTQ4ZjUyZGE2LzEvckl2NmhtR0t2WC1yV1ZQM3RXWDh0dVMwYUZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy80MDQzYjAtYTMwYS00MTQ3LThlZjEtNDgyNTQ4ZjUyZGE2
LzEvckl2NmhtR0t2WC1yV1ZQM3RXWDh0dVMwYUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnPa9SxE
muUR1UYwrOpQayvuCZY/Y8bOG8UUPDi2vrt6jEmUUhCA/ZiHHNX2B59lToElbOwa
DuVrpmpcQFGOCjQToQHPyGkmHlQXbAv8sp/BaT1TPXzQOeltnHign4lDkD21qNSx
GxKAaXMJl96S04kheLoVHhhX2sEE+DSSQAxpGWbtU6m7BZwMhQruRF9UyzMmYEnc
J9voPMqBu1rLwJMIYPiI1PwBolF0VwbfQEnBGeYPLEtsab8RbgHMdSOY16/S6ZBb
EZLzH1nXJGYywOAbxtcKjZAHJ9KvkqI8W6EMDyu7DuGcloJmxLJ1B8MiJJHfxqkM
JCLqaw8cm3RNIA==
-----END CERTIFICATE-----