Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
File:                     vlR-u1wFb3ApbkCGISYfPE4tQjk.mft (raw, json)
Hash identifier:          JdIsz8LvDT8Qync6fhkp9ZI7u2z/+BX0M5oTbzQzMfI=
Subject key identifier:   64:19:3E:1C:94:9C:1F:99:EF:60:4F:A6:C2:13:C3:5D:58:3C:3E:9F
Authority key identifier: BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39
Certificate issuer:       /CN=be547ebb5c056f70296e408621261f3c4e2d4239
Certificate serial:       019369DA1F0C3BE928F55CDD1B6809065CA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
Manifest number:          0860
Signing time:             Tue 26 Nov 2024 19:02:02 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:02 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:02 +0000
Files and hashes:         1: t6wvwVOKSyJLPrNIXqHP_vGksAE.roa (hash: 1yitoRdC+IsX3ahOyh4J12a6Cr3ep2+oJwbd/MJgkRE=)
                          2: vlR-u1wFb3ApbkCGISYfPE4tQjk.crl (hash: 3g7nXLqdwyKdFv1vPE9G8nhV610+CXiFoCB33Wfhtig=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:1f:0c:3b:e9:28:f5:5c:dd:1b:68:09:06:5c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be547ebb5c056f70296e408621261f3c4e2d4239
        Validity
            Not Before: Nov 26 19:02:02 2024 GMT
            Not After : Nov 27 19:02:02 2024 GMT
        Subject: CN=64193e1c949c1f99ef604fa6c213c35d583c3e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a9:9d:20:38:8f:86:3b:a4:dd:a0:b2:93:a1:
                    ac:7e:c0:bc:f8:34:7b:4b:2b:bc:52:ea:34:ce:35:
                    75:c4:ad:aa:b1:c1:b7:6a:58:6b:29:68:06:d8:1e:
                    54:b6:9f:6c:fb:89:2e:40:d8:07:c2:ad:bc:cf:8e:
                    ab:a0:8e:65:94:4f:f4:80:a6:71:d6:5d:0a:5b:bc:
                    f0:f8:b6:46:f0:df:e2:3e:5f:89:db:36:20:84:c0:
                    55:92:03:9f:76:21:78:f1:ff:1a:c2:e8:ee:f8:25:
                    59:09:8c:91:a2:00:98:fb:b7:87:44:8a:56:c0:26:
                    fc:e1:b5:1d:4c:54:f1:87:12:dd:36:fd:ed:f5:0e:
                    f4:b4:91:ee:16:4c:9e:dd:68:d3:be:51:28:66:78:
                    04:a5:a8:a0:2b:5a:49:cb:4f:1e:c8:47:04:ab:a1:
                    fd:97:fd:b5:b4:a8:f2:6e:cc:f5:44:58:e7:2f:80:
                    e0:e9:fb:84:e4:13:76:ed:3a:23:d8:60:a5:c0:f5:
                    90:87:a4:f1:2e:50:ae:e8:a0:fd:2c:39:d1:ef:f9:
                    11:dc:a4:36:cc:34:b4:c1:b2:7a:bf:4c:5e:8b:ec:
                    15:cb:d5:58:13:02:0b:ec:80:0e:48:7f:d1:c1:61:
                    70:00:52:c4:44:e4:28:b6:7b:ea:12:36:bc:4a:5d:
                    3b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:19:3E:1C:94:9C:1F:99:EF:60:4F:A6:C2:13:C3:5D:58:3C:3E:9F
            X509v3 Authority Key Identifier:
                keyid:BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b6:76:80:5c:e8:6d:49:86:25:86:bf:8b:c8:e6:28:78:2e:
         2a:68:45:ef:1e:f5:77:b6:3c:ae:c8:c8:69:ff:03:94:85:81:
         58:73:e1:32:b9:b7:40:51:82:5a:ca:26:45:e1:b8:2e:de:1a:
         7e:bf:bf:85:97:18:83:70:8b:bf:fe:ed:84:c2:18:11:b0:07:
         ef:fa:6a:e0:42:75:06:5f:97:ef:0a:c5:66:ff:1c:f7:ba:8b:
         25:6e:f6:1a:41:b8:d1:f7:07:f1:21:c2:9b:d2:39:a6:b0:b1:
         11:f2:1b:b9:7b:a3:f0:fe:a9:f0:e6:80:c0:5d:86:ec:45:3f:
         4f:76:12:8a:48:d0:7e:10:b9:4f:79:60:07:e8:3f:f2:0b:69:
         56:e4:69:59:d1:e3:2f:5c:c7:84:e4:dc:3b:6c:c7:d4:d4:1f:
         93:c9:76:e1:e5:f0:f4:ce:ed:3c:c3:3e:41:5e:17:31:f6:a6:
         0b:cb:62:52:27:c7:b5:d5:83:38:4d:84:71:fb:29:f0:df:cd:
         c1:6a:de:27:16:13:97:b5:6b:c7:5a:ba:c9:00:24:e3:a9:da:
         67:c4:47:74:40:4d:bb:fb:a3:5f:52:2c:e1:96:d0:49:25:85:
         fe:76:50:22:56:a9:38:9a:f8:2a:6d:96:56:27:55:6a:3c:5c:
         b1:f9:bb:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2h8MO+ko9VzdG2gJBlygMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNTQ3ZWJiNWMwNTZmNzAyOTZlNDA4NjIxMjYxZjNjNGUy
ZDQyMzkwHhcNMjQxMTI2MTkwMjAyWhcNMjQxMTI3MTkwMjAyWjAzMTEwLwYDVQQD
Eyg2NDE5M2UxYzk0OWMxZjk5ZWY2MDRmYTZjMjEzYzM1ZDU4M2MzZTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqmdIDiPhjuk3aCyk6GsfsC8+DR7
Syu8Uuo0zjV1xK2qscG3alhrKWgG2B5Utp9s+4kuQNgHwq28z46roI5llE/0gKZx
1l0KW7zw+LZG8N/iPl+J2zYghMBVkgOfdiF48f8awuju+CVZCYyRogCY+7eHRIpW
wCb84bUdTFTxhxLdNv3t9Q70tJHuFkye3WjTvlEoZngEpaigK1pJy08eyEcEq6H9
l/21tKjybsz1RFjnL4Dg6fuE5BN27Toj2GClwPWQh6TxLlCu6KD9LDnR7/kR3KQ2
zDS0wbJ6v0xei+wVy9VYEwIL7IAOSH/RwWFwAFLEROQotnvqEja8Sl07mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQZPhyUnB+Z72BPpsITw11YPD6fMB8GA1UdIwQY
MBaAFL5UfrtcBW9wKW5AhiEmHzxOLUI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmxSLXUxd0ZiM0FwYmtDR0lTWWZQRTR0UWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83NTkyODgtMTBkZS00OTE2LWI0ZDkt
ZDBiOWRjM2FjYTIzLzEvdmxSLXUxd0ZiM0FwYmtDR0lTWWZQRTR0UWprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC83NTkyODgtMTBkZS00OTE2LWI0ZDktZDBiOWRjM2FjYTIz
LzEvdmxSLXUxd0ZiM0FwYmtDR0lTWWZQRTR0UWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbZ2gFzo
bUmGJYa/i8jmKHguKmhF7x71d7Y8rsjIaf8DlIWBWHPhMrm3QFGCWsomReG4Lt4a
fr+/hZcYg3CLv/7thMIYEbAH7/pq4EJ1Bl+X7wrFZv8c97qLJW72GkG40fcH8SHC
m9I5prCxEfIbuXuj8P6p8OaAwF2G7EU/T3YSikjQfhC5T3lgB+g/8gtpVuRpWdHj
L1zHhOTcO2zH1NQfk8l24eXw9M7tPMM+QV4XMfamC8tiUifHtdWDOE2Ecfsp8N/N
wWreJxYTl7Vrx1q6yQAk46naZ8RHdEBNu/ujX1Is4ZbQSSWF/nZQIlapOJr4Km2W
VidVajxcsfm7vA==
-----END CERTIFICATE-----