Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.mft
File:                     epHmw2HvM-JQ3YijH32Sfq03Xtk.mft (raw, json)
Hash identifier:          dCcDiWxkK6c+EEltUf1xwHur7FkU9udNMyS6lyEUHuw=
Subject key identifier:   08:88:00:A3:3C:23:F2:DB:E3:A0:CC:42:24:32:09:06:E4:4E:9B:73
Authority key identifier: 7A:91:E6:C3:61:EF:33:E2:50:DD:88:A3:1F:7D:92:7E:AD:37:5E:D9
Certificate issuer:       /CN=7a91e6c361ef33e250dd88a31f7d927ead375ed9
Certificate serial:       01935689976018651971ADCC726164BB7CD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/epHmw2HvM-JQ3YijH32Sfq03Xtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.mft
Manifest number:          02ED
Signing time:             Sat 23 Nov 2024 01:01:17 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:17 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:17 +0000
Files and hashes:         1: epHmw2HvM-JQ3YijH32Sfq03Xtk.crl (hash: idnrDwpNeqNIr260Ihl33HvuYLKYNo83TqQCZJQGUyY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/epHmw2HvM-JQ3YijH32Sfq03Xtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:97:60:18:65:19:71:ad:cc:72:61:64:bb:7c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a91e6c361ef33e250dd88a31f7d927ead375ed9
        Validity
            Not Before: Nov 23 01:01:17 2024 GMT
            Not After : Nov 24 01:01:17 2024 GMT
        Subject: CN=088800a33c23f2dbe3a0cc4224320906e44e9b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:92:71:47:fc:b9:d1:4a:45:41:39:82:72:03:
                    1c:17:f2:68:f9:a2:e7:b0:52:db:d2:53:b2:c2:a9:
                    83:28:65:f6:31:34:77:50:ea:84:42:21:af:1f:b5:
                    1f:ac:99:f8:26:aa:e6:6b:98:90:27:7e:a8:7d:01:
                    b3:8c:47:85:aa:99:f1:ca:9d:57:34:32:1d:26:b9:
                    45:26:27:59:9f:4d:f5:b6:21:2b:c6:f0:ef:29:84:
                    91:23:07:bb:3e:e3:89:02:5b:fe:27:25:1a:e4:ef:
                    87:af:fb:0e:2f:cf:3d:b8:a9:ab:83:58:78:23:d7:
                    34:b1:18:86:ca:4e:30:83:b8:da:1a:a2:86:b3:ad:
                    26:af:5b:55:df:da:b4:fb:c5:68:e7:f1:c5:63:59:
                    a2:63:df:e7:ec:7c:e3:b4:77:54:7e:c2:b6:8c:b3:
                    d3:94:87:a4:8e:7f:38:54:f3:ff:5a:cf:55:cd:9d:
                    38:d5:11:17:61:d0:b5:a2:2c:71:26:9d:93:fb:c8:
                    28:ed:2e:37:44:0c:45:3e:ed:a8:0b:55:d9:8f:b9:
                    72:42:ef:ba:e0:eb:b0:59:01:eb:f0:e1:5d:4c:40:
                    e6:80:94:ec:42:24:18:bb:94:01:d0:3b:3c:69:31:
                    98:a6:a3:b4:6d:7c:88:ee:63:b4:fb:75:04:d6:d2:
                    fb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:88:00:A3:3C:23:F2:DB:E3:A0:CC:42:24:32:09:06:E4:4E:9B:73
            X509v3 Authority Key Identifier:
                keyid:7A:91:E6:C3:61:EF:33:E2:50:DD:88:A3:1F:7D:92:7E:AD:37:5E:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epHmw2HvM-JQ3YijH32Sfq03Xtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:4a:72:8e:4a:0a:a6:96:30:14:5c:7f:75:5d:97:54:6d:5f:
         98:c2:81:60:7e:69:ea:af:c3:d8:2f:80:08:42:c4:19:e4:52:
         cb:bf:f8:85:28:57:a6:a1:ec:bc:20:58:8a:95:55:c3:52:9f:
         65:3b:88:bf:f5:d8:63:f8:f2:4a:f3:ff:1a:b5:eb:fa:50:ee:
         61:a1:d9:4a:cf:e8:3a:6c:83:cd:6c:b0:da:63:38:2d:5a:3f:
         75:5e:2a:5f:d6:ae:e3:2c:8d:b7:e8:5e:05:fa:c2:90:cb:eb:
         6d:07:5d:04:70:7b:5f:b3:13:db:a6:27:90:7e:3d:51:6d:9c:
         20:b2:e1:dc:e5:19:d2:15:77:4a:e4:62:51:62:be:a9:2f:c5:
         78:bb:ae:3b:2f:05:e6:51:92:4f:f1:7e:78:3a:ca:92:64:e7:
         60:b7:50:06:77:65:a5:c1:cc:23:08:97:ae:68:e2:a0:b2:17:
         d2:67:df:0f:e4:d5:17:77:56:be:19:1f:a3:62:f2:c2:fb:cb:
         41:12:67:f1:e0:a8:12:66:27:00:49:60:bb:5d:5e:4c:84:02:
         30:aa:59:78:71:04:39:36:fc:c8:f8:a6:bc:d9:6f:2b:fb:78:
         da:c2:69:e9:b9:bf:cd:77:5f:59:c9:18:09:4e:93:47:a4:75:
         e9:a6:55:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiZdgGGUZca3McmFku3zYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhOTFlNmMzNjFlZjMzZTI1MGRkODhhMzFmN2Q5MjdlYWQz
NzVlZDkwHhcNMjQxMTIzMDEwMTE3WhcNMjQxMTI0MDEwMTE3WjAzMTEwLwYDVQQD
EygwODg4MDBhMzNjMjNmMmRiZTNhMGNjNDIyNDMyMDkwNmU0NGU5YjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35JxR/y50UpFQTmCcgMcF/Jo+aLn
sFLb0lOywqmDKGX2MTR3UOqEQiGvH7UfrJn4Jqrma5iQJ36ofQGzjEeFqpnxyp1X
NDIdJrlFJidZn031tiErxvDvKYSRIwe7PuOJAlv+JyUa5O+Hr/sOL889uKmrg1h4
I9c0sRiGyk4wg7jaGqKGs60mr1tV39q0+8Vo5/HFY1miY9/n7HzjtHdUfsK2jLPT
lIekjn84VPP/Ws9VzZ041REXYdC1oixxJp2T+8go7S43RAxFPu2oC1XZj7lyQu+6
4OuwWQHr8OFdTEDmgJTsQiQYu5QB0Ds8aTGYpqO0bXyI7mO0+3UE1tL7swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiIAKM8I/Lb46DMQiQyCQbkTptzMB8GA1UdIwQY
MBaAFHqR5sNh7zPiUN2Iox99kn6tN17ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXBIbXcySHZNLUpRM1lpakgzMlNmcTAzWHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80ZTNmYzMtMDQ4ZC00YjY2LWE5NTEt
M2UyNTM0NTgzNjExLzEvZXBIbXcySHZNLUpRM1lpakgzMlNmcTAzWHRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS80ZTNmYzMtMDQ4ZC00YjY2LWE5NTEtM2UyNTM0NTgzNjEx
LzEvZXBIbXcySHZNLUpRM1lpakgzMlNmcTAzWHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUpyjkoK
ppYwFFx/dV2XVG1fmMKBYH5p6q/D2C+ACELEGeRSy7/4hShXpqHsvCBYipVVw1Kf
ZTuIv/XYY/jySvP/GrXr+lDuYaHZSs/oOmyDzWyw2mM4LVo/dV4qX9au4yyNt+he
BfrCkMvrbQddBHB7X7MT26YnkH49UW2cILLh3OUZ0hV3SuRiUWK+qS/FeLuuOy8F
5lGST/F+eDrKkmTnYLdQBndlpcHMIwiXrmjioLIX0mffD+TVF3dWvhkfo2LywvvL
QRJn8eCoEmYnAElgu11eTIQCMKpZeHEEOTb8yPimvNlvK/t42sJp6bm/zXdfWckY
CU6TR6R16aZVig==
-----END CERTIFICATE-----