Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
File:                     Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft (raw, json)
Hash identifier:          X+yKsWoe2Bj37fsOy29NGuMsDseseDErB7qoIXnoFpc=
Subject key identifier:   A8:03:03:E1:9D:BD:36:FB:05:1F:A4:FB:57:E3:E8:7D:1F:FE:43:BA
Authority key identifier: 67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
Certificate issuer:       /CN=6765a21b561ba8665cf79fbf44c31959de28f216
Certificate serial:       018F87B65A764B2C1BCDDA8DA7C81B130418
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
Manifest number:          02C0
Signing time:             Fri 17 May 2024 18:00:25 +0000
Manifest this update:     Fri 17 May 2024 18:00:25 +0000
Manifest next update:     Sat 18 May 2024 18:00:25 +0000
Files and hashes:         1: Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl (hash: vgDxk4eOGDXe3lA2MYhpCeHOFfK+O5Jc1aSDTO0hyI0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:5a:76:4b:2c:1b:cd:da:8d:a7:c8:1b:13:04:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6765a21b561ba8665cf79fbf44c31959de28f216
        Validity
            Not Before: May 17 18:00:25 2024 GMT
            Not After : May 18 18:00:25 2024 GMT
        Subject: CN=a80303e19dbd36fb051fa4fb57e3e87d1ffe43ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7a:7e:89:c8:64:0d:25:bb:9b:12:a5:7d:83:
                    b8:0b:78:0c:45:ca:0f:33:e9:c7:1f:4a:87:74:03:
                    ba:fd:77:df:2e:4f:8b:73:e7:29:ac:8a:c2:5b:59:
                    67:c0:e6:e4:27:4b:b8:8d:d3:88:93:c1:13:49:f6:
                    55:da:4c:e7:f7:15:e7:cf:c4:b1:cd:a6:31:64:7c:
                    df:37:bf:03:e9:a2:dd:c8:5b:d2:bf:5d:62:69:15:
                    c5:27:83:95:20:f3:71:8b:bf:b6:57:92:d0:47:ff:
                    cf:09:f5:57:92:28:1f:12:f8:39:1e:56:89:43:db:
                    b5:e2:11:cd:d0:f2:ae:f5:37:85:6d:69:5d:26:d3:
                    c1:68:b1:0b:7e:3c:97:c8:c1:6e:f9:c3:05:11:d0:
                    3c:8b:ae:c1:e6:4f:c6:b1:b7:83:f7:ca:f2:a6:94:
                    11:5c:11:d3:26:2c:e5:f6:a6:4d:fb:a4:19:ff:92:
                    0b:99:b3:ac:32:e9:e8:4b:d4:c0:91:4f:46:79:53:
                    a7:c6:30:82:be:1f:f0:a5:2c:25:e7:fe:00:71:cd:
                    2b:56:08:09:75:2f:af:e6:4f:f8:2d:3d:d1:60:43:
                    49:58:2b:32:cf:7a:83:7a:a8:36:9c:44:d8:69:c9:
                    29:27:d6:7a:85:35:5d:93:90:25:e3:f0:e7:ab:95:
                    6f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:03:03:E1:9D:BD:36:FB:05:1F:A4:FB:57:E3:E8:7D:1F:FE:43:BA
            X509v3 Authority Key Identifier:
                keyid:67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:1a:94:d8:a3:ef:6b:99:59:46:20:a5:4f:e1:69:c8:f8:4d:
         fe:07:cc:f0:f7:c9:61:c8:19:80:a4:31:80:14:7f:89:75:6a:
         6f:ee:3e:eb:6f:cb:12:3c:d5:ef:32:4a:bd:2b:51:ac:59:a0:
         b8:b0:c3:fa:e4:89:53:b6:a6:ea:5f:2a:4a:e9:7c:72:03:9d:
         f6:e3:f1:02:25:f7:ea:9b:1e:67:9e:2a:ba:c6:cd:f6:b7:e3:
         ed:41:6a:11:49:47:46:2e:b3:24:4c:a1:c6:3d:fd:b3:cc:8b:
         f5:fb:bf:6e:96:2a:80:f6:9c:42:f1:2b:ce:7c:7f:4a:23:4f:
         7b:19:c2:d9:cd:56:55:bf:af:cb:31:70:ef:41:7b:00:0a:91:
         f5:b2:37:a3:b4:9a:8c:ce:46:7d:e4:64:20:b8:0f:e1:27:24:
         e7:65:9c:6c:8f:c1:0a:f9:2e:58:a1:ed:5e:0c:83:7b:db:32:
         e3:04:b4:f8:ec:e7:ba:62:04:f5:b0:0f:10:36:fe:8a:d9:c2:
         8a:2b:11:7a:63:29:4e:62:9f:70:ef:f9:1c:cb:4b:51:5d:df:
         4a:93:96:19:d6:6e:e8:cd:e4:96:28:b0:1d:b0:fd:e8:af:3d:
         f6:92:f6:ee:90:c5:c6:c1:e1:51:af:7c:c6:9e:e3:b4:33:9f:
         1a:f6:2d:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Htlp2SywbzdqNp8gbEwQYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NjVhMjFiNTYxYmE4NjY1Y2Y3OWZiZjQ0YzMxOTU5ZGUy
OGYyMTYwHhcNMjQwNTE3MTgwMDI1WhcNMjQwNTE4MTgwMDI1WjAzMTEwLwYDVQQD
EyhhODAzMDNlMTlkYmQzNmZiMDUxZmE0ZmI1N2UzZTg3ZDFmZmU0M2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHp+ichkDSW7mxKlfYO4C3gMRcoP
M+nHH0qHdAO6/XffLk+Lc+cprIrCW1lnwObkJ0u4jdOIk8ETSfZV2kzn9xXnz8Sx
zaYxZHzfN78D6aLdyFvSv11iaRXFJ4OVIPNxi7+2V5LQR//PCfVXkigfEvg5HlaJ
Q9u14hHN0PKu9TeFbWldJtPBaLELfjyXyMFu+cMFEdA8i67B5k/GsbeD98ryppQR
XBHTJizl9qZN+6QZ/5ILmbOsMunoS9TAkU9GeVOnxjCCvh/wpSwl5/4Acc0rVggJ
dS+v5k/4LT3RYENJWCsyz3qDeqg2nETYackpJ9Z6hTVdk5Al4/Dnq5VvRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgDA+GdvTb7BR+k+1fj6H0f/kO6MB8GA1UdIwQY
MBaAFGdlohtWG6hmXPefv0TDGVneKPIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjJXaUcxWWJxR1pjOTUtX1JNTVpXZDRvOGhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lOGI4OWMtODI2OC00MDJiLWFhMjYt
ZWFkMDQxNzc0ZTA3LzEvWjJXaUcxWWJxR1pjOTUtX1JNTVpXZDRvOGhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9lOGI4OWMtODI2OC00MDJiLWFhMjYtZWFkMDQxNzc0ZTA3
LzEvWjJXaUcxWWJxR1pjOTUtX1JNTVpXZDRvOGhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRqU2KPv
a5lZRiClT+FpyPhN/gfM8PfJYcgZgKQxgBR/iXVqb+4+62/LEjzV7zJKvStRrFmg
uLDD+uSJU7am6l8qSul8cgOd9uPxAiX36pseZ54qusbN9rfj7UFqEUlHRi6zJEyh
xj39s8yL9fu/bpYqgPacQvErznx/SiNPexnC2c1WVb+vyzFw70F7AAqR9bI3o7Sa
jM5GfeRkILgP4Sck52WcbI/BCvkuWKHtXgyDe9sy4wS0+OznumIE9bAPEDb+itnC
iisRemMpTmKfcO/5HMtLUV3fSpOWGdZu6M3kliiwHbD96K899pL27pDFxsHhUa98
xp7jtDOfGvYt4g==
-----END CERTIFICATE-----