Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
File:                     xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json)
Hash identifier:          G6i+QAU6DfktrJZeaCzhiwmt+e/AACiCCtm3eh6kJdU=
Subject key identifier:   37:03:20:F4:7B:5B:E5:D5:7E:4E:CC:3A:64:92:01:96:E6:9C:DE:7C
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Certificate issuer:       /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial:       018F885AEEA86C90A6835F2D12AE21B6B0B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
Manifest number:          110A
Signing time:             Fri 17 May 2024 21:00:11 +0000
Manifest this update:     Fri 17 May 2024 21:00:11 +0000
Manifest next update:     Sat 18 May 2024 21:00:11 +0000
Files and hashes:         1: WbhRrLMhX_gBN9xkDZMjBqz2sbQ.roa (hash: 8F59KE0gIpeYjX+/NZZoTR+0as0HlZRcB0H7iXNlQGc=)
                          2: hmOrkY3iSICuWt7V7WeE4RyXJhg.roa (hash: vSKZz9uoWLQoiZrVC3KG5aoi9j/LAruzZpMNix+8Bjc=)
                          3: v9jUvXCc6z64bwiQ1DLhE0I8fDU.roa (hash: tWy/H20VGAZgBF5GQVdK9hzbP9MHoN6e7FQrhgB2tCU=)
                          4: w7_mO8AQoyQ-F3fpZVslMLy8tCA.roa (hash: V8sNQBZ9Au0jrMyVsKeOrLHo76+LB3ETFF0zWeozZE8=)
                          5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: CkN++qmNJObWY3foCLbugDAUTx7P7eKKJMU/LVhrqIY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:ee:a8:6c:90:a6:83:5f:2d:12:ae:21:b6:b0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
        Validity
            Not Before: May 17 21:00:11 2024 GMT
            Not After : May 18 21:00:11 2024 GMT
        Subject: CN=370320f47b5be5d57e4ecc3a64920196e69cde7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e1:09:55:fc:93:6e:b3:c1:b6:75:be:b1:ce:
                    3f:bc:42:c3:b0:cf:5c:14:a1:94:a5:4e:f0:cf:01:
                    3e:d0:5a:d1:0f:e2:aa:48:d3:fa:94:fc:66:3e:c2:
                    b4:96:00:e7:8d:ea:db:95:60:ba:64:a8:a4:14:52:
                    d5:e5:c9:c6:76:d4:57:62:da:7e:1a:16:66:43:4f:
                    4a:b7:54:c0:be:ea:04:f1:ef:f1:ef:9e:19:05:73:
                    76:dd:9d:ba:94:dd:36:12:ac:f1:9a:c4:56:19:3c:
                    27:f8:8b:29:12:12:20:9a:f4:c8:78:9d:7d:b9:09:
                    1b:1f:1f:4b:68:dc:7c:81:4d:b9:ce:4b:7b:eb:16:
                    05:6c:00:1a:e5:03:d4:3d:f9:a4:19:e3:23:6d:32:
                    ec:4a:ce:a7:25:26:04:7c:6c:1b:fb:b4:9b:a0:ac:
                    88:2a:a8:5b:3e:61:41:3c:47:1d:45:6e:5b:23:fb:
                    d6:de:3d:21:5a:62:ab:fa:9a:e2:06:fc:8d:06:72:
                    3f:6b:4e:37:ca:d3:23:7c:f0:98:2d:29:58:ee:0c:
                    c4:b6:f6:56:4c:1e:c8:86:02:41:23:ab:91:da:a0:
                    d1:3a:b2:b2:31:0a:76:f7:3f:81:53:f2:d0:ec:5f:
                    77:11:c2:02:ca:ca:b6:99:e9:8d:5f:83:b2:a1:15:
                    dd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:03:20:F4:7B:5B:E5:D5:7E:4E:CC:3A:64:92:01:96:E6:9C:DE:7C
            X509v3 Authority Key Identifier:
                keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:fe:ab:96:c9:5c:df:07:0f:a2:11:62:06:a5:c3:5a:5f:d3:
         64:57:95:dd:8e:7b:89:cb:01:b9:5a:b2:da:9d:e6:39:91:7b:
         53:be:51:12:7c:4c:4d:89:64:30:7a:91:13:19:06:21:77:35:
         7a:55:87:82:98:37:7e:47:85:67:3a:51:52:35:99:ec:39:73:
         b6:c3:cc:e7:0f:36:d0:24:c1:3c:b6:eb:75:49:97:6f:b3:9e:
         74:1a:2d:4d:6d:e0:7f:94:4d:c9:c4:ad:e6:87:ad:f0:43:b7:
         23:1e:63:97:28:50:f1:9c:50:d3:4d:ad:9e:11:4d:e8:9e:a5:
         c8:fd:a7:2d:0f:23:11:70:cd:6a:96:81:7c:c0:de:65:fb:b5:
         ef:01:09:71:9c:f8:44:70:5f:a8:8d:60:5d:fa:ca:b8:0e:5e:
         28:0b:c2:a4:bb:12:8b:f6:9b:91:23:16:12:a0:52:84:fb:99:
         0f:03:27:47:9c:d0:2b:61:a3:b3:ed:e4:e8:87:94:8d:c5:42:
         63:ac:88:cb:11:66:f4:dd:3e:d7:d0:17:d7:33:80:db:3a:4f:
         74:1b:29:c4:39:43:3c:b7:49:91:d3:75:d5:7d:a8:a3:9c:81:
         23:a2:63:61:5e:62:bd:65:0d:61:aa:84:65:6d:bb:49:87:b8:
         24:73:36:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IWu6obJCmg18tEq4htrCyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZGYwYmQwNGFhODQzZTY4MDgyZjZkZWNlMDc5ODczMmI2
Zjg4MzIwHhcNMjQwNTE3MjEwMDExWhcNMjQwNTE4MjEwMDExWjAzMTEwLwYDVQQD
EygzNzAzMjBmNDdiNWJlNWQ1N2U0ZWNjM2E2NDkyMDE5NmU2OWNkZTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uEJVfyTbrPBtnW+sc4/vELDsM9c
FKGUpU7wzwE+0FrRD+KqSNP6lPxmPsK0lgDnjerblWC6ZKikFFLV5cnGdtRXYtp+
GhZmQ09Kt1TAvuoE8e/x754ZBXN23Z26lN02EqzxmsRWGTwn+IspEhIgmvTIeJ19
uQkbHx9LaNx8gU25zkt76xYFbAAa5QPUPfmkGeMjbTLsSs6nJSYEfGwb+7SboKyI
KqhbPmFBPEcdRW5bI/vW3j0hWmKr+priBvyNBnI/a043ytMjfPCYLSlY7gzEtvZW
TB7IhgJBI6uR2qDROrKyMQp29z+BU/LQ7F93EcICysq2memNX4OyoRXdEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcDIPR7W+XVfk7MOmSSAZbmnN58MB8GA1UdIwQY
MBaAFMTfC9BKqEPmgIL23s4HmHMrb4gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAt
Y2I5ZTFlZDc3OWFjLzEveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAtY2I5ZTFlZDc3OWFj
LzEveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/6rlslc
3wcPohFiBqXDWl/TZFeV3Y57icsBuVqy2p3mOZF7U75REnxMTYlkMHqRExkGIXc1
elWHgpg3fkeFZzpRUjWZ7DlztsPM5w820CTBPLbrdUmXb7OedBotTW3gf5RNycSt
5oet8EO3Ix5jlyhQ8ZxQ002tnhFN6J6lyP2nLQ8jEXDNapaBfMDeZfu17wEJcZz4
RHBfqI1gXfrKuA5eKAvCpLsSi/abkSMWEqBShPuZDwMnR5zQK2Gjs+3k6IeUjcVC
Y6yIyxFm9N0+19AX1zOA2zpPdBspxDlDPLdJkdN11X2oo5yBI6JjYV5ivWUNYaqE
ZW27SYe4JHM2fA==
-----END CERTIFICATE-----