Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File:                     Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier:          9fW0Q4Vf22gjNwB79jC4TsRNp7wA8R2aAYn6ZvlNlqY=
Subject key identifier:   62:9F:FF:D1:8E:DC:A1:14:11:BF:B3:30:F3:D6:B7:16:33:86:81:94
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer:       /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial:       018F88929237B7A993D9F9B3621E0A572D47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number:          0EC9
Signing time:             Fri 17 May 2024 22:00:58 +0000
Manifest this update:     Fri 17 May 2024 22:00:58 +0000
Manifest next update:     Sat 18 May 2024 22:00:58 +0000
Files and hashes:         1: 8mRhhnLV1KvchEhrB0GkrTiBHKg.roa (hash: s6bsK8UonAAvR4G5A2t3y8IrTGCsvgAb3JGc5nANKVM=)
                          2: Cf6NocSP1adBOMwk7-DwGWmImEw.roa (hash: yJbffVhxo+oaIu8F0k057R/EoU2Mxo2rxWe3F33WCnc=)
                          3: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: zl8iSmO5gdn0BqAtci6yfocTLkFa9RDuWTXmblgVGtY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:92:37:b7:a9:93:d9:f9:b3:62:1e:0a:57:2d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
        Validity
            Not Before: May 17 22:00:58 2024 GMT
            Not After : May 18 22:00:58 2024 GMT
        Subject: CN=629fffd18edca11411bfb330f3d6b71633868194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:b8:fa:32:65:d3:2a:6f:54:d9:e7:a3:af:
                    47:ce:ed:27:5d:e7:18:4e:6e:7e:cd:32:82:28:e3:
                    70:1b:56:af:d4:ba:cc:a2:b0:95:aa:60:d1:84:75:
                    aa:57:c3:ab:c0:ad:06:c0:6a:81:1d:a0:7a:7a:b1:
                    7f:c7:c0:3f:41:55:12:fe:d2:96:94:99:d8:bc:7b:
                    51:c9:95:d5:71:83:3a:16:c8:55:2f:78:2a:52:15:
                    52:11:92:e2:6b:e0:4b:f8:bd:ac:fc:5e:41:c8:82:
                    f8:ee:dd:45:f4:a1:f6:93:34:b2:7e:2b:a6:8e:4c:
                    92:bd:29:16:23:3f:c2:50:ba:17:ab:52:f0:09:c9:
                    36:cb:9c:e7:03:5b:5e:a5:c8:a8:e0:3b:b8:48:aa:
                    1a:42:6e:5e:2d:02:69:8d:94:dc:bb:4b:b0:3b:b7:
                    49:84:b8:34:43:19:f4:08:a5:40:8f:2b:20:74:d0:
                    5f:b3:60:29:9a:47:14:ae:06:f3:85:e0:02:66:96:
                    6e:9d:9d:ae:a4:08:ad:a2:a5:8d:16:64:72:52:6e:
                    d6:f1:80:c8:34:a9:f0:0b:68:da:9d:4e:32:ae:00:
                    f0:67:9e:94:d0:c0:08:b7:44:61:5b:47:c3:1a:42:
                    df:88:11:66:e1:0d:1b:68:b7:c9:62:e9:90:ff:df:
                    28:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9F:FF:D1:8E:DC:A1:14:11:BF:B3:30:F3:D6:B7:16:33:86:81:94
            X509v3 Authority Key Identifier:
                keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:71:cd:7a:a0:91:0a:5e:01:ac:62:eb:c3:db:8b:ab:2a:f6:
         b3:85:7d:82:b8:c8:63:55:bb:c1:49:99:9f:92:3d:b6:83:39:
         08:9c:48:c4:0a:9f:41:21:1b:f6:f5:cb:57:1a:e9:1b:30:9c:
         10:b9:20:ab:d1:04:7a:df:1f:81:ef:fd:24:e0:5b:81:f0:63:
         63:ed:bd:3b:31:fe:72:9f:d2:f6:f4:cd:c3:3d:11:c0:a0:ee:
         24:ee:87:77:d8:c6:68:66:fc:fd:b2:66:1a:be:fa:6b:35:0c:
         22:72:a5:69:a9:8f:88:dc:3e:28:a5:6f:08:2b:65:84:58:de:
         72:26:71:6b:2b:f1:c7:18:6e:71:c3:5c:9a:2d:c0:00:1e:a4:
         33:e1:dc:d3:5d:e0:a6:18:b4:b2:3c:c6:40:4d:e2:36:06:1c:
         4e:4b:87:3f:bd:82:02:c3:c7:41:1c:28:8b:51:44:6c:3b:7a:
         b0:21:53:43:f8:c6:24:a6:e7:1c:20:2c:d1:db:c2:ea:0a:a7:
         70:b6:40:27:5b:a4:b2:89:c4:e8:75:4d:34:df:88:96:d1:f8:
         0b:c4:98:27:07:63:c7:17:ee:67:aa:61:6e:cb:50:cf:25:04:
         8f:5e:fc:ec:9f:e8:bd:b1:7f:12:86:45:8e:5d:cc:22:80:17:
         45:7f:68:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IkpI3t6mT2fmzYh4KVy1HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZWE2OThhYmNkZWUxMGRjYTlkNjcwM2E1NmU4N2E2YjM1
OWJmY2MwHhcNMjQwNTE3MjIwMDU4WhcNMjQwNTE4MjIwMDU4WjAzMTEwLwYDVQQD
Eyg2MjlmZmZkMThlZGNhMTE0MTFiZmIzMzBmM2Q2YjcxNjMzODY4MTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9S4+jJl0ypvVNnno69Hzu0nXecY
Tm5+zTKCKONwG1av1LrMorCVqmDRhHWqV8OrwK0GwGqBHaB6erF/x8A/QVUS/tKW
lJnYvHtRyZXVcYM6FshVL3gqUhVSEZLia+BL+L2s/F5ByIL47t1F9KH2kzSyfium
jkySvSkWIz/CULoXq1LwCck2y5znA1tepcio4Du4SKoaQm5eLQJpjZTcu0uwO7dJ
hLg0Qxn0CKVAjysgdNBfs2ApmkcUrgbzheACZpZunZ2upAitoqWNFmRyUm7W8YDI
NKnwC2janU4yrgDwZ56U0MAIt0RhW0fDGkLfiBFm4Q0baLfJYumQ/98oEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKf/9GO3KEUEb+zMPPWtxYzhoGUMB8GA1UdIwQY
MBaAFGfqaYq83uENyp1nA6Vuh6azWb/MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMzIyYmEtYzk2NC00NjViLTg5ODkt
YjMyZDk3NGMyMTBlLzEvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hMzIyYmEtYzk2NC00NjViLTg5ODktYjMyZDk3NGMyMTBl
LzEvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS3HNeqCR
Cl4BrGLrw9uLqyr2s4V9grjIY1W7wUmZn5I9toM5CJxIxAqfQSEb9vXLVxrpGzCc
ELkgq9EEet8fge/9JOBbgfBjY+29OzH+cp/S9vTNwz0RwKDuJO6Hd9jGaGb8/bJm
Gr76azUMInKlaamPiNw+KKVvCCtlhFjeciZxayvxxxhuccNcmi3AAB6kM+Hc013g
phi0sjzGQE3iNgYcTkuHP72CAsPHQRwoi1FEbDt6sCFTQ/jGJKbnHCAs0dvC6gqn
cLZAJ1uksonE6HVNNN+IltH4C8SYJwdjxxfuZ6phbstQzyUEj1787J/ovbF/EoZF
jl3MIoAXRX9oPg==
-----END CERTIFICATE-----