Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a6ccf6-2eaf-40ab-82d8-649d21416ba7/1/6QYi0fJ5V53qZ1dBXMIs2bpyrL4.mft
File:                     6QYi0fJ5V53qZ1dBXMIs2bpyrL4.mft (raw, json)
Hash identifier:          Y+gHW6f1ei6uOr/yN55UW2XG+crygsQyW+Cz0jcu5cg=
Subject key identifier:   9A:8D:00:A3:42:95:67:CC:FB:06:11:70:44:68:1A:4D:D3:76:99:EF
Authority key identifier: E9:06:22:D1:F2:79:57:9D:EA:67:57:41:5C:C2:2C:D9:BA:72:AC:BE
Certificate issuer:       /CN=e90622d1f279579dea6757415cc22cd9ba72acbe
Certificate serial:       0193568AC80ADABFC2570B0D85ACEE912BA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QYi0fJ5V53qZ1dBXMIs2bpyrL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/a6ccf6-2eaf-40ab-82d8-649d21416ba7/1/6QYi0fJ5V53qZ1dBXMIs2bpyrL4.mft
Manifest number:          043D
Signing time:             Sat 23 Nov 2024 01:02:35 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:35 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:35 +0000
Files and hashes:         1: 6QYi0fJ5V53qZ1dBXMIs2bpyrL4.crl (hash: yI8yfAg0qbGWE7A755bJoaHUd+Nnmvz2eqJZaK/dPxo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/a6ccf6-2eaf-40ab-82d8-649d21416ba7/1/6QYi0fJ5V53qZ1dBXMIs2bpyrL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/a6ccf6-2eaf-40ab-82d8-649d21416ba7/1/6QYi0fJ5V53qZ1dBXMIs2bpyrL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QYi0fJ5V53qZ1dBXMIs2bpyrL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:c8:0a:da:bf:c2:57:0b:0d:85:ac:ee:91:2b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e90622d1f279579dea6757415cc22cd9ba72acbe
        Validity
            Not Before: Nov 23 01:02:35 2024 GMT
            Not After : Nov 24 01:02:35 2024 GMT
        Subject: CN=9a8d00a3429567ccfb06117044681a4dd37699ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ac:e6:d5:56:a4:d5:f9:f6:5d:85:dc:fc:7b:
                    06:b4:e6:46:bb:3f:fa:a8:e2:d2:fb:cc:19:66:b5:
                    32:62:01:ec:33:fd:9b:86:0f:75:ab:3d:10:2c:ca:
                    c5:18:53:1e:f8:61:68:73:82:a5:53:85:4f:6c:5e:
                    04:47:df:16:0a:9f:0a:38:64:2a:bd:07:a8:39:b8:
                    00:4c:e4:5a:19:22:17:cf:14:e4:96:53:af:c7:5f:
                    9b:fe:68:d5:f0:45:ce:39:b4:cc:9b:03:5e:59:3e:
                    c6:17:2a:4c:28:92:f6:f1:51:23:99:6c:33:58:e0:
                    e5:3f:3c:2c:60:62:87:35:ce:eb:d6:cf:f2:85:c8:
                    fb:3a:f9:17:47:72:57:d5:49:b9:d9:12:c8:fa:91:
                    b7:d3:c9:99:28:55:71:08:68:15:46:fc:91:ff:5c:
                    9d:6e:76:f9:ad:ba:21:2b:ed:dd:77:34:ab:4a:1b:
                    3e:d5:68:9c:91:19:a7:54:83:ba:b1:92:c1:e8:07:
                    08:9e:fe:d8:64:6f:e8:d3:fb:27:28:d5:6c:74:16:
                    c8:8c:23:55:35:37:3c:06:f7:e1:8d:7c:dc:d3:30:
                    c6:0c:4e:1b:7e:22:32:6c:0c:83:bf:89:7c:3d:39:
                    2d:b3:ee:4c:fa:cf:b8:7b:8f:1f:62:64:d1:52:7c:
                    01:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8D:00:A3:42:95:67:CC:FB:06:11:70:44:68:1A:4D:D3:76:99:EF
            X509v3 Authority Key Identifier:
                keyid:E9:06:22:D1:F2:79:57:9D:EA:67:57:41:5C:C2:2C:D9:BA:72:AC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QYi0fJ5V53qZ1dBXMIs2bpyrL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a6ccf6-2eaf-40ab-82d8-649d21416ba7/1/6QYi0fJ5V53qZ1dBXMIs2bpyrL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a6ccf6-2eaf-40ab-82d8-649d21416ba7/1/6QYi0fJ5V53qZ1dBXMIs2bpyrL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:af:4d:a5:24:89:04:5f:1c:43:d6:22:e7:f7:9e:d5:79:2e:
         21:38:34:97:9c:e2:a2:b4:6c:ad:3a:36:7e:9e:e6:82:ec:c4:
         6b:ec:86:a5:cd:77:fe:03:fd:c5:ad:d3:5b:32:96:c7:fc:8d:
         92:0c:b9:bf:fc:5c:5f:66:d6:de:5f:cd:42:5e:13:37:b2:ae:
         0e:c1:dd:3b:70:4a:1e:69:d4:2a:df:61:5f:f0:97:01:1b:30:
         44:22:b3:07:35:1c:30:1b:cf:41:59:6b:3d:b7:5d:d4:51:35:
         6a:80:c1:d5:ca:d5:33:7a:81:dc:33:6b:77:35:1b:d4:e8:c2:
         b9:67:d5:10:f6:b7:1b:53:b2:67:d6:1e:46:9d:8e:f6:91:60:
         b4:21:c3:1d:e6:a1:ab:6a:a8:b1:2b:04:09:e7:32:82:ea:bc:
         6d:38:82:74:f7:38:7a:d8:5c:5a:ca:1a:9c:15:7f:00:6f:8d:
         74:a4:da:c3:f2:23:ee:4a:a8:a4:0e:4f:b6:bd:17:2b:6b:b9:
         6c:b8:df:91:e7:3e:15:a3:a3:cd:90:1d:5e:97:48:af:2b:b4:
         09:9b:76:33:f7:61:7a:54:73:9e:de:51:31:92:c9:26:42:fd:
         f7:35:e8:1e:37:fc:49:27:af:c6:a6:13:cd:1b:fa:61:05:6e:
         c0:4b:e1:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWisgK2r/CVwsNhazukSuiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDYyMmQxZjI3OTU3OWRlYTY3NTc0MTVjYzIyY2Q5YmE3
MmFjYmUwHhcNMjQxMTIzMDEwMjM1WhcNMjQxMTI0MDEwMjM1WjAzMTEwLwYDVQQD
Eyg5YThkMDBhMzQyOTU2N2NjZmIwNjExNzA0NDY4MWE0ZGQzNzY5OWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqzm1Vak1fn2XYXc/HsGtOZGuz/6
qOLS+8wZZrUyYgHsM/2bhg91qz0QLMrFGFMe+GFoc4KlU4VPbF4ER98WCp8KOGQq
vQeoObgATORaGSIXzxTkllOvx1+b/mjV8EXOObTMmwNeWT7GFypMKJL28VEjmWwz
WODlPzwsYGKHNc7r1s/yhcj7OvkXR3JX1Um52RLI+pG308mZKFVxCGgVRvyR/1yd
bnb5rbohK+3ddzSrShs+1WickRmnVIO6sZLB6AcInv7YZG/o0/snKNVsdBbIjCNV
NTc8BvfhjXzc0zDGDE4bfiIybAyDv4l8PTkts+5M+s+4e48fYmTRUnwB8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqNAKNClWfM+wYRcERoGk3TdpnvMB8GA1UdIwQY
MBaAFOkGItHyeVed6mdXQVzCLNm6cqy+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFZaTBmSjVWNTNxWjFkQlhNSXMyYnB5ckw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9hNmNjZjYtMmVhZi00MGFiLTgyZDgt
NjQ5ZDIxNDE2YmE3LzEvNlFZaTBmSjVWNTNxWjFkQlhNSXMyYnB5ckw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9hNmNjZjYtMmVhZi00MGFiLTgyZDgtNjQ5ZDIxNDE2YmE3
LzEvNlFZaTBmSjVWNTNxWjFkQlhNSXMyYnB5ckw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJq9NpSSJ
BF8cQ9Yi5/ee1XkuITg0l5ziorRsrTo2fp7mguzEa+yGpc13/gP9xa3TWzKWx/yN
kgy5v/xcX2bW3l/NQl4TN7KuDsHdO3BKHmnUKt9hX/CXARswRCKzBzUcMBvPQVlr
Pbdd1FE1aoDB1crVM3qB3DNrdzUb1OjCuWfVEPa3G1OyZ9YeRp2O9pFgtCHDHeah
q2qosSsECecyguq8bTiCdPc4ethcWsoanBV/AG+NdKTaw/Ij7kqopA5Ptr0XK2u5
bLjfkec+FaOjzZAdXpdIryu0CZt2M/dhelRznt5RMZLJJkL99zXoHjf8SSevxqYT
zRv6YQVuwEvhgg==
-----END CERTIFICATE-----