Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
File:                     d7__1npLmUVKyaQA50ecdg1VRsw.mft (raw, json)
Hash identifier:          2PwK37TRjC1fT843K8zIrhJ6OdFyO688t5iCDa5HDAc=
Subject key identifier:   19:C6:10:E7:47:81:B2:8B:38:B7:8B:79:E5:00:68:9B:89:FE:92:98
Authority key identifier: 77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
Certificate issuer:       /CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Certificate serial:       0193609E746189A0324FD4CE22BF709C342E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
Manifest number:          EC
Signing time:             Mon 25 Nov 2024 00:00:17 +0000
Manifest this update:     Mon 25 Nov 2024 00:00:17 +0000
Manifest next update:     Tue 26 Nov 2024 00:00:17 +0000
Files and hashes:         1: JD9L22PSz0cIeV8NTltOpFKDQhU.roa (hash: 6Ibfa9MFEtxkiTfXQK/fzaU7V1v8C0dcNwq68VJF0FI=)
                          2: d7__1npLmUVKyaQA50ecdg1VRsw.crl (hash: CY4NSWOa4CPNhQAAJ0JSTVCpCrvotAE9Yq2Hfm4qVaE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:60:9e:74:61:89:a0:32:4f:d4:ce:22:bf:70:9c:34:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
        Validity
            Not Before: Nov 25 00:00:17 2024 GMT
            Not After : Nov 26 00:00:17 2024 GMT
        Subject: CN=19c610e74781b28b38b78b79e500689b89fe9298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:74:54:02:0b:ea:75:8d:b8:fc:d1:2e:9f:69:
                    41:10:c1:90:d7:38:fd:e0:91:82:29:55:1d:68:59:
                    88:4c:29:31:d6:eb:d5:6b:39:cb:8d:1a:2c:58:1c:
                    10:4c:2f:51:44:55:65:8e:42:02:24:3b:c6:a3:61:
                    e5:a6:2f:51:c6:2f:cd:cc:1e:15:d6:63:e9:10:98:
                    cf:1e:60:07:84:8d:01:51:2b:9f:50:6f:10:35:c2:
                    93:d2:8d:51:e1:50:ee:5b:46:50:de:4d:b8:e9:95:
                    6b:63:1e:46:35:44:91:ec:17:06:ec:1d:40:f4:02:
                    ff:21:f5:f6:d7:96:99:13:dc:e4:37:b8:c6:be:ee:
                    19:04:74:0f:af:bb:e8:d4:ba:c9:65:45:58:f5:81:
                    a3:fe:ca:68:c4:c0:8b:e4:f4:5d:f2:05:7c:99:b0:
                    0b:79:e8:49:f8:e2:5b:2e:b6:5f:fe:65:67:c2:db:
                    78:05:19:0c:c5:24:2d:4c:77:c1:e9:e9:47:f6:b8:
                    85:0d:4f:02:b6:32:9a:3c:4e:b2:bb:ae:5f:21:7a:
                    45:4b:d5:51:e1:bd:a2:b6:63:9f:c1:aa:02:bc:e1:
                    69:ce:ce:64:b4:b5:08:df:ad:b3:6a:69:c9:b2:eb:
                    e1:ac:84:a8:06:d7:26:7a:12:24:8e:d0:32:2d:51:
                    0a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C6:10:E7:47:81:B2:8B:38:B7:8B:79:E5:00:68:9B:89:FE:92:98
            X509v3 Authority Key Identifier:
                keyid:77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:cf:61:8c:0d:99:1b:2b:9f:f6:63:2a:bb:cb:d2:47:7d:22:
         ac:b9:a9:d9:ba:dc:7c:2e:1a:fa:f4:71:45:69:3c:a3:e3:eb:
         90:ed:cc:7b:8f:94:ca:04:8a:2e:c9:c0:11:18:29:1f:e9:a5:
         9d:9e:5b:d1:87:78:9a:d0:06:41:ac:79:c7:60:f6:7d:d5:d8:
         2e:93:11:66:07:8b:83:e4:09:d9:0d:a8:89:12:84:a3:7e:2a:
         21:01:c6:a1:5e:ff:42:c1:cf:62:b3:90:48:da:af:64:d2:01:
         03:fe:4c:59:63:03:3a:2c:17:19:b6:4a:e6:0f:e6:ce:24:19:
         31:73:c5:20:33:50:7a:8b:63:4c:d6:15:da:40:4b:5a:4c:f4:
         e2:46:4d:d3:25:b7:dc:99:30:d8:20:81:08:cb:00:58:6d:09:
         a2:77:c1:52:92:6e:40:19:ab:fb:7f:f5:00:b4:69:66:79:0b:
         d6:00:6c:45:53:77:e6:06:60:46:20:7a:5b:e1:70:20:d2:b2:
         f9:0f:fa:4d:c8:56:ac:98:34:01:0b:62:b4:0d:8f:49:10:58:
         80:cf:26:4c:d6:51:bd:0d:d3:86:d6:0f:3d:4f:ca:47:dd:52:
         eb:8b:66:27:34:87:a8:00:84:1d:e4:53:89:52:bb:e3:7b:8f:
         f1:c3:e0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----