Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
File:                     tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json)
Hash identifier:          dP3mCq5Hcf5Tzap0Vscgq+eEIvtegGo0Q3RSkJ4E1lY=
Subject key identifier:   E7:21:FF:4F:CB:73:02:D2:81:32:E1:32:99:93:67:F5:51:FA:92:8A
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Certificate issuer:       /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial:       01935651E41766395E31BB0BD8883FDD682A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
Manifest number:          0398
Signing time:             Sat 23 Nov 2024 00:00:27 +0000
Manifest this update:     Sat 23 Nov 2024 00:00:27 +0000
Manifest next update:     Sun 24 Nov 2024 00:00:27 +0000
Files and hashes:         1: QZZvASJqrLXpjpkE1TdQKRuPjDw.roa (hash: 7pBZerKp9xeKWz2QcdHLBS1/vB0g6h8SJII8A9x7qOg=)
                          2: TGwlxVMIf6MqYA5lU87BDdg6qcE.roa (hash: MbPSubJ6JJhZsIlHsL7F35djFyePCKGbqW4oCwVhkWY=)
                          3: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: 90fg8diUyC/ajI+yWroEst6WCEmhX0+297O3akA8Yu4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:51:e4:17:66:39:5e:31:bb:0b:d8:88:3f:dd:68:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
        Validity
            Not Before: Nov 23 00:00:27 2024 GMT
            Not After : Nov 24 00:00:27 2024 GMT
        Subject: CN=e721ff4fcb7302d28132e132999367f551fa928a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bf:bb:2e:30:97:ca:a9:9b:dd:1b:e3:cf:93:
                    6b:1d:4e:96:0a:7a:63:50:4e:78:4f:31:2c:b4:f2:
                    2e:24:66:87:fa:6d:c2:2d:6c:43:e1:1d:4f:75:41:
                    78:92:08:f9:16:e0:0f:90:c2:86:fe:79:62:33:98:
                    05:8a:e9:47:8c:7b:80:8e:45:8b:fe:76:b9:4d:f8:
                    72:e6:e4:ff:9e:30:92:fd:44:57:80:d5:fd:80:7d:
                    9c:6e:78:0a:75:d2:4e:67:c7:96:dc:55:d1:12:82:
                    3d:d5:3f:95:bd:38:e0:43:6c:2e:12:b1:62:de:e2:
                    89:47:7a:65:03:cf:7a:18:f7:6d:11:a7:d7:e7:0f:
                    20:d0:fb:e1:d7:15:3d:13:42:1f:5e:e3:2a:4b:bf:
                    1f:f4:01:08:86:48:6a:ce:c4:06:c9:37:74:4e:ba:
                    57:37:62:38:3d:2e:41:ec:49:86:ca:d3:f0:19:63:
                    40:b5:80:ef:f4:27:21:15:85:98:dd:bf:92:ad:7b:
                    e8:6f:d7:64:2c:28:e9:6e:d7:e4:9f:d1:23:a1:27:
                    c9:b1:16:a3:8f:63:3c:4f:e1:e5:fd:21:ca:96:54:
                    07:f6:e7:91:13:88:a1:9d:e0:47:02:f7:71:fc:25:
                    b4:45:37:a0:5f:7b:38:90:a3:71:7c:48:6f:49:e6:
                    57:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:21:FF:4F:CB:73:02:D2:81:32:E1:32:99:93:67:F5:51:FA:92:8A
            X509v3 Authority Key Identifier:
                keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:22:ff:df:36:26:16:0a:87:88:69:2f:cc:1d:8e:ac:b2:60:
         eb:01:8b:46:58:05:1a:c9:6d:31:82:6f:9d:03:39:02:19:72:
         0c:52:67:95:5b:96:5c:88:39:39:a5:83:aa:0c:91:de:18:04:
         c2:1c:3c:00:ea:66:58:50:3e:0e:5a:e2:9b:37:c7:85:18:a9:
         38:ff:fb:05:bb:f1:20:ae:73:f9:ab:5a:bc:e1:2a:3c:32:7b:
         d5:0f:dd:0b:42:5d:0c:f4:57:42:f0:40:8b:ed:21:09:30:11:
         f6:0f:d3:f0:92:e7:6c:d0:49:e7:51:eb:79:03:09:ee:e3:45:
         29:ed:f4:29:77:c1:68:7d:e3:70:d2:e2:75:22:fc:82:e5:1d:
         e4:01:6c:86:8d:93:fc:ec:d4:0c:dc:ee:6f:e2:38:b1:6c:8a:
         44:73:36:95:c4:10:84:dc:e3:fc:71:6f:8a:22:07:cc:ca:21:
         9b:fe:42:e7:23:0f:ec:07:70:53:16:cb:bd:f8:3c:1c:a4:3f:
         14:81:ea:40:c1:f3:79:12:4f:a5:4e:f6:8e:c8:92:5b:9f:64:
         09:89:89:fa:89:8a:83:f6:ba:81:a5:4f:1c:e8:eb:aa:08:3c:
         09:37:de:45:52:a9:8b:f5:4b:be:40:00:62:77:87:70:54:7e:
         60:a3:25:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWUeQXZjleMbsL2Ig/3WgqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OThjOTdiMTRjMzc0YTUyODMzZGI2YTQwMDdiNTRiNDY2
MmM1YTkwHhcNMjQxMTIzMDAwMDI3WhcNMjQxMTI0MDAwMDI3WjAzMTEwLwYDVQQD
EyhlNzIxZmY0ZmNiNzMwMmQyODEzMmUxMzI5OTkzNjdmNTUxZmE5MjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL+7LjCXyqmb3Rvjz5NrHU6WCnpj
UE54TzEstPIuJGaH+m3CLWxD4R1PdUF4kgj5FuAPkMKG/nliM5gFiulHjHuAjkWL
/na5Tfhy5uT/njCS/URXgNX9gH2cbngKddJOZ8eW3FXREoI91T+VvTjgQ2wuErFi
3uKJR3plA896GPdtEafX5w8g0Pvh1xU9E0IfXuMqS78f9AEIhkhqzsQGyTd0TrpX
N2I4PS5B7EmGytPwGWNAtYDv9CchFYWY3b+SrXvob9dkLCjpbtfkn9EjoSfJsRaj
j2M8T+Hl/SHKllQH9ueRE4ihneBHAvdx/CW0RTegX3s4kKNxfEhvSeZXiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOch/0/LcwLSgTLhMpmTZ/VR+pKKMB8GA1UdIwQY
MBaAFLSYyXsUw3SlKDPbakAHtUtGYsWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzct
ODY1NDI2NjQ1N2M2LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzctODY1NDI2NjQ1N2M2
LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGiL/3zYm
FgqHiGkvzB2OrLJg6wGLRlgFGsltMYJvnQM5AhlyDFJnlVuWXIg5OaWDqgyR3hgE
whw8AOpmWFA+DlrimzfHhRipOP/7BbvxIK5z+atavOEqPDJ71Q/dC0JdDPRXQvBA
i+0hCTAR9g/T8JLnbNBJ51HreQMJ7uNFKe30KXfBaH3jcNLidSL8guUd5AFsho2T
/OzUDNzub+I4sWyKRHM2lcQQhNzj/HFviiIHzMohm/5C5yMP7AdwUxbLvfg8HKQ/
FIHqQMHzeRJPpU72jsiSW59kCYmJ+omKg/a6gaVPHOjrqgg8CTfeRVKpi/VLvkAA
YneHcFR+YKMlww==
-----END CERTIFICATE-----