Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
File:                     HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft (raw, json)
Hash identifier:          FiypGsusNljQM5INOHZCcamNNrkYz4h1Q7FRTP5YMAU=
Subject key identifier:   46:EB:A7:48:9D:B7:28:9F:EB:26:A8:BF:FD:ED:6A:15:A6:12:F7:2C
Authority key identifier: 1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C
Certificate issuer:       /CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c
Certificate serial:       0193579B5F017707847AC748B686BF8C4548
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
Manifest number:          1095
Signing time:             Sat 23 Nov 2024 06:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:20 +0000
Files and hashes:         1: HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl (hash: D97l4zs52FwpKjxvNMtrXG8wOkI7pkkP2BOFR2y7D1U=)
                          2: Q_Np236Hr_VRFDPCsCAKwVPWA_Q.roa (hash: qJ01rqLb5bAUDKDC5uCXKi9z74qazzhjFstygBead7s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:5f:01:77:07:84:7a:c7:48:b6:86:bf:8c:45:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c
        Validity
            Not Before: Nov 23 06:00:20 2024 GMT
            Not After : Nov 24 06:00:20 2024 GMT
        Subject: CN=46eba7489db7289feb26a8bffded6a15a612f72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fc:d5:1b:ff:dd:3f:1a:f8:07:56:5c:ba:55:
                    1f:3a:e7:05:db:12:c8:40:56:bd:d3:74:e2:60:7b:
                    a2:e9:86:c6:70:78:8b:d6:33:0e:56:47:9e:66:8d:
                    c5:df:3a:d6:69:b1:18:b5:9c:36:6d:9c:6a:8d:54:
                    90:de:03:b8:59:6d:cb:b5:6f:ef:e9:a3:3c:f0:01:
                    85:05:a0:9d:5e:69:bb:8a:1f:ca:e8:a4:c2:6b:c1:
                    c1:40:ae:f8:fc:b9:54:e0:dd:aa:94:d8:c0:87:79:
                    9b:1d:f3:a0:5b:3b:17:ee:22:18:d0:1a:7b:b1:46:
                    38:a6:6d:e3:fd:c0:1d:64:df:41:7e:9f:60:38:bb:
                    8f:e2:ed:54:cb:bd:21:f3:f2:05:78:4d:b8:4d:e4:
                    4e:82:7f:20:05:2c:6c:91:88:c2:f2:0a:d0:31:dc:
                    8f:c1:9d:57:e7:35:1d:3e:39:4d:e7:a3:df:ff:6f:
                    64:f6:88:c5:60:3d:e4:c4:52:a3:7b:6a:69:1a:cb:
                    6a:bf:8c:e2:06:2e:c3:be:cd:ea:9c:ff:fb:2a:68:
                    db:69:33:e2:84:18:61:39:b1:5c:5f:b1:09:48:11:
                    0f:ee:8e:a1:26:2f:7d:8c:3c:15:11:cf:52:91:03:
                    0c:45:ef:66:64:7d:8f:5b:51:4c:bc:cc:ad:44:a4:
                    22:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EB:A7:48:9D:B7:28:9F:EB:26:A8:BF:FD:ED:6A:15:A6:12:F7:2C
            X509v3 Authority Key Identifier:
                keyid:1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:4d:f1:f1:9b:83:f9:a6:7d:fd:bf:4f:72:54:ab:0f:10:aa:
         a0:9a:10:32:fe:9a:da:08:47:ec:e1:2d:a3:ad:e4:92:29:34:
         54:fb:d3:0f:cc:8d:ca:07:3c:46:99:b2:0c:32:64:20:6a:3e:
         a5:db:a9:6f:31:73:76:55:f8:3e:c5:2b:dd:ea:75:a0:85:3e:
         dd:69:da:8c:34:cc:e6:e7:ba:9a:c3:81:d7:91:86:52:19:43:
         2e:63:d0:25:85:3a:7e:a2:5f:ce:61:c8:c3:9d:18:95:98:33:
         3e:76:a3:fe:8e:f3:3c:01:22:0a:ed:66:2a:63:ac:6e:77:5e:
         11:8d:5e:d0:85:39:f4:70:a8:57:48:fb:0a:e8:43:ca:5b:48:
         1e:c1:24:61:c8:d2:f3:4e:18:f3:a3:63:04:8c:5e:c5:cd:d9:
         69:a3:67:9d:d3:ab:65:e8:81:4e:6d:68:4d:3d:b9:eb:8a:16:
         25:dd:c6:e0:ff:2d:4d:75:66:7d:08:e5:2d:16:73:aa:4f:08:
         be:c3:f1:bf:ba:10:ca:66:f7:f7:19:65:b8:41:a5:b4:06:9b:
         19:b8:ff:85:be:aa:ec:9c:28:c8:a8:cb:e8:8a:06:e8:86:f5:
         48:3b:44:c4:16:3e:d1:41:7d:ab:ae:92:23:1c:b6:1d:41:e7:
         78:b6:48:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm18BdweEesdItoa/jEVIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZDkzMDg0Y2VjNDQ5YmVkOGE2ZmMwMDhiYzdkZDk5NWVi
MzczMWMwHhcNMjQxMTIzMDYwMDIwWhcNMjQxMTI0MDYwMDIwWjAzMTEwLwYDVQQD
Eyg0NmViYTc0ODlkYjcyODlmZWIyNmE4YmZmZGVkNmExNWE2MTJmNzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvzVG//dPxr4B1ZculUfOucF2xLI
QFa903TiYHui6YbGcHiL1jMOVkeeZo3F3zrWabEYtZw2bZxqjVSQ3gO4WW3LtW/v
6aM88AGFBaCdXmm7ih/K6KTCa8HBQK74/LlU4N2qlNjAh3mbHfOgWzsX7iIY0Bp7
sUY4pm3j/cAdZN9Bfp9gOLuP4u1Uy70h8/IFeE24TeROgn8gBSxskYjC8grQMdyP
wZ1X5zUdPjlN56Pf/29k9ojFYD3kxFKje2ppGstqv4ziBi7Dvs3qnP/7KmjbaTPi
hBhhObFcX7EJSBEP7o6hJi99jDwVEc9SkQMMRe9mZH2PW1FMvMytRKQirwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbrp0idtyif6yaov/3tahWmEvcsMB8GA1UdIwQY
MBaAFB7ZMITOxEm+2Kb8AIvH3Zles3McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHRrd2hNN0VTYjdZcHZ3QWk4ZmRtVjZ6Y3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9mMGI3MjMtNzdmMS00NGMwLThmY2Et
N2M2NDY3OTUwOTBiLzEvSHRrd2hNN0VTYjdZcHZ3QWk4ZmRtVjZ6Y3h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9mMGI3MjMtNzdmMS00NGMwLThmY2EtN2M2NDY3OTUwOTBi
LzEvSHRrd2hNN0VTYjdZcHZ3QWk4ZmRtVjZ6Y3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeE3x8ZuD
+aZ9/b9PclSrDxCqoJoQMv6a2ghH7OEto63kkik0VPvTD8yNygc8RpmyDDJkIGo+
pdupbzFzdlX4PsUr3ep1oIU+3WnajDTM5ue6msOB15GGUhlDLmPQJYU6fqJfzmHI
w50YlZgzPnaj/o7zPAEiCu1mKmOsbndeEY1e0IU59HCoV0j7CuhDyltIHsEkYcjS
804Y86NjBIxexc3ZaaNnndOrZeiBTm1oTT2564oWJd3G4P8tTXVmfQjlLRZzqk8I
vsPxv7oQymb39xlluEGltAabGbj/hb6q7JwoyKjL6IoG6Ib1SDtExBY+0UF9q66S
Ixy2HUHneLZI4A==
-----END CERTIFICATE-----