Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
File:                     5cveddU26RsoojRpNJ0c8ouISjs.mft (raw, json)
Hash identifier:          CAZGiJTPNSv9Scfzx6pwJxfmYvPSsDABl5SN2SfwctM=
Subject key identifier:   EC:B5:2F:04:17:B8:D7:EE:94:ED:8D:74:D1:A7:50:DF:22:D4:63:5C
Authority key identifier: E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
Certificate issuer:       /CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
Certificate serial:       018F220124417027DEE9D9FE18A95992AE54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
Manifest number:          106C
Signing time:             Sun 28 Apr 2024 00:00:51 +0000
Manifest this update:     Sun 28 Apr 2024 00:00:51 +0000
Manifest next update:     Mon 29 Apr 2024 00:00:51 +0000
Files and hashes:         1: 2gPomQy9QTo3bM8bK1fEK1O85ow.roa (hash: BxGBndT8Qkar3eXS4vJkZUwNpVXy/vWb1dp8Q2moo00=)
                          2: 5cveddU26RsoojRpNJ0c8ouISjs.crl (hash: dZVgSd1blLhWi8Vd+3LekDpcr+sNFYktm9e03UAjYME=)
                          3: SHWU1ffteYiKNdV8nV8KpMMnwzI.roa (hash: RT+meFDyI2srD7huerKpkocWII21V+n6+ftFY0PChPU=)
                          4: SJns8OQHJ8A5ZA4uV89PYzO1QtQ.roa (hash: 84kouCWklfsqsHwiRsRsmOHC75HCLYNDMJoewtBjB7k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:01:24:41:70:27:de:e9:d9:fe:18:a9:59:92:ae:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
        Validity
            Not Before: Apr 28 00:00:51 2024 GMT
            Not After : Apr 29 00:00:51 2024 GMT
        Subject: CN=ecb52f0417b8d7ee94ed8d74d1a750df22d4635c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4e:10:f7:17:e7:3a:e1:0d:6f:d5:ae:9c:ef:
                    73:0b:62:b4:08:50:c2:3e:d4:c8:4d:d4:f3:7d:c8:
                    a7:67:2f:99:64:6e:56:ad:7e:c7:6a:eb:18:29:28:
                    92:be:6c:91:88:7a:98:52:da:f7:7b:29:44:df:7e:
                    96:15:a0:58:3a:26:e8:10:2e:38:3b:02:ef:71:66:
                    bd:60:43:df:d0:8c:4d:ce:33:ac:ea:c4:57:2c:e6:
                    94:70:f4:4a:b4:80:21:be:da:db:ab:55:c8:15:e1:
                    a1:2b:10:3c:7b:7c:17:71:7c:da:75:ae:4a:8f:be:
                    15:90:03:fe:07:36:9f:52:c9:d6:22:c9:85:25:29:
                    40:15:88:bf:15:6c:e7:e4:1a:03:18:37:27:d8:e4:
                    bc:3a:98:e8:22:f8:9e:6e:5a:62:b5:31:70:a2:59:
                    2f:3a:f0:6f:1a:97:af:ed:0c:96:32:45:38:07:83:
                    61:79:de:59:18:18:68:13:1d:f1:6c:13:b1:0d:be:
                    ad:de:27:02:46:d1:88:1b:d0:23:5b:bd:92:5e:dc:
                    c4:6d:13:27:4d:0c:c8:cb:43:aa:b0:ba:c3:a3:20:
                    91:d5:d2:32:cc:0f:9a:f7:6a:43:0f:aa:9f:12:a8:
                    87:46:64:69:64:d6:71:9c:16:50:a4:6f:f4:a0:a9:
                    62:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B5:2F:04:17:B8:D7:EE:94:ED:8D:74:D1:A7:50:DF:22:D4:63:5C
            X509v3 Authority Key Identifier:
                keyid:E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:24:19:5e:5c:98:16:0b:be:32:02:91:da:f8:6a:c5:22:e3:
         25:ec:7a:8a:e5:80:81:19:03:83:8a:8b:1b:8f:d7:fc:4c:07:
         3b:e5:6e:52:f3:b5:f3:9e:f8:86:3d:f1:3d:52:ab:df:db:9e:
         43:59:b2:d9:92:7f:57:94:28:b9:81:df:a7:99:6f:ae:cb:88:
         10:cc:2a:79:c1:f7:3c:5b:7c:a3:2e:74:c9:59:86:68:8a:3a:
         10:a3:46:ab:c8:06:77:43:3b:4a:f4:3d:2d:a5:f9:be:1b:03:
         39:e2:44:2c:58:9e:b3:3b:f8:68:32:9e:d4:75:6a:92:55:04:
         b2:3f:1c:b0:ab:c8:2d:a0:70:5b:f7:43:c0:71:df:db:55:61:
         b2:e4:ff:2e:90:c3:b6:b2:d3:1c:a6:f5:9b:15:c8:0f:3e:d7:
         24:83:8a:24:61:6c:e4:f2:a1:69:dd:71:ad:59:d1:bc:f3:38:
         eb:13:de:38:95:71:59:bf:fd:cf:2f:2f:d4:24:95:f8:8d:7a:
         c8:1c:7d:9c:a0:e7:d7:98:e3:d2:79:8b:6a:d8:e9:42:8c:a9:
         d0:28:3b:10:1f:55:62:36:43:d6:3a:3a:7a:9d:2c:ed:12:13:
         eb:fb:9c:5b:a4:b7:83:15:b7:52:4e:96:3e:74:49:1a:64:50:
         7e:df:e3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----