Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
File:                     3mZANXrkrhD8Cz6dmPKgywEYkDw.mft (raw, json)
Hash identifier:          6BjeW1n8oQEp0mBejMzPw8aGUUtfMNTFe6Mpd9Ky/V8=
Subject key identifier:   7F:E7:6D:C5:61:37:BB:93:3B:C1:2C:60:80:20:01:B0:53:61:1D:AA
Authority key identifier: DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C
Certificate issuer:       /CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
Certificate serial:       0193553F686AE88CF85FDED239A1BAB5CD8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
Manifest number:          0861
Signing time:             Fri 22 Nov 2024 19:00:38 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:38 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:38 +0000
Files and hashes:         1: 1bTpAHvlGbug60JcMHM1rZ1YA3k.roa (hash: 58UfeSPyJ5HrAH0YCUfoPBF/iHeopHbKpriiMZyoLUE=)
                          2: 3mZANXrkrhD8Cz6dmPKgywEYkDw.crl (hash: zIQH19Mwh5EEERRBuScklO1Aw9Fw2y17JonVQ2KAQVE=)
                          3: XUQ2_OVPwkCAKfe74O-10aU-ayk.roa (hash: rIkW3GWX8XeTHuP0qnzEXjklQT4ydTZFhH4aX2g5tTM=)
                          4: aLQk9MdRTxk9W-fRYgwW1pdYxy0.roa (hash: sVKBV4gNDabJYl8ZuHNAGadDWtAzqM1QWbyHS27jrQ4=)
                          5: oLmaOEVE8DwjuTJAAVhAlJxNyOI.roa (hash: 7V52S6eLl2ubh3jMoLQQbYbapg+Zuh79qTxYiUHRJ5I=)
                          6: vJldmS4uYPKMfZrcGvQ9Dm6u9UU.roa (hash: FVmdSOQf/IggBoSL5UF3pAM4sosSusQ/X4TY6Vtio+I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:68:6a:e8:8c:f8:5f:de:d2:39:a1:ba:b5:cd:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
        Validity
            Not Before: Nov 22 19:00:38 2024 GMT
            Not After : Nov 23 19:00:38 2024 GMT
        Subject: CN=7fe76dc56137bb933bc12c60802001b053611daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d3:e5:94:3a:a4:0b:1a:64:72:ed:d5:36:cd:
                    33:8f:be:96:15:27:c3:07:47:ab:cb:9d:2c:7f:28:
                    f0:07:a3:6d:c9:2e:37:29:f0:ed:6e:db:c4:b7:30:
                    8e:20:69:81:d0:aa:a1:c0:bd:c5:34:46:a1:fb:1e:
                    d7:dc:cc:ad:04:1f:76:c6:dd:cd:62:70:06:f4:59:
                    f6:55:b2:56:95:32:b8:02:cf:1e:84:f9:18:4c:a2:
                    94:2f:ec:2c:7a:be:7a:da:7a:db:6d:93:a2:cd:34:
                    dc:16:0a:c0:3b:f1:2d:f3:c4:c6:6e:01:0b:04:e9:
                    9c:93:ff:75:56:92:70:74:56:7d:a9:af:c5:98:e9:
                    0e:33:ec:a3:75:cc:0d:7c:56:f1:9f:ab:3c:b2:21:
                    ba:68:be:a6:aa:90:8c:07:a4:04:2a:25:da:d5:6f:
                    92:43:76:aa:0e:c2:00:af:ab:ba:df:48:9f:f0:93:
                    83:2b:7e:99:40:74:94:13:b7:64:64:cd:c4:e5:dc:
                    ec:fe:ba:04:32:5f:84:38:44:27:91:10:84:ca:56:
                    ef:ca:73:04:71:40:4e:23:3f:44:55:0d:13:bd:dc:
                    f9:19:5c:00:55:92:97:b1:63:cc:b2:08:e5:26:22:
                    e7:d0:4c:49:a4:50:5e:04:94:3a:92:e0:ee:2f:d9:
                    35:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E7:6D:C5:61:37:BB:93:3B:C1:2C:60:80:20:01:B0:53:61:1D:AA
            X509v3 Authority Key Identifier:
                keyid:DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:29:dc:a7:e6:f3:a2:5d:1e:6c:22:5c:5c:e9:4a:d5:b0:c6:
         f6:11:e4:12:21:37:22:30:fe:fa:fa:20:1f:26:a4:c8:61:74:
         64:61:74:91:0f:93:4a:d5:b7:40:89:ff:6c:a0:1c:3f:0b:d0:
         1a:69:18:81:03:bf:b1:76:36:fc:3d:6a:a1:99:f2:11:a0:1f:
         ea:da:5f:ee:9f:6b:b3:1e:41:1e:e1:ba:e6:9a:a8:eb:da:4f:
         c3:e2:8d:2d:b3:ac:0c:bc:83:54:66:bb:cc:61:93:70:3b:81:
         d3:1d:8a:2c:62:41:87:7a:2d:b3:7c:35:15:66:54:bf:59:62:
         36:70:b0:6c:bb:21:a4:76:98:8c:c8:87:f5:c4:4e:02:7a:da:
         be:72:af:96:62:ff:d6:a5:89:3f:49:56:d5:74:22:58:90:f7:
         d9:23:c4:75:46:60:ac:89:38:ed:e0:b7:02:2e:5f:1c:0c:39:
         b0:a4:2d:ef:ca:79:1d:8c:dc:3b:7d:e2:84:9d:cb:34:30:65:
         3e:c2:2c:be:5a:80:17:13:ad:91:67:ec:ac:67:1e:b7:cb:df:
         bb:96:9a:85:37:da:c3:da:c7:1a:6c:25:d4:4a:5c:65:d9:17:
         23:eb:ee:87:9c:79:13:be:64:14:b3:4a:ac:73:6f:e2:8d:5d:
         05:c4:97:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVP2hq6Iz4X97SOaG6tc2MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNjY0MDM1N2FlNGFlMTBmYzBiM2U5ZDk4ZjJhMGNiMDEx
ODkwM2MwHhcNMjQxMTIyMTkwMDM4WhcNMjQxMTIzMTkwMDM4WjAzMTEwLwYDVQQD
Eyg3ZmU3NmRjNTYxMzdiYjkzM2JjMTJjNjA4MDIwMDFiMDUzNjExZGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNPllDqkCxpkcu3VNs0zj76WFSfD
B0ery50sfyjwB6NtyS43KfDtbtvEtzCOIGmB0KqhwL3FNEah+x7X3MytBB92xt3N
YnAG9Fn2VbJWlTK4As8ehPkYTKKUL+wser562nrbbZOizTTcFgrAO/Et88TGbgEL
BOmck/91VpJwdFZ9qa/FmOkOM+yjdcwNfFbxn6s8siG6aL6mqpCMB6QEKiXa1W+S
Q3aqDsIAr6u630if8JODK36ZQHSUE7dkZM3E5dzs/roEMl+EOEQnkRCEylbvynME
cUBOIz9EVQ0Tvdz5GVwAVZKXsWPMsgjlJiLn0ExJpFBeBJQ6kuDuL9k1bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/nbcVhN7uTO8EsYIAgAbBTYR2qMB8GA1UdIwQY
MBaAFN5mQDV65K4Q/As+nZjyoMsBGJA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9hZDE5YzAtMDAyNS00YzQ5LTg0ODAt
ZmY5N2Y2MmEwOTQ1LzEvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9hZDE5YzAtMDAyNS00YzQ5LTg0ODAtZmY5N2Y2MmEwOTQ1
LzEvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjyncp+bz
ol0ebCJcXOlK1bDG9hHkEiE3IjD++vogHyakyGF0ZGF0kQ+TStW3QIn/bKAcPwvQ
GmkYgQO/sXY2/D1qoZnyEaAf6tpf7p9rsx5BHuG65pqo69pPw+KNLbOsDLyDVGa7
zGGTcDuB0x2KLGJBh3ots3w1FWZUv1liNnCwbLshpHaYjMiH9cROAnravnKvlmL/
1qWJP0lW1XQiWJD32SPEdUZgrIk47eC3Ai5fHAw5sKQt78p5HYzcO33ihJ3LNDBl
PsIsvlqAFxOtkWfsrGcet8vfu5aahTfaw9rHGmwl1EpcZdkXI+vuh5x5E75kFLNK
rHNv4o1dBcSXpg==
-----END CERTIFICATE-----