Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
File:                     noHdqtiPcHFhLXw7dhjiTRpSM7s.mft (raw, json)
Hash identifier:          e/v5HHt0o1HytcyORiCvZEWz0bRC2K9hN3oI0i2LCDI=
Subject key identifier:   CC:6D:9F:84:45:31:35:3C:ED:A4:90:AE:E1:CF:D0:71:95:75:15:E9
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Certificate issuer:       /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial:       0193568A872583389385D17A9739E354000B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
Manifest number:          0A18
Signing time:             Sat 23 Nov 2024 01:02:19 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:19 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:19 +0000
Files and hashes:         1: 2TwnY5S7g_G8nADxFjdu_Givsa4.roa (hash: OFS4RQYxu759td6vA0V0FevIfwXebgDzJsMe7GLRhOQ=)
                          2: noHdqtiPcHFhLXw7dhjiTRpSM7s.crl (hash: f9BBbPd+HBIcGSheL2RDGVZNZiz9CUVakyk8TJEhMPk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:87:25:83:38:93:85:d1:7a:97:39:e3:54:00:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
        Validity
            Not Before: Nov 23 01:02:19 2024 GMT
            Not After : Nov 24 01:02:19 2024 GMT
        Subject: CN=cc6d9f844531353ceda490aee1cfd071957515e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:b8:e0:9d:63:01:27:4f:be:89:fc:f9:62:
                    2f:03:48:00:e2:ca:18:4b:07:4b:5e:01:c2:8f:3b:
                    3f:12:aa:8c:c1:b3:62:b7:f6:1b:25:d6:b5:b6:fc:
                    51:26:ea:79:11:9c:c7:04:11:f7:c8:ea:a9:7a:92:
                    10:cd:80:dd:a9:1b:b1:30:61:b4:3e:c0:1b:cf:56:
                    ea:49:50:2c:35:10:f7:69:ea:9a:a2:5a:18:a6:5d:
                    21:bb:ca:41:cf:d0:6f:22:d9:21:b4:32:d9:e2:24:
                    e1:e9:c3:9b:0b:1e:bb:0e:67:27:1c:5b:e1:53:e5:
                    f1:09:fa:2a:d0:93:22:bb:43:e6:2d:c3:c8:7a:f7:
                    1e:15:dc:cd:21:8a:6f:fc:37:92:35:6b:3d:aa:ef:
                    c8:e5:6d:f5:d6:09:55:7a:c3:96:36:cd:35:5a:ec:
                    c7:11:32:99:2f:43:b8:8c:4b:55:6f:c4:b6:8c:fb:
                    4a:bb:00:3e:1b:fc:4e:0e:2b:4c:b4:39:80:67:bc:
                    bb:c0:41:18:c7:e7:45:42:25:aa:77:42:1e:72:6d:
                    d5:e1:88:e4:17:22:2f:88:b7:39:e7:94:22:f1:2d:
                    38:20:16:56:26:9a:fd:68:eb:4f:8c:47:0f:71:38:
                    1c:55:57:c5:7c:e1:02:59:b3:f8:12:e7:71:0d:df:
                    9e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6D:9F:84:45:31:35:3C:ED:A4:90:AE:E1:CF:D0:71:95:75:15:E9
            X509v3 Authority Key Identifier:
                keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:be:c9:df:35:05:40:7b:5d:90:6f:24:3b:ce:3f:5a:17:3b:
         6f:97:bc:52:bc:b4:30:04:44:fb:0f:e7:a0:25:30:fe:3a:bd:
         80:c8:6a:88:07:c9:c2:62:00:a1:3b:8c:99:73:6f:e1:25:3c:
         33:34:15:a2:f2:0a:97:84:ec:ac:a6:ed:26:cb:46:49:66:7f:
         cc:09:80:26:03:fb:81:d3:c7:36:9a:fd:bf:0f:e9:d5:0b:93:
         b4:d7:6c:67:b4:da:04:a2:7e:71:b9:d3:dc:55:04:cb:23:83:
         26:91:93:80:0f:63:b2:4d:f8:89:d3:5f:19:ee:34:86:b1:08:
         1e:f6:c7:55:3d:e8:45:eb:9c:4c:b4:c0:c3:cd:6f:ea:48:6a:
         d9:08:fb:82:7e:1e:a3:c6:78:14:da:7b:e7:50:d1:f3:9e:8f:
         c1:23:80:20:bc:32:ab:9d:0d:c0:90:98:28:a0:ab:bb:5a:f2:
         ae:8c:24:09:ad:c4:eb:82:a3:70:fe:c5:1c:2c:e3:92:22:8f:
         ff:64:24:31:d7:38:f1:a5:1e:a1:62:4c:25:f1:be:d9:79:5b:
         71:c2:fd:eb:52:10:f8:7b:74:6c:19:e8:42:8a:40:23:37:c8:
         12:5d:41:11:30:01:d8:37:92:3b:b3:10:71:48:24:01:69:50:
         67:56:7c:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWioclgziThdF6lznjVAALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllODFkZGFhZDg4ZjcwNzE2MTJkN2MzYjc2MThlMjRkMWE1
MjMzYmIwHhcNMjQxMTIzMDEwMjE5WhcNMjQxMTI0MDEwMjE5WjAzMTEwLwYDVQQD
EyhjYzZkOWY4NDQ1MzEzNTNjZWRhNDkwYWVlMWNmZDA3MTk1NzUxNWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvm44J1jASdPvon8+WIvA0gA4soY
SwdLXgHCjzs/EqqMwbNit/YbJda1tvxRJup5EZzHBBH3yOqpepIQzYDdqRuxMGG0
PsAbz1bqSVAsNRD3aeqaoloYpl0hu8pBz9BvItkhtDLZ4iTh6cObCx67DmcnHFvh
U+XxCfoq0JMiu0PmLcPIevceFdzNIYpv/DeSNWs9qu/I5W311glVesOWNs01WuzH
ETKZL0O4jEtVb8S2jPtKuwA+G/xODitMtDmAZ7y7wEEYx+dFQiWqd0Iecm3V4Yjk
FyIviLc555Qi8S04IBZWJpr9aOtPjEcPcTgcVVfFfOECWbP4EudxDd+eTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxtn4RFMTU87aSQruHP0HGVdRXpMB8GA1UdIwQY
MBaAFJ6B3arYj3BxYS18O3YY4k0aUjO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm9IZHF0aVBjSEZoTFh3N2RoamlUUnBTTTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lMjJkYzItZjQwNi00MGM5LWJhNWYt
YmY2OWIxMmE2NzQ0LzEvbm9IZHF0aVBjSEZoTFh3N2RoamlUUnBTTTdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lMjJkYzItZjQwNi00MGM5LWJhNWYtYmY2OWIxMmE2NzQ0
LzEvbm9IZHF0aVBjSEZoTFh3N2RoamlUUnBTTTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcr7J3zUF
QHtdkG8kO84/Whc7b5e8Ury0MARE+w/noCUw/jq9gMhqiAfJwmIAoTuMmXNv4SU8
MzQVovIKl4TsrKbtJstGSWZ/zAmAJgP7gdPHNpr9vw/p1QuTtNdsZ7TaBKJ+cbnT
3FUEyyODJpGTgA9jsk34idNfGe40hrEIHvbHVT3oReucTLTAw81v6khq2Qj7gn4e
o8Z4FNp751DR856PwSOAILwyq50NwJCYKKCru1ryrowkCa3E64KjcP7FHCzjkiKP
/2QkMdc48aUeoWJMJfG+2XlbccL961IQ+Ht0bBnoQopAIzfIEl1BETAB2DeSO7MQ
cUgkAWlQZ1Z8Tw==
-----END CERTIFICATE-----