Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
File:                     46ttsqw26Ykzq5momk2cFp6l77s.mft (raw, json)
Hash identifier:          feWEB3y1lYWvG57+GRr2x/gHsK7KKiZbRJluisKg/rM=
Subject key identifier:   7C:CD:B5:C6:E1:92:3F:80:1C:C0:C0:D4:49:21:C5:E1:CF:11:24:7C
Authority key identifier: E3:AB:6D:B2:AC:36:E9:89:33:AB:99:A8:9A:4D:9C:16:9E:A5:EF:BB
Certificate issuer:       /CN=e3ab6db2ac36e98933ab99a89a4d9c169ea5efbb
Certificate serial:       019406B438567FEE0568DE1B6C78A2432942
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
Manifest number:          12AE
Signing time:             Fri 27 Dec 2024 06:01:01 +0000
Manifest this update:     Fri 27 Dec 2024 06:01:01 +0000
Manifest next update:     Sat 28 Dec 2024 06:01:01 +0000
Files and hashes:         1: 46ttsqw26Ykzq5momk2cFp6l77s.crl (hash: q7avkW+G8LGA3vopuW8K4pV3HjMy7kRRFOhRasMcPEI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:b4:38:56:7f:ee:05:68:de:1b:6c:78:a2:43:29:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ab6db2ac36e98933ab99a89a4d9c169ea5efbb
        Validity
            Not Before: Dec 27 06:01:01 2024 GMT
            Not After : Dec 28 06:01:01 2024 GMT
        Subject: CN=7ccdb5c6e1923f801cc0c0d44921c5e1cf11247c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c3:f2:45:0c:13:0e:e8:0f:e3:f2:18:45:88:
                    7e:86:73:fa:f5:b2:86:16:fa:c2:2a:29:cb:7b:17:
                    83:75:f5:f3:57:6b:04:e4:2a:2a:99:5f:10:42:f8:
                    63:de:40:49:84:8b:52:d0:12:ba:5e:18:13:34:e7:
                    18:b0:6a:b3:0d:6a:70:01:01:ec:3b:18:c6:e2:d9:
                    07:26:e2:a8:96:05:2d:02:2a:c1:90:6f:b7:a4:5a:
                    a3:76:72:e7:10:7b:a9:aa:a3:d0:01:d0:e7:d8:56:
                    9a:8e:86:c9:b9:f1:b4:9a:76:87:5e:8a:ff:e5:12:
                    80:e0:ae:1b:cb:8b:6a:bd:96:dd:ed:1a:6b:1d:e4:
                    f5:f7:27:71:b0:54:6b:47:92:81:56:85:a9:d5:04:
                    a6:fe:aa:41:3d:d2:81:2c:12:6c:34:20:86:81:d7:
                    d2:b6:49:e7:18:45:a7:16:f7:dd:c8:d2:4b:db:d0:
                    15:d6:70:55:16:55:6d:37:5b:3a:67:11:76:9e:59:
                    cc:7b:ca:1b:01:e6:28:48:cc:c2:0c:69:d9:b9:d0:
                    c0:32:09:3c:f3:ba:c7:09:19:ca:8e:a8:b4:5a:47:
                    98:5a:7d:23:14:e1:b8:64:ef:f3:33:e5:91:b8:40:
                    d4:5a:3e:23:09:c3:f7:6f:06:8f:37:90:69:28:b5:
                    1d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CD:B5:C6:E1:92:3F:80:1C:C0:C0:D4:49:21:C5:E1:CF:11:24:7C
            X509v3 Authority Key Identifier:
                keyid:E3:AB:6D:B2:AC:36:E9:89:33:AB:99:A8:9A:4D:9C:16:9E:A5:EF:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:95:fc:c3:1f:ac:e2:d4:73:05:2c:6e:d1:8e:ce:e4:16:09:
         e1:f5:cf:49:d1:31:7f:44:55:ab:62:92:6a:e6:7e:c8:cb:4b:
         9c:cd:05:84:c2:80:a0:3e:57:65:08:42:9f:79:1a:74:0e:ab:
         ea:36:90:dd:ad:38:f3:5b:5f:9f:d4:14:0f:70:da:7f:f1:f7:
         69:bf:cf:33:08:94:32:f4:fd:3d:f8:16:21:f4:fc:bd:0c:7d:
         09:b1:41:c2:2b:e5:e0:06:72:74:c2:ad:58:7e:b5:c6:7e:38:
         09:47:8c:3f:e0:cc:3a:88:93:c5:0c:4f:06:8d:a0:2a:1d:0b:
         d6:37:8f:d4:ac:53:b3:5b:28:b6:76:c6:4b:e8:7d:74:bb:0f:
         91:a0:27:06:43:2f:a0:ea:ff:c8:a1:e3:4c:47:fb:a1:eb:ab:
         4c:61:ea:5b:b4:9e:8f:a6:f9:44:58:f1:99:26:e0:b4:9b:29:
         17:fa:4b:34:7f:b6:68:9f:6a:80:36:52:f8:7b:8f:de:5d:48:
         35:cd:bc:76:03:b0:10:84:4a:f2:c7:3a:e1:a1:98:e2:2e:de:
         e7:77:20:e4:ed:45:eb:11:18:cc:31:59:6b:20:6d:e7:1f:b9:
         3e:72:bc:ea:b0:bc:c2:8a:2e:a4:51:fa:e9:6e:62:40:50:b9:
         f4:fb:07:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQGtDhWf+4FaN4bbHiiQylCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYWI2ZGIyYWMzNmU5ODkzM2FiOTlhODlhNGQ5YzE2OWVh
NWVmYmIwHhcNMjQxMjI3MDYwMTAxWhcNMjQxMjI4MDYwMTAxWjAzMTEwLwYDVQQD
Eyg3Y2NkYjVjNmUxOTIzZjgwMWNjMGMwZDQ0OTIxYzVlMWNmMTEyNDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcPyRQwTDugP4/IYRYh+hnP69bKG
FvrCKinLexeDdfXzV2sE5CoqmV8QQvhj3kBJhItS0BK6XhgTNOcYsGqzDWpwAQHs
OxjG4tkHJuKolgUtAirBkG+3pFqjdnLnEHupqqPQAdDn2FaajobJufG0mnaHXor/
5RKA4K4by4tqvZbd7RprHeT19ydxsFRrR5KBVoWp1QSm/qpBPdKBLBJsNCCGgdfS
tknnGEWnFvfdyNJL29AV1nBVFlVtN1s6ZxF2nlnMe8obAeYoSMzCDGnZudDAMgk8
87rHCRnKjqi0WkeYWn0jFOG4ZO/zM+WRuEDUWj4jCcP3bwaPN5BpKLUdKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzNtcbhkj+AHMDA1EkhxeHPESR8MB8GA1UdIwQY
MBaAFOOrbbKsNumJM6uZqJpNnBaepe+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDZ0dHNxdzI2WWt6cTVtb21rMmNGcDZsNzdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9lZDAxYWEtMTVmYS00M2E2LThhMTUt
ZjI2ZjUwODM0ZjI5LzEvNDZ0dHNxdzI2WWt6cTVtb21rMmNGcDZsNzdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9lZDAxYWEtMTVmYS00M2E2LThhMTUtZjI2ZjUwODM0ZjI5
LzEvNDZ0dHNxdzI2WWt6cTVtb21rMmNGcDZsNzdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJX8wx+s
4tRzBSxu0Y7O5BYJ4fXPSdExf0RVq2KSauZ+yMtLnM0FhMKAoD5XZQhCn3kadA6r
6jaQ3a0481tfn9QUD3Daf/H3ab/PMwiUMvT9PfgWIfT8vQx9CbFBwivl4AZydMKt
WH61xn44CUeMP+DMOoiTxQxPBo2gKh0L1jeP1KxTs1sotnbGS+h9dLsPkaAnBkMv
oOr/yKHjTEf7oeurTGHqW7Sej6b5RFjxmSbgtJspF/pLNH+2aJ9qgDZS+HuP3l1I
Nc28dgOwEIRK8sc64aGY4i7e53cg5O1F6xEYzDFZayBt5x+5PnK86rC8wooupFH6
6W5iQFC59PsHbA==
-----END CERTIFICATE-----