Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
File:                     RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft (raw, json)
Hash identifier:          TNcuz4DNfqX6dy+OklkZMxcMNBFNacSARSiaMo4zr0Q=
Subject key identifier:   DC:BD:72:F7:4C:29:7F:8D:D9:E9:73:29:A0:22:BF:C2:23:F5:A2:64
Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
Certificate issuer:       /CN=441d4b92dd150364c65b7d21299028678b0a5296
Certificate serial:       01936B22272FF24E6429BF0B2A1983B281A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
Manifest number:          137B
Signing time:             Wed 27 Nov 2024 01:00:20 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:20 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:20 +0000
Files and hashes:         1: ARQuIslzVwVlgA8mkhgi9-w9fWI.roa (hash: kPRJOyvl6xUG08YxGCxltcLSXxV56JMlUpAU6yiJ0/Q=)
                          2: HzDiXMcCJ1-RMhfLZCIExmAWLgQ.roa (hash: 0wCWpYvtfVtu9a0szuX7e7pEfpeNJZl2C/5h3Xl5gBY=)
                          3: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl (hash: rMhvPmt+MkqF8IeoCrRdOzjWtYvVT+iX6PCaC0FHoIY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:27:2f:f2:4e:64:29:bf:0b:2a:19:83:b2:81:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296
        Validity
            Not Before: Nov 27 01:00:20 2024 GMT
            Not After : Nov 28 01:00:20 2024 GMT
        Subject: CN=dcbd72f74c297f8dd9e97329a022bfc223f5a264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8f:9a:15:bb:2e:a4:ba:c7:36:24:73:3a:44:
                    31:27:d1:71:cf:f6:ca:cd:b4:64:25:ee:52:cf:29:
                    50:0f:2a:9c:bd:d9:bd:2a:a2:23:2d:21:fb:cf:bd:
                    aa:20:0b:e3:92:72:09:0c:2d:89:1f:0e:00:6d:93:
                    9d:b1:3c:db:89:0d:92:82:d7:a3:b3:2c:e7:12:33:
                    9c:11:c7:df:32:1c:b5:40:b7:91:41:bf:1c:f8:e8:
                    52:0c:8b:82:c8:71:fc:c1:14:50:79:05:6c:23:b0:
                    f9:33:26:46:f5:07:5d:20:8a:76:25:f7:1f:da:37:
                    a0:08:fe:d7:05:5c:f7:24:a6:ee:be:04:8e:d7:fe:
                    42:34:8f:41:51:2c:57:f5:d4:11:14:22:44:74:2e:
                    cf:2d:79:b0:b7:dd:bf:27:46:e5:0b:6f:e4:8b:12:
                    f6:e4:e7:9a:76:d0:f5:23:ba:5b:da:fc:93:5e:9a:
                    b4:1c:51:9a:28:77:e5:92:87:ba:38:e8:53:9f:1f:
                    98:ff:3d:a2:dc:d5:20:ca:64:e2:4d:39:fd:f8:af:
                    f1:e5:72:45:16:f2:9f:d2:39:ca:11:85:98:00:7b:
                    07:88:91:02:71:0a:36:df:5c:cb:8c:a5:2f:44:59:
                    6f:36:5c:3d:ea:4d:df:4b:bf:fc:04:13:80:9c:b4:
                    2e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BD:72:F7:4C:29:7F:8D:D9:E9:73:29:A0:22:BF:C2:23:F5:A2:64
            X509v3 Authority Key Identifier:
                keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:4c:c7:80:c4:06:4a:64:c4:5f:9f:ff:15:34:86:30:74:27:
         81:c1:d0:6b:79:95:5d:f0:97:47:3c:f2:52:04:37:e9:bf:89:
         27:0b:b6:dd:df:79:e2:f3:14:b2:83:b1:2b:5a:81:ef:42:59:
         c8:8a:68:da:e8:09:6e:5f:1a:eb:6b:b8:e3:2f:43:72:86:8d:
         43:c3:3f:33:f1:00:e5:1b:79:77:ef:1b:1f:e5:d3:16:61:0d:
         02:65:0b:1d:71:97:bd:fb:46:e8:ad:52:0b:c2:4c:2c:cb:49:
         60:a8:2e:e8:8b:9e:f0:90:f1:bb:42:31:39:dc:e9:ae:42:94:
         ad:5d:e5:17:6b:f5:5c:a3:d2:a5:88:09:52:44:20:65:a2:93:
         ce:c2:16:64:e6:ad:95:5b:78:78:0e:26:30:bb:69:90:1f:f0:
         de:2e:fc:88:43:72:34:08:1b:e6:74:4e:e3:c3:87:3d:c7:1f:
         54:cc:71:fa:9d:67:90:21:71:38:d0:8d:bd:b8:bc:83:3f:50:
         00:8a:f5:70:37:e4:b9:76:4d:b4:ae:c7:1f:9a:9a:3d:ea:8d:
         e6:a4:57:e0:47:e1:c2:94:cf:60:c5:37:9e:a1:e6:cf:9c:bd:
         1e:66:da:3e:a7:11:04:a4:4e:a3:81:2a:8e:ac:7f:b4:f1:45:
         e3:d0:f9:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNrIicv8k5kKb8LKhmDsoGgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MWQ0YjkyZGQxNTAzNjRjNjViN2QyMTI5OTAyODY3OGIw
YTUyOTYwHhcNMjQxMTI3MDEwMDIwWhcNMjQxMTI4MDEwMDIwWjAzMTEwLwYDVQQD
EyhkY2JkNzJmNzRjMjk3ZjhkZDllOTczMjlhMDIyYmZjMjIzZjVhMjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko+aFbsupLrHNiRzOkQxJ9Fxz/bK
zbRkJe5SzylQDyqcvdm9KqIjLSH7z72qIAvjknIJDC2JHw4AbZOdsTzbiQ2Sgtej
syznEjOcEcffMhy1QLeRQb8c+OhSDIuCyHH8wRRQeQVsI7D5MyZG9QddIIp2Jfcf
2jegCP7XBVz3JKbuvgSO1/5CNI9BUSxX9dQRFCJEdC7PLXmwt92/J0blC2/kixL2
5OeadtD1I7pb2vyTXpq0HFGaKHflkoe6OOhTnx+Y/z2i3NUgymTiTTn9+K/x5XJF
FvKf0jnKEYWYAHsHiJECcQo231zLjKUvRFlvNlw96k3fS7/8BBOAnLQu1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNy9cvdMKX+N2elzKaAiv8Ij9aJkMB8GA1UdIwQY
MBaAFEQdS5LdFQNkxlt9ISmQKGeLClKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZDQ1NGItOWQxZC00ZTdkLWFlNzMt
N2Y1ZjRkNjA0NzMxLzEvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81ZDQ1NGItOWQxZC00ZTdkLWFlNzMtN2Y1ZjRkNjA0NzMx
LzEvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAukzHgMQG
SmTEX5//FTSGMHQngcHQa3mVXfCXRzzyUgQ36b+JJwu23d954vMUsoOxK1qB70JZ
yIpo2ugJbl8a62u44y9DcoaNQ8M/M/EA5Rt5d+8bH+XTFmENAmULHXGXvftG6K1S
C8JMLMtJYKgu6Iue8JDxu0IxOdzprkKUrV3lF2v1XKPSpYgJUkQgZaKTzsIWZOat
lVt4eA4mMLtpkB/w3i78iENyNAgb5nRO48OHPccfVMxx+p1nkCFxONCNvbi8gz9Q
AIr1cDfkuXZNtK7HH5qaPeqN5qRX4EfhwpTPYMU3nqHmz5y9HmbaPqcRBKROo4Eq
jqx/tPFF49D5wA==
-----END CERTIFICATE-----