Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
File:                     xpHzRaUDy4yKneQn6IEu__IbIrU.mft (raw, json)
Hash identifier:          oY8lYqjKmznhgOYDtq8SjGWu9J4Xxy0Y0+53vONdekc=
Subject key identifier:   EA:EA:63:5E:8B:88:90:A7:46:FE:B0:68:43:6E:88:70:17:E9:F8:EE
Authority key identifier: C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5
Certificate issuer:       /CN=c691f345a503cb8c8a9de427e8812efff21b22b5
Certificate serial:       0191FB5A6F620ECC91040EEF61498B7D5E3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
Manifest number:          0103
Signing time:             Mon 16 Sep 2024 15:01:33 +0000
Manifest this update:     Mon 16 Sep 2024 15:01:33 +0000
Manifest next update:     Tue 17 Sep 2024 15:01:33 +0000
Files and hashes:         1: As6DBm2_cYTLq8Ao3beqPUk_OQI.roa (hash: dHPoic4O07u6jI/6jnlgvJoymtdOzMFi19wkcdcQv3U=)
                          2: l4wP8RomPQk861_iN78_jF0v0LQ.roa (hash: Lf3zCLQXrIZIRPiLMaBEi6GzNFuHqtf2xtHsZodsyRg=)
                          3: lItt5VGmt1LnltF97_kUdq2GlCo.roa (hash: GH4xpV29RIYSaj1Yh5mgd0oqslXPUwSn+bpI8Wnm7WA=)
                          4: xpHzRaUDy4yKneQn6IEu__IbIrU.crl (hash: 4MI7wCKxsBL8mRL1Im6AXlT0GFVaEsiNUABmrm25xRw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:5a:6f:62:0e:cc:91:04:0e:ef:61:49:8b:7d:5e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c691f345a503cb8c8a9de427e8812efff21b22b5
        Validity
            Not Before: Sep 16 15:01:33 2024 GMT
            Not After : Sep 17 15:01:33 2024 GMT
        Subject: CN=eaea635e8b8890a746feb068436e887017e9f8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8b:4c:b6:96:a1:d5:7e:4b:9b:1d:1b:51:2d:
                    f8:f3:9f:9c:8a:ec:a2:73:a7:7c:d2:6f:f3:95:6d:
                    61:f6:e3:50:35:d9:ea:a0:17:4f:01:bd:12:e0:a2:
                    26:6d:72:fc:66:90:bd:e3:7e:48:be:14:25:8f:81:
                    2b:30:fd:e9:0e:91:d7:85:e5:ab:e5:51:55:f5:b5:
                    21:20:d2:fc:9b:06:6f:52:05:a7:dc:f4:34:5a:ef:
                    15:23:d9:d9:d9:0d:0b:79:5d:69:01:59:66:80:13:
                    21:1c:95:d6:27:53:b8:3c:5c:97:d3:a5:7d:63:2f:
                    04:6c:9e:82:64:b8:b8:48:8f:78:e3:e9:b1:96:f9:
                    1f:c8:a8:42:84:78:a6:ad:96:7b:ae:5c:f9:74:08:
                    b4:4b:69:de:dd:1b:d2:74:20:30:ff:27:bd:5f:0e:
                    79:18:0e:a9:09:60:e1:e7:cb:76:ad:90:ea:f7:2f:
                    81:39:8b:23:ea:6f:eb:05:c1:2d:a8:43:ce:67:89:
                    c2:8e:b3:a5:75:ea:dc:07:6f:bf:e2:ad:71:90:e9:
                    55:cc:2f:1a:d0:ea:6a:0e:92:73:8a:b6:f8:18:59:
                    6e:f8:d4:c4:2d:95:0d:8a:3c:21:a0:b8:97:0a:51:
                    b5:85:c0:5d:06:31:b4:18:7d:42:11:6d:9f:61:8d:
                    19:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EA:63:5E:8B:88:90:A7:46:FE:B0:68:43:6E:88:70:17:E9:F8:EE
            X509v3 Authority Key Identifier:
                keyid:C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f4:f4:f6:d6:5a:c4:6d:87:80:37:c6:42:65:00:74:46:94:
         b0:89:9e:67:1c:48:fa:f1:03:8d:3b:2e:0e:f9:7d:b6:97:09:
         04:37:30:7d:b6:35:5a:3e:32:59:4e:37:5e:89:72:d8:bb:1c:
         4c:11:7f:f6:d9:aa:56:b8:8b:6c:6e:f4:1d:8f:7a:4d:b2:1b:
         47:29:fa:d3:13:b7:b4:3d:33:ec:21:85:63:45:d8:2c:e5:67:
         69:75:0b:dd:dd:6a:3d:d9:c1:a7:ad:5c:87:6f:4d:1c:0c:0a:
         e5:c2:b3:e4:63:f6:d5:e7:71:7c:9f:39:10:25:7d:e2:dd:49:
         0f:13:c0:94:42:82:ab:8f:66:a7:12:4f:96:12:9a:fc:0c:92:
         5e:c9:e4:d4:5b:5d:99:dc:21:7a:a9:d8:17:4b:72:b6:35:ff:
         a7:aa:5d:0e:9b:f4:fb:c8:74:bb:6c:20:ff:f8:3d:38:7c:78:
         c8:32:df:85:4f:7d:58:b5:45:89:ff:ec:4d:8f:42:6b:18:ea:
         a5:8e:dd:f6:68:d7:36:83:b9:fe:24:24:af:7e:68:73:60:11:
         22:b8:fa:b0:ef:15:7f:67:61:1c:dd:ca:ad:fa:72:68:ae:43:
         36:fc:88:50:e9:51:8c:30:cc:3a:c5:2c:11:76:ba:26:16:de:
         7e:3b:f6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----