Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
File:                     qX7j7USz26i4PY6heZrA5YPWQUw.mft (raw, json)
Hash identifier:          Sj0wg3vWIPnpxp22FElJOQP9JKpSDb9vShLP6d9J1ak=
Subject key identifier:   6E:58:00:EE:06:BE:D4:02:B3:C2:A2:9B:94:A6:3B:4E:CC:51:35:E9
Authority key identifier: A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C
Certificate issuer:       /CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
Certificate serial:       018F87B6EB80A70288035CE463FB1C3515C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
Manifest number:          C7
Signing time:             Fri 17 May 2024 18:01:03 +0000
Manifest this update:     Fri 17 May 2024 18:01:03 +0000
Manifest next update:     Sat 18 May 2024 18:01:03 +0000
Files and hashes:         1: qX7j7USz26i4PY6heZrA5YPWQUw.crl (hash: iiNvr2SmPR4YJA4YY2jHx9XXhb7vVyj5NA9N1HrsEUc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:eb:80:a7:02:88:03:5c:e4:63:fb:1c:35:15:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
        Validity
            Not Before: May 17 18:01:03 2024 GMT
            Not After : May 18 18:01:03 2024 GMT
        Subject: CN=6e5800ee06bed402b3c2a29b94a63b4ecc5135e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:52:e7:0c:91:fe:1b:d1:bb:3d:52:b8:e2:17:
                    5a:c2:02:40:10:fb:a2:66:69:62:84:3e:b8:71:e4:
                    e9:7b:c4:c4:0a:87:a5:e2:1e:e5:54:79:cd:54:40:
                    7f:05:7f:69:50:27:d1:7d:61:ff:af:8f:21:34:f0:
                    c5:72:9e:07:2b:d2:85:59:55:d8:de:bf:7e:59:bd:
                    11:7e:10:e0:2f:53:83:51:f0:c0:8f:72:ba:66:20:
                    48:fc:b0:2a:1c:09:0e:2b:d8:69:43:d9:a5:1f:b9:
                    54:ad:44:5e:38:f4:25:56:8d:c0:92:80:82:ed:81:
                    3d:26:9d:13:cc:e3:f5:20:06:38:83:7c:e9:b8:9d:
                    9f:29:13:44:52:64:2b:aa:28:57:05:b9:56:6a:cf:
                    e9:e7:60:64:c2:2e:12:60:1a:0e:29:7f:cc:6c:83:
                    8e:36:9f:19:89:4f:a2:f5:da:7e:73:00:ca:51:af:
                    3c:b9:ee:3a:33:20:59:14:22:6c:a0:5d:56:fe:c8:
                    61:cb:e2:d3:93:e1:78:3d:29:c3:b9:76:f2:e6:05:
                    8e:5c:1b:b7:86:d4:92:9a:06:4a:3d:d5:9f:c4:41:
                    0f:19:c7:6e:0a:d0:cb:f5:4a:bd:4b:9a:ab:54:89:
                    88:d8:27:a2:7e:61:8c:9b:9d:1b:5f:ca:27:36:49:
                    ec:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:58:00:EE:06:BE:D4:02:B3:C2:A2:9B:94:A6:3B:4E:CC:51:35:E9
            X509v3 Authority Key Identifier:
                keyid:A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:bd:50:8a:15:18:cf:3a:9a:92:e2:56:bc:70:20:b5:ba:e4:
         44:41:91:93:11:a9:58:6f:9b:3e:b9:76:c6:5e:9b:ea:09:d4:
         2f:c4:a1:4b:83:42:20:a3:9c:87:8b:e5:ef:5b:a5:4c:22:3a:
         a6:c8:83:a2:f0:28:a9:01:d2:e0:20:70:c7:c7:31:fb:52:d2:
         b4:aa:4e:d7:29:74:bb:67:e1:fe:43:a0:5b:f5:1c:2e:be:eb:
         d5:19:b4:63:83:f3:02:42:3c:8b:9d:24:69:3a:d8:a6:00:1f:
         e4:d1:e1:dd:58:77:c4:58:40:c9:7a:31:ba:7d:c3:b7:ce:03:
         bb:35:80:aa:a3:a8:82:32:20:28:65:6f:27:73:c5:bb:38:9b:
         d4:80:84:fb:78:87:36:d0:1a:40:c2:3a:19:ff:11:66:b1:8a:
         20:77:91:0c:cf:92:4b:0e:9b:41:ab:4b:4a:6e:b2:e0:73:d1:
         c6:53:b6:63:71:b7:d7:92:6f:80:55:6d:e1:a5:54:7c:ba:3b:
         7c:e2:9c:5b:16:1a:5d:6f:09:79:68:63:15:2a:ee:b5:1f:4f:
         f7:db:12:8a:aa:07:4b:11:6b:df:4d:e4:d5:74:9c:94:73:be:
         e6:79:87:32:b1:98:cb:11:b2:dd:c7:e1:44:1e:1a:c2:a4:41:
         62:06:51:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtuuApwKIA1zkY/scNRXBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5N2VlM2VkNDRiM2RiYThiODNkOGVhMTc5OWFjMGU1ODNk
NjQxNGMwHhcNMjQwNTE3MTgwMTAzWhcNMjQwNTE4MTgwMTAzWjAzMTEwLwYDVQQD
Eyg2ZTU4MDBlZTA2YmVkNDAyYjNjMmEyOWI5NGE2M2I0ZWNjNTEzNWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01LnDJH+G9G7PVK44hdawgJAEPui
ZmlihD64ceTpe8TECoel4h7lVHnNVEB/BX9pUCfRfWH/r48hNPDFcp4HK9KFWVXY
3r9+Wb0RfhDgL1ODUfDAj3K6ZiBI/LAqHAkOK9hpQ9mlH7lUrUReOPQlVo3AkoCC
7YE9Jp0TzOP1IAY4g3zpuJ2fKRNEUmQrqihXBblWas/p52Bkwi4SYBoOKX/MbIOO
Np8ZiU+i9dp+cwDKUa88ue46MyBZFCJsoF1W/shhy+LTk+F4PSnDuXby5gWOXBu3
htSSmgZKPdWfxEEPGcduCtDL9Uq9S5qrVImI2CeifmGMm50bX8onNknsvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5YAO4GvtQCs8Kim5SmO07MUTXpMB8GA1UdIwQY
MBaAFKl+4+1Es9uouD2OoXmawOWD1kFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVg3ajdVU3oyNmk0UFk2aGVackE1WVBXUVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YjRjNmMtNDllZS00YzVmLTg3ZjMt
NzBlMzViMGYwMTViLzEvcVg3ajdVU3oyNmk0UFk2aGVackE1WVBXUVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82YjRjNmMtNDllZS00YzVmLTg3ZjMtNzBlMzViMGYwMTVi
LzEvcVg3ajdVU3oyNmk0UFk2aGVackE1WVBXUVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK71QihUY
zzqakuJWvHAgtbrkREGRkxGpWG+bPrl2xl6b6gnUL8ShS4NCIKOch4vl71ulTCI6
psiDovAoqQHS4CBwx8cx+1LStKpO1yl0u2fh/kOgW/UcLr7r1Rm0Y4PzAkI8i50k
aTrYpgAf5NHh3Vh3xFhAyXoxun3Dt84DuzWAqqOogjIgKGVvJ3PFuzib1ICE+3iH
NtAaQMI6Gf8RZrGKIHeRDM+SSw6bQatLSm6y4HPRxlO2Y3G315JvgFVt4aVUfLo7
fOKcWxYaXW8JeWhjFSrutR9P99sSiqoHSxFr303k1XSclHO+5nmHMrGYyxGy3cfh
RB4awqRBYgZR2w==
-----END CERTIFICATE-----