Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
File:                     kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft (raw, json)
Hash identifier:          EbU5GbXsnxbpWFxXd9g8W2JKI/upetn7Da5+gxzZnLQ=
Subject key identifier:   5C:71:5C:CE:1D:D9:AF:4A:73:86:31:2C:AB:A0:6F:58:E6:45:2F:76
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Certificate issuer:       /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial:       018F885B2933D5770346E56B1A413CE32E09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
Manifest number:          1181
Signing time:             Fri 17 May 2024 21:00:26 +0000
Manifest this update:     Fri 17 May 2024 21:00:26 +0000
Manifest next update:     Sat 18 May 2024 21:00:26 +0000
Files and hashes:         1: 999RUH74yD7B4_2B443zAzrr7SQ.roa (hash: Yll3VMhcFqpJRpydGvXWWM+zhFA4kZ0qgrzgl9oqVHM=)
                          2: McRWj9oS6R5bKEC8Wm7DVWb_AQY.roa (hash: YM3NpTsaPJ1tIQ10F08Kl8Pl4JSp3433bnHruiP4Uqo=)
                          3: To9gn0-XYtUh46V6WuHTP3mmobs.roa (hash: 5khSI0RA3oW+xn6lG6ARPRowmVrE9PnwzlNf/FmCSnQ=)
                          4: UqELcHzBwx1yma51Rs4r-IaqnkY.roa (hash: LIYkPTPKFTh8ddOa4h+kBKbDlCMNs6zLV5y8p3OQH/I=)
                          5: XSJN2Yajywvo_k7-2Jt0Q6e2kFw.roa (hash: IuoeKDFO/7/MAhRZbssmSrQQhsyhkyG56kgjGdM2qrg=)
                          6: c_kG7a1uQKyZzzVW86g1U_g5IQo.roa (hash: zJvoBV/8WSS4wJN8LAuXHq+yCy0pWnftbtmjTLgDC/Q=)
                          7: kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl (hash: nWx2MImfNHvKBgGklmk76FI/xTYk6fFgDaeVqutJ1jg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:29:33:d5:77:03:46:e5:6b:1a:41:3c:e3:2e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
        Validity
            Not Before: May 17 21:00:26 2024 GMT
            Not After : May 18 21:00:26 2024 GMT
        Subject: CN=5c715cce1dd9af4a7386312caba06f58e6452f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:0d:35:33:95:80:7a:05:61:01:97:ae:1f:
                    d0:fe:b8:f9:04:e4:73:8b:d1:b9:6a:e3:2f:c4:f0:
                    7c:19:7e:50:98:5b:dc:80:a5:a3:b6:98:af:c0:37:
                    1d:5e:a9:9e:1b:4d:1a:15:db:01:a3:5b:14:16:3c:
                    a5:b5:39:6d:1b:32:6d:f2:e1:55:3d:e7:3e:3f:4c:
                    25:2b:68:7f:ec:24:58:0c:8a:d3:81:af:3b:13:d0:
                    3b:b6:c2:d8:f0:a3:3c:3f:bd:5a:25:9b:5d:c9:94:
                    77:de:fc:ec:ff:e4:9e:a7:f4:44:fc:12:0a:3b:0f:
                    3a:fc:57:f8:9e:f3:3d:03:4d:c5:49:5c:8b:79:4e:
                    7c:b1:a9:8c:27:b9:ad:7e:df:df:51:1a:51:d1:70:
                    73:4c:82:a2:f5:0f:55:d3:81:59:ef:ec:be:69:50:
                    2f:0c:ff:dd:2a:45:4a:be:54:1f:d4:f3:e2:f1:fc:
                    4e:5a:9d:76:ae:3d:44:78:52:d7:2f:06:96:84:02:
                    54:c4:ce:7f:93:c3:ab:9f:9d:a1:5a:17:26:30:0d:
                    95:e3:7b:79:d7:5e:46:38:5d:8b:76:11:19:9c:85:
                    59:2d:aa:3c:de:c0:24:eb:45:14:b0:9d:cb:ec:ba:
                    d9:d5:7e:2a:e5:e3:b2:53:ff:b1:c8:23:44:15:60:
                    36:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:71:5C:CE:1D:D9:AF:4A:73:86:31:2C:AB:A0:6F:58:E6:45:2F:76
            X509v3 Authority Key Identifier:
                keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:44:e7:39:2a:77:02:d8:15:21:f7:58:22:f0:f2:89:5a:ac:
         8a:0b:ed:27:15:41:aa:fd:c1:04:27:7b:2a:62:bc:72:37:9a:
         7a:6a:c7:45:b4:58:df:85:e6:c5:7e:b4:8a:fb:7c:93:77:53:
         29:ba:fe:8f:1a:26:89:dc:87:56:16:5d:25:f3:63:5c:b7:a7:
         8a:50:17:99:58:0e:34:70:fd:e5:6a:ad:8a:86:d2:c6:1d:3c:
         f0:a1:6a:5f:c5:e3:ed:48:db:23:ef:e8:e0:6c:a2:26:66:79:
         11:05:ab:a9:76:4b:4b:7a:72:df:71:78:18:a7:bd:d9:e3:e3:
         12:d5:e0:4f:08:59:89:b2:d1:b0:6f:84:5f:0f:8a:5b:0e:c1:
         f8:61:bb:f0:0a:a0:de:49:aa:44:bd:0a:f5:29:cb:87:18:e1:
         ed:4f:9b:54:45:0b:c7:1f:86:e5:04:89:63:75:a4:80:4c:99:
         93:ed:a3:24:78:07:6e:ec:7f:3d:7a:04:4b:16:d8:16:93:80:
         3d:e0:a9:ce:62:3c:66:c4:0b:c2:fb:63:e1:1c:60:02:3c:4a:
         2f:0c:f5:b0:7c:99:91:09:60:ee:34:c0:57:91:c2:23:1c:e0:
         c3:38:92:53:4a:f6:ac:5c:08:87:c1:1d:f9:e5:32:90:f0:a9:
         cd:76:40:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IWykz1XcDRuVrGkE84y4JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyOTM1MmE4ZDJkZDcwYzkxZmZjZWM4ZTMyM2ZlNjlmMWU5
YTQxMzkwHhcNMjQwNTE3MjEwMDI2WhcNMjQwNTE4MjEwMDI2WjAzMTEwLwYDVQQD
Eyg1YzcxNWNjZTFkZDlhZjRhNzM4NjMxMmNhYmEwNmY1OGU2NDUyZjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssoNNTOVgHoFYQGXrh/Q/rj5BORz
i9G5auMvxPB8GX5QmFvcgKWjtpivwDcdXqmeG00aFdsBo1sUFjyltTltGzJt8uFV
Pec+P0wlK2h/7CRYDIrTga87E9A7tsLY8KM8P71aJZtdyZR33vzs/+Sep/RE/BIK
Ow86/Ff4nvM9A03FSVyLeU58samMJ7mtft/fURpR0XBzTIKi9Q9V04FZ7+y+aVAv
DP/dKkVKvlQf1PPi8fxOWp12rj1EeFLXLwaWhAJUxM5/k8Orn52hWhcmMA2V43t5
115GOF2LdhEZnIVZLao83sAk60UUsJ3L7LrZ1X4q5eOyU/+xyCNEFWA2JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxxXM4d2a9Kc4YxLKugb1jmRS92MB8GA1UdIwQY
MBaAFJKTUqjS3XDJH/zsjjI/5p8emkE5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83YjZlZGMtYWQyMy00ZDczLWFiNTYt
MGExYTM1ODk3ZjEwLzEva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi83YjZlZGMtYWQyMy00ZDczLWFiNTYtMGExYTM1ODk3ZjEw
LzEva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkETnOSp3
AtgVIfdYIvDyiVqsigvtJxVBqv3BBCd7KmK8cjeaemrHRbRY34XmxX60ivt8k3dT
Kbr+jxomidyHVhZdJfNjXLenilAXmVgONHD95WqtiobSxh088KFqX8Xj7UjbI+/o
4GyiJmZ5EQWrqXZLS3py33F4GKe92ePjEtXgTwhZibLRsG+EXw+KWw7B+GG78Aqg
3kmqRL0K9SnLhxjh7U+bVEULxx+G5QSJY3WkgEyZk+2jJHgHbux/PXoESxbYFpOA
PeCpzmI8ZsQLwvtj4RxgAjxKLwz1sHyZkQlg7jTAV5HCIxzgwziSU0r2rFwIh8Ed
+eUykPCpzXZAEw==
-----END CERTIFICATE-----