Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
File:                     rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft (raw, json)
Hash identifier:          9a3MZz9huBPys7KIQ9ZZBrG1XdslI/ZyeeFbf4F5+5g=
Subject key identifier:   47:89:FD:23:E6:B4:B8:98:AD:86:23:96:09:50:F9:F1:67:0E:09:6D
Authority key identifier: AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
Certificate issuer:       /CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Certificate serial:       0193568A093182C24186D713623908765A12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
Manifest number:          10FB
Signing time:             Sat 23 Nov 2024 01:01:47 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:47 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:47 +0000
Files and hashes:         1: 4P_5RqU8xpoG8gjZDfiO7fMdJiE.roa (hash: 0G5lqqai+BxsgoS9rKHGLSKj8uiYkYr2z+pYFyxC6Ak=)
                          2: 5cLIwV281Dptl_O9KGbZE0jtOB8.roa (hash: +ke4U7Wb6DV51k+Fm72efiDbPXHpR7Ymq1yDypgDVj0=)
                          3: rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl (hash: qFao1QOYqMuyJCT+EnFGXOKtXHBJGguvKFqgi4DFzwA=)
                          4: zRsrp-tEf7LHEz3RhT8_JG63d-s.roa (hash: //AwoUL/O6idlfSZBMiHKFkwd+YnJygSWUMCl6m1ndk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:09:31:82:c2:41:86:d7:13:62:39:08:76:5a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
        Validity
            Not Before: Nov 23 01:01:47 2024 GMT
            Not After : Nov 24 01:01:47 2024 GMT
        Subject: CN=4789fd23e6b4b898ad8623960950f9f1670e096d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:99:51:24:af:b8:cc:01:be:de:f0:4e:32:5e:
                    f9:c9:42:a0:a9:21:92:20:68:8c:5f:50:42:f3:90:
                    5d:71:28:5c:29:e4:a3:ca:54:1f:bb:ca:ee:e5:af:
                    68:ea:9f:d4:c6:41:8e:2b:95:19:78:17:97:81:29:
                    b8:d1:0d:a7:19:b7:46:30:a7:30:b6:6b:1d:59:81:
                    f2:7f:e5:8a:0b:c3:fd:b7:c0:fa:64:9c:1b:aa:83:
                    29:18:7a:b4:2e:2b:d7:f3:fe:5b:b8:bb:84:2c:a4:
                    9e:a5:f7:68:08:9b:5c:ea:cc:6a:93:b5:1d:6a:46:
                    04:ea:a3:05:29:71:87:84:50:fa:36:11:03:60:0d:
                    c3:f0:a3:a7:f2:53:73:9c:7e:79:e7:5e:23:d4:9f:
                    63:be:20:4d:69:ec:6b:d6:4e:4e:e2:7c:f3:ac:a1:
                    2d:f5:b4:d6:32:08:8a:8c:03:51:f5:f2:c1:34:6a:
                    37:98:c2:b2:42:ed:c4:a5:57:da:7c:6e:ed:d4:c5:
                    3d:9a:09:64:45:2e:91:d8:e9:7d:7e:92:bf:ca:45:
                    11:06:ac:49:d0:11:ca:e9:4d:9c:be:af:b5:c5:80:
                    b1:17:30:1f:f6:31:82:65:49:31:bc:b9:ad:86:7f:
                    a6:0d:dd:91:9e:1a:e4:b4:99:99:ae:37:07:32:66:
                    f7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:89:FD:23:E6:B4:B8:98:AD:86:23:96:09:50:F9:F1:67:0E:09:6D
            X509v3 Authority Key Identifier:
                keyid:AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:39:e9:8f:9f:2c:66:44:54:8c:91:c4:8e:fc:0b:55:f4:91:
         7e:bf:1e:87:7f:2b:06:da:c1:a9:9a:91:8a:cf:d5:4a:70:0f:
         13:b6:c7:ef:3f:64:4e:cb:52:2c:01:78:01:6d:2c:67:d5:1c:
         03:cb:ef:4f:e0:1a:2b:13:2c:c9:2f:21:85:1e:a9:f2:36:dc:
         54:5b:22:73:96:2d:6d:aa:96:5a:a9:d5:de:2a:1c:c4:9b:fc:
         6d:93:b4:8b:c3:f8:84:02:8c:3b:d5:d7:e4:72:58:20:9c:e4:
         aa:a4:fd:24:df:4a:f3:3a:94:05:19:02:c4:38:ae:ac:fa:40:
         ca:01:1e:a3:92:50:8f:4d:7d:fc:47:63:a0:4f:4f:f2:3b:eb:
         6a:76:88:1b:5c:c5:6c:db:68:87:b8:a2:d9:7d:ce:09:b5:57:
         b8:7b:ef:44:aa:18:3a:79:d5:db:d2:51:4f:34:36:ca:92:e5:
         db:d3:ab:69:1c:f4:96:b6:48:1b:66:e0:97:b1:56:10:3e:ee:
         a6:b2:fc:1b:fb:81:f0:25:99:93:d3:21:71:ee:27:8e:b7:9d:
         82:43:4a:69:2e:1e:f0:ff:b7:13:11:5c:f1:9c:fb:60:7d:3e:
         a8:b4:a0:fb:38:32:1e:e5:b7:54:62:0c:f0:11:3f:b6:db:e0:
         2e:cd:7c:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWigkxgsJBhtcTYjkIdloSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNWZjNmM2YWVhM2YwZTRlZGY3Y2NiOTJlNmViMjM3N2E3
NDc5YTUwHhcNMjQxMTIzMDEwMTQ3WhcNMjQxMTI0MDEwMTQ3WjAzMTEwLwYDVQQD
Eyg0Nzg5ZmQyM2U2YjRiODk4YWQ4NjIzOTYwOTUwZjlmMTY3MGUwOTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1plRJK+4zAG+3vBOMl75yUKgqSGS
IGiMX1BC85BdcShcKeSjylQfu8ru5a9o6p/UxkGOK5UZeBeXgSm40Q2nGbdGMKcw
tmsdWYHyf+WKC8P9t8D6ZJwbqoMpGHq0LivX8/5buLuELKSepfdoCJtc6sxqk7Ud
akYE6qMFKXGHhFD6NhEDYA3D8KOn8lNznH55514j1J9jviBNaexr1k5O4nzzrKEt
9bTWMgiKjANR9fLBNGo3mMKyQu3EpVfafG7t1MU9mglkRS6R2Ol9fpK/ykURBqxJ
0BHK6U2cvq+1xYCxFzAf9jGCZUkxvLmthn+mDd2RnhrktJmZrjcHMmb3EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeJ/SPmtLiYrYYjlglQ+fFnDgltMB8GA1UdIwQY
MBaAFKxfxsauo/Dk7ffMuS5usjd6dHmlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckZfR3hxNmo4T1R0OTh5NUxtNnlOM3AwZWFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wODI3ZTAtMzMzMS00MGI0LTk5YjIt
OWExMzcwOTJjZGQwLzEvckZfR3hxNmo4T1R0OTh5NUxtNnlOM3AwZWFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wODI3ZTAtMzMzMS00MGI0LTk5YjItOWExMzcwOTJjZGQw
LzEvckZfR3hxNmo4T1R0OTh5NUxtNnlOM3AwZWFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTnpj58s
ZkRUjJHEjvwLVfSRfr8eh38rBtrBqZqRis/VSnAPE7bH7z9kTstSLAF4AW0sZ9Uc
A8vvT+AaKxMsyS8hhR6p8jbcVFsic5YtbaqWWqnV3iocxJv8bZO0i8P4hAKMO9XX
5HJYIJzkqqT9JN9K8zqUBRkCxDiurPpAygEeo5JQj019/EdjoE9P8jvranaIG1zF
bNtoh7ii2X3OCbVXuHvvRKoYOnnV29JRTzQ2ypLl29OraRz0lrZIG2bgl7FWED7u
prL8G/uB8CWZk9Mhce4njredgkNKaS4e8P+3ExFc8Zz7YH0+qLSg+zgyHuW3VGIM
8BE/ttvgLs182w==
-----END CERTIFICATE-----