Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
File:                     B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft (raw, json)
Hash identifier:          VVYmN1hxNTzhEVJ+19SG6S69P73Q0xRBHE7E3anqp/8=
Subject key identifier:   1E:B5:77:6F:99:92:AB:A4:99:98:57:EE:1F:77:3C:4D:BD:E3:33:F5
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Certificate issuer:       /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial:       019365FC4E79C96DFA19C38B2E92A98AC3FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
Manifest number:          0FE4
Signing time:             Tue 26 Nov 2024 01:00:54 +0000
Manifest this update:     Tue 26 Nov 2024 01:00:54 +0000
Manifest next update:     Wed 27 Nov 2024 01:00:54 +0000
Files and hashes:         1: 6fe_dmR6VcmPUpH5cGSiK3fjl94.roa (hash: 5KJd/GixF1WPAg4E0eHjOe+fQdj/Fobh9PyGMEyD/i8=)
                          2: B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl (hash: rQ1Dvw5a3FCE4jISIWOYAlR2ZQOi5JNXEPy8W0b+66M=)
                          3: UNQhYKB6eLRkxNeK45fHs0pL1hY.roa (hash: hl9kHMGpGNfVdcwXuiVi+wZ+WvNRBBSzTvhomiCekdo=)
                          4: klTual-f2O2NXlq2Q1Ra1SiI_GE.roa (hash: KIyqU6IduxjRIbvWRbQvBa+qXKovcl/yfqIFECsUysc=)
                          5: rTzB5jN_ar47vGDucA-YZ0VEH6w.roa (hash: qOAB/fmfUl/KZ0T4/UatQzR23sMEbMPUxeQW4h5cmx8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fc:4e:79:c9:6d:fa:19:c3:8b:2e:92:a9:8a:c3:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
        Validity
            Not Before: Nov 26 01:00:54 2024 GMT
            Not After : Nov 27 01:00:54 2024 GMT
        Subject: CN=1eb5776f9992aba4999857ee1f773c4dbde333f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:bf:dd:7b:1f:42:85:e4:26:cb:74:ea:dc:
                    86:2e:eb:47:8d:c8:4b:c3:48:43:0a:eb:e2:ad:48:
                    a8:3d:b4:49:5e:e8:8d:73:22:d2:4b:06:33:a4:56:
                    3a:7d:d1:97:49:fa:ca:76:71:ad:a0:b3:85:50:cc:
                    e5:da:52:24:b9:90:65:04:fa:49:d0:c6:58:88:6d:
                    c4:b0:d8:2d:f7:7f:5b:bd:89:58:39:15:d2:5f:a4:
                    16:d9:ed:38:f5:f0:8c:8a:1d:96:59:82:ee:6d:5f:
                    f4:5b:09:7b:b0:9d:2b:42:14:f3:f6:c9:b8:dc:6e:
                    31:a6:38:8e:47:d7:39:09:f7:93:d3:ad:08:28:9c:
                    01:16:e9:bd:08:fa:50:70:d5:a4:c5:69:0d:94:41:
                    74:73:09:78:88:eb:d0:72:12:bf:16:d5:15:ca:c2:
                    72:dd:24:62:e1:59:68:16:bc:3f:49:74:07:73:30:
                    2c:4e:08:45:6b:70:ab:e9:a5:5e:74:4e:72:05:1b:
                    74:a7:c7:7e:2a:c7:d2:6c:25:c6:b2:5a:f6:50:0a:
                    fd:03:9a:87:93:ad:5b:18:b0:6c:b7:3b:6c:da:48:
                    a0:ec:a1:4b:59:e9:77:2f:ef:cd:c6:84:b7:b6:62:
                    1e:83:13:f6:58:7a:26:23:c8:ce:1f:42:ba:00:46:
                    d7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B5:77:6F:99:92:AB:A4:99:98:57:EE:1F:77:3C:4D:BD:E3:33:F5
            X509v3 Authority Key Identifier:
                keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:31:2d:32:08:3c:a9:df:e7:bb:3b:09:4c:8c:8d:62:63:47:
         72:58:e3:b3:e3:47:c9:e8:c0:c5:08:a4:1c:2a:38:e6:f1:9a:
         db:eb:09:e3:6e:69:3a:e2:71:4e:67:67:01:dc:b9:5a:d4:67:
         71:ca:1b:45:07:3b:04:77:2e:c8:e7:42:79:f8:09:63:f0:3c:
         29:41:e0:47:d3:72:15:73:80:47:89:ae:91:2c:43:c1:62:e5:
         98:95:bb:b4:55:4a:d3:2c:0a:6c:90:53:9a:b6:ae:45:45:93:
         42:ad:a8:21:e2:5d:b5:13:99:f0:74:23:39:c0:d4:b8:fe:b0:
         01:e5:4b:a2:53:bc:e9:12:8e:3b:44:6f:92:c8:68:9d:6a:80:
         79:1a:b9:8d:43:3c:b9:04:de:ef:41:16:83:36:0e:d7:b0:66:
         6f:68:08:bb:7e:9a:7b:28:11:ec:7e:2d:d1:a0:ab:51:81:a0:
         60:e1:ea:92:79:cd:aa:b6:d1:fd:37:f8:0d:11:6c:6f:a5:6a:
         6e:5e:c5:2c:87:e8:fa:6b:33:2e:46:d5:47:4e:8e:0e:4d:2f:
         c2:87:bc:51:53:fb:63:24:5c:fb:10:7b:2f:70:61:c3:82:af:
         a5:38:ab:b6:23:c0:ac:42:cc:79:e0:4f:8f:2c:7c:b8:4b:41:
         03:2a:53:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNl/E55yW36GcOLLpKpisP+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3OWQ5MDUzNzE3YTE2YTc2YzEwYWU4MzhmNTYyNTA1NWJl
MDQ4MWYwHhcNMjQxMTI2MDEwMDU0WhcNMjQxMTI3MDEwMDU0WjAzMTEwLwYDVQQD
EygxZWI1Nzc2Zjk5OTJhYmE0OTk5ODU3ZWUxZjc3M2M0ZGJkZTMzM2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszW/3XsfQoXkJst06tyGLutHjchL
w0hDCuvirUioPbRJXuiNcyLSSwYzpFY6fdGXSfrKdnGtoLOFUMzl2lIkuZBlBPpJ
0MZYiG3EsNgt939bvYlYORXSX6QW2e049fCMih2WWYLubV/0Wwl7sJ0rQhTz9sm4
3G4xpjiOR9c5CfeT060IKJwBFum9CPpQcNWkxWkNlEF0cwl4iOvQchK/FtUVysJy
3SRi4VloFrw/SXQHczAsTghFa3Cr6aVedE5yBRt0p8d+KsfSbCXGslr2UAr9A5qH
k61bGLBstzts2kig7KFLWel3L+/NxoS3tmIegxP2WHomI8jOH0K6AEbXLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB61d2+ZkqukmZhX7h93PE294zP1MB8GA1UdIwQY
MBaAFAedkFNxehanbBCug49WJQVb4EgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjUyUVUzRjZGcWRzRUs2RGoxWWxCVnZnU0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OGQxNmEtODJlNS00ZjRhLTg3MzAt
MjdkMDNlMzkzZmI3LzEvQjUyUVUzRjZGcWRzRUs2RGoxWWxCVnZnU0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82OGQxNmEtODJlNS00ZjRhLTg3MzAtMjdkMDNlMzkzZmI3
LzEvQjUyUVUzRjZGcWRzRUs2RGoxWWxCVnZnU0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjEtMgg8
qd/nuzsJTIyNYmNHcljjs+NHyejAxQikHCo45vGa2+sJ425pOuJxTmdnAdy5WtRn
ccobRQc7BHcuyOdCefgJY/A8KUHgR9NyFXOAR4mukSxDwWLlmJW7tFVK0ywKbJBT
mrauRUWTQq2oIeJdtROZ8HQjOcDUuP6wAeVLolO86RKOO0RvkshonWqAeRq5jUM8
uQTe70EWgzYO17Bmb2gIu36aeygR7H4t0aCrUYGgYOHqknnNqrbR/Tf4DRFsb6Vq
bl7FLIfo+mszLkbVR06ODk0vwoe8UVP7YyRc+xB7L3Bhw4KvpTirtiPArELMeeBP
jyx8uEtBAypTRQ==
-----END CERTIFICATE-----