Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
File:                     g6BiUlKSop6X_moFW5vWCEp3GXc.mft (raw, json)
Hash identifier:          /7KMQXSFnVB2PEavcNTLD5R9Z3/cdLMC8vWT+TzuoJo=
Subject key identifier:   DD:F8:BA:D5:AE:A2:47:1D:51:B6:B6:F5:CF:EF:E0:1A:58:98:B8:7D
Authority key identifier: 83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
Certificate issuer:       /CN=83a062525292a29e97fe6a055b9bd6084a771977
Certificate serial:       018F885B16D74F88519AF8714F2DDDAB0627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 21:00:21 +0000
Manifest this update:     Fri 17 May 2024 21:00:21 +0000
Manifest next update:     Sat 18 May 2024 21:00:21 +0000
Files and hashes:         1: L0KUj4cBxC3PKOTmln6UuqN89HA.roa (hash: lTKS9fFPqgXGZzT+f+MvEsI01snPYymEf3BtGC8nB5c=)
                          2: g6BiUlKSop6X_moFW5vWCEp3GXc.crl (hash: rbN8LVNE2TFDRXzJUbZ0sdqG+59+imKRsX/WKFS815I=)
                          3: jwr-AMkOm7z8Fmj6bZ_bQXXfck4.roa (hash: 6sQ+YZNAHVEwy/rsvEFPLWQVmEagP0UpRSVqnq295dw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:16:d7:4f:88:51:9a:f8:71:4f:2d:dd:ab:06:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83a062525292a29e97fe6a055b9bd6084a771977
        Validity
            Not Before: May 17 21:00:21 2024 GMT
            Not After : May 18 21:00:21 2024 GMT
        Subject: CN=ddf8bad5aea2471d51b6b6f5cfefe01a5898b87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0d:92:9a:78:40:bb:53:00:5e:a5:89:86:15:
                    91:e6:cd:5f:34:25:e3:53:5f:e9:fe:fb:10:88:a9:
                    72:da:34:6e:ab:63:8a:03:13:11:ce:6a:d1:4e:42:
                    2a:cd:26:ae:86:53:6b:1e:4b:e5:fa:bb:02:e1:db:
                    dd:c0:d2:31:10:a7:dc:a2:10:c8:6a:ee:56:fc:65:
                    65:71:62:63:1d:79:ed:93:34:29:62:60:8a:1a:c5:
                    4a:c4:9f:b6:88:d1:25:84:c4:43:19:b7:b7:cf:49:
                    fb:17:f4:2b:1c:84:87:6a:fc:66:49:2b:ae:42:e7:
                    25:43:53:92:60:eb:a4:f1:e9:15:16:22:bd:c6:5d:
                    c5:dc:7c:b1:a5:04:25:be:20:e9:1b:ab:ad:76:19:
                    10:5f:93:c1:f1:63:94:c2:89:55:af:77:4c:d6:b7:
                    b7:ff:96:97:a9:07:fd:96:b7:3d:c9:9e:96:f3:14:
                    3e:f0:a9:3e:76:ec:ae:50:f2:93:81:ce:bd:6c:dc:
                    de:9c:ad:14:3d:54:a2:91:8c:29:49:65:c3:e4:75:
                    70:a4:94:ed:67:6e:5d:95:5e:44:64:c9:3c:80:d7:
                    ee:bb:ed:14:21:4f:09:13:12:83:ce:34:b0:7c:89:
                    31:bf:e1:ef:45:bd:4d:5e:13:4f:d9:31:72:93:01:
                    5f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F8:BA:D5:AE:A2:47:1D:51:B6:B6:F5:CF:EF:E0:1A:58:98:B8:7D
            X509v3 Authority Key Identifier:
                keyid:83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:3c:56:d8:0e:36:d5:9d:05:38:a7:fe:fc:be:83:a5:f7:2b:
         4a:17:09:10:3c:16:d8:2a:2d:67:97:58:b7:e0:9f:33:c9:07:
         83:4d:de:71:30:d5:c7:e1:1a:81:52:b0:09:04:41:a7:2a:35:
         aa:bb:cb:18:59:97:ea:b2:5f:67:c4:97:9d:8a:b4:35:cc:da:
         a8:13:82:f8:02:c0:b5:22:41:a2:b2:16:23:83:f8:18:91:74:
         10:e5:e6:f9:3b:71:fe:7c:e3:e1:0e:5e:6c:73:90:8c:a0:af:
         a6:1c:ae:32:5e:a8:d8:c9:e0:f7:ef:cf:57:21:20:27:12:31:
         34:c2:fa:6e:d0:a0:b8:ac:65:7d:69:07:e3:25:4b:91:fb:f7:
         6b:3e:cd:ad:d6:bb:10:bc:df:d3:dd:e3:60:4e:93:fe:55:1f:
         5d:c0:a3:df:84:b1:a9:42:bd:a1:df:11:1d:6c:15:f4:3e:44:
         a7:69:c8:48:1b:12:70:7f:64:8c:28:8a:b0:42:9a:52:04:4b:
         5e:fa:e0:15:1f:9a:77:c3:73:87:fb:37:ce:a1:08:97:5f:0b:
         82:af:31:d3:d5:5f:a7:49:f7:f5:72:3d:da:67:e8:f0:68:cc:
         0b:63:20:89:28:2d:09:71:ce:f3:45:28:60:39:19:12:63:19:
         9f:3a:7f:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IWxbXT4hRmvhxTy3dqwYnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYTA2MjUyNTI5MmEyOWU5N2ZlNmEwNTViOWJkNjA4NGE3
NzE5NzcwHhcNMjQwNTE3MjEwMDIxWhcNMjQwNTE4MjEwMDIxWjAzMTEwLwYDVQQD
EyhkZGY4YmFkNWFlYTI0NzFkNTFiNmI2ZjVjZmVmZTAxYTU4OThiODdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ2SmnhAu1MAXqWJhhWR5s1fNCXj
U1/p/vsQiKly2jRuq2OKAxMRzmrRTkIqzSauhlNrHkvl+rsC4dvdwNIxEKfcohDI
au5W/GVlcWJjHXntkzQpYmCKGsVKxJ+2iNElhMRDGbe3z0n7F/QrHISHavxmSSuu
QuclQ1OSYOuk8ekVFiK9xl3F3HyxpQQlviDpG6utdhkQX5PB8WOUwolVr3dM1re3
/5aXqQf9lrc9yZ6W8xQ+8Kk+duyuUPKTgc69bNzenK0UPVSikYwpSWXD5HVwpJTt
Z25dlV5EZMk8gNfuu+0UIU8JExKDzjSwfIkxv+HvRb1NXhNP2TFykwFfuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN34utWuokcdUba29c/v4BpYmLh9MB8GA1UdIwQY
MBaAFIOgYlJSkqKel/5qBVub1ghKdxl3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NThhMmMtY2VmMC00YmNjLTk5YzIt
MzIxYzlkNjZjODQ3LzEvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NThhMmMtY2VmMC00YmNjLTk5YzItMzIxYzlkNjZjODQ3
LzEvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjxW2A42
1Z0FOKf+/L6DpfcrShcJEDwW2CotZ5dYt+CfM8kHg03ecTDVx+EagVKwCQRBpyo1
qrvLGFmX6rJfZ8SXnYq0NczaqBOC+ALAtSJBorIWI4P4GJF0EOXm+Ttx/nzj4Q5e
bHOQjKCvphyuMl6o2Mng9+/PVyEgJxIxNML6btCguKxlfWkH4yVLkfv3az7Nrda7
ELzf093jYE6T/lUfXcCj34SxqUK9od8RHWwV9D5Ep2nISBsScH9kjCiKsEKaUgRL
XvrgFR+ad8Nzh/s3zqEIl18Lgq8x09Vfp0n39XI92mfo8GjMC2MgiSgtCXHO80Uo
YDkZEmMZnzp/BA==
-----END CERTIFICATE-----