Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
File:                     CzHLUw_lL8wCnmSX53ggA5jCnzw.mft (raw, json)
Hash identifier:          SqU24j3qaov5VFXlxDJIghKRKcxekF1Gk/0HJ7IO5qw=
Subject key identifier:   1D:26:F4:92:DA:EA:FC:20:2F:7F:BD:46:DA:2A:39:3A:A5:CD:97:4C
Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
Certificate issuer:       /CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Certificate serial:       0196C2A719E823810CFFDEE7F96CFB35B3CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
Manifest number:          1536
Signing time:             Mon 12 May 2025 04:00:53 +0000
Manifest this update:     Mon 12 May 2025 04:00:53 +0000
Manifest next update:     Tue 13 May 2025 04:00:53 +0000
Files and hashes:         1: CzHLUw_lL8wCnmSX53ggA5jCnzw.crl (hash: MzVZ8fD6yBEpbFJhh60zBr/RB/ZoPQwcSV2BE2lIDNE=)
                          2: lhGz6B59KeMcscLlwP8SPnbuK40.roa (hash: XdPOOZD1AAjAW5oJyg1981KU15FOvGUGVn6k+W8CmHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:a7:19:e8:23:81:0c:ff:de:e7:f9:6c:fb:35:b3:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c
        Validity
            Not Before: May 12 04:00:53 2025 GMT
            Not After : May 13 04:00:53 2025 GMT
        Subject: CN=1d26f492daeafc202f7fbd46da2a393aa5cd974c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:fc:32:81:3e:4d:d7:c3:7e:3e:8c:88:44:75:
                    3e:82:02:bc:22:f6:c6:3f:fb:e8:e7:9e:88:1e:25:
                    91:be:81:1e:cf:41:0d:1b:a8:1f:3b:e1:ec:78:aa:
                    0f:b8:ad:88:6d:8f:5d:4c:34:4d:9f:e0:52:7c:02:
                    d1:e3:0e:2b:9f:83:00:0c:26:8c:94:64:99:c2:fc:
                    b6:28:bb:ab:2c:6d:dd:d5:ac:79:fd:2e:f2:d2:df:
                    25:b3:af:4e:46:2d:eb:07:aa:c5:ac:c8:21:18:80:
                    c4:97:66:17:36:98:fe:b5:3d:a7:f2:0f:61:17:81:
                    b4:cc:b9:d2:d6:3a:a9:b2:6f:2a:49:d8:91:c1:4a:
                    b6:9c:55:f8:bd:d2:c6:e1:9e:b8:ad:a4:94:60:6f:
                    ba:fd:1a:b6:c3:04:67:c3:e2:66:dd:d1:72:ef:41:
                    6c:8e:89:95:d1:d4:81:bc:0b:27:65:4c:b7:58:d8:
                    5a:7b:06:e6:ab:d3:8b:62:89:ef:e7:ce:e6:3f:5c:
                    44:74:05:29:5a:cb:56:7e:34:fe:22:f7:d9:f1:5e:
                    ff:7b:10:a0:8c:7a:b2:3e:f7:ce:33:05:28:bc:d3:
                    31:e7:11:9d:3f:3e:89:84:f6:9e:75:59:50:20:5d:
                    0c:0b:e1:4c:53:45:de:f4:ff:e0:fa:38:d3:21:eb:
                    3d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:26:F4:92:DA:EA:FC:20:2F:7F:BD:46:DA:2A:39:3A:A5:CD:97:4C
            X509v3 Authority Key Identifier:
                keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:30:9e:c5:69:1c:98:45:cf:26:bf:62:f0:a4:f2:76:7f:c9:
         63:47:8a:d0:41:d9:9b:79:55:b4:f1:e7:c1:89:52:96:de:33:
         f0:0a:ed:c8:69:3b:a5:ec:2b:83:78:a8:7e:45:ad:97:29:c6:
         83:00:1c:16:30:d6:b9:f1:0d:5a:9a:c0:98:0d:61:71:ce:42:
         32:44:c1:0b:6e:2f:fe:10:31:6e:2d:54:e7:6e:30:2c:d8:a3:
         75:1d:73:84:a6:f0:8f:59:43:5e:dd:00:02:e0:d5:5a:b3:ee:
         1b:51:3d:c5:8b:39:66:b4:71:83:e5:6d:87:b4:df:c8:6a:45:
         9f:f3:15:ed:96:9b:bc:7d:74:07:c7:09:36:41:15:05:9d:b9:
         bd:a3:bf:5d:e5:cf:72:30:ac:a9:13:81:aa:1f:fe:73:a4:06:
         0e:fd:5e:fa:e1:7c:d9:1c:16:5f:f3:8b:f6:d9:42:60:9b:c1:
         28:1f:6c:af:16:ff:e5:c2:8e:71:55:ed:53:38:b0:9f:fb:08:
         3b:f6:2f:c0:82:39:b6:21:48:28:59:54:8b:44:d9:2b:45:6d:
         6a:6f:3f:82:3f:45:4e:35:45:fb:86:ab:40:c7:a3:0d:2f:b4:
         9d:39:26:7e:13:22:ff:55:7f:f1:1e:65:17:c4:7a:2e:1d:4a:
         1d:a9:ca:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:26:56 2025 by rpki-client