Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
File:                     csZGC0-x70a8dFf_DPRjvcTgP6k.mft (raw, json)
Hash identifier:          NJkVEENAtVoMJBZIVDMQMaObomceaFcr7u7dyYSAYYA=
Subject key identifier:   AC:9B:77:04:26:31:07:45:0E:E7:E4:B3:D0:D2:F8:84:68:74:93:5F
Authority key identifier: 72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
Certificate issuer:       /CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Certificate serial:       0196BF6F8F6B77D29A748C21F6E778286249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
Manifest number:          08A2
Signing time:             Sun 11 May 2025 13:01:21 +0000
Manifest this update:     Sun 11 May 2025 13:01:21 +0000
Manifest next update:     Mon 12 May 2025 13:01:21 +0000
Files and hashes:         1: 8FajeVqA6rp1U8VNJu9yQBP6r54.roa (hash: UxuQ4k50fW+4+o9lGY7FVNHYu3QDBc/d+VkzXgLQ8PU=)
                          2: HHgODZNYaWmnAzu5Y5NNc-vPrnI.roa (hash: 7yz6aWHri/zQdagup6M2sNC0XfiDvGTcFvrpM1dBPtk=)
                          3: LTAgEPcIg7XQBzK3Cj9I5PVLMk0.roa (hash: eGy7JgSFjwLiCaGzQfjzKTQz7d3s5HQiA3TVI/81xK0=)
                          4: csZGC0-x70a8dFf_DPRjvcTgP6k.crl (hash: H7/vhRvPqb+b2y7KVQlRwoF/NiVuwNpBiRmdWFwZje8=)
                          5: ho0kqJfEMlf2sbVibqdADBrNulw.roa (hash: 5FbaBKa2Ni/RgBsUj459P0dwR0J+n0l8NmhVw0Fcivw=)
                          6: knF6nEQYYWVpL3rBGNBc8_KXbEw.roa (hash: mTLWLsXkA+rHwy07iVSYRIKt6HL9jKzw2c+wO1sgCtg=)
                          7: spZ3gq52Rs1Brqgro5g4rfptHLc.roa (hash: JmluqSt/yaPZfKeNSsXMXym5ysVFHQT+kOW0mDU1DxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 13:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:6f:8f:6b:77:d2:9a:74:8c:21:f6:e7:78:28:62:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
        Validity
            Not Before: May 11 13:01:21 2025 GMT
            Not After : May 12 13:01:21 2025 GMT
        Subject: CN=ac9b7704263107450ee7e4b3d0d2f8846874935f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f9:b1:d8:20:be:52:af:34:e7:7c:32:bf:4e:
                    fd:84:7b:d2:32:bd:a3:95:61:ad:50:10:ea:d5:f9:
                    c9:b5:0a:d6:9e:78:29:92:78:4c:27:e7:13:c0:13:
                    28:14:25:83:58:49:d4:a1:92:d2:e8:bb:17:01:64:
                    c4:c8:82:d2:fc:b5:09:21:7e:8c:97:5f:fc:26:53:
                    34:c0:9c:cc:7a:f3:89:e7:ee:20:2e:4b:a3:b2:3d:
                    33:32:7e:ae:7f:88:c0:9f:ba:57:b9:20:26:4c:7e:
                    f0:ec:22:36:09:cc:61:c7:ea:27:62:51:aa:ac:f3:
                    56:71:05:4a:85:75:35:ed:df:ff:34:2b:fd:e2:8e:
                    0c:60:c1:a2:b9:89:55:bc:af:42:01:ed:6d:85:e7:
                    b8:76:ce:7b:dd:3b:93:84:09:75:ed:03:5e:ff:04:
                    45:13:59:1f:f1:b5:d6:68:c6:7d:c5:f8:9a:98:ba:
                    30:9e:90:db:bd:d3:b4:19:f5:ee:16:8c:b5:81:1b:
                    08:f6:bc:d4:6f:3d:1c:08:19:ff:da:51:67:15:89:
                    7c:7a:4e:9d:f7:8d:7d:24:da:a5:f6:b0:34:f9:b3:
                    08:5b:16:b2:ec:14:36:8b:7a:b8:e2:29:30:09:0b:
                    4e:fc:b4:b6:7e:fc:df:9c:a9:02:22:cc:6f:0a:d3:
                    06:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9B:77:04:26:31:07:45:0E:E7:E4:B3:D0:D2:F8:84:68:74:93:5F
            X509v3 Authority Key Identifier:
                keyid:72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:da:28:bf:7f:7b:5e:74:c7:e8:b8:c1:90:74:46:74:95:a9:
         ba:51:de:5c:6c:ec:da:c7:4a:1e:f8:be:61:fd:ab:2e:a3:1d:
         6d:7e:ec:4b:4e:74:e2:3e:90:62:82:b7:59:df:00:eb:ea:91:
         ac:a5:c2:00:a6:a4:b4:40:a3:e6:88:9f:e0:0d:5d:39:f6:22:
         7e:ad:ea:05:0a:27:5a:85:e2:46:9a:fc:55:11:9f:29:c4:cf:
         d9:51:46:ec:d1:4f:ab:18:a6:f5:be:00:1e:01:55:cf:12:24:
         06:15:c9:46:85:bb:d0:8c:32:59:d6:98:df:37:ee:9c:69:05:
         6f:0c:8d:76:01:ec:20:a5:2c:55:a3:68:3c:df:bb:69:db:af:
         0f:96:14:8e:4f:cb:c0:b2:d2:12:ad:c2:b1:bb:6d:32:39:1b:
         0b:72:be:10:3e:8b:3d:6b:06:bb:68:de:df:af:d8:67:b2:ad:
         d0:13:b6:37:a0:a8:64:05:63:c0:3c:98:24:09:7a:01:3e:ea:
         1c:c0:f5:f0:a5:0a:dd:04:c1:fd:b6:9c:98:ba:66:eb:e1:cd:
         08:02:f9:85:e4:25:a0:35:0d:ca:ab:f5:e5:b2:e6:1d:52:12:
         a5:67:16:eb:27:d8:f4:10:b7:52:cf:78:3d:55:bb:75:2b:1e:
         7e:4f:76:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:16:17 2025 by rpki-client