Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
File:                     CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft (raw, json)
Hash identifier:          k//mvyUkdwZt2em20CZAsm7t7AwKooCwUHa5BB25Rd0=
Subject key identifier:   AC:11:B4:EB:67:AC:2E:44:6B:88:B5:F8:CD:1B:5D:77:62:DA:2E:EF
Authority key identifier: 0B:35:AC:BF:30:55:96:68:EA:18:EA:3F:10:B2:97:EE:64:C8:E4:93
Certificate issuer:       /CN=0b35acbf30559668ea18ea3f10b297ee64c8e493
Certificate serial:       01987D8A76C7842C1421A67B1A0336448474
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
Manifest number:          161C
Signing time:             Wed 06 Aug 2025 04:01:23 +0000
Manifest this update:     Wed 06 Aug 2025 04:01:23 +0000
Manifest next update:     Thu 07 Aug 2025 04:01:23 +0000
Files and hashes:         1: CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl (hash: weorEfd/pht/Pa6EABGHnko+Vwc/GwZUd2P7gBXz8uc=)
                          2: ZM-gSRhoMrGYnOYCigGO3KlUdxE.roa (hash: HD/5KvR+lV05wvXD394776vmYH6dBYVti0mPyMnQTNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:76:c7:84:2c:14:21:a6:7b:1a:03:36:44:84:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b35acbf30559668ea18ea3f10b297ee64c8e493
        Validity
            Not Before: Aug  6 04:01:23 2025 GMT
            Not After : Aug  7 04:01:23 2025 GMT
        Subject: CN=ac11b4eb67ac2e446b88b5f8cd1b5d7762da2eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:59:7c:86:19:9a:4f:fc:0b:d3:88:98:6b:a3:
                    93:62:db:e9:e2:9a:b9:91:da:dc:7d:eb:d9:03:74:
                    57:d8:e7:48:ac:4a:b9:98:2a:58:f3:37:7f:15:6d:
                    4d:60:79:d1:59:b4:81:73:aa:0f:28:0b:d3:ac:f6:
                    d9:98:3f:b3:05:64:01:73:0f:c7:d4:67:00:74:d0:
                    90:fa:36:6e:74:f6:66:fe:44:f1:ad:6b:f2:a3:7e:
                    61:57:89:13:13:98:a3:de:02:c2:79:57:09:5c:54:
                    66:e2:23:a5:cf:5e:e2:bb:e2:2b:b8:a7:44:fa:8f:
                    32:4f:8a:1a:4e:91:e2:b3:2d:b4:4d:35:f9:a1:c8:
                    53:64:e7:f6:ee:d2:28:12:19:e1:81:a3:4f:cb:01:
                    45:1b:68:91:97:bb:be:57:85:4a:b0:8c:a1:78:a5:
                    ed:d8:08:d8:cc:eb:9e:7c:4f:63:f1:0c:8c:0f:04:
                    7c:93:6b:d9:ce:b7:e9:f5:96:14:15:c7:a1:ab:53:
                    0e:e3:3f:3f:e3:c4:ff:d7:d0:86:f1:1a:e1:89:46:
                    15:e1:93:27:da:cb:79:bc:7e:93:07:0e:8f:6a:4e:
                    ec:f0:5a:c6:64:e4:25:16:29:ac:77:f5:36:e4:eb:
                    c5:92:4c:78:00:d5:e5:50:6b:e2:ce:8d:d4:39:d1:
                    27:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:11:B4:EB:67:AC:2E:44:6B:88:B5:F8:CD:1B:5D:77:62:DA:2E:EF
            X509v3 Authority Key Identifier:
                keyid:0B:35:AC:BF:30:55:96:68:EA:18:EA:3F:10:B2:97:EE:64:C8:E4:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:0d:12:9c:80:c7:4f:2a:65:48:c5:b8:58:ba:e5:ad:b9:9e:
         9e:22:ee:50:5c:33:90:62:6e:82:47:8a:43:e3:f9:8d:2b:38:
         d5:fc:bc:be:99:c1:01:ae:6f:ef:fd:35:b9:11:04:b5:49:d6:
         eb:f4:ad:51:c7:f2:1d:ff:f3:ed:c3:16:37:34:be:27:aa:27:
         f2:5f:bd:3e:bf:e0:04:a1:c2:ea:73:1a:14:dd:47:8a:7d:9e:
         cd:85:54:9c:0b:ad:b2:52:8f:2a:49:1b:2e:77:4a:92:21:37:
         c4:2f:d9:d5:1a:98:9b:1a:c6:58:34:de:07:c2:a9:f5:fd:0d:
         a7:e9:23:91:53:8e:57:8b:0e:fa:f5:4f:e2:c6:98:ac:12:df:
         92:1e:11:cb:99:21:d7:b3:5e:77:21:24:b2:be:b2:ee:9c:42:
         60:70:75:9e:be:09:bf:2b:3f:8d:c5:ec:96:82:15:a1:b2:76:
         14:47:e0:d1:04:8f:0b:55:98:08:23:28:9c:ae:19:ed:db:a4:
         78:45:04:97:b2:0c:db:8a:e3:75:f0:12:e5:0c:ca:f2:db:83:
         1f:b7:ed:b8:ee:3f:3f:94:d5:6a:27:7f:c9:90:9c:cc:dc:34:
         99:37:aa:6f:85:9f:33:f5:ec:5d:03:ea:08:95:ef:e0:1b:8f:
         04:ea:e9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 08:01:13 2025 by rpki-client