Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
File:                     csZGC0-x70a8dFf_DPRjvcTgP6k.mft (raw, json)
Hash identifier:          BMz4ggmZeik69PMAXlQRjK/qT5xLmQrpeFln0BlDK0s=
Subject key identifier:   98:16:91:8B:3C:1C:96:C9:4D:AE:B3:C7:89:42:F7:04:45:43:5F:2A
Authority key identifier: 72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
Certificate issuer:       /CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Certificate serial:       0196741E24A2B9A2573C6A3BD723406F5A08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
Manifest number:          087B
Signing time:             Sat 26 Apr 2025 22:00:54 +0000
Manifest this update:     Sat 26 Apr 2025 22:00:54 +0000
Manifest next update:     Sun 27 Apr 2025 22:00:54 +0000
Files and hashes:         1: 8FajeVqA6rp1U8VNJu9yQBP6r54.roa (hash: UxuQ4k50fW+4+o9lGY7FVNHYu3QDBc/d+VkzXgLQ8PU=)
                          2: HHgODZNYaWmnAzu5Y5NNc-vPrnI.roa (hash: 7yz6aWHri/zQdagup6M2sNC0XfiDvGTcFvrpM1dBPtk=)
                          3: LTAgEPcIg7XQBzK3Cj9I5PVLMk0.roa (hash: eGy7JgSFjwLiCaGzQfjzKTQz7d3s5HQiA3TVI/81xK0=)
                          4: csZGC0-x70a8dFf_DPRjvcTgP6k.crl (hash: fZ0cUKDTYjH0t5zono5iBz46/N2Wtu4MsvlHytu9uug=)
                          5: ho0kqJfEMlf2sbVibqdADBrNulw.roa (hash: 5FbaBKa2Ni/RgBsUj459P0dwR0J+n0l8NmhVw0Fcivw=)
                          6: knF6nEQYYWVpL3rBGNBc8_KXbEw.roa (hash: mTLWLsXkA+rHwy07iVSYRIKt6HL9jKzw2c+wO1sgCtg=)
                          7: spZ3gq52Rs1Brqgro5g4rfptHLc.roa (hash: JmluqSt/yaPZfKeNSsXMXym5ysVFHQT+kOW0mDU1DxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 22:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:1e:24:a2:b9:a2:57:3c:6a:3b:d7:23:40:6f:5a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
        Validity
            Not Before: Apr 26 22:00:54 2025 GMT
            Not After : Apr 27 22:00:54 2025 GMT
        Subject: CN=9816918b3c1c96c94daeb3c78942f70445435f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:17:47:46:39:7b:59:3e:cb:a8:08:59:e3:2d:
                    b9:49:a5:06:ba:60:ee:42:3a:52:78:eb:c1:83:01:
                    e0:ae:cd:0f:3f:f2:b9:4b:a4:8c:08:4a:2e:33:b8:
                    b4:13:22:f1:73:a0:be:d4:7b:1e:54:ce:c9:01:0b:
                    09:3b:f9:82:5d:28:09:66:ef:56:9d:ea:91:06:ce:
                    89:c0:62:ae:e2:01:0f:ce:ab:f3:b0:6c:ee:f3:05:
                    ab:18:87:d0:9a:b3:b0:e4:43:8d:1d:53:16:33:81:
                    a8:c8:48:a6:e1:ff:a3:df:41:56:75:03:40:90:9a:
                    9d:5e:13:ee:99:6b:3d:97:8c:84:1f:ba:37:0b:34:
                    88:a3:12:5d:f5:f1:94:23:62:57:4f:43:89:eb:41:
                    65:c6:4b:8d:4a:66:f1:68:15:a4:fd:83:31:e6:cf:
                    6b:19:b3:2b:6d:f4:f3:b5:f7:12:86:41:97:2e:78:
                    27:bb:95:3f:ff:a4:87:49:c9:eb:8c:96:b4:fd:6e:
                    e7:ed:5d:3c:b6:04:40:44:ad:57:b4:43:02:64:e6:
                    ed:6c:62:bf:17:b2:b0:7d:19:95:e8:34:ab:80:40:
                    85:cd:37:6e:5a:fb:6a:10:a4:dd:3c:48:a1:40:98:
                    a2:5e:6b:da:4c:2c:36:1a:cd:5b:83:50:02:bf:c6:
                    f3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:16:91:8B:3C:1C:96:C9:4D:AE:B3:C7:89:42:F7:04:45:43:5F:2A
            X509v3 Authority Key Identifier:
                keyid:72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:41:1c:63:b9:a4:1b:f2:3a:2d:fc:d2:80:a6:32:17:5b:25:
         76:91:f8:85:40:ed:4a:d9:89:2d:29:47:04:49:0f:36:49:91:
         3a:ad:5e:20:e9:79:19:8c:a3:a5:79:36:5b:65:0d:5c:0f:99:
         cc:4f:17:31:96:d5:7a:df:7b:e5:4d:aa:77:f9:dd:23:9c:b1:
         06:b6:a0:7f:77:d0:8b:7f:30:65:c6:cb:27:b2:40:57:3b:98:
         bd:d3:98:02:4a:7a:c2:5c:fb:e5:56:49:39:46:2c:d3:fd:20:
         32:35:88:9e:f9:3d:d9:d3:dd:de:b4:9e:13:67:1d:00:fa:19:
         1d:9d:da:46:18:93:56:82:e7:ec:cd:4f:58:7a:b1:41:b2:06:
         50:3f:76:c7:0e:3c:e0:f7:5d:11:3c:c2:e9:2d:04:b5:2b:f7:
         d4:2c:8e:6b:92:9b:84:d5:41:1f:7c:5d:a9:3d:0f:58:93:c6:
         0b:4f:13:0f:be:ec:cf:e5:ab:e1:76:66:f3:aa:96:ba:9d:0a:
         07:8a:67:b9:99:e3:7b:79:c8:11:74:c8:85:32:a8:27:74:51:
         84:ae:ab:75:dc:06:21:7d:b8:a7:c6:5d:1a:f6:90:70:ec:b9:
         a3:f4:a7:b6:07:2f:40:48:1a:5e:31:e5:af:88:58:00:3d:38:
         1c:8c:ce:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:14:21 2025 by rpki-client