Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
File:                     cpsz3mBR0E119rsfflOx79ZkYhE.mft (raw, json)
Hash identifier:          qDkfzVSrdPWyEIHkM4tuqYtbfDl16es4l3Zqrf9lR4Y=
Subject key identifier:   9C:89:A6:63:4A:43:C9:62:81:5C:61:B6:35:1D:46:7B:3D:22:9A:4B
Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
Certificate issuer:       /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Certificate serial:       019880543FFACD3C4A4060570930D6D41DB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
Manifest number:          161E
Signing time:             Wed 06 Aug 2025 17:01:01 +0000
Manifest this update:     Wed 06 Aug 2025 17:01:01 +0000
Manifest next update:     Thu 07 Aug 2025 17:01:01 +0000
Files and hashes:         1: RZxjFWlo2i2aJOHKRic4Fv-bX9o.roa (hash: gz7c2rZX9EEeMlQK8oZvhSguZMORv69xoCYnqP22C6w=)
                          2: cpsz3mBR0E119rsfflOx79ZkYhE.crl (hash: dRWyU7bmzKOQ8oqfY73xxHmhZwOK3QqQ7GKd02WbHeE=)
                          3: ecPozDTBiwtPhHsED0tZv93AzPY.roa (hash: VAqfrUatc4XqZvYROBfJJkH7/EgI7JEtqS/gigZEo5A=)
                          4: yMHEf0ETrnhPf3W6Sut08KAaQSE.roa (hash: hF6DDwZ+vuWyFWfGnEdqPAmnVJOOl0M0tPKA+XL7Y0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:54:3f:fa:cd:3c:4a:40:60:57:09:30:d6:d4:1d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
        Validity
            Not Before: Aug  6 17:01:01 2025 GMT
            Not After : Aug  7 17:01:01 2025 GMT
        Subject: CN=9c89a6634a43c962815c61b6351d467b3d229a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dc:bc:ba:c3:c9:0f:c2:0a:b1:90:ef:4c:c3:
                    e0:61:ef:d3:00:82:9c:ef:fa:31:9b:bd:6b:b7:22:
                    43:35:34:a9:85:5b:3e:13:c1:35:cc:a3:33:7f:43:
                    0e:90:00:d7:0a:3d:73:ac:f7:bc:29:43:54:d7:01:
                    6c:7c:73:4d:98:5b:f8:f3:0c:61:62:dd:f5:e8:93:
                    ce:8c:6a:d3:93:f2:84:a3:a5:c6:c0:19:5b:dd:7d:
                    4e:0c:d5:12:35:b0:ce:6b:0a:bf:98:4c:ea:74:55:
                    a4:0e:a5:c1:5b:f5:94:ab:5d:fd:db:46:34:ad:76:
                    81:68:a1:61:64:1b:11:12:47:3f:2e:58:63:3f:21:
                    ad:ec:43:42:2e:c3:82:e2:92:33:09:a4:4c:6e:21:
                    63:6f:f7:90:60:d8:34:37:69:90:53:16:90:89:c0:
                    31:22:5f:ec:f2:2c:4d:ee:55:e1:71:7b:77:67:7e:
                    f6:2a:59:1a:53:b5:ba:5b:ad:17:5b:97:51:1a:a2:
                    69:a8:78:ad:ad:6d:15:d5:a3:85:48:c2:f4:6e:c7:
                    82:f5:71:6d:d0:88:20:70:12:51:5a:87:87:89:a0:
                    10:8b:60:79:9e:73:60:f4:a5:f4:e0:6a:f6:7b:76:
                    de:4f:8b:8f:15:5f:b4:1a:71:2d:0d:7d:de:a5:10:
                    f8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:89:A6:63:4A:43:C9:62:81:5C:61:B6:35:1D:46:7B:3D:22:9A:4B
            X509v3 Authority Key Identifier:
                keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d0:ac:27:2b:3a:ce:97:fb:da:b6:b0:55:35:7b:de:13:40:
         e9:e4:07:1a:e1:c4:04:28:e8:4d:f3:34:24:56:af:5e:d8:92:
         f3:e7:e4:38:2a:32:37:82:ec:06:9b:ae:40:c8:f8:94:50:37:
         8a:3e:74:1b:a0:8f:00:9e:3a:82:a8:b8:c6:71:22:9f:e3:a5:
         4a:4a:0d:83:1b:17:73:92:77:f5:93:8d:5e:7a:a7:8c:75:bd:
         99:96:ec:6d:4d:f0:e8:f9:e7:f0:00:aa:2a:46:3c:7c:73:b7:
         9c:cd:72:a7:2d:41:b6:66:e9:31:d2:e4:64:b0:70:b1:8b:d5:
         32:62:08:e4:12:2f:44:c2:dd:99:0b:73:1b:74:55:4d:90:27:
         16:cd:20:84:17:1d:20:8a:35:46:13:2f:c4:f2:26:76:87:28:
         52:3d:b3:94:b7:2a:ea:79:0b:39:07:4a:5d:9d:e8:72:72:27:
         f9:d2:0b:c5:ce:43:56:c4:12:a9:1a:0a:fa:19:5a:ab:8b:65:
         ca:71:d5:b0:ec:67:c5:26:a3:f3:f8:08:34:cb:a4:37:ad:13:
         a0:ec:69:cb:a7:bf:ac:52:88:82:c8:8f:da:79:5d:f1:72:c7:
         6c:a5:93:d5:af:93:18:2b:3c:59:3b:81:b0:b3:54:a7:d6:0a:
         19:86:d0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:01:36 2025 by rpki-client