Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
File:                     csZGC0-x70a8dFf_DPRjvcTgP6k.mft (raw, json)
Hash identifier:          2NzXl3Dq8NAX5Hi/YNvMfsx1ewiRm75l6OLLpFX0Tl0=
Subject key identifier:   5C:6F:B3:FF:FB:9C:0B:C1:71:F2:B5:8E:76:17:04:C3:0E:69:C5:52
Authority key identifier: 72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
Certificate issuer:       /CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Certificate serial:       0197488C3912C9971AFCCD24AFFAB437FC98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
Manifest number:          08E9
Signing time:             Sat 07 Jun 2025 04:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:38 +0000
Files and hashes:         1: 8FajeVqA6rp1U8VNJu9yQBP6r54.roa (hash: UxuQ4k50fW+4+o9lGY7FVNHYu3QDBc/d+VkzXgLQ8PU=)
                          2: HHgODZNYaWmnAzu5Y5NNc-vPrnI.roa (hash: 7yz6aWHri/zQdagup6M2sNC0XfiDvGTcFvrpM1dBPtk=)
                          3: LTAgEPcIg7XQBzK3Cj9I5PVLMk0.roa (hash: eGy7JgSFjwLiCaGzQfjzKTQz7d3s5HQiA3TVI/81xK0=)
                          4: csZGC0-x70a8dFf_DPRjvcTgP6k.crl (hash: lLJFJR4TGmQLZXtuYAOMAV9QICfj8vxcUbrYkOLD/zY=)
                          5: ho0kqJfEMlf2sbVibqdADBrNulw.roa (hash: 5FbaBKa2Ni/RgBsUj459P0dwR0J+n0l8NmhVw0Fcivw=)
                          6: knF6nEQYYWVpL3rBGNBc8_KXbEw.roa (hash: mTLWLsXkA+rHwy07iVSYRIKt6HL9jKzw2c+wO1sgCtg=)
                          7: spZ3gq52Rs1Brqgro5g4rfptHLc.roa (hash: JmluqSt/yaPZfKeNSsXMXym5ysVFHQT+kOW0mDU1DxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:39:12:c9:97:1a:fc:cd:24:af:fa:b4:37:fc:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
        Validity
            Not Before: Jun  7 04:00:38 2025 GMT
            Not After : Jun  8 04:00:38 2025 GMT
        Subject: CN=5c6fb3fffb9c0bc171f2b58e761704c30e69c552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:26:5a:17:38:c6:d0:f6:47:ec:22:97:d7:a7:
                    20:e8:6f:4c:b1:63:7a:4e:23:78:1d:4a:a0:07:a2:
                    14:eb:84:b0:93:90:92:f1:3a:c4:f6:16:e9:6f:d2:
                    63:0f:0f:09:9c:ec:c0:41:8d:ec:89:35:2b:d1:7e:
                    d3:48:e5:f0:d6:dc:65:ff:f5:d9:5f:66:dc:94:0b:
                    98:cc:48:c2:8c:6c:d1:30:6d:8a:a1:85:93:b0:75:
                    38:3f:00:3c:7e:17:ba:34:05:50:36:22:d6:f3:ac:
                    d1:7f:84:50:2c:46:0c:8c:6e:58:d5:64:66:5a:41:
                    bc:39:39:13:79:09:32:ba:14:a6:a1:d4:33:30:03:
                    17:7c:82:5f:54:67:1c:4c:19:8f:e7:4d:db:63:ef:
                    90:96:e4:25:32:e8:5a:81:c6:19:2a:37:24:cb:52:
                    cc:b2:f7:5f:d1:76:61:12:a2:a5:a8:18:e2:2e:0b:
                    e7:da:57:80:4c:f2:b8:d2:33:47:e2:ae:2e:65:34:
                    fb:75:94:15:68:f6:8a:f6:16:66:27:31:77:31:b0:
                    6b:c3:11:92:3d:85:71:d9:9c:a0:18:81:87:fc:95:
                    5a:40:c0:97:b2:45:66:d1:a1:94:5d:68:90:32:5c:
                    58:85:aa:30:c3:7d:a0:74:62:53:1c:98:59:0f:7e:
                    ca:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6F:B3:FF:FB:9C:0B:C1:71:F2:B5:8E:76:17:04:C3:0E:69:C5:52
            X509v3 Authority Key Identifier:
                keyid:72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:33:76:ef:cc:88:57:cf:65:0c:52:f5:b9:e4:70:d1:50:e0:
         14:ee:3c:71:b0:e2:42:64:7b:4d:0f:23:6d:42:a1:c2:24:eb:
         56:dd:5f:18:23:2f:a2:e1:08:f1:3a:2f:25:1d:2f:2d:95:70:
         0b:1e:3c:79:d2:11:a2:ed:82:b5:61:2d:e5:d0:2b:73:33:15:
         4c:ea:a2:4d:4a:fd:65:dd:74:db:f5:46:70:36:10:f6:8d:8b:
         bd:2c:20:8f:72:9c:04:bf:2d:8e:ae:86:54:f6:6f:da:41:82:
         81:73:3b:e5:54:bb:7c:92:92:d6:19:ed:86:a5:19:1b:7f:5f:
         cf:fa:6a:35:32:d0:17:1a:06:09:69:d8:c4:96:3d:c0:d2:9e:
         15:30:8e:e5:ba:b0:56:aa:0d:f3:eb:8d:f2:8a:94:24:da:c0:
         8b:08:30:5a:f7:2f:b9:82:2a:f4:d3:e0:26:e7:f7:6a:35:c9:
         e6:9c:24:8b:fb:4e:54:e6:84:a9:5f:78:ac:4c:43:b8:c8:2a:
         37:ca:57:d0:a9:f9:7e:28:60:46:9f:6d:c4:be:2d:f2:d8:0a:
         3e:8f:fc:ea:6e:8e:cb:63:1c:1a:40:b1:24:b5:76:db:3f:61:
         69:47:b9:7d:38:5b:3a:3b:1b:f3:d6:9e:c5:a1:1e:d7:a0:1c:
         46:89:08:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjDkSyZca/M0kr/q0N/yYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYzY0NjBiNGZiMWVmNDZiYzc0NTdmZjBjZjQ2M2JkYzRl
MDNmYTkwHhcNMjUwNjA3MDQwMDM4WhcNMjUwNjA4MDQwMDM4WjAzMTEwLwYDVQQD
Eyg1YzZmYjNmZmZiOWMwYmMxNzFmMmI1OGU3NjE3MDRjMzBlNjljNTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSZaFzjG0PZH7CKX16cg6G9MsWN6
TiN4HUqgB6IU64Swk5CS8TrE9hbpb9JjDw8JnOzAQY3siTUr0X7TSOXw1txl//XZ
X2bclAuYzEjCjGzRMG2KoYWTsHU4PwA8fhe6NAVQNiLW86zRf4RQLEYMjG5Y1WRm
WkG8OTkTeQkyuhSmodQzMAMXfIJfVGccTBmP503bY++QluQlMuhagcYZKjcky1LM
svdf0XZhEqKlqBjiLgvn2leATPK40jNH4q4uZTT7dZQVaPaK9hZmJzF3MbBrwxGS
PYVx2ZygGIGH/JVaQMCXskVm0aGUXWiQMlxYhaoww32gdGJTHJhZD37KgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxvs//7nAvBcfK1jnYXBMMOacVSMB8GA1UdIwQY
MBaAFHLGRgtPse9GvHRX/wz0Y73E4D+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3NaR0MwLXg3MGE4ZEZmX0RQUmp2Y1RnUDZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hNWNlN2UtN2QxZC00OGVmLThmMzYt
MGI3NDBhMzZhOGVlLzEvY3NaR0MwLXg3MGE4ZEZmX0RQUmp2Y1RnUDZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hNWNlN2UtN2QxZC00OGVmLThmMzYtMGI3NDBhMzZhOGVl
LzEvY3NaR0MwLXg3MGE4ZEZmX0RQUmp2Y1RnUDZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAzN278yI
V89lDFL1ueRw0VDgFO48cbDiQmR7TQ8jbUKhwiTrVt1fGCMvouEI8TovJR0vLZVw
Cx48edIRou2CtWEt5dArczMVTOqiTUr9Zd102/VGcDYQ9o2LvSwgj3KcBL8tjq6G
VPZv2kGCgXM75VS7fJKS1hnthqUZG39fz/pqNTLQFxoGCWnYxJY9wNKeFTCO5bqw
VqoN8+uN8oqUJNrAiwgwWvcvuYIq9NPgJuf3ajXJ5pwki/tOVOaEqV94rExDuMgq
N8pX0Kn5fihgRp9txL4t8tgKPo/86m6Oy2McGkCxJLV22z9haUe5fThbOjsb89ae
xaEe16AcRokIoQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:16:23 2025 by rpki-client