Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
File:                     58yGJhOL8enLP9H-wmxoxKY0CWs.mft (raw, json)
Hash identifier:          t4njo2rsJjvl68RmcIclI02Est1iN8CjGM5F88gWLTc=
Subject key identifier:   55:E8:3C:3A:36:71:7D:70:6C:B9:EC:B0:58:F8:68:2D:8A:E2:AC:0C
Authority key identifier: E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
Certificate issuer:       /CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Certificate serial:       01989CDDD8BBF46DBF68A48BBB3B27B30937
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
Manifest number:          096E
Signing time:             Tue 12 Aug 2025 06:00:41 +0000
Manifest this update:     Tue 12 Aug 2025 06:00:41 +0000
Manifest next update:     Wed 13 Aug 2025 06:00:41 +0000
Files and hashes:         1: 58yGJhOL8enLP9H-wmxoxKY0CWs.crl (hash: M4bcbC3PY+/O48/mkVjSbcvZc+g4t/14RdIqu1vAd3E=)
                          2: rj-L1Ht9KU4SpqytVvSZ8FykJs0.roa (hash: o5/pUFEbXRLCOB5XslmeCnU9+6JRYi7PIpvUyWlOL2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9c:dd:d8:bb:f4:6d:bf:68:a4:8b:bb:3b:27:b3:09:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
        Validity
            Not Before: Aug 12 06:00:41 2025 GMT
            Not After : Aug 13 06:00:41 2025 GMT
        Subject: CN=55e83c3a36717d706cb9ecb058f8682d8ae2ac0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:22:42:00:e3:e8:f6:6d:9a:51:83:c5:bc:
                    34:c4:bb:06:f5:32:8f:77:f0:e8:9a:09:a8:7f:44:
                    30:58:2e:6f:fb:29:5a:fa:d3:65:3f:ba:89:5f:ff:
                    38:55:94:65:14:42:dc:b0:61:be:91:fe:6b:ec:1b:
                    32:d8:23:e2:e3:66:46:a4:3e:94:04:b0:5f:5c:2e:
                    86:7b:f6:77:21:3e:6e:65:0a:ca:8e:d3:72:39:3e:
                    f4:84:c8:01:18:50:b8:c0:a5:67:a1:69:13:87:52:
                    6f:fe:41:8c:a4:69:8a:d0:04:17:f4:47:ee:5f:79:
                    c4:54:83:3a:ab:a4:fc:5d:37:c6:51:28:d0:30:5b:
                    38:a7:a2:96:91:9d:34:0b:f7:1c:63:6c:63:c5:21:
                    44:7a:31:d4:cb:bc:e7:0a:10:f5:dc:37:6e:80:22:
                    57:e7:2f:32:d3:96:33:6a:89:22:0a:df:7b:a4:89:
                    dc:5f:e1:e7:6f:df:21:d7:3a:f1:0e:05:1f:9a:e7:
                    8a:c6:44:f0:d2:cf:d3:f0:90:ff:ec:8b:69:ae:e6:
                    51:e7:b1:10:1f:e9:f3:59:5d:29:86:93:39:08:ec:
                    44:aa:3a:da:11:62:2f:54:e8:0c:b3:64:68:b4:08:
                    78:ba:ca:26:73:68:7c:07:ff:79:2d:8f:0c:90:ba:
                    fb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E8:3C:3A:36:71:7D:70:6C:B9:EC:B0:58:F8:68:2D:8A:E2:AC:0C
            X509v3 Authority Key Identifier:
                keyid:E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:99:33:e2:e6:59:86:a8:d2:cd:07:29:7c:ab:f1:60:1d:99:
         ba:34:10:ca:e2:f0:25:7c:da:8a:f0:4e:40:bd:cb:15:f9:f1:
         af:de:d2:ca:6d:87:30:87:a4:b2:9b:49:7a:0c:ad:90:1e:a4:
         72:37:bc:3c:97:3b:aa:88:3b:78:5a:41:3f:f4:52:9d:74:3a:
         f7:35:bf:2a:54:ae:da:39:ca:3d:e0:84:6d:48:de:25:fa:39:
         3d:1f:79:b5:54:76:66:b2:03:2e:46:29:c9:78:79:96:5b:69:
         b8:b4:41:b7:d2:72:63:fc:1d:aa:91:48:c5:8d:29:b8:29:92:
         b8:03:75:06:d2:c6:bb:82:44:a7:93:6d:18:76:e4:77:31:c6:
         57:db:31:90:2b:60:a7:f7:53:3a:fb:52:b3:da:30:00:b6:74:
         7e:a9:85:32:1a:aa:73:95:66:df:19:3d:d6:fa:93:e7:68:5c:
         26:14:a4:16:e2:c2:de:f7:9d:df:3f:fb:cb:7f:97:6e:c6:00:
         af:74:8e:c2:b0:1f:cf:30:15:d2:32:25:7f:db:08:bf:0b:31:
         36:2c:a6:0f:50:f0:51:31:07:3c:77:d2:e0:24:1c:10:8e:c7:
         c1:2c:32:30:db:67:8d:10:f9:10:87:85:c5:0a:ea:64:4f:a4:
         33:c5:b8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:44:21 2025 by rpki-client