Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
File:                     c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft (raw, json)
Hash identifier:          gb4bqR1fJYN4xtyFhmrMzk9EHzMl/6ONeEgH4sXBwQ4=
Subject key identifier:   4E:3E:8D:AF:2C:44:E8:2B:3B:C3:51:61:8A:63:C6:91:13:06:0A:9D
Authority key identifier: 73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78
Certificate issuer:       /CN=739f3ebcd26792b913c1dcb9941996e998f16078
Certificate serial:       019892230BC220CAA84CE5FD1D8D4B50E5A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
Manifest number:          1626
Signing time:             Sun 10 Aug 2025 04:00:26 +0000
Manifest this update:     Sun 10 Aug 2025 04:00:26 +0000
Manifest next update:     Mon 11 Aug 2025 04:00:26 +0000
Files and hashes:         1: 8ZSiBVB9h2VqcjNcGsXVM5lUjmI.roa (hash: hKEwzTFWQZO4iHIgYWy7xoBKPXgQqTPB0mui/ew+61o=)
                          2: c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl (hash: 3P9iSX0T6oAVznnlCNrY8bChAOAoxR8tFumfddXyhPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:23:0b:c2:20:ca:a8:4c:e5:fd:1d:8d:4b:50:e5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=739f3ebcd26792b913c1dcb9941996e998f16078
        Validity
            Not Before: Aug 10 04:00:26 2025 GMT
            Not After : Aug 11 04:00:26 2025 GMT
        Subject: CN=4e3e8daf2c44e82b3bc351618a63c69113060a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:23:0f:93:77:db:8a:06:02:00:62:27:ce:27:
                    8c:87:b8:80:b4:da:b2:39:02:be:ee:e5:e1:ce:96:
                    5d:6a:3b:fe:9e:df:6a:3b:a0:f4:11:7d:8b:23:d8:
                    9f:37:ed:6c:4b:e8:21:99:77:cf:ec:f1:cf:9b:fc:
                    16:fd:27:b8:41:51:9e:e0:20:29:01:a3:e2:c7:18:
                    bc:64:95:0a:b2:13:e6:a3:b6:ab:b3:60:fc:0d:4c:
                    45:4f:64:d7:d1:b5:15:8f:e4:b0:0b:2d:6c:33:77:
                    22:15:71:97:e1:85:01:c4:69:2d:62:04:ef:ee:1b:
                    b3:f7:4f:30:0c:0e:48:76:fe:22:99:46:a3:ee:61:
                    f1:6e:02:c3:4f:b5:00:7f:bb:b0:97:91:c1:29:9a:
                    22:89:b7:60:a1:06:7d:96:21:cd:10:ca:c7:4c:b8:
                    cc:d0:57:02:6f:c5:9b:47:b3:a5:91:e5:a1:1e:83:
                    96:d2:24:2a:55:37:ac:e6:65:7c:02:c5:de:43:2a:
                    b7:6c:38:51:f8:0d:09:b3:1f:9d:ce:45:04:6c:89:
                    03:3d:79:56:9a:4c:4d:0d:6f:c9:de:5d:4f:b1:b3:
                    7f:b3:ca:c8:92:3f:41:5c:ab:64:00:8a:4a:2d:4a:
                    14:d4:78:85:cc:12:7b:4e:c9:f3:c0:5f:65:f3:ca:
                    5a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3E:8D:AF:2C:44:E8:2B:3B:C3:51:61:8A:63:C6:91:13:06:0A:9D
            X509v3 Authority Key Identifier:
                keyid:73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:8b:4b:e5:c7:7c:91:5d:b7:14:6d:69:59:b7:74:dd:e6:a9:
         d4:a4:b6:de:b2:e5:64:2d:c6:22:2a:59:9e:9f:08:1f:ee:7a:
         ec:75:5c:fa:19:17:15:9d:d5:2b:5b:d7:4d:49:23:06:06:f8:
         63:cc:8e:d3:6c:80:63:df:84:c7:a3:ee:64:61:91:5a:37:26:
         0f:08:c2:32:d9:cd:24:eb:68:22:80:c1:51:42:05:6c:a8:ce:
         ab:ea:43:35:5b:7f:2b:82:72:27:57:e7:9a:6f:d6:de:f2:2d:
         60:c6:0d:ea:07:9c:4c:dd:45:e6:6e:06:b8:d0:dc:8c:89:25:
         1c:f2:0e:cf:d2:c1:cc:e0:f1:dd:2f:8e:16:99:42:c3:99:43:
         33:6f:c4:0f:2a:cc:8b:a1:e1:19:e9:ca:fc:ca:ac:45:96:13:
         02:ba:6a:5b:58:75:7d:87:63:60:b1:6a:51:f1:40:ff:42:1f:
         d6:b1:f3:1c:1a:7d:13:46:9b:55:10:63:ec:88:03:0c:ec:f3:
         f4:88:f5:9f:71:76:69:1a:f9:98:a9:30:37:8d:6a:2c:da:14:
         8d:81:30:e4:45:66:49:b0:62:94:d2:00:3e:6b:60:f2:bd:8f:
         22:a5:ab:92:1b:f1:a9:91:e3:9a:72:21:85:3b:d0:b1:24:49:
         2e:f1:20:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:41:44 2025 by rpki-client