Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
File:                     c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft (raw, json)
Hash identifier:          ndRBtY8nhZV0zMok7xuzA9Udl5x8+S+G/XPUIUcFgzY=
Subject key identifier:   57:E0:17:91:75:17:13:23:13:0D:3E:28:CC:3E:C2:A0:D2:A6:6A:58
Authority key identifier: 73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78
Certificate issuer:       /CN=739f3ebcd26792b913c1dcb9941996e998f16078
Certificate serial:       01976C989A2BC69130B6731F3E8A5B650971
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 04:00:29 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:29 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:29 +0000
Files and hashes:         1: 8ZSiBVB9h2VqcjNcGsXVM5lUjmI.roa (hash: hKEwzTFWQZO4iHIgYWy7xoBKPXgQqTPB0mui/ew+61o=)
                          2: c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl (hash: K6WKjBIrvr4CMBVnk6apIm4vKyJkeftFH+TdXyp5Ibo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:9a:2b:c6:91:30:b6:73:1f:3e:8a:5b:65:09:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=739f3ebcd26792b913c1dcb9941996e998f16078
        Validity
            Not Before: Jun 14 04:00:29 2025 GMT
            Not After : Jun 15 04:00:29 2025 GMT
        Subject: CN=57e0179175171323130d3e28cc3ec2a0d2a66a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1d:e4:92:07:50:c1:d3:0a:df:af:dc:f2:64:
                    40:4f:a6:bc:f8:35:59:3e:bd:ca:12:86:48:a4:56:
                    84:ae:be:47:7d:eb:ee:b3:20:e5:79:69:02:ec:42:
                    64:6d:e7:d5:31:d9:b7:b1:2e:7d:17:97:47:09:1c:
                    59:d3:d8:2f:4e:28:ba:a8:e1:6e:d5:77:5c:4e:58:
                    0d:06:de:1c:0f:0e:66:90:77:72:a9:e1:06:7e:f7:
                    67:1c:09:da:36:ab:e1:0a:50:72:47:22:01:2e:5d:
                    14:37:35:f2:92:3a:6c:93:13:6b:b6:96:f9:94:e6:
                    21:73:64:28:d4:99:8c:55:35:00:1d:bd:06:83:38:
                    da:3c:92:61:4c:a6:67:26:65:44:66:1f:c6:a4:0e:
                    82:17:a1:4a:0e:fe:7b:a9:7c:ce:f5:d4:ac:1f:ad:
                    e1:de:3e:cf:52:b0:0c:a6:6c:42:5c:9f:e7:fa:a8:
                    51:95:5e:89:77:26:b1:01:d1:0a:73:34:68:3e:8f:
                    6e:a9:65:9e:df:16:be:6c:64:a4:09:10:49:47:52:
                    ad:d1:4e:f5:ed:ec:8e:3d:c9:8b:f8:6d:30:90:07:
                    94:8e:e9:c1:a4:47:c0:73:ab:69:3b:6b:a5:af:50:
                    d1:7f:f8:f1:55:34:aa:0b:5e:97:5d:74:92:22:ff:
                    30:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E0:17:91:75:17:13:23:13:0D:3E:28:CC:3E:C2:A0:D2:A6:6A:58
            X509v3 Authority Key Identifier:
                keyid:73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e6:15:6c:71:2e:b9:ad:f3:95:93:9e:d7:a8:0e:3b:40:dd:
         b6:8d:75:0b:d6:a1:c0:05:00:ac:7a:da:e8:a6:ea:05:02:d4:
         fb:01:c1:ac:c4:1c:7b:19:37:43:7c:19:ae:37:95:9a:ec:54:
         53:e9:a3:b4:53:b7:1f:ce:75:19:cc:ea:af:ca:13:93:91:1b:
         3a:c7:52:39:95:54:c6:f2:e2:4d:6c:c2:21:4c:69:2d:5e:31:
         9c:43:35:85:71:e9:55:b9:5d:ea:25:f5:86:50:de:74:69:0d:
         5e:c8:cd:96:b9:00:d5:d2:62:46:20:5b:60:c7:b8:64:98:bf:
         88:a2:28:f0:e7:8d:cd:f0:3f:c4:c7:a3:49:09:42:ff:aa:07:
         aa:df:56:f9:ea:1a:bc:15:55:c8:9e:7c:4a:e2:bc:be:fb:a3:
         38:92:96:18:23:2a:0a:bd:54:d1:79:99:59:22:2b:15:00:15:
         5f:81:cf:d0:26:6d:c9:6a:e1:74:a4:b0:0c:ae:e0:4c:c4:75:
         dd:50:10:23:45:b0:0c:ad:4d:7e:92:14:d4:43:6b:9b:0f:3e:
         81:83:35:a2:82:63:cf:91:9e:71:7f:88:a9:e5:b6:d5:ff:26:
         11:22:bd:6f:66:dc:5a:fa:b6:88:6e:32:4f:01:36:98:75:f4:
         09:d8:82:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:10:03 2025 by rpki-client