Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
File:                     58fsjXgFA9t8q8sUHWuZHNAppqI.mft (raw, json)
Hash identifier:          IW84orwZASkwO/Tv0cyAmf5qEzUZgHvlvFqrrIk02pQ=
Subject key identifier:   61:B9:CC:55:32:CA:83:6B:E0:EF:6B:C5:EB:AC:E4:4E:64:72:F6:66
Authority key identifier: E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2
Certificate issuer:       /CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2
Certificate serial:       0197684E51CBBB8DC84515F26BBF83C0522F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
Manifest number:          0F87
Signing time:             Fri 13 Jun 2025 08:00:52 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:52 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:52 +0000
Files and hashes:         1: 58fsjXgFA9t8q8sUHWuZHNAppqI.crl (hash: p71nnAO1O9/M1j6XN4sawN2Gz4J/xmsCHt/pMUGqhE8=)
                          2: Gr2bTac37FdQF97pGkH13J5M8LQ.roa (hash: oaatGmufJtltyljxjCY0yrTcOMqVjEXZ2p4QbghN278=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:51:cb:bb:8d:c8:45:15:f2:6b:bf:83:c0:52:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2
        Validity
            Not Before: Jun 13 08:00:52 2025 GMT
            Not After : Jun 14 08:00:52 2025 GMT
        Subject: CN=61b9cc5532ca836be0ef6bc5ebace44e6472f666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f9:40:ab:06:17:e8:e4:3c:79:35:8a:7f:50:
                    d2:23:06:7b:ff:57:ba:b0:5a:d5:62:b9:9d:6f:46:
                    bf:44:9d:1e:c9:27:d1:f7:01:98:d6:af:c3:8e:08:
                    97:67:e4:6c:2a:f8:08:16:c4:3a:48:fd:ce:3e:4c:
                    76:ef:be:62:8a:46:2b:97:f5:8a:b7:92:1c:d3:75:
                    15:09:68:31:e7:5c:a4:ee:c0:10:f7:b5:5c:54:ad:
                    bc:5e:6e:40:73:6b:21:51:36:9d:7d:dd:ee:3c:ce:
                    4a:71:bb:f2:59:d9:1a:50:6d:8b:f0:b7:a4:85:b6:
                    f2:b6:8a:a9:bd:64:bd:35:3d:4d:56:79:bc:10:10:
                    c8:ed:08:b7:04:41:89:a0:30:3d:87:f3:6d:0e:ba:
                    a6:2f:00:2f:4a:20:d1:2c:88:f0:9a:a4:19:6e:ff:
                    bc:70:74:95:a2:b6:ce:57:4c:00:79:d7:cc:b4:1b:
                    53:06:0a:a9:16:08:89:cb:05:d2:45:18:87:be:aa:
                    ad:d3:b6:4e:62:c7:0f:47:b5:ec:0a:e6:3a:3f:dd:
                    97:f4:27:de:5b:e7:b0:df:5b:7b:5f:15:60:0c:5d:
                    81:65:21:a5:33:4a:28:87:40:09:8e:c4:85:b9:93:
                    b5:a5:bf:0f:a2:a6:f3:7f:fc:77:99:15:67:99:a1:
                    39:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B9:CC:55:32:CA:83:6B:E0:EF:6B:C5:EB:AC:E4:4E:64:72:F6:66
            X509v3 Authority Key Identifier:
                keyid:E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:be:af:ef:6a:a9:c4:70:26:b6:1e:b1:99:27:23:47:a7:82:
         e8:42:2d:24:ce:13:e1:77:d3:56:9e:db:ad:ef:ea:4b:b5:66:
         82:70:62:f7:ee:9a:84:1b:8b:6e:c2:84:16:ef:ae:86:96:ef:
         8d:39:75:f0:fb:6a:00:43:9a:e2:c0:92:cf:1d:eb:7a:44:d2:
         cf:24:19:97:c1:4d:8d:50:93:30:31:88:17:b3:93:23:d2:bc:
         14:b9:ad:36:72:2d:c6:f7:75:22:d0:fb:0e:aa:18:8e:ad:17:
         0a:7e:2c:11:19:29:d2:55:b0:53:ef:34:76:c9:44:a8:50:3d:
         07:eb:c7:e7:cd:96:88:f3:9c:8b:14:ab:de:18:14:16:c7:53:
         c1:2c:c0:fd:69:0c:dd:ec:98:cc:99:f2:54:7d:bc:dd:14:b3:
         36:cf:04:60:36:59:03:74:8b:0c:02:8d:be:8c:2d:a3:8a:3e:
         d7:1c:62:24:e7:84:31:55:ab:6f:f5:4d:c3:d8:29:98:a3:e7:
         4b:a2:f7:0b:51:16:3f:b9:ec:93:1a:0e:04:40:92:d5:14:26:
         6c:c2:1f:24:14:63:a6:d6:7b:54:62:cc:c8:ff:65:ec:da:ec:
         1e:a4:56:f4:37:6a:18:ac:4e:2b:b7:68:70:91:ca:0b:09:d5:
         01:e9:e3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:03 2025 by rpki-client