Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
File:                     58B9uYgBM8XNzgBbyhEbVSzRTFM.mft (raw, json)
Hash identifier:          5uScGgyFacgVtEg+92APAvMvGCVIv39T2aoqsn/kPJ4=
Subject key identifier:   6B:B8:68:1F:97:49:97:32:FD:93:DD:1D:B3:86:84:FB:A5:8A:C9:B5
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Certificate issuer:       /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial:       0197B9D8A7E17B23584676B926117CA6B9DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
Manifest number:          0A70
Signing time:             Sun 29 Jun 2025 04:01:13 +0000
Manifest this update:     Sun 29 Jun 2025 04:01:13 +0000
Manifest next update:     Mon 30 Jun 2025 04:01:13 +0000
Files and hashes:         1: 3pxtcoitrFP84ablFN0e1N99UbU.roa (hash: 3rHwb/LGbKBgtS++gv9s6PE/pIkC8kqsGTnPOdr75VM=)
                          2: 58B9uYgBM8XNzgBbyhEbVSzRTFM.crl (hash: JJ66dD0AqGtRt3azfU9Z+pCCraR0fvSl/XTLi11uj2M=)
                          3: 83jnw3_iQXavgLNpPArd0mjD8v0.roa (hash: SHfszJ5S+RcUzQDWjfFykPyoXsOFj+P+O7U1p7lsd+k=)
                          4: 9TCbC5ZMWTliQOKPmZ8VOSeIZEs.roa (hash: ladwpTnVncQtchwvagqScI9AqnIAoqG+BVd9xXCXOlU=)
                          5: _sBQ-iEtTw6n3_2GUf1kdKinw6k.roa (hash: 2pQWnwaXMMFBZzZKZwaCBzryPcNsmH6tse3213iQbEg=)
                          6: hsyRrTmHUFy-dvGlMuWHGJoh8Ws.roa (hash: uXGOwuMsPP7paFlNgchG8Ort4AQoj239eYXxGZv6OVk=)
                          7: la2dPjbXAEn7TCutV5FDNd87YgY.roa (hash: Cy/GkdDa8H/gyDAs0CMDjYPIaE/yLrgi+H+nowssrsc=)
                          8: wrGzB70sU_9SIqxlx-1pOzK4ufs.roa (hash: hctgdi4NMknx7R7SWF0OvSDThJO+cXqWTsV2GWgcQfc=)
                          9: xDf42bpWqRCsDPxTubWSXNuBqFg.roa (hash: YkhsAjaT83vQpIvIVaLxfqKkzhztD+nQzU/2yzJtmvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:d8:a7:e1:7b:23:58:46:76:b9:26:11:7c:a6:b9:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
        Validity
            Not Before: Jun 29 04:01:13 2025 GMT
            Not After : Jun 30 04:01:13 2025 GMT
        Subject: CN=6bb8681f97499732fd93dd1db38684fba58ac9b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:71:d6:a5:ba:9a:6e:9f:75:be:da:ea:92:27:
                    43:d3:35:ad:32:59:f9:95:27:6e:6d:60:25:0c:5c:
                    6e:09:18:2d:6e:10:3f:d1:a6:79:c1:47:90:3e:68:
                    d3:b9:e3:12:c8:a4:24:ba:5e:65:6a:9b:83:24:3f:
                    e4:f9:dc:40:f4:c8:22:a9:80:dd:6a:80:71:aa:45:
                    05:3a:cf:ef:40:57:d2:85:e1:8a:92:ed:5e:ac:4a:
                    24:82:07:f5:38:66:0a:a4:4f:b5:a2:11:b5:77:46:
                    7d:c3:88:5b:b6:48:81:c0:89:4c:07:54:14:e4:85:
                    8c:67:a3:e9:be:49:93:88:f0:1d:5f:41:4f:e0:cf:
                    b3:89:1b:19:5a:2d:79:69:9a:1b:24:8b:ae:d5:df:
                    05:c4:61:74:9e:1a:dc:32:fa:0d:62:69:86:2d:34:
                    f8:cc:ff:bd:b8:0b:c7:70:89:73:5c:b3:fc:5a:94:
                    04:bd:90:87:70:85:fc:d5:02:24:ae:5f:c6:aa:19:
                    cf:f0:e7:c8:1e:ac:52:c1:ba:a5:bf:c5:c3:a5:e1:
                    4d:67:69:11:fc:fc:92:0c:44:12:5f:2b:a3:0f:b6:
                    d9:47:e3:87:3a:be:11:f8:1c:c8:56:32:b6:33:07:
                    af:82:81:b3:36:09:8c:ff:d1:ae:76:ce:16:da:15:
                    cf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B8:68:1F:97:49:97:32:FD:93:DD:1D:B3:86:84:FB:A5:8A:C9:B5
            X509v3 Authority Key Identifier:
                keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:13:03:92:59:dd:76:1e:00:71:be:68:37:24:69:35:3a:1c:
         8f:a7:2c:20:c8:74:0b:42:89:86:0b:48:75:06:ef:3b:32:8c:
         11:54:0f:01:4d:0b:8d:ae:a0:dc:0f:47:3a:19:4e:ad:74:1a:
         3e:b0:10:66:e2:4a:38:00:a5:36:8d:e5:8c:49:98:d9:b0:50:
         97:c7:78:b5:82:a5:5a:64:5a:9b:72:b1:8a:93:46:11:82:fa:
         0b:37:25:71:75:c4:5f:d6:a2:fb:89:03:c8:21:6d:48:e6:21:
         5e:61:9a:75:32:e7:e7:bf:e7:f5:76:7e:3f:f9:52:54:4a:c9:
         a8:18:b3:fa:7b:a7:c1:3c:4b:ee:0b:57:a8:c4:9c:02:88:c8:
         3d:ec:27:24:1a:4c:aa:3d:f9:fe:c3:c0:ad:e0:ee:91:d8:d5:
         71:76:06:a5:7a:62:c1:59:31:35:8f:a0:08:0c:63:66:37:2a:
         60:3e:4a:ac:d8:93:5c:92:7c:fd:8f:d5:bb:84:05:af:d2:b9:
         55:1c:3b:1b:f6:6e:50:03:e1:0f:08:69:74:27:4c:0b:2c:0e:
         23:f3:0e:4a:ee:78:ed:e0:96:6f:c1:ee:4d:90:70:d7:b2:14:
         25:92:75:93:4e:75:27:b1:f0:93:ad:be:ef:80:7d:b9:9e:c4:
         34:11:4e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:21:47 2025 by rpki-client