Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
File:                     c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft (raw, json)
Hash identifier:          RzUkZvzjcJEIxbQm/puENfmtqLcYm+pwzt8vdpbNooA=
Subject key identifier:   50:2D:88:F0:81:31:F1:F7:18:D5:7A:A2:97:5A:02:FB:ED:9F:5C:A5
Authority key identifier: 73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78
Certificate issuer:       /CN=739f3ebcd26792b913c1dcb9941996e998f16078
Certificate serial:       0198D5BB890829A9F83856A92915A353EB0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 07:01:33 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:33 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:33 +0000
Files and hashes:         1: 8ZSiBVB9h2VqcjNcGsXVM5lUjmI.roa (hash: hKEwzTFWQZO4iHIgYWy7xoBKPXgQqTPB0mui/ew+61o=)
                          2: c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl (hash: ie6VdaIgekvOK4U5g130WgSBjyCQEZV/QqBjx2QXxE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:89:08:29:a9:f8:38:56:a9:29:15:a3:53:eb:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=739f3ebcd26792b913c1dcb9941996e998f16078
        Validity
            Not Before: Aug 23 07:01:33 2025 GMT
            Not After : Aug 24 07:01:33 2025 GMT
        Subject: CN=502d88f08131f1f718d57aa2975a02fbed9f5ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:67:6f:52:f9:cc:9d:2e:79:0b:f3:7a:37:
                    e9:99:67:17:03:f4:79:df:c3:61:72:ec:c5:95:d9:
                    8d:07:94:f2:1f:4c:84:44:40:59:2a:a4:b2:b0:87:
                    c7:04:0a:f8:75:3b:fc:62:f3:bf:2e:d0:e4:12:31:
                    d9:fb:6f:fb:3c:84:d5:bd:62:8f:59:da:17:f3:f1:
                    f9:5f:53:a5:8d:cd:ef:78:c4:b3:c6:c6:22:58:16:
                    01:68:e6:d7:87:b7:cf:c1:b2:13:66:d9:d2:a6:74:
                    7b:72:7a:21:06:71:81:20:85:90:15:c0:b9:cd:aa:
                    1c:2f:9c:10:30:d8:e5:88:a4:54:50:23:e1:15:f0:
                    a4:f5:41:cd:2b:2a:e7:80:5e:de:01:72:d1:77:2e:
                    df:36:64:c7:a4:b7:f6:d1:7d:cb:75:53:40:fe:79:
                    28:8f:8a:c1:bd:1b:c6:01:04:7b:76:03:02:62:a5:
                    48:db:91:3d:05:a9:a8:64:39:83:e6:d5:24:7d:36:
                    42:30:5a:83:76:53:38:4e:64:61:0c:7c:d7:93:67:
                    50:68:7b:5c:d2:bf:90:8e:bc:04:78:6a:7c:03:a1:
                    3c:2e:6b:bc:ff:3e:3e:e4:45:68:7a:50:7e:99:e3:
                    6e:61:17:0a:e4:2f:f1:7c:f0:39:68:91:7e:0f:63:
                    39:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2D:88:F0:81:31:F1:F7:18:D5:7A:A2:97:5A:02:FB:ED:9F:5C:A5
            X509v3 Authority Key Identifier:
                keyid:73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:5d:ab:cc:73:a9:08:ba:7c:3d:0a:6e:65:d7:5a:92:d6:49:
         72:32:49:b1:45:0d:d7:fd:70:d1:0d:64:34:4d:9c:ec:f7:2e:
         1f:d2:55:8f:24:22:a7:27:32:35:e2:b3:44:00:78:c5:20:f3:
         dd:ea:e3:1a:ab:57:16:67:b0:d8:7a:2e:fb:5f:ad:09:0b:0e:
         c6:c0:0e:c0:5e:e4:95:07:d7:97:b0:81:91:ac:f6:88:1c:7b:
         cb:1c:d7:76:be:2f:fe:fe:c5:80:dc:97:5e:cc:b1:36:04:43:
         af:d6:3f:3a:7e:1e:58:eb:e2:da:d6:6d:d0:b4:ee:5f:fe:b5:
         f7:2f:9e:b8:77:90:4e:13:46:21:1f:04:60:80:3d:04:e7:52:
         a2:4a:17:17:1a:69:cd:f2:99:ef:ca:12:e5:c7:3e:85:24:1a:
         12:e6:89:48:55:e4:7d:4b:79:71:27:5b:1b:4d:c7:45:89:38:
         fb:47:18:ae:80:6c:7f:c9:6e:6d:37:1f:28:3b:bd:c3:d7:0d:
         c9:1a:ff:23:ce:78:e8:b5:e4:70:f8:03:2c:48:ea:df:6b:fd:
         f2:8f:c7:40:4a:fd:ff:3b:a5:12:00:0f:c5:b5:82:41:8b:51:
         eb:3f:eb:61:4b:03:76:99:10:13:d7:c6:33:f2:d9:cc:39:4d:
         76:b1:32:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:08:04 2025 by rpki-client