Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
File:                     c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft (raw, json)
Hash identifier:          +5rvXkP3sOuaMnG6yvtx7F+kkV+NNDYlATFNn695480=
Subject key identifier:   96:7C:A3:39:DC:D5:9A:E1:D5:8A:86:1C:A7:74:5B:DE:00:A5:F6:6A
Authority key identifier: 73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78
Certificate issuer:       /CN=739f3ebcd26792b913c1dcb9941996e998f16078
Certificate serial:       0199FD3434A8A7D0003839C8DEDE1BA55793
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 16:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:20 +0000
Files and hashes:         1: 8ZSiBVB9h2VqcjNcGsXVM5lUjmI.roa (hash: hKEwzTFWQZO4iHIgYWy7xoBKPXgQqTPB0mui/ew+61o=)
                          2: c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl (hash: Tpxqm5XIpzoArK6t7cyp6pdKfJSIigPDGJKuydaON9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:34:a8:a7:d0:00:38:39:c8:de:de:1b:a5:57:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=739f3ebcd26792b913c1dcb9941996e998f16078
        Validity
            Not Before: Oct 19 16:01:20 2025 GMT
            Not After : Oct 20 16:01:20 2025 GMT
        Subject: CN=967ca339dcd59ae1d58a861ca7745bde00a5f66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:54:78:b1:77:0c:ba:10:17:d1:91:81:af:36:
                    9d:7b:89:42:ca:eb:92:8f:8d:cc:08:d5:a1:77:1d:
                    64:eb:72:6e:dd:b1:47:5a:82:dc:c2:12:37:10:6a:
                    f8:58:e6:ab:12:bf:e7:92:f1:a5:57:d9:2c:d8:45:
                    91:02:1e:27:6e:d9:7f:37:e8:0a:63:83:1a:66:0f:
                    74:dc:b7:b6:0a:56:68:86:40:20:6a:b5:a1:41:ce:
                    8d:bb:8b:3d:3a:24:8b:e9:66:b2:5d:93:d6:ae:6d:
                    9d:6e:ae:18:5f:0d:fe:b1:c5:a6:c0:26:97:04:7f:
                    1b:48:e3:f0:87:bc:7b:ea:93:3e:65:eb:33:cb:d5:
                    15:74:ff:9e:66:6b:9b:df:7b:9d:c7:6c:35:f0:04:
                    04:70:3e:52:2e:85:97:ad:15:0e:20:89:62:d2:b5:
                    72:7d:4c:c0:28:b7:b2:26:98:1a:07:85:36:34:a3:
                    2f:16:c9:58:83:81:c5:be:4d:72:78:7e:ef:4e:7f:
                    27:37:9a:e6:b8:c3:96:19:45:aa:14:e1:53:fc:c7:
                    c0:60:6a:5e:e2:75:70:47:42:1f:65:d3:17:18:74:
                    17:ab:ce:32:3d:c6:09:76:2a:35:30:ba:53:f7:cf:
                    1e:fe:e0:98:00:65:53:4e:59:39:19:39:50:e0:3c:
                    4f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7C:A3:39:DC:D5:9A:E1:D5:8A:86:1C:A7:74:5B:DE:00:A5:F6:6A
            X509v3 Authority Key Identifier:
                keyid:73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:b2:fc:11:41:ac:54:0b:96:2e:78:3f:0a:fe:eb:0f:92:60:
         46:80:6f:78:e3:25:99:57:51:4c:cc:04:48:67:fd:70:04:1e:
         bb:15:b9:fe:a2:7f:af:58:26:62:f6:93:e0:63:1e:bc:69:23:
         f6:60:15:18:dd:2f:b1:f6:27:c5:3e:70:f3:be:c2:ff:b4:22:
         e6:7f:58:12:31:46:50:8a:15:5d:27:53:55:d6:8f:7a:9f:a6:
         d9:b8:d4:2e:74:6c:59:91:cf:a1:68:bd:14:ac:3c:64:58:0c:
         46:a6:a2:55:e2:fb:06:10:69:27:00:75:0d:63:37:07:69:ee:
         b0:47:a3:20:c7:e6:20:63:a4:b0:08:e7:35:54:7b:31:1d:69:
         75:d3:81:f6:92:74:55:3e:71:4b:d5:d2:81:4f:18:2e:8b:12:
         44:47:50:07:5b:eb:50:a9:a7:b1:5d:e9:00:4a:8c:e5:4c:fb:
         fb:9d:77:24:e2:6b:b3:ea:81:1d:98:43:6c:37:4c:df:9f:90:
         c8:22:d8:ae:7c:bb:36:2c:fd:ca:96:cd:af:5f:0e:fb:66:9c:
         a2:75:2d:c8:0d:19:b7:4d:6e:fe:1e:dc:52:26:36:d1:e4:57:
         26:84:6c:90:06:f4:be:70:4e:58:27:81:e4:cb:a4:6f:b1:3a:
         c3:98:af:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:26:01 2025 by rpki-client