Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
File:                     58fsjXgFA9t8q8sUHWuZHNAppqI.mft (raw, json)
Hash identifier:          mcj0x6jvWnCQMMry66WsglVRIbYGEg4ztvTWDS5hWtQ=
Subject key identifier:   26:90:16:4D:10:B2:4D:05:D1:7E:13:9E:80:B3:16:AF:AD:6B:57:F0
Authority key identifier: E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2
Certificate issuer:       /CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2
Certificate serial:       0199FC8F6BFA3095D69A3620AA40D8DC99B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
Manifest number:          10DD
Signing time:             Sun 19 Oct 2025 13:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:21 +0000
Files and hashes:         1: 58fsjXgFA9t8q8sUHWuZHNAppqI.crl (hash: +zQG/pcDLRCYFOYHgEgm9UcuKkHJCbUHh1IbewEc3RM=)
                          2: Gr2bTac37FdQF97pGkH13J5M8LQ.roa (hash: oaatGmufJtltyljxjCY0yrTcOMqVjEXZ2p4QbghN278=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:6b:fa:30:95:d6:9a:36:20:aa:40:d8:dc:99:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2
        Validity
            Not Before: Oct 19 13:01:21 2025 GMT
            Not After : Oct 20 13:01:21 2025 GMT
        Subject: CN=2690164d10b24d05d17e139e80b316afad6b57f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:5e:13:1f:2f:74:f5:46:1a:f7:a2:fb:13:
                    93:7c:59:e9:dc:29:e3:04:62:ec:8a:8a:30:a3:35:
                    e4:a5:71:55:96:7b:b6:7e:6a:b4:0f:69:54:b1:55:
                    a3:91:3f:7f:ad:57:24:bb:ac:72:3f:21:8d:af:5a:
                    69:85:3c:f5:e3:9b:96:63:55:d1:97:2b:08:be:0f:
                    d7:bc:8d:ff:99:54:8c:a4:4c:2a:55:2c:fb:73:ec:
                    4c:7c:d3:69:2d:6d:8d:fe:28:6d:da:1a:54:f6:61:
                    00:8a:9f:bd:11:d1:16:f7:18:ad:89:04:0c:36:7a:
                    69:7c:94:cf:ab:31:9d:e1:bd:57:6e:ec:23:97:62:
                    4c:37:1a:96:10:b6:dc:69:47:96:d1:af:ac:4c:b4:
                    5a:8d:7e:9b:e3:c5:d1:02:26:b1:be:70:1c:d1:f4:
                    77:5b:17:d3:96:81:8f:47:69:c1:29:39:1d:cd:56:
                    ae:bb:5d:dc:bc:41:33:19:be:38:f7:d3:ec:36:b3:
                    62:3f:5b:36:18:46:4e:15:7b:33:e6:d8:a4:ed:4c:
                    45:0c:cd:f8:8c:8a:2d:5f:af:4b:cf:82:e9:ee:84:
                    1f:24:b9:2a:ed:22:d7:94:65:8e:15:98:85:d4:92:
                    97:ca:85:9d:e7:83:dd:50:c7:21:30:5e:8d:e2:63:
                    4c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:90:16:4D:10:B2:4D:05:D1:7E:13:9E:80:B3:16:AF:AD:6B:57:F0
            X509v3 Authority Key Identifier:
                keyid:E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:30:3a:01:8d:ca:37:39:be:9b:ee:1c:80:7e:9c:39:df:a8:
         11:b8:fb:ef:80:20:75:9c:03:65:d6:6a:f4:4c:96:ea:1a:f5:
         81:12:21:cc:b4:a7:4f:72:01:39:20:8e:43:0b:e1:77:ae:1a:
         89:86:d4:7a:1f:c7:f1:1f:85:e9:29:21:dc:02:fa:95:ba:be:
         2c:03:af:23:14:25:41:7b:2a:87:68:89:52:4b:81:88:49:40:
         bc:0e:56:2e:9a:9c:4c:dc:19:7a:e2:f2:90:56:19:f5:74:7c:
         35:33:33:79:2a:d4:54:bb:98:6c:36:3e:12:79:73:b7:8c:fa:
         5d:37:e0:a5:f5:f8:1f:78:d8:08:07:ea:d4:2f:b7:81:1a:e7:
         05:61:ce:35:4b:54:1b:58:6a:05:d3:af:a7:a0:d5:0b:91:99:
         f6:13:e6:3b:a6:5d:4c:ae:c8:55:fe:e1:0b:c6:bf:4f:04:f9:
         cf:6d:4e:a2:62:69:40:d1:1b:3f:85:d5:25:e5:2b:76:23:6f:
         17:2b:85:48:f9:c5:8d:e6:dd:d5:72:d9:38:26:1a:2d:73:5b:
         4f:da:f6:3d:46:12:90:62:dd:b6:69:9e:d6:3f:2c:07:69:75:
         0b:fb:5a:a6:4d:76:b3:a2:8e:d8:2d:93:6d:70:36:e5:2b:fd:
         2c:e5:ab:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:22 2025 by rpki-client