Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
File:                     58B9uYgBM8XNzgBbyhEbVSzRTFM.mft (raw, json)
Hash identifier:          4N1qTazfvAkBVVEmlfnxNFBM25xCA6/eBxFLTC2NEqk=
Subject key identifier:   1A:A4:29:8F:E6:CA:F0:6E:CF:D3:03:01:7B:98:8A:D7:00:78:BA:A8
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Certificate issuer:       /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial:       0198394DB10B63690B707CBF827E98DF8623
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
Manifest number:          0AB2
Signing time:             Wed 23 Jul 2025 22:00:49 +0000
Manifest this update:     Wed 23 Jul 2025 22:00:49 +0000
Manifest next update:     Thu 24 Jul 2025 22:00:49 +0000
Files and hashes:         1: 3pxtcoitrFP84ablFN0e1N99UbU.roa (hash: 3rHwb/LGbKBgtS++gv9s6PE/pIkC8kqsGTnPOdr75VM=)
                          2: 58B9uYgBM8XNzgBbyhEbVSzRTFM.crl (hash: czUoUbx/4ErwlAhDsgtZ+TxYxfuYMIK5TklfcNcnqlo=)
                          3: 83jnw3_iQXavgLNpPArd0mjD8v0.roa (hash: SHfszJ5S+RcUzQDWjfFykPyoXsOFj+P+O7U1p7lsd+k=)
                          4: 9TCbC5ZMWTliQOKPmZ8VOSeIZEs.roa (hash: ladwpTnVncQtchwvagqScI9AqnIAoqG+BVd9xXCXOlU=)
                          5: _sBQ-iEtTw6n3_2GUf1kdKinw6k.roa (hash: 2pQWnwaXMMFBZzZKZwaCBzryPcNsmH6tse3213iQbEg=)
                          6: hsyRrTmHUFy-dvGlMuWHGJoh8Ws.roa (hash: uXGOwuMsPP7paFlNgchG8Ort4AQoj239eYXxGZv6OVk=)
                          7: la2dPjbXAEn7TCutV5FDNd87YgY.roa (hash: Cy/GkdDa8H/gyDAs0CMDjYPIaE/yLrgi+H+nowssrsc=)
                          8: wrGzB70sU_9SIqxlx-1pOzK4ufs.roa (hash: hctgdi4NMknx7R7SWF0OvSDThJO+cXqWTsV2GWgcQfc=)
                          9: xDf42bpWqRCsDPxTubWSXNuBqFg.roa (hash: YkhsAjaT83vQpIvIVaLxfqKkzhztD+nQzU/2yzJtmvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 22:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:39:4d:b1:0b:63:69:0b:70:7c:bf:82:7e:98:df:86:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
        Validity
            Not Before: Jul 23 22:00:49 2025 GMT
            Not After : Jul 24 22:00:49 2025 GMT
        Subject: CN=1aa4298fe6caf06ecfd303017b988ad70078baa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f1:4e:0b:56:58:8d:06:60:38:0f:6c:45:a5:
                    ba:bb:87:e7:4b:f1:1c:dd:60:b8:c5:16:f0:73:96:
                    75:4d:0f:b8:5e:2b:00:de:b0:5d:b2:5f:f3:26:0b:
                    c1:84:c2:71:23:b3:0e:5c:44:42:2c:28:66:50:68:
                    fd:c0:9a:d6:f7:af:84:77:05:b4:d0:4c:50:3d:10:
                    e5:58:57:5e:2f:e5:c6:88:93:d5:41:30:8b:b5:d8:
                    20:c9:56:83:69:81:04:4b:12:84:c9:2c:74:d0:6c:
                    81:10:b8:74:cb:9c:2e:4f:9d:2f:cf:f8:c5:19:09:
                    cb:2b:3f:5c:76:80:26:74:22:c7:33:b1:56:d9:0b:
                    43:33:ad:93:35:36:5c:5b:1f:20:ea:8f:28:1e:3c:
                    50:dc:c5:cf:c7:69:fe:ae:f2:bc:a0:f9:c1:28:3f:
                    13:6b:0c:a9:13:d2:05:0b:40:d2:31:89:50:33:a7:
                    f4:3e:d8:e6:99:0c:76:bf:34:b6:93:57:fc:ca:4f:
                    1d:db:06:e5:3b:4b:1e:cf:e5:e6:c5:ec:52:63:9e:
                    b3:fa:5a:a0:fc:fd:05:02:7b:04:15:b2:00:52:90:
                    5a:ac:ce:a8:bd:f2:ae:ae:91:12:c1:1a:fd:4f:16:
                    1c:7e:45:8b:5c:5d:68:c0:1f:69:4a:6b:fa:a6:6f:
                    1a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A4:29:8F:E6:CA:F0:6E:CF:D3:03:01:7B:98:8A:D7:00:78:BA:A8
            X509v3 Authority Key Identifier:
                keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:8d:9a:d2:10:c8:35:9e:53:1e:49:51:d3:17:3a:66:45:79:
         d3:7a:57:94:cb:ac:5f:ce:94:9a:9f:95:ca:d9:d2:a7:89:4a:
         d2:c0:1c:35:3a:32:cf:30:0d:96:a5:87:40:88:4e:c7:63:be:
         94:3c:de:2c:8f:70:f4:54:88:fb:ea:8c:17:a3:c2:cd:b2:7b:
         8f:9a:1e:d7:0c:17:8f:e1:49:03:45:cc:e2:5f:1c:f1:cd:6d:
         cc:8d:44:34:ee:ce:19:24:f3:ad:66:63:2e:9d:e7:84:78:dc:
         30:44:6d:4e:97:3f:c2:09:42:1d:a2:5a:29:a7:3f:d1:22:51:
         76:97:e7:47:d2:5b:91:b1:12:f1:b1:03:a5:4e:84:87:a9:f1:
         12:2c:92:9a:7c:3b:8b:a4:ee:01:3c:92:f1:5a:e9:33:b1:a4:
         f2:82:a5:5d:02:b5:61:37:49:a5:0b:25:2c:d6:b0:23:63:36:
         be:84:f8:e9:06:31:f6:47:a8:71:21:db:a6:a5:e7:24:2b:c7:
         15:b0:de:00:6e:d4:6c:8a:7f:31:85:ad:78:73:29:10:10:60:
         2c:9c:be:14:c3:27:f8:bb:6b:26:d5:dc:aa:21:29:77:d9:92:
         25:0c:32:32:39:48:d1:99:95:bc:0e:dd:fc:67:a3:23:18:4e:
         98:e4:85:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:29:55 2025 by rpki-client