Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
File:                     58B9uYgBM8XNzgBbyhEbVSzRTFM.mft (raw, json)
Hash identifier:          msCKGYjLj3uxkN+jc1G75aDOwXK9rwoRrOClsuM0BTQ=
Subject key identifier:   06:2D:9B:28:F7:FD:14:A1:32:49:32:5D:B5:DB:6E:A9:FD:D8:5F:5D
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Certificate issuer:       /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial:       019745F97900967A94A40FCE19BE7BE073F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
Manifest number:          0A34
Signing time:             Fri 06 Jun 2025 16:01:06 +0000
Manifest this update:     Fri 06 Jun 2025 16:01:06 +0000
Manifest next update:     Sat 07 Jun 2025 16:01:06 +0000
Files and hashes:         1: 3pxtcoitrFP84ablFN0e1N99UbU.roa (hash: 3rHwb/LGbKBgtS++gv9s6PE/pIkC8kqsGTnPOdr75VM=)
                          2: 58B9uYgBM8XNzgBbyhEbVSzRTFM.crl (hash: aD4wvlJNjB2j7QaNHU9m5IzlqbUOZgslE3YOJ7BfLVM=)
                          3: 83jnw3_iQXavgLNpPArd0mjD8v0.roa (hash: SHfszJ5S+RcUzQDWjfFykPyoXsOFj+P+O7U1p7lsd+k=)
                          4: 9TCbC5ZMWTliQOKPmZ8VOSeIZEs.roa (hash: ladwpTnVncQtchwvagqScI9AqnIAoqG+BVd9xXCXOlU=)
                          5: _sBQ-iEtTw6n3_2GUf1kdKinw6k.roa (hash: 2pQWnwaXMMFBZzZKZwaCBzryPcNsmH6tse3213iQbEg=)
                          6: hsyRrTmHUFy-dvGlMuWHGJoh8Ws.roa (hash: uXGOwuMsPP7paFlNgchG8Ort4AQoj239eYXxGZv6OVk=)
                          7: la2dPjbXAEn7TCutV5FDNd87YgY.roa (hash: Cy/GkdDa8H/gyDAs0CMDjYPIaE/yLrgi+H+nowssrsc=)
                          8: wrGzB70sU_9SIqxlx-1pOzK4ufs.roa (hash: hctgdi4NMknx7R7SWF0OvSDThJO+cXqWTsV2GWgcQfc=)
                          9: xDf42bpWqRCsDPxTubWSXNuBqFg.roa (hash: YkhsAjaT83vQpIvIVaLxfqKkzhztD+nQzU/2yzJtmvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:f9:79:00:96:7a:94:a4:0f:ce:19:be:7b:e0:73:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
        Validity
            Not Before: Jun  6 16:01:06 2025 GMT
            Not After : Jun  7 16:01:06 2025 GMT
        Subject: CN=062d9b28f7fd14a13249325db5db6ea9fdd85f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3a:fc:38:d7:61:b4:ea:a8:c4:7e:2c:11:41:
                    f6:e0:c9:79:8d:74:21:fe:a2:8d:b3:0d:21:36:15:
                    fb:cf:74:89:62:d6:74:6d:60:48:00:13:eb:2d:0e:
                    39:77:cb:e9:82:d6:15:01:d8:83:d2:9f:db:f6:9b:
                    61:a1:8e:c4:7d:c0:a4:43:90:77:07:91:30:b0:7e:
                    2f:3c:a1:f9:e3:a4:ad:a6:23:e9:3c:cf:94:15:e6:
                    ca:ea:94:f2:78:b4:50:35:d7:21:83:8b:c6:3a:5a:
                    69:c2:bd:24:0b:a9:b2:3a:d9:b7:29:d6:71:12:1e:
                    2e:0a:81:c1:88:70:8a:71:e4:2a:ad:4f:e7:c8:2b:
                    97:3b:7c:35:b3:58:1d:8e:02:87:3b:b6:bd:35:26:
                    7c:dc:fb:93:ea:0b:67:a8:e6:d9:2f:d8:63:97:e2:
                    4e:d0:24:a5:32:f2:b2:f4:1e:2b:95:4c:67:c1:65:
                    70:76:5b:99:f9:46:89:ee:d3:f1:2b:ac:ac:c9:3b:
                    d7:3f:79:19:6d:a3:ab:1a:26:dc:f6:20:6e:03:10:
                    3a:c8:ad:65:ec:5a:7a:cc:21:b5:b9:42:e5:ef:07:
                    14:95:64:50:b7:52:00:a4:77:54:38:d1:cd:ac:a2:
                    d7:ca:ca:76:d4:06:f9:ae:65:20:bf:07:5d:3d:e1:
                    cf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2D:9B:28:F7:FD:14:A1:32:49:32:5D:B5:DB:6E:A9:FD:D8:5F:5D
            X509v3 Authority Key Identifier:
                keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:e4:64:ff:cc:a5:ca:dd:9b:81:a7:bd:c9:b2:9d:aa:bb:2c:
         b1:bc:fa:89:78:0c:81:76:98:8f:3b:26:07:c0:b7:e7:65:d8:
         44:e9:c8:71:4d:ec:9e:db:75:d9:93:3b:b2:75:a2:c4:5b:b0:
         83:4b:d6:05:88:d7:1c:db:83:a6:5f:76:7d:04:5b:09:33:4a:
         24:9d:cd:e1:de:4c:a8:32:1b:75:af:e7:2d:c5:66:60:60:9c:
         b3:6c:be:d4:38:24:c0:a3:3c:db:c2:2b:2a:e7:6d:cf:4b:4e:
         db:d7:2a:33:8c:75:d6:50:ce:4b:d9:f9:1b:bc:0b:e8:a3:f2:
         c7:bd:b3:27:2c:08:c3:9d:21:5d:b4:3a:c9:83:b9:2c:9b:38:
         30:11:ea:76:34:9a:f6:0e:5d:da:0d:0a:77:26:3a:84:38:cd:
         34:46:7f:06:f5:6d:9b:4f:a3:9c:27:28:54:c8:1f:4d:d6:cf:
         00:64:37:3b:43:80:49:1f:c4:07:7c:6a:d0:4e:e4:ce:d1:62:
         f4:78:73:a3:64:07:fc:f0:3c:d4:5b:d3:ba:19:42:04:99:5d:
         1e:f0:ad:93:89:12:94:10:ac:88:a1:d1:8c:5b:29:8f:0c:8f:
         28:3d:1f:57:0c:59:f4:8c:86:9d:bf:45:b2:1e:4d:13:77:35:
         9d:91:7b:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdF+XkAlnqUpA/OGb574HP0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YzA3ZGI5ODgwMTMzYzVjZGNlMDA1YmNhMTExYjU1MmNk
MTRjNTMwHhcNMjUwNjA2MTYwMTA2WhcNMjUwNjA3MTYwMTA2WjAzMTEwLwYDVQQD
EygwNjJkOWIyOGY3ZmQxNGExMzI0OTMyNWRiNWRiNmVhOWZkZDg1ZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujr8ONdhtOqoxH4sEUH24Ml5jXQh
/qKNsw0hNhX7z3SJYtZ0bWBIABPrLQ45d8vpgtYVAdiD0p/b9pthoY7EfcCkQ5B3
B5EwsH4vPKH546StpiPpPM+UFebK6pTyeLRQNdchg4vGOlppwr0kC6myOtm3KdZx
Eh4uCoHBiHCKceQqrU/nyCuXO3w1s1gdjgKHO7a9NSZ83PuT6gtnqObZL9hjl+JO
0CSlMvKy9B4rlUxnwWVwdluZ+UaJ7tPxK6ysyTvXP3kZbaOrGibc9iBuAxA6yK1l
7Fp6zCG1uULl7wcUlWRQt1IApHdUONHNrKLXysp21Ab5rmUgvwddPeHPTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYtmyj3/RShMkkyXbXbbqn92F9dMB8GA1UdIwQY
MBaAFOfAfbmIATPFzc4AW8oRG1Us0UxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMt
MGFhNDYzY2RmY2EwLzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMtMGFhNDYzY2RmY2Ew
LzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJuRk/8yl
yt2bgae9ybKdqrsssbz6iXgMgXaYjzsmB8C352XYROnIcU3sntt12ZM7snWixFuw
g0vWBYjXHNuDpl92fQRbCTNKJJ3N4d5MqDIbda/nLcVmYGCcs2y+1DgkwKM828Ir
Kudtz0tO29cqM4x11lDOS9n5G7wL6KPyx72zJywIw50hXbQ6yYO5LJs4MBHqdjSa
9g5d2g0KdyY6hDjNNEZ/BvVtm0+jnCcoVMgfTdbPAGQ3O0OASR/EB3xq0E7kztFi
9Hhzo2QH/PA81FvTuhlCBJldHvCtk4kSlBCsiKHRjFspjwyPKD0fVwxZ9IyGnb9F
sh5NE3c1nZF74A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:12 2025 by rpki-client