Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
File:                     58yGJhOL8enLP9H-wmxoxKY0CWs.mft (raw, json)
Hash identifier:          QyQDZq8yNK9DiCbDs0N+6EYpO3mpW2b136XhVky8pkw=
Subject key identifier:   10:E0:60:7C:A5:25:78:D7:94:98:50:4B:3C:F9:FC:96:11:45:9F:53
Authority key identifier: E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
Certificate issuer:       /CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Certificate serial:       01965B7134FF27A264C140925E41558BF168
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
Manifest number:          0843
Signing time:             Tue 22 Apr 2025 03:01:07 +0000
Manifest this update:     Tue 22 Apr 2025 03:01:07 +0000
Manifest next update:     Wed 23 Apr 2025 03:01:07 +0000
Files and hashes:         1: 58yGJhOL8enLP9H-wmxoxKY0CWs.crl (hash: 36uj3k92nZLWuiDHcCTi9IcHGw8Va9OJ1ewSRBjtKT4=)
                          2: rj-L1Ht9KU4SpqytVvSZ8FykJs0.roa (hash: o5/pUFEbXRLCOB5XslmeCnU9+6JRYi7PIpvUyWlOL2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 03:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5b:71:34:ff:27:a2:64:c1:40:92:5e:41:55:8b:f1:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
        Validity
            Not Before: Apr 22 03:01:07 2025 GMT
            Not After : Apr 23 03:01:07 2025 GMT
        Subject: CN=10e0607ca52578d79498504b3cf9fc9611459f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cb:6d:6f:1e:cd:92:85:ce:8b:42:cf:b8:5f:
                    ed:e2:1c:58:f9:5d:17:1e:5b:34:08:a9:c2:28:5e:
                    d9:31:9d:1d:9d:24:44:d6:bd:b6:39:4f:44:43:d5:
                    54:79:4c:46:56:5b:13:ad:20:44:81:68:b8:94:f5:
                    5e:f9:19:88:45:82:61:5c:93:70:71:69:bf:f0:2c:
                    0f:c2:0f:53:88:a8:33:e1:d3:9b:83:08:9b:e3:61:
                    40:f9:69:87:a7:70:7c:41:1d:30:88:53:3b:5e:47:
                    73:31:1c:d6:ff:05:7e:97:bf:e9:25:d4:66:61:cd:
                    bd:0c:26:72:0b:8b:56:cd:ec:8c:79:eb:be:f7:fd:
                    6b:9d:a5:8d:d6:59:02:9e:85:20:dd:9d:65:53:cf:
                    3b:61:3b:b7:cc:f0:cf:0a:5c:56:2f:9a:b4:89:40:
                    59:7d:e5:47:0b:72:e1:e5:84:35:ca:20:82:ff:9d:
                    99:fb:b1:ef:39:3d:77:8b:20:0f:f9:97:fe:9c:2d:
                    ab:dc:e8:94:40:d6:80:b3:de:89:42:e3:90:94:b5:
                    e6:d4:7a:2c:12:ec:59:0f:7b:e9:a7:6f:4a:34:48:
                    fc:90:5c:dd:e1:a4:36:61:d4:7d:54:da:bd:0e:d1:
                    17:bf:4d:d8:16:dd:6f:8d:4d:2a:86:97:47:df:84:
                    37:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E0:60:7C:A5:25:78:D7:94:98:50:4B:3C:F9:FC:96:11:45:9F:53
            X509v3 Authority Key Identifier:
                keyid:E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:25:d7:95:cc:83:23:f0:8f:99:04:c5:8a:3f:19:8a:aa:54:
         02:cd:eb:5c:27:df:c4:b3:cd:43:2c:26:e9:0d:71:73:71:44:
         5d:6d:77:bc:cc:dc:7c:dd:51:16:5d:37:2f:4c:d9:97:35:e3:
         88:38:b4:4c:42:42:e1:fb:0f:83:9d:ca:91:5f:68:0a:00:9f:
         40:ba:86:ce:a0:47:aa:43:6f:cc:9a:0d:21:33:dc:eb:71:89:
         54:02:10:e7:af:a8:e0:d1:9f:2a:50:78:59:10:3a:71:f8:67:
         d8:b9:a0:36:47:1d:ac:7b:1c:50:28:8b:70:2e:25:12:2a:b6:
         ce:b2:ed:0e:cf:4d:eb:f1:0b:f5:78:e5:16:ce:69:6b:76:72:
         c7:d2:55:2d:93:df:37:54:d4:34:1c:9d:a9:8c:26:64:28:5f:
         77:aa:4e:8a:d5:e0:2c:52:cd:c6:57:07:0f:8f:eb:cc:82:27:
         2f:55:50:06:28:ab:13:f5:d1:f6:ef:59:6e:47:46:21:c7:d7:
         c8:5b:a6:de:2b:42:7f:06:a0:f7:47:8c:c4:f8:cf:9d:b4:c2:
         68:08:e2:62:58:31:76:09:34:dc:ce:69:fa:00:bb:bf:f2:63:
         1a:f1:f8:0a:e2:f0:1a:33:43:0b:87:b2:d9:8a:5d:5d:3e:62:
         de:4b:b3:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbcTT/J6JkwUCSXkFVi/FoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2M4NjI2MTM4YmYxZTljYjNmZDFmZWMyNmM2OGM0YTYz
NDA5NmIwHhcNMjUwNDIyMDMwMTA3WhcNMjUwNDIzMDMwMTA3WjAzMTEwLwYDVQQD
EygxMGUwNjA3Y2E1MjU3OGQ3OTQ5ODUwNGIzY2Y5ZmM5NjExNDU5ZjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMttbx7NkoXOi0LPuF/t4hxY+V0X
Hls0CKnCKF7ZMZ0dnSRE1r22OU9EQ9VUeUxGVlsTrSBEgWi4lPVe+RmIRYJhXJNw
cWm/8CwPwg9TiKgz4dObgwib42FA+WmHp3B8QR0wiFM7XkdzMRzW/wV+l7/pJdRm
Yc29DCZyC4tWzeyMeeu+9/1rnaWN1lkCnoUg3Z1lU887YTu3zPDPClxWL5q0iUBZ
feVHC3Lh5YQ1yiCC/52Z+7HvOT13iyAP+Zf+nC2r3OiUQNaAs96JQuOQlLXm1Hos
EuxZD3vpp29KNEj8kFzd4aQ2YdR9VNq9DtEXv03YFt1vjU0qhpdH34Q3TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDgYHylJXjXlJhQSzz5/JYRRZ9TMB8GA1UdIwQY
MBaAFOfMhiYTi/Hpyz/R/sJsaMSmNAlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84NmNjNDctZjBjMC00NzNhLWIxMWIt
ZjVjMDlmZjM4YTAwLzEvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84NmNjNDctZjBjMC00NzNhLWIxMWItZjVjMDlmZjM4YTAw
LzEvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSXXlcyD
I/CPmQTFij8ZiqpUAs3rXCffxLPNQywm6Q1xc3FEXW13vMzcfN1RFl03L0zZlzXj
iDi0TEJC4fsPg53KkV9oCgCfQLqGzqBHqkNvzJoNITPc63GJVAIQ56+o4NGfKlB4
WRA6cfhn2LmgNkcdrHscUCiLcC4lEiq2zrLtDs9N6/EL9XjlFs5pa3Zyx9JVLZPf
N1TUNBydqYwmZChfd6pOitXgLFLNxlcHD4/rzIInL1VQBiirE/XR9u9ZbkdGIcfX
yFum3itCfwag90eMxPjPnbTCaAjiYlgxdgk03M5p+gC7v/JjGvH4CuLwGjNDC4ey
2YpdXT5i3kuzkg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 11:28:16 2025 by rpki-client