Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
File:                     CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft (raw, json)
Hash identifier:          RtQjn8AmTE5acQW1v6vIZd5pdHs0tyhf+qVe8jgWzo0=
Subject key identifier:   58:CF:BC:D1:A2:03:3C:2F:28:F2:0A:7C:CF:5D:B8:FC:AA:98:26:5C
Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
Certificate issuer:       /CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Certificate serial:       019922FA760C7255D6D859CF12364DAD7BC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
Manifest number:          CC
Signing time:             Sun 07 Sep 2025 07:01:03 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:03 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:03 +0000
Files and hashes:         1: 0En_rM3ItFKYLhaLLd8WBZOTlpA.roa (hash: 152maO322NYmeUI+2QBI3Muc080/yMuLJaeicPAME94=)
                          2: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl (hash: U5hiUs57mTR1pn6zf88AS8HeFyUCHdFPqSMUtwbfp5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:76:0c:72:55:d6:d8:59:cf:12:36:4d:ad:7b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5
        Validity
            Not Before: Sep  7 07:01:03 2025 GMT
            Not After : Sep  8 07:01:03 2025 GMT
        Subject: CN=58cfbcd1a2033c2f28f20a7ccf5db8fcaa98265c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e2:2c:87:d5:b2:b2:5c:f0:63:e1:14:07:f8:
                    da:d3:dc:1d:13:67:b3:58:c1:e8:2c:2e:63:fa:74:
                    0c:71:e2:2b:a5:01:95:6d:ab:86:ba:0b:8e:55:f3:
                    bf:c1:0f:29:6d:dd:9d:8b:1f:4d:6e:d2:d9:e5:de:
                    c9:f3:ee:aa:b6:bd:93:96:cf:7c:4a:62:b9:03:da:
                    ce:79:0c:06:49:34:8d:42:0c:b1:b1:af:03:10:7a:
                    a7:0b:56:5f:49:f7:92:e1:6e:b1:cf:02:f9:b4:07:
                    31:6a:66:63:1e:cf:9c:3a:69:15:27:55:1a:c6:01:
                    49:7b:67:49:58:aa:63:1e:02:f2:57:64:9b:a9:27:
                    0f:55:ab:28:e8:82:8d:07:e9:4c:4c:e6:e0:c0:f5:
                    b1:13:dd:38:f4:3f:9f:75:21:8e:26:12:be:17:61:
                    1c:85:23:86:26:ad:2d:0f:96:7f:1d:c6:0b:aa:60:
                    c8:e8:c0:43:7c:1f:e5:e4:19:a1:f7:1d:88:12:03:
                    ac:f2:d5:0f:39:29:06:dd:ff:08:52:a3:e6:8d:d9:
                    c9:2d:a3:19:dd:b8:28:1e:fd:8d:56:fe:28:b7:d3:
                    81:63:87:f6:39:2b:63:fd:9d:62:6e:42:84:e8:34:
                    28:cb:9b:70:57:46:5b:53:6d:e4:2b:41:19:3c:c1:
                    28:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CF:BC:D1:A2:03:3C:2F:28:F2:0A:7C:CF:5D:B8:FC:AA:98:26:5C
            X509v3 Authority Key Identifier:
                keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:bc:11:52:70:72:ed:f0:10:e4:97:81:89:fa:55:87:cd:66:
         bf:50:cf:f7:c7:96:af:ac:2e:01:21:97:af:3c:8b:41:54:bf:
         1a:33:7c:65:06:2a:44:8b:70:b5:b7:0d:c5:0d:b2:85:36:e4:
         ac:13:9a:ba:c9:5e:6d:c4:dd:06:1f:8a:25:db:ff:ba:61:74:
         e7:5c:7f:92:6c:40:b0:03:8c:5d:30:63:14:57:d8:5a:f8:5d:
         6e:63:d4:8a:3e:ae:2c:3a:9a:98:fc:a9:a2:99:a2:05:e5:b7:
         7b:0b:5f:77:b6:0e:c3:5d:02:cb:5e:30:6d:df:01:03:b9:9a:
         bd:d7:8a:ab:77:17:e8:03:37:c2:21:88:16:a8:e9:11:b9:e7:
         e2:99:68:51:a1:90:2f:93:67:fd:38:2b:d4:92:b2:13:61:5e:
         c9:9f:15:13:62:06:b5:84:14:34:56:b7:7c:92:3c:8b:2c:78:
         56:82:bb:29:d4:a0:1d:0f:85:86:1d:c2:74:68:ef:f9:18:0a:
         db:51:b1:44:f1:99:26:62:c2:75:9f:a3:65:26:6b:18:b6:21:
         05:e5:55:eb:1e:69:35:55:10:91:91:db:e5:24:99:3e:b8:58:
         48:39:8c:32:02:a0:ec:39:27:07:5d:ac:f4:04:54:b6:2d:14:
         29:4a:41:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:55 2025 by rpki-client