Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
File:                     28lQCYQ2KBzuVCoedFRlUeHlUoM.mft (raw, json)
Hash identifier:          LM1nEssBD3qz/8JapE2dJpKlnAoO8elPzRZxdqxMkoU=
Subject key identifier:   45:00:73:3F:7D:DC:F2:76:62:DE:79:D3:66:FF:7F:AF:8E:06:C7:E1
Authority key identifier: DB:C9:50:09:84:36:28:1C:EE:54:2A:1E:74:54:65:51:E1:E5:52:83
Certificate issuer:       /CN=dbc950098436281cee542a1e74546551e1e55283
Certificate serial:       01988A6986C46DE49311B841CAE174F109D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
Manifest number:          1625
Signing time:             Fri 08 Aug 2025 16:00:27 +0000
Manifest this update:     Fri 08 Aug 2025 16:00:27 +0000
Manifest next update:     Sat 09 Aug 2025 16:00:27 +0000
Files and hashes:         1: 28lQCYQ2KBzuVCoedFRlUeHlUoM.crl (hash: XC13In5EabTDZyh0RPAaxDmWzPIHEaXz3h5tb47+nkc=)
                          2: 5OG6iGTbUMv4yreuCzltBDVdDTU.roa (hash: B8Cg7jxvmm1JBGJPeKqbsREjncwII7bdGdlW3Ml3/PA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:69:86:c4:6d:e4:93:11:b8:41:ca:e1:74:f1:09:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc950098436281cee542a1e74546551e1e55283
        Validity
            Not Before: Aug  8 16:00:27 2025 GMT
            Not After : Aug  9 16:00:27 2025 GMT
        Subject: CN=4500733f7ddcf27662de79d366ff7faf8e06c7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:63:22:4b:6b:27:3a:11:69:22:eb:97:e3:5c:
                    8b:ed:25:67:35:32:03:8f:51:e7:75:8b:e4:71:37:
                    0a:bf:20:ad:5f:65:28:9b:93:96:97:66:5b:14:6f:
                    f7:04:94:05:8b:41:2e:0b:a2:90:cc:9f:8e:76:f3:
                    20:8d:ac:c8:f3:76:0e:68:99:b9:b6:65:d8:76:60:
                    c6:b7:51:62:08:60:77:2e:64:bb:51:fb:d6:dc:25:
                    23:6d:43:c0:8d:30:53:45:2b:b4:1e:4a:0f:f2:6d:
                    ce:c8:06:75:64:8c:de:19:b3:0c:ab:ec:e0:40:2e:
                    b2:d4:c9:fa:2f:d5:e2:d6:1e:02:c4:b5:df:2f:49:
                    70:6b:ed:19:79:bf:9c:f6:12:0b:00:47:21:16:44:
                    ab:82:29:8e:d9:a9:de:dd:36:f5:f2:11:f4:f5:43:
                    f4:ab:7e:f7:a6:5b:49:2a:fd:61:fb:bc:7c:38:8c:
                    8a:2c:98:15:0b:44:fe:10:91:fd:78:7b:af:68:29:
                    9c:32:83:b2:bf:0f:5a:9c:4b:b7:c7:81:8c:20:f9:
                    6c:d7:ee:48:0b:cf:74:96:52:36:35:c4:6a:35:a9:
                    cd:a0:f6:b2:f7:fe:38:71:6b:34:59:3b:c1:ba:91:
                    a9:59:45:b0:fc:3f:da:b6:ab:1d:de:59:3b:a3:3a:
                    3b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:00:73:3F:7D:DC:F2:76:62:DE:79:D3:66:FF:7F:AF:8E:06:C7:E1
            X509v3 Authority Key Identifier:
                keyid:DB:C9:50:09:84:36:28:1C:EE:54:2A:1E:74:54:65:51:E1:E5:52:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d6:73:43:83:97:e3:0a:f3:f6:bc:7c:30:6f:81:3b:d2:28:
         ab:c8:67:e8:64:b7:c9:97:d4:5a:07:d9:d3:8a:af:44:83:05:
         39:3c:00:9e:b7:6e:0f:08:85:c9:ab:5d:78:27:d2:c7:56:76:
         50:83:b6:b7:f8:b7:e1:5e:c0:32:ec:f1:5a:01:f0:62:68:93:
         a5:0c:ff:a0:8e:8f:90:49:7d:87:10:4a:df:84:12:a6:0c:c4:
         3f:d1:06:3b:e3:c9:3b:63:a5:47:73:8d:8b:74:b2:cd:67:f7:
         09:e0:16:88:99:b2:94:a4:0b:87:71:7b:fd:29:3d:75:1c:d5:
         47:92:79:5f:35:e9:36:f7:92:74:55:3d:43:ac:58:ac:a0:e7:
         7e:1d:39:9e:de:51:d3:b0:a7:b6:45:ff:63:64:d0:0f:07:e3:
         bf:7d:d4:ce:6c:87:58:2c:19:d0:fc:db:7b:3b:44:78:4e:75:
         c5:7c:df:68:e2:f3:7e:4a:b7:b2:70:87:e8:96:4f:e9:c9:af:
         51:9a:c1:ca:e4:36:19:54:48:75:56:8f:5e:b2:61:42:0d:c3:
         c7:bf:a1:12:64:07:5a:37:4a:e5:26:95:15:4e:63:3a:e6:66:
         4a:4f:17:26:8b:5c:13:49:03:0e:a1:34:f7:62:88:21:c7:63:
         25:18:ce:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:45 2025 by rpki-client