Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
File:                     b027wGlmny5-iCL2OY9rNsRJNFw.mft (raw, json)
Hash identifier:          nLCs3NWpqnBJ7ySJzArblbOci6MpxTTHaWw4f5bfsPE=
Subject key identifier:   2B:B5:69:46:3E:02:CF:06:9A:B5:54:B5:0F:85:8D:27:B6:89:A4:9C
Authority key identifier: 6F:4D:BB:C0:69:66:9F:2E:7E:88:22:F6:39:8F:6B:36:C4:49:34:5C
Certificate issuer:       /CN=6f4dbbc069669f2e7e8822f6398f6b36c449345c
Certificate serial:       01987AF6B13EB8DA3DF540428E0475A8408B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
Manifest number:          1427
Signing time:             Tue 05 Aug 2025 16:00:44 +0000
Manifest this update:     Tue 05 Aug 2025 16:00:44 +0000
Manifest next update:     Wed 06 Aug 2025 16:00:44 +0000
Files and hashes:         1: b027wGlmny5-iCL2OY9rNsRJNFw.crl (hash: pFuUCdM+3XwLlCHtOnCjl7GPa4WloBq8YdED6FwiUxc=)
                          2: iG5MloBb0rNBUXMwGnMdFUHFQBI.roa (hash: /505m7zfXiVDkYV7zSm4uW5ug6R08YZLzHTRAa/aV2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 16:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:f6:b1:3e:b8:da:3d:f5:40:42:8e:04:75:a8:40:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f4dbbc069669f2e7e8822f6398f6b36c449345c
        Validity
            Not Before: Aug  5 16:00:44 2025 GMT
            Not After : Aug  6 16:00:44 2025 GMT
        Subject: CN=2bb569463e02cf069ab554b50f858d27b689a49c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:28:69:93:02:c7:50:85:84:7d:d3:d5:a0:b2:
                    a4:21:f0:5a:01:09:9f:53:7d:70:5d:5b:e6:8a:7d:
                    bb:5b:6d:69:2b:c9:d1:b1:90:55:ad:97:9b:6b:71:
                    a2:33:45:7c:7e:03:66:80:05:e5:a1:72:72:32:d9:
                    7d:2b:9f:39:41:ad:0b:eb:0b:90:89:36:2e:0c:1d:
                    34:ba:ad:76:fd:22:1b:32:b6:9f:8c:64:b7:8f:9b:
                    8d:27:d9:6b:e4:a7:ac:c1:88:c9:b7:5b:68:80:5e:
                    54:30:e4:43:50:f1:b6:97:cf:72:90:ee:4b:73:0a:
                    62:4c:50:9c:c1:5f:05:2b:5f:e4:f6:dc:66:c5:86:
                    98:7a:04:eb:8c:b9:6a:6f:a5:8f:67:eb:70:0b:a7:
                    04:bf:33:07:d6:bf:96:47:2e:23:a5:8e:bb:64:ce:
                    c1:e7:6d:dc:90:7e:e6:fb:bf:ba:34:37:4c:4a:44:
                    ce:9a:b4:02:67:b4:93:ec:d0:e5:26:e3:1d:0b:19:
                    f1:c8:59:49:99:7d:64:fa:bd:03:ff:0c:66:48:a6:
                    7f:6b:09:6e:b5:f6:ec:05:01:07:b7:ee:8c:de:9b:
                    ec:5c:8c:a8:eb:8c:21:3d:02:39:04:42:cd:48:1b:
                    5c:90:d6:14:41:a7:9e:e6:83:a2:7d:ac:a7:79:1a:
                    40:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B5:69:46:3E:02:CF:06:9A:B5:54:B5:0F:85:8D:27:B6:89:A4:9C
            X509v3 Authority Key Identifier:
                keyid:6F:4D:BB:C0:69:66:9F:2E:7E:88:22:F6:39:8F:6B:36:C4:49:34:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e5:23:8f:39:da:ba:31:2b:f8:21:5c:7d:94:07:63:87:84:
         a8:68:60:08:b3:d9:05:e4:3d:4f:60:31:a1:33:22:57:f7:6d:
         33:3b:02:da:be:ac:bf:74:64:29:f4:b4:33:b0:88:5b:b4:e5:
         b1:f3:7b:d4:12:60:e6:56:a2:35:6d:a0:4f:6f:e2:b6:b8:61:
         42:fa:ec:7f:20:e8:3c:96:11:39:e1:c9:2c:ae:be:e5:aa:7f:
         f0:ba:e9:57:5c:0e:90:bd:33:fe:8f:0d:b6:1e:8e:be:4b:80:
         83:11:c0:e2:ee:86:a4:29:29:01:0d:bb:97:23:49:77:d3:5c:
         59:5f:09:00:a2:3a:9d:24:78:80:8f:e2:a8:06:c0:1e:30:90:
         86:63:6d:9f:95:da:73:2a:30:a0:55:55:55:ab:69:0c:ea:99:
         9d:c1:f6:9d:c3:53:30:06:09:f8:35:ba:1b:30:37:62:c5:03:
         0d:19:ad:12:80:03:ad:37:40:c8:34:6b:ac:97:85:25:d7:f5:
         ef:ac:87:4e:81:4f:63:cf:18:3b:49:2a:24:92:44:17:c7:65:
         5d:83:9d:ee:7d:6c:00:4c:9f:90:a1:96:45:7f:70:29:51:d8:
         7a:f0:18:c3:f9:06:12:71:94:94:7f:d4:09:c1:f6:bd:f7:a1:
         93:56:14:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh69rE+uNo99UBCjgR1qECLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNGRiYmMwNjk2NjlmMmU3ZTg4MjJmNjM5OGY2YjM2YzQ0
OTM0NWMwHhcNMjUwODA1MTYwMDQ0WhcNMjUwODA2MTYwMDQ0WjAzMTEwLwYDVQQD
EygyYmI1Njk0NjNlMDJjZjA2OWFiNTU0YjUwZjg1OGQyN2I2ODlhNDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyhpkwLHUIWEfdPVoLKkIfBaAQmf
U31wXVvmin27W21pK8nRsZBVrZeba3GiM0V8fgNmgAXloXJyMtl9K585Qa0L6wuQ
iTYuDB00uq12/SIbMrafjGS3j5uNJ9lr5KeswYjJt1togF5UMORDUPG2l89ykO5L
cwpiTFCcwV8FK1/k9txmxYaYegTrjLlqb6WPZ+twC6cEvzMH1r+WRy4jpY67ZM7B
523ckH7m+7+6NDdMSkTOmrQCZ7ST7NDlJuMdCxnxyFlJmX1k+r0D/wxmSKZ/awlu
tfbsBQEHt+6M3pvsXIyo64whPQI5BELNSBtckNYUQaee5oOifayneRpAaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCu1aUY+As8GmrVUtQ+FjSe2iaScMB8GA1UdIwQY
MBaAFG9Nu8BpZp8ufogi9jmPazbESTRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjAyN3dHbG1ueTUtaUNMMk9ZOXJOc1JKTkZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9lNzM0MzYtMjI1MS00OWI0LWIzNTct
OTg0Yzk1N2EzNTNlLzEvYjAyN3dHbG1ueTUtaUNMMk9ZOXJOc1JKTkZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9lNzM0MzYtMjI1MS00OWI0LWIzNTctOTg0Yzk1N2EzNTNl
LzEvYjAyN3dHbG1ueTUtaUNMMk9ZOXJOc1JKTkZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeUjjzna
ujEr+CFcfZQHY4eEqGhgCLPZBeQ9T2AxoTMiV/dtMzsC2r6sv3RkKfS0M7CIW7Tl
sfN71BJg5laiNW2gT2/itrhhQvrsfyDoPJYROeHJLK6+5ap/8LrpV1wOkL0z/o8N
th6OvkuAgxHA4u6GpCkpAQ27lyNJd9NcWV8JAKI6nSR4gI/iqAbAHjCQhmNtn5Xa
cyowoFVVVatpDOqZncH2ncNTMAYJ+DW6GzA3YsUDDRmtEoADrTdAyDRrrJeFJdf1
76yHToFPY88YO0kqJJJEF8dlXYOd7n1sAEyfkKGWRX9wKVHYevAYw/kGEnGUlH/U
CcH2vfehk1YUMg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:55:24 2025 by rpki-client