Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.mft
File:                     27m8LeNs8jtonzxy6Aq8_kggJsE.mft (raw, json)
Hash identifier:          MSLzq62LxVc0u+a4CxZDVOEz8XIDK3cXbCuMLdGdp+Y=
Subject key identifier:   5F:CB:F6:01:FF:59:D5:E0:CE:D3:BD:27:0F:33:CF:A2:68:FE:0E:1D
Authority key identifier: DB:B9:BC:2D:E3:6C:F2:3B:68:9F:3C:72:E8:0A:BC:FE:48:20:26:C1
Certificate issuer:       /CN=dbb9bc2de36cf23b689f3c72e80abcfe482026c1
Certificate serial:       019893A391D98304769A036A0C421CEEB623
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.mft
Manifest number:          11D3
Signing time:             Sun 10 Aug 2025 11:00:26 +0000
Manifest this update:     Sun 10 Aug 2025 11:00:26 +0000
Manifest next update:     Mon 11 Aug 2025 11:00:26 +0000
Files and hashes:         1: 27m8LeNs8jtonzxy6Aq8_kggJsE.crl (hash: ExyuQomX83RsUvzVjRns3DS6ZFgFb4eDDX5maa+2z9I=)
                          2: ClhEwRnDYw2TQH3RNosMAuvSTaM.roa (hash: zVMUBbJ0ZW19QPyVy2U8+UbE5LuoimUH2oM9U+S3avI=)
                          3: EgOdjBrfQhYe-5HtZ0gCvVASgOk.roa (hash: rlcHKNxqzbJZK9gtci2o/2aqsd2FZRiITmisyzoxH20=)
                          4: Tcdkc_pLid4bj31FVcmiyvaPqWk.roa (hash: GaSdD3u1V54qfiVL17STtf24nCmyDEzVmYt0IeL8i0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:a3:91:d9:83:04:76:9a:03:6a:0c:42:1c:ee:b6:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbb9bc2de36cf23b689f3c72e80abcfe482026c1
        Validity
            Not Before: Aug 10 11:00:26 2025 GMT
            Not After : Aug 11 11:00:26 2025 GMT
        Subject: CN=5fcbf601ff59d5e0ced3bd270f33cfa268fe0e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:40:89:fe:5a:e0:6b:ca:d8:9f:64:72:e1:dc:
                    f8:a8:7b:fe:ef:b9:90:05:bb:f8:4b:e7:fb:24:b2:
                    6b:fd:14:f2:a7:4f:a7:c7:94:56:95:83:05:0d:42:
                    bb:a5:0f:cd:1a:b0:56:da:1c:3b:88:8f:1e:8b:2c:
                    28:a2:12:e6:f7:30:f0:e7:98:1f:db:35:b7:15:aa:
                    f8:c2:5c:71:2d:58:5c:f8:b7:67:16:e9:9d:93:27:
                    00:47:3e:b1:3c:0e:bd:fb:1d:93:d8:0d:18:2f:80:
                    a5:9f:4c:b1:98:78:58:f7:af:ca:94:c3:72:ff:a8:
                    da:14:8c:3b:90:a9:e7:5d:bf:2d:24:52:b5:68:cd:
                    f3:6b:12:9b:5e:c7:aa:1c:fe:05:6b:95:55:c0:de:
                    ec:15:25:a8:c8:1e:b7:fe:c5:14:4c:29:4e:ac:ec:
                    41:86:6f:8e:2d:90:b9:e6:7b:f9:2b:63:44:55:18:
                    59:a9:48:b6:40:7f:ce:ef:fa:57:19:6d:8b:f5:b9:
                    cf:21:de:f5:b3:c5:c5:d9:b9:3b:a9:82:0a:da:a4:
                    c3:ff:1a:73:cf:cb:5a:5d:3d:cd:9a:a6:79:47:90:
                    c3:57:e1:f4:40:36:a8:4f:be:6b:62:58:66:13:df:
                    db:c3:dd:a2:71:ba:9c:12:7d:b9:05:f4:2c:1f:32:
                    7b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CB:F6:01:FF:59:D5:E0:CE:D3:BD:27:0F:33:CF:A2:68:FE:0E:1D
            X509v3 Authority Key Identifier:
                keyid:DB:B9:BC:2D:E3:6C:F2:3B:68:9F:3C:72:E8:0A:BC:FE:48:20:26:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:a2:dd:79:3e:27:f8:00:71:e3:5f:e6:ca:75:4d:6b:8f:b7:
         64:82:6b:74:df:2c:5e:f9:d7:cd:4c:59:7b:3e:1c:92:e7:40:
         5e:fc:9f:76:ae:b2:c5:d6:1d:c1:fc:3d:b5:eb:11:b3:33:64:
         f9:b1:11:b8:f7:e7:5f:ab:15:9b:e3:d2:5a:35:20:c6:3e:b0:
         3a:ca:33:6c:0b:5c:84:90:c7:07:da:0d:91:ad:df:63:18:7d:
         ee:6a:6b:28:d6:57:9e:67:3f:44:e3:f4:48:f4:d6:6f:67:07:
         8e:d0:08:15:79:78:45:1f:20:af:2e:27:51:54:ae:56:ed:9e:
         7b:e1:a4:57:02:b7:9b:41:1d:92:aa:a4:97:cc:a6:1b:41:5b:
         15:5e:1e:e0:fe:4a:32:47:bf:df:01:18:ed:77:25:11:fb:9f:
         8c:7d:16:4b:a7:12:6b:f4:e3:fc:04:38:1e:5f:c9:16:6b:c5:
         f8:0e:c2:75:17:8d:f4:93:26:53:13:1e:9c:91:db:6c:66:94:
         f0:f1:c4:7a:51:ae:ff:e6:5f:d7:f5:e3:e6:17:5f:c0:f1:91:
         13:e9:e4:bd:16:91:0b:87:af:e1:ef:a7:cb:a9:b9:ad:35:f8:
         88:ee:8b:57:e8:61:42:f5:b1:cf:c5:cc:2b:f0:a5:ec:50:f1:
         a1:e7:02:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:02:05 2025 by rpki-client