Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
File:                     28sc89PzzcNCb7SfCgwz3ATIaBw.mft (raw, json)
Hash identifier:          sw4u084Om1Mazq7OPtS1itygojb88jY6tARcwoPgAgE=
Subject key identifier:   69:CF:10:CA:B9:2C:E1:A5:4C:AD:60:14:C9:A9:BB:B1:FF:FB:4A:79
Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
Certificate issuer:       /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Certificate serial:       019771BF3FAB845875A0C81CFEC715A4C115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
Manifest number:          0F27
Signing time:             Sun 15 Jun 2025 04:00:48 +0000
Manifest this update:     Sun 15 Jun 2025 04:00:48 +0000
Manifest next update:     Mon 16 Jun 2025 04:00:48 +0000
Files and hashes:         1: 28sc89PzzcNCb7SfCgwz3ATIaBw.crl (hash: gVAretFZKPKlZlsUNRlY1+4y9IV80eT1aHxG7uex/bs=)
                          2: I5ms-9-HDQyJVXC11lx_-uEpynE.roa (hash: +pNOsJjPZEu3zURh4NPSrLLV4Ki6TCXOgrQW5jhS4rs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:bf:3f:ab:84:58:75:a0:c8:1c:fe:c7:15:a4:c1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
        Validity
            Not Before: Jun 15 04:00:48 2025 GMT
            Not After : Jun 16 04:00:48 2025 GMT
        Subject: CN=69cf10cab92ce1a54cad6014c9a9bbb1fffb4a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:bf:a9:fe:87:fa:07:a0:5d:5b:e3:64:5e:
                    ca:c0:ef:44:61:f3:7f:7b:0c:51:68:cd:25:34:0c:
                    cf:68:e8:e7:0e:ba:0d:38:0c:67:97:b9:74:46:dc:
                    73:97:a0:25:b6:9c:cf:68:8f:8e:3a:10:d7:40:c5:
                    59:a9:c7:23:0b:81:0e:c1:05:c4:e4:e5:f1:fa:4a:
                    8a:9a:a8:75:27:25:74:d6:61:07:ad:12:ab:6c:f4:
                    9a:e0:83:13:07:ab:0c:ee:43:f4:0b:a5:95:df:dd:
                    dd:d0:95:0d:25:cf:8c:2d:74:53:f9:0c:29:cb:be:
                    cd:59:c8:bf:c6:5b:82:af:22:a3:67:df:07:a9:24:
                    f6:1b:97:05:a7:a7:7e:92:1b:18:57:cb:cf:73:41:
                    68:23:fe:02:8d:81:bf:67:16:0e:4b:4c:39:71:31:
                    08:41:1f:7b:e9:41:f5:56:56:c1:cd:2d:ac:61:8d:
                    76:fd:79:eb:17:4c:8a:da:d7:64:bf:b8:1d:2e:71:
                    d1:0d:23:cf:11:21:8d:5c:5f:25:23:f6:9b:81:2e:
                    a5:46:bf:8c:1f:90:6b:67:01:60:a9:79:d3:2c:a9:
                    4f:ad:3f:98:e1:22:5e:f7:15:dc:e5:3e:80:3c:6e:
                    a4:4e:e4:dc:dd:09:7c:16:d9:7e:5d:cb:e9:c9:82:
                    bf:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CF:10:CA:B9:2C:E1:A5:4C:AD:60:14:C9:A9:BB:B1:FF:FB:4A:79
            X509v3 Authority Key Identifier:
                keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:3f:3b:ee:f7:b4:f9:d7:24:f1:9c:1e:92:93:5e:1a:97:2f:
         da:14:bf:17:4c:2c:37:85:fd:fe:da:30:4e:fa:2b:16:0b:1a:
         00:ea:b5:69:43:43:2d:ee:cf:1e:8a:bf:ba:cd:1c:f2:7b:0b:
         d7:7a:32:40:45:05:35:52:ee:a9:2c:11:01:02:98:b2:56:17:
         91:70:e9:09:aa:62:2c:19:30:3c:dc:08:c0:9f:cc:ae:ef:3b:
         a6:08:0e:26:9c:1a:4d:d4:db:34:0e:9a:ee:17:0b:dd:71:3e:
         6a:21:93:08:2a:bb:9b:a7:01:cd:2b:a2:df:fe:66:e6:82:c8:
         95:a5:f0:4f:16:52:6b:d8:32:84:fd:ee:09:c1:23:c3:cb:e0:
         3f:02:77:b1:6a:87:ae:9d:18:cd:9b:5c:ea:e3:f1:85:7d:d4:
         b6:dc:d0:0d:22:ea:9d:41:09:86:2f:f3:88:c6:a3:85:54:3b:
         25:b3:03:2c:53:25:97:99:50:76:31:5b:97:07:3d:d0:d7:5f:
         fe:06:5b:f4:0f:9b:23:b4:24:f3:9c:85:0a:9b:9d:78:e6:86:
         21:dc:aa:5e:f0:ca:f4:ec:8c:76:7a:e2:f6:6e:a5:05:7a:c3:
         95:9d:c3:3a:e4:79:a6:3a:e1:be:28:07:d6:45:b4:bd:2f:a4:
         b3:33:65:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxvz+rhFh1oMgc/scVpMEVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiY2IxY2YzZDNmM2NkYzM0MjZmYjQ5ZjBhMGMzM2RjMDRj
ODY4MWMwHhcNMjUwNjE1MDQwMDQ4WhcNMjUwNjE2MDQwMDQ4WjAzMTEwLwYDVQQD
Eyg2OWNmMTBjYWI5MmNlMWE1NGNhZDYwMTRjOWE5YmJiMWZmZmI0YTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSK/qf6H+gegXVvjZF7KwO9EYfN/
ewxRaM0lNAzPaOjnDroNOAxnl7l0Rtxzl6AltpzPaI+OOhDXQMVZqccjC4EOwQXE
5OXx+kqKmqh1JyV01mEHrRKrbPSa4IMTB6sM7kP0C6WV393d0JUNJc+MLXRT+Qwp
y77NWci/xluCryKjZ98HqST2G5cFp6d+khsYV8vPc0FoI/4CjYG/ZxYOS0w5cTEI
QR976UH1VlbBzS2sYY12/XnrF0yK2tdkv7gdLnHRDSPPESGNXF8lI/abgS6lRr+M
H5BrZwFgqXnTLKlPrT+Y4SJe9xXc5T6APG6kTuTc3Ql8Ftl+XcvpyYK/6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnPEMq5LOGlTK1gFMmpu7H/+0p5MB8GA1UdIwQY
MBaAFNvLHPPT883DQm+0nwoMM9wEyGgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0Mjgt
NzM2NjliYTYzZjdjLzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0MjgtNzM2NjliYTYzZjdj
LzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaj877ve0
+dck8ZwekpNeGpcv2hS/F0wsN4X9/towTvorFgsaAOq1aUNDLe7PHoq/us0c8nsL
13oyQEUFNVLuqSwRAQKYslYXkXDpCapiLBkwPNwIwJ/Mru87pggOJpwaTdTbNA6a
7hcL3XE+aiGTCCq7m6cBzSui3/5m5oLIlaXwTxZSa9gyhP3uCcEjw8vgPwJ3sWqH
rp0YzZtc6uPxhX3UttzQDSLqnUEJhi/ziMajhVQ7JbMDLFMll5lQdjFblwc90Ndf
/gZb9A+bI7Qk85yFCpudeOaGIdyqXvDK9OyMdnri9m6lBXrDlZ3DOuR5pjrhvigH
1kW0vS+kszNl4w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:41 2025 by rpki-client