Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
File:                     28sc89PzzcNCb7SfCgwz3ATIaBw.mft (raw, json)
Hash identifier:          Gm+nYsVpgWigRdTz45xLrNHwHW4CF3GSwC+QX1bqPNQ=
Subject key identifier:   89:09:AC:17:54:C4:CC:AB:51:B6:A4:61:98:CD:6F:2E:19:23:AE:B4
Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
Certificate issuer:       /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Certificate serial:       019872988367C56717F230D6C587F93D7FA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
Manifest number:          0FAC
Signing time:             Mon 04 Aug 2025 01:00:54 +0000
Manifest this update:     Mon 04 Aug 2025 01:00:54 +0000
Manifest next update:     Tue 05 Aug 2025 01:00:54 +0000
Files and hashes:         1: 28sc89PzzcNCb7SfCgwz3ATIaBw.crl (hash: Waqo3Z/Xu015nUr3Napy73hY9ACYt7ttROD4k2Af664=)
                          2: I5ms-9-HDQyJVXC11lx_-uEpynE.roa (hash: +pNOsJjPZEu3zURh4NPSrLLV4Ki6TCXOgrQW5jhS4rs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:83:67:c5:67:17:f2:30:d6:c5:87:f9:3d:7f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
        Validity
            Not Before: Aug  4 01:00:54 2025 GMT
            Not After : Aug  5 01:00:54 2025 GMT
        Subject: CN=8909ac1754c4ccab51b6a46198cd6f2e1923aeb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:41:47:29:f4:cd:10:1c:5e:a4:30:c0:8e:b9:
                    91:d5:78:d0:4d:0a:b1:a3:4f:2e:1e:a7:77:be:0d:
                    19:b3:fc:e7:77:27:3e:95:1b:4c:d6:c4:15:68:17:
                    f0:21:27:24:7f:dc:8c:8b:a3:23:f5:b1:1d:27:61:
                    87:44:3f:02:b4:a3:d2:f2:6b:ec:18:3e:cd:61:76:
                    ac:58:fa:11:32:07:9a:dc:8b:98:42:ae:e0:96:1f:
                    eb:d2:d8:9d:14:9e:b4:ef:00:3a:b5:46:98:4b:27:
                    9a:dc:7f:66:27:53:6d:61:83:6f:ba:5b:fc:e9:97:
                    d6:a3:b4:84:c2:56:59:ef:2c:b0:3c:5a:f1:de:ad:
                    9d:1d:94:a3:62:e0:1b:96:af:7a:51:7a:db:56:7a:
                    fb:b5:49:9e:26:35:67:e5:a1:7a:55:e9:7b:3b:d6:
                    6f:f3:01:c6:f3:27:71:6f:a7:2a:52:cb:3d:98:f9:
                    fd:72:dd:4f:88:02:03:2f:86:34:6b:3c:73:6e:87:
                    f8:ce:8b:1d:21:33:bf:74:23:19:6e:45:4a:ae:7d:
                    c4:66:d9:87:17:b5:1a:66:09:9d:41:3e:78:ce:e2:
                    44:92:8b:1a:1e:7c:ef:7a:46:26:95:1b:bc:d4:79:
                    c0:1b:e6:95:d5:95:ab:7c:c6:9d:1e:82:b0:4d:94:
                    fa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:09:AC:17:54:C4:CC:AB:51:B6:A4:61:98:CD:6F:2E:19:23:AE:B4
            X509v3 Authority Key Identifier:
                keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:bd:28:8d:b3:ca:25:c0:f8:79:98:03:c7:8d:d6:e6:18:b9:
         f5:78:f0:0e:be:57:af:37:d4:6a:37:ab:80:ce:0a:fd:4c:ae:
         01:d3:d5:22:6b:33:48:6a:5a:94:fa:5d:c1:8f:5b:54:b4:28:
         5f:0b:b8:58:ae:88:c1:02:1f:dd:be:f9:7d:b2:17:95:d0:bc:
         e4:f8:27:2a:b1:ee:6a:33:31:ce:10:96:dc:6a:c9:48:02:be:
         27:88:8c:b0:43:72:36:a4:0b:af:5b:32:a5:00:0d:55:5b:a8:
         1e:50:9d:1a:0e:0b:e5:4b:db:75:35:95:cd:96:31:c5:12:04:
         3e:c0:1c:e6:a6:eb:d9:df:0c:dd:b7:ca:df:cb:3a:bb:20:1f:
         d8:33:28:c7:ee:9f:26:54:dc:00:6e:03:1c:ec:b9:a0:55:c8:
         6d:9f:ac:98:7e:03:8c:54:c6:9c:0a:1a:71:80:12:57:4e:4a:
         4a:3c:76:7c:9e:a4:e8:27:21:74:c5:58:3a:02:12:7a:5c:f0:
         5a:47:49:11:c7:84:8f:42:e1:24:48:56:f0:04:84:2d:a0:d4:
         04:0c:75:56:fa:a5:2c:c0:bf:ae:ef:bf:a0:92:b4:c3:18:23:
         af:5f:6c:44:28:66:09:ee:19:8f:19:68:06:a7:6b:ab:8d:61:
         22:a6:e1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:02 2025 by rpki-client