Manifest

$ rpki-client -vvf 0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.mft
File:                     8228F35F3A87298DB3D06995A9C6C045721122B2.mft (raw, json)
Hash identifier:          rRzsWBBD49B3hvZxPuQSi6Ac9cFBHBqWrw4FitKZY4M=
Subject key identifier:   C5:FC:A9:48:58:36:94:70:A1:88:0A:43:6B:72:14:45:A6:CC:67:98
Authority key identifier: 82:28:F3:5F:3A:87:29:8D:B3:D0:69:95:A9:C6:C0:45:72:11:22:B2
Certificate issuer:       /CN=8228f35f3a87298db3d06995a9c6c045721122b2
Certificate serial:       2F7196E6B54D2A5E5E7207867DDB84CD1CC3F2C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gijzXzqHKY2z0GmVqcbARXIRIrI.cer
Subject info access:      rsync://0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.mft
Manifest number:          0689
Signing time:             Sun 29 Jun 2025 14:48:00 +0000
Manifest this update:     Sun 29 Jun 2025 14:43:00 +0000
Manifest next update:     Mon 30 Jun 2025 16:16:00 +0000
Files and hashes:         1: 326130643a613034303a3a2f32392d3438203d3e20323130343239.roa (hash: +7g+7j6SHpppuglAu2aLIHljmRGfZOIJtko5ZqEcRos=)
                          2: 3138352e34362e36382e302f32342d3234203d3e20323130343239.roa (hash: tE0Srdk2dHgDqBEOxXIA49xhQP/aqEF8BC7nrpDY4CQ=)
                          3: 8228F35F3A87298DB3D06995A9C6C045721122B2.crl (hash: mw/K9MXm7Ur/3FJj46FtBXPuOS3cp+3nZq5jIQmJg1c=)
Validation:               OK
Signature path:           rsync://0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.crl
                          rsync://0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gijzXzqHKY2z0GmVqcbARXIRIrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:71:96:e6:b5:4d:2a:5e:5e:72:07:86:7d:db:84:cd:1c:c3:f2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8228f35f3a87298db3d06995a9c6c045721122b2
        Validity
            Not Before: Jun 29 14:43:00 2025 GMT
            Not After : Jun 30 16:16:00 2025 GMT
        Subject: CN=C5FCA94858369470A1880A436B721445A6CC6798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d9:cb:4f:36:e8:61:66:ba:27:a4:ac:ca:a4:
                    ec:51:36:3e:e5:71:40:1e:93:5c:80:55:34:df:e4:
                    bb:e9:ca:67:e8:4f:da:a4:9b:02:69:58:73:96:a0:
                    4d:27:bd:91:59:21:ca:14:b7:25:a2:92:5b:84:80:
                    1f:33:b2:a7:d2:be:d7:a3:82:f2:e2:08:80:bf:76:
                    43:4a:3a:bd:04:e9:a1:54:ba:41:f4:38:ab:1d:49:
                    fc:d2:cf:86:7a:67:b6:f1:f2:2c:8e:1c:23:1f:33:
                    fe:15:57:dd:e6:b5:0d:c4:62:64:2e:fe:6d:24:a6:
                    27:d4:bc:49:c6:c3:8c:77:85:90:aa:b9:de:f8:e3:
                    9a:87:9e:b6:3e:a4:43:7f:cb:e8:09:c2:74:3b:be:
                    41:f4:90:25:6b:50:db:9d:1b:63:32:b8:f7:54:21:
                    ba:1d:1c:b6:29:7a:79:8f:01:cc:93:9e:3e:a4:83:
                    6c:cb:e7:3d:bb:a5:d4:be:fd:4d:16:37:9f:59:22:
                    2a:c4:3d:07:f0:1f:32:ae:89:61:1e:34:43:35:fe:
                    aa:37:3d:64:3e:6c:04:bd:79:51:4d:e9:5b:73:57:
                    cc:96:b8:71:fe:de:7e:06:e0:7f:42:9e:c1:85:b7:
                    da:ac:40:16:e1:39:fd:67:99:cc:1b:b4:0b:00:54:
                    30:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FC:A9:48:58:36:94:70:A1:88:0A:43:6B:72:14:45:A6:CC:67:98
            X509v3 Authority Key Identifier:
                keyid:82:28:F3:5F:3A:87:29:8D:B3:D0:69:95:A9:C6:C0:45:72:11:22:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gijzXzqHKY2z0GmVqcbARXIRIrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:52:dc:8a:29:a7:b1:75:26:9c:00:e5:f1:42:61:44:f3:3b:
         c6:a6:ca:c1:2e:fe:08:a4:77:51:96:08:57:4e:2e:74:f7:b0:
         af:e1:b2:00:f6:12:23:9a:b0:d8:e3:e6:e2:e7:da:46:40:b9:
         4e:cb:2a:0f:c1:e1:a2:0e:ee:2a:67:75:d5:d7:d4:96:bc:17:
         15:a6:7a:e1:95:1d:99:26:d6:ff:54:e6:ac:30:30:48:2a:11:
         40:fe:12:8d:13:68:26:e5:f4:16:9d:35:1e:b2:31:07:47:e6:
         49:1d:06:23:32:88:b7:93:2d:eb:69:57:35:d2:1a:c4:0b:be:
         8f:5b:61:6c:fe:29:df:ce:c5:4f:6d:bd:3c:75:0d:6d:32:c6:
         0f:0c:60:23:0d:64:c7:c8:f7:59:70:d1:04:eb:de:fd:4e:f2:
         ee:41:2a:95:a2:0c:eb:76:25:78:9d:93:b1:a3:85:20:6e:ac:
         f6:8e:4f:46:c6:61:29:6a:18:53:ba:38:13:ce:e0:1f:29:00:
         45:d5:49:ac:9a:a5:fb:be:97:70:f0:94:ba:90:f0:b6:02:06:
         43:ca:a1:55:a0:8e:7f:89:06:8f:a1:ec:f4:27:ae:70:73:de:
         c7:5c:1d:a3:e0:17:21:88:f2:56:34:0f:1e:12:c5:8f:e5:38:
         80:fb:8b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:18:25 2025 by rpki-client