Manifest

$ rpki-client -vvf 0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft
File:                     C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft (raw, json)
Hash identifier:          0hS8LyyoGs++2RKmCLsAIkoy+dgMlhPEtZk9TvDfpqk=
Subject key identifier:   AA:77:39:DD:0D:87:CD:F1:11:CD:25:DF:5F:61:BB:45:11:DE:13:9D
Authority key identifier: C8:AF:62:A5:4D:23:CE:11:8F:CE:B4:A9:5E:61:4C:0B:1D:F6:03:51
Certificate issuer:       /CN=c8af62a54d23ce118fceb4a95e614c0b1df60351
Certificate serial:       70D2A7E7AC1AACB4ADF254795A0D956C7138C24C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yK9ipU0jzhGPzrSpXmFMCx32A1E.cer
Subject info access:      rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft
Manifest number:          068B
Signing time:             Sun 29 Jun 2025 01:33:00 +0000
Manifest this update:     Sun 29 Jun 2025 01:28:00 +0000
Manifest next update:     Mon 30 Jun 2025 03:05:00 +0000
Files and hashes:         1: C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.crl (hash: YzueRr9I8k/nzz45Ob4FpWeqGi4v7kn/7bPAoS5UtcQ=)
                          2: 38352e3139332e37382e302f32342d3234203d3e203134363138.roa (hash: qeUBNqX0cdTuUUSXV2MePCJ8eS8Tr53k1jxkWSOVxMQ=)
                          3: 326131323a663463303a3a2f32392d3438203d3e20323130343334.roa (hash: HhN3ELLZe66TJ+fij1LtP0zX5dGcB65eWUhaxPnm+ok=)
                          4: 38352e3139332e37382e302f32342d3234203d3e20313937373330.roa (hash: +uQwS2sIiIw5Nag1eIOK6jhQ8L/KtwZkpaaxkqKEIhI=)
                          5: 38352e3139332e37382e302f32342d3234203d3e203136353039.roa (hash: VxApuIDEnwTqQ6WGnUzRodDciZZkhdWtDDb5ZPWEs7g=)
Validation:               OK
Signature path:           rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.crl
                          rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yK9ipU0jzhGPzrSpXmFMCx32A1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 03:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d2:a7:e7:ac:1a:ac:b4:ad:f2:54:79:5a:0d:95:6c:71:38:c2:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8af62a54d23ce118fceb4a95e614c0b1df60351
        Validity
            Not Before: Jun 29 01:28:00 2025 GMT
            Not After : Jun 30 03:05:00 2025 GMT
        Subject: CN=AA7739DD0D87CDF111CD25DF5F61BB4511DE139D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:96:3d:47:53:e2:05:79:3e:1b:68:74:8e:ff:
                    e2:62:4e:64:a3:2a:03:e2:20:28:68:bb:1b:8b:2d:
                    03:51:e5:ec:32:80:18:b9:aa:34:cb:31:14:36:de:
                    a9:0d:6c:7d:be:a4:73:dc:48:3a:8d:04:67:13:fd:
                    85:76:81:83:b7:5a:25:2d:44:16:66:86:93:de:40:
                    e7:b1:4d:04:d3:cf:07:bf:e1:e6:fa:01:3b:2c:cb:
                    aa:bc:b6:e8:de:fd:c4:00:41:cb:74:ce:df:c2:bb:
                    2d:55:7e:ac:32:87:b0:a3:4b:ee:4c:c8:d3:85:97:
                    c6:15:5a:6a:60:71:72:d9:df:ed:09:6a:07:2b:f9:
                    35:e6:fb:f0:70:0c:00:10:88:fe:f0:38:f1:e0:60:
                    0d:95:0a:c6:40:2d:c7:6f:aa:2a:5d:b1:79:35:cc:
                    10:04:9f:32:7a:df:24:34:b6:1a:56:f8:4e:9e:6a:
                    7a:4e:43:9d:e5:cb:fb:55:82:20:9d:0e:fe:df:9f:
                    bd:9d:e9:0e:53:99:7c:7e:87:bb:a4:07:b9:0a:e8:
                    43:fc:70:8a:37:47:bf:75:37:aa:45:d4:db:e6:a7:
                    a5:0b:f2:38:58:50:a1:d9:da:9a:3c:1d:97:71:65:
                    3a:ec:5d:1e:80:22:56:e1:e7:ba:27:5f:0a:59:d4:
                    86:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:77:39:DD:0D:87:CD:F1:11:CD:25:DF:5F:61:BB:45:11:DE:13:9D
            X509v3 Authority Key Identifier:
                keyid:C8:AF:62:A5:4D:23:CE:11:8F:CE:B4:A9:5E:61:4C:0B:1D:F6:03:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yK9ipU0jzhGPzrSpXmFMCx32A1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:74:3d:77:83:28:37:cb:2e:63:4e:49:b9:45:64:e0:b0:de:
         19:b5:a6:83:29:2b:54:cd:75:ef:99:eb:0a:22:41:ee:9e:e8:
         08:14:23:9b:d5:7a:4a:3a:ba:e7:02:e7:1a:86:e1:96:44:20:
         9d:88:e4:cd:6c:f6:4a:a5:2f:31:95:d9:e3:e0:57:23:ca:5f:
         c0:b1:18:41:5f:59:71:4a:46:cd:c9:6e:36:0d:8b:a6:6c:0f:
         5f:53:2f:49:bb:f3:4d:f2:99:e1:f6:20:49:6e:a8:7a:1e:c8:
         53:13:fd:11:8f:ac:44:a3:b0:11:c7:31:8e:2e:a4:15:db:d1:
         a9:c4:f6:a4:d1:62:88:bd:27:5d:67:ce:01:82:72:f4:db:4e:
         de:6d:6f:4f:a9:80:89:76:a3:23:04:90:93:7c:83:5e:d0:b4:
         28:c5:09:42:15:64:d3:1c:b3:91:7e:e1:66:3f:57:77:6d:ce:
         c2:17:b6:83:ee:17:5d:43:eb:e4:00:75:9d:0b:16:56:da:41:
         13:42:30:d7:2a:a2:64:f7:23:39:ec:90:76:ed:f6:d7:03:51:
         f6:24:a8:33:84:6f:0e:dd:47:ed:57:7b:d6:51:1b:31:b3:af:
         79:c6:99:48:e9:6f:89:17:fd:be:4e:03:a3:b5:1d:fd:b4:4a:
         cf:eb:e0:b1
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgIUcNKn56warLSt8lR5Wg2VbHE4wkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzhhZjYyYTU0ZDIzY2UxMThmY2ViNGE5NWU2MTRjMGIx
ZGY2MDM1MTAeFw0yNTA2MjkwMTI4MDBaFw0yNTA2MzAwMzA1MDBaMDMxMTAvBgNV
BAMTKEFBNzczOUREMEQ4N0NERjExMUNEMjVERjVGNjFCQjQ1MTFERTEzOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDflj1HU+IFeT4baHSO/+JiTmSj
KgPiIChouxuLLQNR5ewygBi5qjTLMRQ23qkNbH2+pHPcSDqNBGcT/YV2gYO3WiUt
RBZmhpPeQOexTQTTzwe/4eb6ATssy6q8tuje/cQAQct0zt/Cuy1Vfqwyh7CjS+5M
yNOFl8YVWmpgcXLZ3+0Jagcr+TXm+/BwDAAQiP7wOPHgYA2VCsZALcdvqipdsXk1
zBAEnzJ63yQ0thpW+E6eanpOQ53ly/tVgiCdDv7fn72d6Q5TmXx+h7ukB7kK6EP8
cIo3R791N6pF1Nvmp6UL8jhYUKHZ2po8HZdxZTrsXR6AIlbh57onXwpZ1IblAgMB
AAGjggHHMIIBwzAdBgNVHQ4EFgQUqnc53Q2HzfERzSXfX2G7RRHeE50wHwYDVR0j
BBgwFoAUyK9ipU0jzhGPzrSpXmFMCx32A1EwDgYDVR0PAQH/BAQDAgeAMFUGA1Ud
HwROMEwwSqBIoEaGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzM3L0M4QUY2MkE1NEQy
M0NFMTE4RkNFQjRBOTVFNjE0QzBCMURGNjAzNTEuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC95SzlpcFUwanpoR1B6clNwWG1GTUN4MzJBMUUuY2VyMGAGCCsGAQUF
BwELBFQwUjBQBggrBgEFBQcwC4ZEcnN5bmM6Ly8wLnNiL3JlcG8vc2IvMzcvQzhB
RjYyQTU0RDIzQ0UxMThGQ0VCNEE5NUU2MTRDMEIxREY2MDM1MS5tZnQwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEB
ABF0PXeDKDfLLmNOSblFZOCw3hm1poMpK1TNde+Z6woiQe6e6AgUI5vVeko6uucC
5xqG4ZZEIJ2I5M1s9kqlLzGV2ePgVyPKX8CxGEFfWXFKRs3JbjYNi6ZsD19TL0m7
803ymeH2IEluqHoeyFMT/RGPrESjsBHHMY4upBXb0anE9qTRYoi9J11nzgGCcvTb
Tt5tb0+pgIl2oyMEkJN8g17QtCjFCUIVZNMcs5F+4WY/V3dtzsIXtoPuF11D6+QA
dZ0LFlbaQRNCMNcqomT3IznskHbt9tcDUfYkqDOEbw7dR+1Xe9ZRGzGzr3nGmUjp
b4kX/b5OA6O1Hf20Ss/r4LE=
-----END CERTIFICATE-----
Generated at Sun Jun 29 12:10:39 2025 by rpki-client