Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.mft
File:                     227_c-__gSd8LV048ORtbRKnCNc.mft (raw, json)
Hash identifier:          2CoTr4yyd238kcbH0HfJ/fA+8+53inIqyIj5YuIGl2c=
Subject key identifier:   D9:AD:48:A3:79:93:56:F8:07:CE:02:A2:C0:8D:49:32:9F:42:A3:80
Authority key identifier: DB:6E:FF:73:EF:FF:81:27:7C:2D:5D:38:F0:E4:6D:6D:12:A7:08:D7
Certificate issuer:       /CN=db6eff73efff81277c2d5d38f0e46d6d12a708d7
Certificate serial:       0197B5C529B42A1ACEB7933FEBBE7D0CDAA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/227_c-__gSd8LV048ORtbRKnCNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 09:01:26 +0000
Manifest this update:     Sat 28 Jun 2025 09:01:26 +0000
Manifest next update:     Sun 29 Jun 2025 09:01:26 +0000
Files and hashes:         1: 227_c-__gSd8LV048ORtbRKnCNc.crl (hash: si52jqKOdH30roxiUwJCVjBf70aSwUVyKJTmSBVBchM=)
                          2: cmWG-vH2BvPbA67VsqJqB_jv_zU.roa (hash: jJCpozKn5bF6BPqDVQG5hwKj0Mc2BX9AXUCoDqUsDQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/227_c-__gSd8LV048ORtbRKnCNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:c5:29:b4:2a:1a:ce:b7:93:3f:eb:be:7d:0c:da:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db6eff73efff81277c2d5d38f0e46d6d12a708d7
        Validity
            Not Before: Jun 28 09:01:26 2025 GMT
            Not After : Jun 29 09:01:26 2025 GMT
        Subject: CN=d9ad48a3799356f807ce02a2c08d49329f42a380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:69:5c:c2:c7:dd:44:4e:bb:e8:35:9a:3b:30:
                    b5:52:89:2b:cb:f8:2f:f8:74:10:ca:67:93:c9:f4:
                    ec:4b:b6:9f:54:e8:b5:79:3d:7e:69:0b:32:7b:f9:
                    62:71:f5:f0:68:2e:74:06:8f:88:45:9a:17:a8:ab:
                    58:f3:74:b6:12:7b:e9:45:9a:03:e1:a0:af:da:df:
                    fb:47:4a:ee:02:59:ca:b0:8f:85:ce:62:ce:1e:52:
                    06:60:49:54:28:c7:fe:e9:96:ef:9c:0e:9a:16:c6:
                    e8:bf:7b:76:36:04:4d:b6:ee:84:47:d1:65:79:48:
                    72:88:2e:b0:c7:33:e3:6a:d5:18:29:3a:f9:3b:24:
                    c1:ab:11:91:45:5d:d9:58:fa:7b:01:73:57:30:2c:
                    9f:7f:f3:91:1b:ef:c8:03:dc:13:19:a6:2b:7f:b5:
                    22:92:fb:69:de:64:14:81:5e:77:92:62:2e:cb:b8:
                    3b:b4:7c:ed:f7:e5:ae:a4:9c:dd:df:83:63:f5:bb:
                    56:a2:39:26:fe:4b:28:16:37:ad:f9:1e:63:6b:c1:
                    ce:8d:41:c3:5e:03:0d:18:86:23:08:95:4c:5f:b4:
                    15:7e:fe:68:e5:0a:db:79:cf:43:ba:61:99:72:a3:
                    87:d3:7c:9e:3b:e8:b7:98:e9:1a:fb:7a:fa:c5:11:
                    c5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AD:48:A3:79:93:56:F8:07:CE:02:A2:C0:8D:49:32:9F:42:A3:80
            X509v3 Authority Key Identifier:
                keyid:DB:6E:FF:73:EF:FF:81:27:7C:2D:5D:38:F0:E4:6D:6D:12:A7:08:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/227_c-__gSd8LV048ORtbRKnCNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:dc:a4:7d:0b:55:75:87:57:63:b6:1f:40:d4:3d:72:43:ed:
         1e:f9:aa:25:58:af:05:5a:ba:bc:59:f3:11:5f:9e:ab:44:28:
         c8:bb:26:63:a8:4e:96:f0:ab:5f:3f:9e:db:c8:f5:6b:67:81:
         f1:62:2a:88:bb:2d:9d:e2:0d:4f:11:78:f5:13:a8:cd:80:8b:
         f1:31:03:2b:54:03:89:ad:9f:9d:38:af:c6:8c:92:26:78:78:
         61:40:f2:e9:ed:c9:f3:f6:10:37:dc:4f:e0:2b:af:0f:c4:aa:
         9d:14:ce:95:b5:dd:5c:80:2a:d2:9d:ba:51:d7:24:aa:b4:0d:
         9a:17:32:c5:da:ca:a3:16:d5:5d:0d:cd:68:e7:82:91:33:80:
         ae:c1:f8:56:73:67:7d:f4:40:85:0d:a3:27:a0:7f:d3:9c:c2:
         1b:69:8d:58:9f:b1:15:e0:a3:4d:69:3a:24:aa:e5:56:1e:d1:
         cb:08:9f:5c:79:08:96:95:03:31:76:a3:64:df:71:23:a8:80:
         6a:04:bc:0b:23:bd:cd:68:07:fd:7d:ea:fd:8f:93:cf:7d:66:
         39:d4:18:43:f1:f2:a3:34:9e:e9:3f:43:e6:e2:ce:a6:ef:71:
         9d:c7:52:4a:a3:e7:c0:09:5e:97:28:ac:6b:7d:0c:fd:93:2e:
         66:7c:b4:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xSm0KhrOt5M/6759DNqkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNmVmZjczZWZmZjgxMjc3YzJkNWQzOGYwZTQ2ZDZkMTJh
NzA4ZDcwHhcNMjUwNjI4MDkwMTI2WhcNMjUwNjI5MDkwMTI2WjAzMTEwLwYDVQQD
EyhkOWFkNDhhMzc5OTM1NmY4MDdjZTAyYTJjMDhkNDkzMjlmNDJhMzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GlcwsfdRE676DWaOzC1Uokry/gv
+HQQymeTyfTsS7afVOi1eT1+aQsye/licfXwaC50Bo+IRZoXqKtY83S2EnvpRZoD
4aCv2t/7R0ruAlnKsI+FzmLOHlIGYElUKMf+6ZbvnA6aFsbov3t2NgRNtu6ER9Fl
eUhyiC6wxzPjatUYKTr5OyTBqxGRRV3ZWPp7AXNXMCyff/ORG+/IA9wTGaYrf7Ui
kvtp3mQUgV53kmIuy7g7tHzt9+WupJzd34Nj9btWojkm/ksoFjet+R5ja8HOjUHD
XgMNGIYjCJVMX7QVfv5o5Qrbec9DumGZcqOH03yeO+i3mOka+3r6xRHFzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmtSKN5k1b4B84CosCNSTKfQqOAMB8GA1UdIwQY
MBaAFNtu/3Pv/4EnfC1dOPDkbW0SpwjXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjI3X2MtX19nU2Q4TFYwNDhPUnRiUktuQ05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi80NGY1ZDItYjcwZS00ZGFlLTgyZTMt
MWU0NzgyYmU2NDQ1LzEvMjI3X2MtX19nU2Q4TFYwNDhPUnRiUktuQ05jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi80NGY1ZDItYjcwZS00ZGFlLTgyZTMtMWU0NzgyYmU2NDQ1
LzEvMjI3X2MtX19nU2Q4TFYwNDhPUnRiUktuQ05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9ykfQtV
dYdXY7YfQNQ9ckPtHvmqJVivBVq6vFnzEV+eq0QoyLsmY6hOlvCrXz+e28j1a2eB
8WIqiLstneINTxF49ROozYCL8TEDK1QDia2fnTivxoySJnh4YUDy6e3J8/YQN9xP
4CuvD8SqnRTOlbXdXIAq0p26UdckqrQNmhcyxdrKoxbVXQ3NaOeCkTOArsH4VnNn
ffRAhQ2jJ6B/05zCG2mNWJ+xFeCjTWk6JKrlVh7RywifXHkIlpUDMXajZN9xI6iA
agS8CyO9zWgH/X3q/Y+Tz31mOdQYQ/HyozSe6T9D5uLOpu9xncdSSqPnwAlelyis
a30M/ZMuZny0yQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:02 2025 by rpki-client