Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft
File:                     C746AC47360523A8D817C5EA638AE186912619C1.mft (raw, json)
Hash identifier:          NuGYeZ2uD5SSuE6oh+Jea1npih3ptTy1sPkHFrRvSn0=
Subject key identifier:   4D:C6:13:E6:6C:D8:FC:82:3A:A9:DB:40:0E:C0:24:A0:1E:1C:D2:8D
Authority key identifier: C7:46:AC:47:36:05:23:A8:D8:17:C5:EA:63:8A:E1:86:91:26:19:C1
Certificate issuer:       /CN=c746ac47360523a8d817c5ea638ae186912619c1
Certificate serial:       241A04838AA6605EE6D586268CAF2FA1A1C4AB41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0asRzYFI6jYF8XqY4rhhpEmGcE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft
Manifest number:          83
Signing time:             Wed 23 Apr 2025 03:53:54 +0000
Manifest this update:     Wed 23 Apr 2025 03:48:54 +0000
Manifest next update:     Thu 24 Apr 2025 07:00:54 +0000
Files and hashes:         1: C746AC47360523A8D817C5EA638AE186912619C1.crl (hash: igtzZN9N5H6COZu5pgMmGARr9F+hnLkaZMIn1HfYfMQ=)
                          2: AS199310.asa (hash: MUdMzv+OXTvJsa4JpWs/0UwT2e8QQAWWG4rorxXy23o=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x0asRzYFI6jYF8XqY4rhhpEmGcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1a:04:83:8a:a6:60:5e:e6:d5:86:26:8c:af:2f:a1:a1:c4:ab:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c746ac47360523a8d817c5ea638ae186912619c1
        Validity
            Not Before: Apr 23 03:48:54 2025 GMT
            Not After : Apr 24 07:00:54 2025 GMT
        Subject: CN=4DC613E66CD8FC823AA9DB400EC024A01E1CD28D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:18:0a:0e:12:f1:95:4c:c2:94:90:10:71:47:
                    89:4c:0b:1d:e5:a1:1a:3c:2a:8a:2c:4b:48:76:bf:
                    f3:6c:ad:de:d6:0e:13:d4:af:01:7a:64:20:00:c8:
                    4b:7f:73:57:f1:9e:f8:5c:ab:b1:e3:8c:0d:7f:03:
                    8c:ea:b9:92:d4:3c:c4:93:56:80:40:8e:ee:c5:06:
                    c2:26:0e:c9:bf:3b:bf:01:1f:05:21:65:5d:e5:4c:
                    e2:f9:a0:b9:6b:de:2c:15:3c:ea:10:ec:2d:a4:4e:
                    74:2c:b0:97:b7:9a:a7:90:ea:91:53:c9:bf:d9:39:
                    e3:71:d0:b4:01:56:4f:09:28:1e:93:8b:fd:b8:b2:
                    ae:3e:04:ce:41:2a:2b:e9:23:5a:49:80:92:6f:80:
                    10:e9:62:af:32:7b:7b:e3:43:5d:f0:05:72:79:f3:
                    f1:63:5f:ae:83:e7:37:38:b1:a5:81:00:e1:bc:10:
                    d1:7d:17:f9:0d:f2:de:8e:bf:dd:07:db:23:3e:b7:
                    a0:8b:4e:94:8e:56:78:0b:11:3a:9e:51:f4:2f:d9:
                    6e:bb:b4:92:32:9b:be:66:20:24:21:3a:cd:c7:21:
                    0f:d5:9f:c6:a0:24:07:a4:35:12:b9:09:b5:7c:18:
                    b0:84:1d:28:9b:95:f7:62:cf:0c:e0:24:e7:b5:31:
                    cc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C6:13:E6:6C:D8:FC:82:3A:A9:DB:40:0E:C0:24:A0:1E:1C:D2:8D
            X509v3 Authority Key Identifier:
                keyid:C7:46:AC:47:36:05:23:A8:D8:17:C5:EA:63:8A:E1:86:91:26:19:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0asRzYFI6jYF8XqY4rhhpEmGcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:08:98:7d:82:ea:c2:6a:21:86:bf:d4:06:3f:6c:bc:f7:44:
         8e:2b:0b:7c:03:0b:7f:47:bc:da:2f:2f:17:ed:e1:09:d3:33:
         96:57:11:e9:06:42:6f:5a:4f:70:3a:a3:8a:18:62:cd:5d:67:
         2c:a4:e3:fa:be:a6:4d:f7:73:76:84:82:76:2c:c5:61:84:35:
         55:64:1b:23:84:6f:3f:fa:9f:ea:c7:b9:e6:03:3b:82:ad:46:
         7e:ea:6c:66:a8:09:19:74:ff:7e:0a:05:64:6a:88:d8:5c:92:
         27:0e:2c:df:e5:10:be:b1:22:42:6e:19:be:2c:49:94:6b:cc:
         2a:8b:b7:f2:5c:f3:73:e1:09:56:af:04:49:e3:a5:5e:27:bc:
         40:0e:d0:9a:a3:3b:42:28:f4:e9:99:b0:2e:b6:ac:35:d4:58:
         53:ce:78:c6:27:d3:63:8f:ff:fb:48:c4:df:10:a6:b9:9d:03:
         57:fa:40:56:36:6e:ae:ed:a5:b0:94:33:2c:49:b2:87:58:cb:
         27:72:e9:5a:45:1f:2f:28:4f:c8:53:fc:35:6c:fc:45:db:f8:
         e4:1e:ae:76:44:64:1e:ca:bc:71:58:df:b6:06:d7:a1:3a:ac:
         86:48:e5:3a:3d:55:04:25:88:f8:3e:59:d0:cc:54:3e:a7:4c:
         5e:c5:c4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:56:43 2025 by rpki-client