Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
File:                     A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json)
Hash identifier:          2Auc6zbTBeYS+QttDyu5E9JySIvJ8kr861kSSR1l4ws=
Subject key identifier:   D6:E1:B3:6F:E1:E1:A7:F5:DD:19:41:4D:DE:66:73:EF:72:C2:66:E7
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Certificate issuer:       /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial:       1E1DF3EC1AC1D813258C1B0129DB271F1C2B0D21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
Manifest number:          04CF
Signing time:             Thu 24 Jul 2025 01:37:05 +0000
Manifest this update:     Thu 24 Jul 2025 01:32:05 +0000
Manifest next update:     Fri 25 Jul 2025 02:53:05 +0000
Files and hashes:         1: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: Z4v3j/eCwLpgS1LPi83r4rcMBKym5WNGfkgU8reMda0=)
                          2: 3134362e3234372e35392e302f32342d3234203d3e203234383531.roa (hash: cISB3c/lX6ECxkwGaCM313qUlrkmfGXNHg9Sn5Duu/E=)
                          3: 3134362e3234372e35312e302f32342d3234203d3e203234383531.roa (hash: zRn95fZoa98Dxgk18rTQZPg3Vz861tTnSVUdcy0yTb0=)
                          4: 3134362e3234372e36322e302f32342d3234203d3e203234383531.roa (hash: 3irJhAGcE48vEZNOxKTwKsy4d69RVyIL6ZEClAmlLA0=)
                          5: 3134362e3234372e34382e302f32332d3234203d3e203234383531.roa (hash: CYrx2Q8+pBHAyk1lGd5Mg9MkvR7v5zfpX8Vn/ABu+6Q=)
                          6: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: y4OGbSGooI8V9euRtHx6jpjRwWGZstdSARXhTQ70Yxg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1d:f3:ec:1a:c1:d8:13:25:8c:1b:01:29:db:27:1f:1c:2b:0d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
        Validity
            Not Before: Jul 24 01:32:05 2025 GMT
            Not After : Jul 25 02:53:05 2025 GMT
        Subject: CN=D6E1B36FE1E1A7F5DD19414DDE6673EF72C266E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:93:7e:7f:cf:54:40:fd:85:2d:cd:6c:f6:7f:
                    48:d7:96:85:ec:81:1f:22:b5:73:e2:21:5a:98:3b:
                    71:a1:61:28:3d:6e:d0:f4:9c:29:59:2c:dd:91:5e:
                    24:b1:ed:1b:6d:c8:f4:76:d7:41:f8:2b:55:37:54:
                    03:e7:e9:f4:63:8f:b8:25:ad:4e:c9:39:ba:64:1c:
                    5b:c2:9c:79:10:b3:5e:49:c1:e1:b9:96:e4:80:a5:
                    e8:be:17:10:8d:4f:0d:5b:b1:5d:bc:5b:57:c9:e3:
                    02:de:a0:1f:dd:3a:02:43:69:14:60:69:7d:57:78:
                    94:a2:c0:7d:d0:fb:17:14:06:5c:d8:c1:cd:50:09:
                    1b:8c:b6:5f:bc:55:c3:cc:4f:39:5b:3e:7d:36:79:
                    16:da:6f:91:33:9a:6a:e7:df:12:21:15:66:14:07:
                    79:db:38:39:7b:e3:69:ca:b8:ee:5b:97:7f:fc:aa:
                    99:de:48:f7:42:92:9a:1e:6a:ba:d5:55:1d:38:05:
                    1b:4d:06:23:04:09:6d:f3:60:72:a4:5e:a8:d6:39:
                    26:69:8c:e1:3e:16:81:36:07:fd:db:44:bc:6e:09:
                    2e:e5:45:61:a8:7d:af:1f:df:f1:9e:73:c8:7b:b9:
                    91:82:92:88:a1:bc:c6:46:6a:98:bc:0b:26:6d:95:
                    b9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E1:B3:6F:E1:E1:A7:F5:DD:19:41:4D:DE:66:73:EF:72:C2:66:E7
            X509v3 Authority Key Identifier:
                keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:61:72:47:68:9d:d3:a1:af:21:79:ea:d9:1b:c2:88:b1:18:
         84:b0:8c:0f:c1:3c:1c:25:71:bd:e7:53:08:47:42:c9:48:b5:
         f2:a1:29:30:0c:da:68:aa:07:f0:fb:fb:e2:50:de:53:8b:91:
         37:42:4d:e5:8c:42:6b:5a:d7:13:b8:7a:a1:e6:ce:9b:b8:24:
         a8:46:f9:2e:2b:42:d9:4b:8e:b5:20:3b:8e:27:77:79:84:86:
         62:fa:81:ee:c2:54:38:53:92:d7:c8:e6:f9:9b:f1:b8:93:2b:
         43:ba:9e:e3:cc:8c:15:53:47:7e:f4:62:8f:e4:07:87:5a:7c:
         63:ff:6a:bb:1a:d5:e3:6b:ba:e2:f6:cb:46:d0:1f:aa:1e:8b:
         c6:38:83:b0:e1:b7:ae:3f:0b:cc:98:d3:dd:6b:9e:a1:c9:85:
         55:12:a4:62:99:e8:5c:83:73:3d:03:6f:1d:a7:bf:d4:24:7f:
         e4:c9:19:1c:56:9d:24:77:d3:46:64:64:e0:a5:44:9d:64:a5:
         c9:91:10:38:97:6e:ef:10:69:99:e5:6b:e6:8d:84:51:9a:ee:
         09:7e:07:86:a1:4d:e0:73:0d:5c:77:ad:10:d8:4f:31:34:50:
         f2:8c:ff:05:e4:ef:68:a5:33:0a:f7:d8:d9:e6:67:1a:c2:d5:
         87:4f:21:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 04:52:44 2025 by rpki-client