Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
File:                     6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft (raw, json)
Hash identifier:          L9STPXfJh7bW68zZ4/2wc732ywe67OqJ9tSvJNnj11k=
Subject key identifier:   1A:C5:6F:48:C8:77:91:E5:9A:04:53:0D:30:63:E4:C7:7C:A8:77:C8
Authority key identifier: 6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A
Certificate issuer:       /CN=6a3130acfbfba9017addef637acd312fc763829a
Certificate serial:       3C7CBB46142683440838E23BC52AC9069D2B580F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
Manifest number:          01FA
Signing time:             Sat 19 Jul 2025 22:22:58 +0000
Manifest this update:     Sat 19 Jul 2025 22:17:58 +0000
Manifest next update:     Mon 21 Jul 2025 01:42:58 +0000
Files and hashes:         1: 6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl (hash: aF43qYZXwzjQW9KINa5OA8Gc+Y14MyngTpVpvcEvRZE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 01:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:7c:bb:46:14:26:83:44:08:38:e2:3b:c5:2a:c9:06:9d:2b:58:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a3130acfbfba9017addef637acd312fc763829a
        Validity
            Not Before: Jul 19 22:17:58 2025 GMT
            Not After : Jul 21 01:42:58 2025 GMT
        Subject: CN=1AC56F48C87791E59A04530D3063E4C77CA877C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:84:b4:b4:86:0d:3e:89:86:65:15:15:f2:9a:
                    e2:f7:54:40:5b:1d:a9:77:16:16:1f:b5:4a:36:6d:
                    8f:94:e3:34:9a:40:26:f3:37:03:00:c8:de:7f:47:
                    14:e6:fc:f6:cd:5c:59:7b:ae:59:12:dd:a7:f4:26:
                    85:28:5c:1e:c7:1c:71:45:8f:46:3b:9c:e0:f7:0b:
                    06:56:fc:09:a0:a5:02:4b:5d:50:17:a1:6e:03:d3:
                    b9:2d:96:1b:f1:2d:df:b7:c4:ae:f9:13:de:71:c9:
                    c0:51:af:50:8f:84:55:07:c8:4a:ad:ce:10:e4:42:
                    4c:60:a7:12:65:73:a5:51:77:79:20:6e:7d:92:2f:
                    e5:75:a5:ea:5d:7a:85:54:e9:01:59:2f:ee:30:9c:
                    c6:97:6a:ff:b8:8a:a6:b1:ba:c5:d6:d4:c2:5f:c3:
                    11:25:7a:87:15:e2:40:f3:57:57:63:1e:59:c2:4b:
                    f0:63:38:2d:6b:5b:26:59:28:d5:e1:3a:7c:13:b4:
                    2d:fe:e6:88:1a:5d:14:fa:2c:f0:5d:b9:fe:0c:66:
                    4a:d2:a1:a1:28:63:6b:7b:0c:ad:73:4f:4a:de:a2:
                    0c:56:18:e4:24:96:16:71:26:89:60:37:10:56:8c:
                    22:d5:bb:36:d7:3d:2f:8e:1b:e0:84:f2:77:34:37:
                    de:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C5:6F:48:C8:77:91:E5:9A:04:53:0D:30:63:E4:C7:7C:A8:77:C8
            X509v3 Authority Key Identifier:
                keyid:6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c6:b4:24:a7:ae:fa:4c:4d:e0:6d:47:e9:40:5b:28:37:66:
         c5:e3:1a:29:dc:37:22:c0:1c:58:9a:df:5e:aa:38:2f:be:58:
         ab:31:df:c9:4d:9b:14:4b:bf:ad:5f:10:cf:a8:a4:51:47:c7:
         fb:10:ed:a1:a7:05:4a:dc:56:af:fe:27:d5:7d:e3:d4:e9:ac:
         c0:d2:1a:4f:32:ae:63:d7:ca:c2:bf:26:68:9b:7e:36:7c:75:
         0c:de:07:28:30:ea:c4:b6:79:3f:e5:79:cd:98:a9:41:79:92:
         21:58:7d:f8:36:7c:f7:2b:b5:56:b7:8d:78:d6:69:c2:c7:50:
         a5:a8:cf:ad:5e:d5:30:93:38:5b:1a:cd:c0:5b:a6:ec:49:30:
         ba:de:2b:c5:b3:b9:2c:5f:c2:fb:91:3e:08:f4:13:34:68:34:
         36:6c:dc:92:be:17:f3:f5:a5:a3:a4:2c:5f:3b:c9:24:7b:1d:
         d5:f3:e9:eb:cc:18:e4:cf:cb:7d:77:9a:35:82:b0:71:22:e4:
         4c:f3:90:48:41:8d:ad:ab:5b:ad:64:97:c4:a2:25:39:40:b7:
         85:d7:3a:bf:6a:8d:3f:db:5f:44:c2:80:ac:5f:b5:9c:fb:44:
         5b:f2:d0:38:14:eb:7c:2d:bf:40:b0:f4:a1:54:22:0d:a4:d1:
         4a:8d:92:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:23:39 2025 by rpki-client