Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft
File:                     27851163005F59C06E35A8FD365F96356EB34971.mft (raw, json)
Hash identifier:          t7BIZCPZMVMXp+aysK4PZIy7NyaPJHyuIduEpD2hzUw=
Subject key identifier:   4B:D3:BD:81:C2:4D:2C:DB:FF:F0:32:4F:20:D1:4E:0D:E7:AC:43:1C
Authority key identifier: 27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71
Certificate issuer:       /CN=27851163005f59c06e35a8fd365f96356eb34971
Certificate serial:       3B003FD952BB034BDFBC7D958B2D221B865B2672
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft
Manifest number:          F4
Signing time:             Fri 25 Jul 2025 09:48:20 +0000
Manifest this update:     Fri 25 Jul 2025 09:43:20 +0000
Manifest next update:     Sat 26 Jul 2025 10:41:20 +0000
Files and hashes:         1: 39332e3135372e3134302e302f32342d3234203d3e20323132383535.roa (hash: hdp9Cx8dMbvUUOjRrqy1XfSIVtsUnXM8OZnay1usHT4=)
                          2: 27851163005F59C06E35A8FD365F96356EB34971.crl (hash: M05uHwokT0keIrUbEnIctRVU2WmS+5Uo2V0ulnu7U18=)
                          3: AS212855.asa (hash: T3YdrgEJ1P9IU1IPBHUKuz7lJiYzWWWbNO7fDdrADAU=)
                          4: 323030313a3637633a6638633a3a2f34382d3438203d3e20323132383535.roa (hash: prfcq9YIMAg2ry1iZCXqsMkFnalbT+MPZdyoUmwmw6g=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 10:41:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:00:3f:d9:52:bb:03:4b:df:bc:7d:95:8b:2d:22:1b:86:5b:26:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27851163005f59c06e35a8fd365f96356eb34971
        Validity
            Not Before: Jul 25 09:43:20 2025 GMT
            Not After : Jul 26 10:41:20 2025 GMT
        Subject: CN=4BD3BD81C24D2CDBFFF0324F20D14E0DE7AC431C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:42:dd:ae:bb:dd:04:58:69:c5:1d:0e:f5:43:
                    3f:75:b6:8d:2a:2c:9c:f1:73:11:85:56:14:70:6a:
                    e5:ac:22:51:71:5a:1a:35:94:a5:47:3f:54:e6:78:
                    55:0c:b4:c9:4b:88:f3:45:40:ea:26:92:71:e0:46:
                    93:d5:ea:8b:18:22:e7:68:df:d8:8b:fa:6b:eb:75:
                    45:96:1e:83:b5:44:c5:db:43:fe:6a:ba:d0:e5:75:
                    14:e1:d6:8d:eb:96:2d:2f:e5:9c:81:ee:54:0f:c5:
                    7a:30:d3:10:1b:58:49:db:36:5e:0c:0c:57:ec:5e:
                    7e:08:d0:16:1e:95:0b:5f:0a:cc:d8:38:65:e7:8c:
                    1e:4a:fa:e8:ae:83:54:70:3f:fa:56:4c:de:f3:a6:
                    10:e4:b3:67:02:b3:89:e1:bf:0b:ff:59:a6:30:7e:
                    6a:83:42:c0:20:ce:84:01:c0:f3:10:0b:93:bf:ef:
                    2b:9b:0e:ca:42:2f:b4:80:ab:03:a2:eb:45:35:ba:
                    06:86:a7:d6:7c:fa:87:70:ef:50:d9:37:54:90:25:
                    cc:99:7f:96:03:15:fd:c1:ed:ff:72:d6:e5:ed:ec:
                    e9:92:f0:01:23:62:22:47:50:6d:7c:b7:a0:0f:f3:
                    4c:55:5b:8f:0c:9a:16:6d:37:85:76:68:6c:08:d5:
                    37:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D3:BD:81:C2:4D:2C:DB:FF:F0:32:4F:20:D1:4E:0D:E7:AC:43:1C
            X509v3 Authority Key Identifier:
                keyid:27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:33:77:89:23:59:36:aa:97:89:80:0f:14:f8:1f:d6:17:e2:
         98:9c:ab:1c:5f:9a:13:01:8f:ff:ff:a8:a9:d1:45:b7:9a:2c:
         01:ca:13:9a:79:da:6b:33:22:52:8b:8c:03:ad:f7:34:96:fc:
         87:49:d0:70:38:10:bf:ad:52:64:19:83:98:8e:47:45:cf:7c:
         69:fb:d4:e2:ff:a8:dd:7f:fa:a4:27:2f:88:1c:1f:23:d1:8b:
         28:94:44:5a:55:74:c0:92:8c:23:90:98:8e:14:5e:d8:02:83:
         35:b2:b2:6d:11:8d:26:49:55:ec:d1:a2:aa:ec:7e:c0:93:a9:
         46:3c:ae:cd:78:c9:b1:f1:ef:e1:f6:af:2e:42:31:94:8e:7f:
         f1:5f:a6:5d:36:76:b1:dd:9f:34:df:4a:ab:98:59:29:12:45:
         90:ea:2e:c3:cb:d4:27:58:93:ba:82:ad:91:32:fb:f3:37:16:
         63:bb:2b:2b:ca:2e:bf:20:5c:9e:90:ba:34:f4:90:80:51:29:
         a2:28:9a:52:98:96:c2:13:6a:ff:e6:64:e2:b0:d1:f3:62:b4:
         8f:86:5d:dd:41:58:ef:40:44:fc:dc:c7:46:55:19:68:f8:cc:
         7e:98:67:cf:7f:40:43:85:4e:52:5a:5d:b0:8f:67:d3:b0:5d:
         40:37:6e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:49:15 2025 by rpki-client