Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
File:                     5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft (raw, json)
Hash identifier:          FXxk73SQ+D1lDQqgFHm8MMgYyNQGKKpFYpH6SL12/BY=
Subject key identifier:   66:46:6B:FE:DB:AF:AF:77:AC:15:31:57:D3:63:B5:42:DD:9D:39:F5
Authority key identifier: 5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
Certificate issuer:       /CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
Certificate serial:       3E759519BBF9694F0BCBDBC1E47420D3C40B1B39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
Manifest number:          0160
Signing time:             Mon 21 Apr 2025 11:25:32 +0000
Manifest this update:     Mon 21 Apr 2025 11:20:32 +0000
Manifest next update:     Tue 22 Apr 2025 12:10:32 +0000
Files and hashes:         1: 5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl (hash: n/ul/dlUpamipBvTwNG2Vw5iX60cBH3Q/N6vsgNPXHk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 12:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:75:95:19:bb:f9:69:4f:0b:cb:db:c1:e4:74:20:d3:c4:0b:1b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
        Validity
            Not Before: Apr 21 11:20:32 2025 GMT
            Not After : Apr 22 12:10:32 2025 GMT
        Subject: CN=66466BFEDBAFAF77AC153157D363B542DD9D39F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:27:ec:08:39:72:66:cc:79:49:f2:5a:74:97:
                    3a:a7:8d:90:16:b9:ef:6f:cd:8d:ac:c3:e6:58:71:
                    80:c4:66:cf:e5:d0:a6:d5:75:0d:95:fd:14:94:a2:
                    66:f2:90:98:ec:2b:e1:4e:2d:20:2f:68:47:7f:30:
                    31:65:f4:89:9e:3c:03:4c:bc:f5:aa:58:e7:32:a8:
                    69:83:75:cf:6a:d3:bf:6d:92:aa:50:90:04:7f:9d:
                    b2:34:2a:5d:7b:3f:94:40:de:70:03:a4:2f:d2:61:
                    34:7b:34:f7:7d:78:b5:c5:ef:af:44:00:13:85:68:
                    0c:8f:03:6e:c1:3a:50:52:c6:cd:c8:5f:b3:7c:c1:
                    ad:b5:d8:d3:d8:d4:b8:d6:68:61:52:1f:65:0e:81:
                    89:e3:9b:e1:26:14:55:f5:72:a8:81:8a:25:17:66:
                    cb:75:09:b2:98:ad:02:7b:32:c6:a4:66:d7:da:39:
                    c4:58:fc:83:ce:6f:e6:f1:dc:47:03:ef:d3:b5:cb:
                    df:da:47:2b:58:bb:76:a7:06:8d:6f:06:8e:15:c5:
                    a0:23:da:ef:17:25:c1:9c:03:77:95:a1:66:1c:de:
                    f1:ad:73:d3:c2:6b:15:c5:62:a7:87:59:7c:3f:6d:
                    14:97:0f:be:46:41:38:c8:22:3c:28:e5:fe:4d:5f:
                    22:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:46:6B:FE:DB:AF:AF:77:AC:15:31:57:D3:63:B5:42:DD:9D:39:F5
            X509v3 Authority Key Identifier:
                keyid:5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:26:66:fd:2a:dd:90:f1:df:bc:98:ff:fc:51:fa:1c:34:4b:
         91:be:ed:60:7c:9a:59:fa:70:67:cd:d1:92:f1:a0:5a:38:90:
         8e:26:f5:ef:32:98:6d:6b:64:0e:6a:2c:1f:cb:1b:c7:13:e4:
         40:0f:94:c0:15:9e:24:b1:0c:d5:43:2c:53:8c:10:d5:8c:b2:
         15:9f:f5:46:14:89:c6:e6:49:df:16:aa:dc:f3:1c:1e:5d:5f:
         6c:d9:e6:1f:f8:41:b1:c0:44:76:98:1d:73:65:f9:a7:51:80:
         82:85:b2:e6:da:a1:b5:ae:d9:67:d5:fe:d4:5b:53:78:c0:5b:
         61:6e:d8:2c:d8:b3:72:bf:fb:ca:43:d0:b3:86:9d:24:1a:bf:
         aa:3b:be:eb:3b:66:92:47:2b:c6:7d:28:93:f1:80:d5:b8:62:
         29:eb:46:1e:ff:27:2a:9f:dc:86:4d:55:d0:4b:5f:70:c4:19:
         2b:c2:c2:7f:3f:1d:46:fe:91:92:6b:34:6c:a7:b7:ac:4f:7d:
         75:a7:48:3e:88:f3:ad:46:4c:6f:f0:b3:a9:89:c3:f8:4b:bd:
         50:13:ab:a5:fb:73:41:f3:29:31:58:bf:a1:01:a1:f3:a8:2a:
         49:4f:f7:7a:c4:1d:6c:0a:20:ed:3d:e1:c7:49:34:75:d7:e3:
         22:94:d9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:19:27 2025 by rpki-client