Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft
File:                     0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json)
Hash identifier:          4OItwut9Tu30CRK4NfDw0h3m23iQcZ+OyMVKHp4ukqA=
Subject key identifier:   B9:D5:63:3A:D0:B5:12:4F:E3:17:88:E2:A2:90:18:B2:47:AD:B0:2B
Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9
Certificate issuer:       /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9
Certificate serial:       0709135A885D6C918517473B53C660431313CCD3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft
Manifest number:          1A
Signing time:             Wed 23 Jul 2025 10:28:06 +0000
Manifest this update:     Wed 23 Jul 2025 10:23:06 +0000
Manifest next update:     Thu 24 Jul 2025 13:34:06 +0000
Files and hashes:         1: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: JJxvSLxXE9/mc2o8JwHbIizgcZB/qXCpI1mNatuyWjE=)
                          2: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: PoxwFIHy8kdey2mlHnL1hmx4hhF1/GhCPxY1mv6kDWE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 13:34:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:09:13:5a:88:5d:6c:91:85:17:47:3b:53:c6:60:43:13:13:cc:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9
        Validity
            Not Before: Jul 23 10:23:06 2025 GMT
            Not After : Jul 24 13:34:06 2025 GMT
        Subject: CN=B9D5633AD0B5124FE31788E2A29018B247ADB02B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:eb:8b:ce:da:8b:f1:d4:e7:27:0c:eb:78:
                    6a:0c:e3:52:90:20:4e:3f:34:d5:b6:7a:d1:21:c9:
                    6c:6c:34:ed:46:c4:3a:c9:2c:5c:39:7c:77:f0:26:
                    db:0f:cc:91:8b:de:1e:cb:67:c1:de:22:76:11:2b:
                    c8:42:51:18:60:dc:e7:79:c5:f2:d6:60:2a:54:29:
                    44:22:3f:fd:de:a6:6e:72:dc:84:c8:ae:e5:de:71:
                    9a:8a:ea:de:95:94:ac:6a:54:ae:cb:32:bc:73:c1:
                    3b:32:99:24:14:9a:02:09:4b:7d:2e:4f:27:81:b3:
                    96:9e:d2:f4:90:56:2c:b4:e8:67:cc:24:df:b5:f8:
                    34:28:09:69:ba:f3:6e:7f:83:0f:67:c6:b6:81:28:
                    2e:b9:83:f4:92:27:4a:a0:f8:d4:74:71:e4:74:79:
                    96:f0:1f:27:47:54:50:43:15:32:68:5f:a3:4d:86:
                    26:a4:d4:1a:bc:6e:1c:66:2d:62:ee:7c:61:1b:61:
                    3d:61:07:45:64:86:ad:1d:81:09:a0:88:1f:69:54:
                    9b:26:4f:ed:09:cc:bd:7c:3a:17:60:a2:b1:43:0c:
                    06:2f:68:c1:93:61:dd:2e:fc:83:80:53:a7:df:09:
                    1a:1c:1b:7d:0c:cd:f1:71:9e:2b:7f:27:e9:32:ba:
                    04:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D5:63:3A:D0:B5:12:4F:E3:17:88:E2:A2:90:18:B2:47:AD:B0:2B
            X509v3 Authority Key Identifier:
                keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:5f:95:c9:c1:49:81:dc:e2:57:dd:6d:37:20:d5:35:cf:29:
         c0:59:2a:3a:5d:b1:30:06:22:8a:82:df:a1:56:4d:83:59:fd:
         55:fc:d0:e0:f7:5b:68:01:36:72:93:7d:8e:f0:49:2a:24:5e:
         02:c9:bb:98:9b:e6:08:65:be:31:ca:9c:0b:e8:b4:ef:79:2a:
         41:78:ed:04:1d:98:1c:7c:e9:f7:3e:e8:20:f2:2b:41:77:44:
         60:09:14:74:5d:e2:56:97:1f:f8:c1:58:ab:a5:4f:9c:f8:02:
         0c:61:93:49:d2:a4:82:1c:ca:85:09:8a:67:5d:38:35:07:c4:
         62:a4:04:4e:1d:c3:bf:8c:35:a6:66:52:e3:3f:55:ac:e4:89:
         0e:59:95:02:55:fc:9a:24:1a:c1:20:f9:f6:13:78:d9:76:be:
         7b:ae:ed:87:2f:6b:99:9a:12:c1:c9:03:1c:19:35:fc:44:6b:
         ae:49:44:57:8d:00:19:4d:d4:ec:ed:ee:20:d5:0d:00:4a:31:
         6f:57:3c:21:76:e5:e9:70:dd:d6:a5:0f:09:0b:e2:36:af:31:
         65:8d:af:1c:1b:1e:50:c3:07:1d:44:f4:b6:2e:a6:98:fc:6c:
         9b:6e:ba:05:48:d8:89:33:26:0a:08:19:19:9c:65:c8:7b:21:
         81:3c:5a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 04:53:49 2025 by rpki-client