Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
File:                     FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft (raw, json)
Hash identifier:          jAz0yAB0n/9KDbFBbh9j8wCmzEUe4zwZzYSNR9HGFWw=
Subject key identifier:   48:84:CD:3D:8C:EE:50:8C:A9:C5:43:CA:88:33:F1:84:1B:66:60:D5
Authority key identifier: FF:4F:0B:35:8C:BD:6C:54:EC:CB:EB:F2:6F:6D:1A:05:F1:D5:37:E8
Certificate issuer:       /CN=ff4f0b358cbd6c54eccbebf26f6d1a05f1d537e8
Certificate serial:       29925753C87E8EA395969B3E512104501E7A024F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
Manifest number:          015E
Signing time:             Tue 06 May 2025 17:10:18 +0000
Manifest this update:     Tue 06 May 2025 17:05:18 +0000
Manifest next update:     Wed 07 May 2025 17:24:18 +0000
Files and hashes:         1: FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.crl (hash: V2gh67fOpdc+HyC3L1K5AH3DjH+/GCy/JPzyP4uAFXQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 17:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:92:57:53:c8:7e:8e:a3:95:96:9b:3e:51:21:04:50:1e:7a:02:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff4f0b358cbd6c54eccbebf26f6d1a05f1d537e8
        Validity
            Not Before: May  6 17:05:18 2025 GMT
            Not After : May  7 17:24:18 2025 GMT
        Subject: CN=4884CD3D8CEE508CA9C543CA8833F1841B6660D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8c:3c:2f:59:30:43:39:72:49:b4:d3:f5:ff:
                    a9:f5:b3:df:7a:c9:d5:fc:8d:14:26:31:ef:ed:16:
                    b7:06:08:41:bc:c9:cb:59:b6:5e:a1:73:06:67:69:
                    f8:d0:0b:00:64:e3:32:a5:63:75:d8:18:ae:c6:44:
                    83:ad:5f:10:0e:d9:7b:56:88:00:ff:ed:b1:17:fe:
                    e1:74:ca:55:5f:bc:cb:34:30:e4:5f:76:96:1e:14:
                    81:1d:8f:80:5b:b2:1b:79:78:59:f2:f9:3e:68:bd:
                    6a:b6:e6:a0:26:4f:13:bd:e5:a8:16:71:36:ca:ef:
                    88:cc:8a:13:2e:92:d0:7b:52:8f:6a:cf:92:8c:e0:
                    c4:49:ca:68:d8:7f:e5:d4:69:cf:80:8b:30:46:09:
                    59:c3:6a:ff:d5:1c:01:73:02:60:2d:02:fc:c6:31:
                    d5:9f:b9:51:bd:33:e6:10:ad:a7:29:b5:16:3d:0d:
                    dd:3e:aa:4b:f3:2b:8c:17:37:d6:48:ee:8e:59:80:
                    fb:58:97:c0:2c:fc:98:46:51:65:91:76:a2:3e:ad:
                    c6:5c:4d:80:45:40:80:45:ee:f7:fd:01:37:35:9c:
                    45:cd:87:2f:60:4f:4c:53:d0:87:4a:f4:68:6f:fe:
                    26:9d:f8:40:e9:af:9b:9e:3d:a3:0f:2d:b3:16:66:
                    8c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:84:CD:3D:8C:EE:50:8C:A9:C5:43:CA:88:33:F1:84:1B:66:60:D5
            X509v3 Authority Key Identifier:
                keyid:FF:4F:0B:35:8C:BD:6C:54:EC:CB:EB:F2:6F:6D:1A:05:F1:D5:37:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:07:b8:80:cd:95:c6:b4:48:84:87:43:fd:b9:dc:87:20:08:
         18:3e:d5:84:a2:63:ca:78:cf:57:b9:30:6d:ad:10:ab:fc:2f:
         7d:24:d3:cd:a7:f6:bc:a1:9c:a3:e2:25:87:63:09:33:e1:3c:
         ea:d2:b9:12:f4:84:dc:74:f3:f2:a1:d9:b2:aa:33:7a:a3:c0:
         51:9f:8f:c5:db:e4:aa:98:52:31:b2:48:ca:a9:bc:0e:23:c8:
         39:6c:36:5e:41:f9:53:0f:b2:46:e8:de:f2:cc:1c:ef:be:77:
         c6:2f:98:dd:29:45:cd:f6:d9:8d:a2:4d:ab:6b:32:5f:6f:c5:
         0f:df:0b:e9:77:80:d7:61:28:67:34:e1:21:b2:d2:2a:e1:65:
         71:67:aa:9f:c7:1d:ea:e8:3c:4a:c1:91:22:9f:62:37:52:bb:
         44:89:65:64:6e:67:07:ba:ce:90:8a:06:b6:1a:b2:e5:42:32:
         df:84:b5:2f:c4:0b:17:16:25:25:6d:92:0f:c5:90:8b:f1:8c:
         50:dc:8c:78:13:11:5e:d7:5d:90:3e:6c:90:47:a0:fb:c6:5a:
         e1:f5:20:cb:dc:4f:3d:00:8e:44:fc:a8:9d:c0:4e:2f:53:4d:
         d5:d6:c3:e2:9a:17:9a:6e:33:27:87:d5:57:57:fe:04:c1:8d:
         65:16:5c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:40:22 2025 by rpki-client