Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
File:                     E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft (raw, json)
Hash identifier:          jy1ABNOCB1Ogqq4ymSwBmGmOQzBrGJlnsosN0W8qLv0=
Subject key identifier:   48:C0:5A:A9:66:97:FA:7A:1F:B4:86:27:56:D5:84:D8:3E:0B:C9:FF
Authority key identifier: E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
Certificate issuer:       /CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Certificate serial:       1A9AD51F6BAACBB81C295B9D4E55BE78462D7765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
Manifest number:          041C
Signing time:             Mon 21 Jul 2025 15:26:52 +0000
Manifest this update:     Mon 21 Jul 2025 15:21:52 +0000
Manifest next update:     Tue 22 Jul 2025 15:56:52 +0000
Files and hashes:         1: E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl (hash: e1+ZxccFzScbGRD1CkxeefUxqE1u6nJUJLfLUH9Z7wY=)
                          2: 39312e3233352e3230352e302f32342d3234203d3e203136323736.roa (hash: p/F0OkbT4gUH7RMUTLSzXd9N6M9/tCs2QiOrUFAeaQQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Jul 2025 14:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9a:d5:1f:6b:aa:cb:b8:1c:29:5b:9d:4e:55:be:78:46:2d:77:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
        Validity
            Not Before: Jul 21 15:21:52 2025 GMT
            Not After : Jul 22 15:56:52 2025 GMT
        Subject: CN=48C05AA96697FA7A1FB4862756D584D83E0BC9FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:e2:95:83:e9:9c:fe:a3:c0:8a:c3:31:64:
                    92:38:d4:43:e4:95:d6:e9:8f:4e:79:d1:ee:4e:58:
                    a2:fe:ae:5d:82:78:7a:76:38:76:9a:54:ab:18:fb:
                    68:c4:bf:4d:b8:c0:32:ba:c5:af:5b:06:50:5f:37:
                    b3:58:10:40:43:8b:b7:b2:97:ab:91:b5:fc:5d:97:
                    68:92:1a:0a:4d:95:8b:9d:b2:ef:2d:9b:13:2a:44:
                    f4:97:9f:8e:cc:73:21:17:67:37:b8:c0:9d:19:ea:
                    ec:b2:d9:db:e9:bb:8c:b7:d4:37:6f:01:50:ea:a4:
                    94:e5:bd:b6:44:61:05:eb:5d:25:35:e3:7f:49:e6:
                    9c:5c:e4:d2:0b:c5:cd:ad:83:a8:4d:2a:17:fc:2b:
                    a8:3e:89:bd:19:6c:f2:bb:0d:5b:61:37:2e:2d:77:
                    d3:08:6b:73:73:ff:dc:59:46:3b:61:b1:b8:91:30:
                    53:42:9a:c1:f0:00:a0:d2:76:46:51:0f:08:f3:48:
                    22:c0:37:ac:40:8e:10:8e:cb:2d:ac:09:a4:e1:ca:
                    e9:86:4e:09:8c:7f:8a:51:d2:b4:e3:12:ab:a7:e4:
                    cd:2d:ff:e1:c3:9d:82:25:f3:11:bc:db:f2:71:fe:
                    05:18:ee:9e:ea:43:4b:e2:6c:04:4d:cc:ec:e4:5d:
                    f1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C0:5A:A9:66:97:FA:7A:1F:B4:86:27:56:D5:84:D8:3E:0B:C9:FF
            X509v3 Authority Key Identifier:
                keyid:E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:72:8b:d9:c7:6b:95:ff:ce:4c:87:5e:0a:16:59:df:c8:14:
         e5:d7:6b:82:66:73:3f:3d:13:4d:2e:84:6a:c8:2c:77:be:7d:
         b0:26:78:c0:c7:24:c9:6c:b2:f3:0f:ab:3d:cc:ca:6b:43:32:
         15:4a:23:1e:09:26:93:c0:87:fa:aa:05:65:9d:6e:4a:fb:7c:
         c3:5f:3b:4b:5a:57:1d:ec:48:93:24:56:95:8f:11:c6:1c:7d:
         07:ca:27:44:f8:d7:97:a1:af:bb:e2:1e:2c:f1:25:9a:65:ab:
         81:1c:c6:37:78:f8:e6:a2:77:a8:0e:07:06:df:ed:f1:7e:82:
         cc:82:5e:1f:38:bc:eb:e4:d5:9e:25:b7:93:8b:fe:5c:4e:80:
         2b:42:2e:3a:a2:f3:9c:08:e1:f7:1b:ab:03:96:43:ca:08:46:
         e7:58:15:af:a4:17:23:ad:d1:4d:24:3e:58:fd:83:1b:05:fa:
         50:c8:71:80:ff:aa:d8:62:87:89:e8:16:da:f5:c8:bc:a0:f2:
         38:33:a6:01:2f:3a:d4:42:c4:7f:d7:a8:13:2b:fb:e6:6c:ef:
         49:29:6e:bd:74:0d:03:8c:c8:42:23:34:47:9f:58:8a:a0:4e:
         fc:12:91:c5:67:a9:e4:da:d9:bf:6f:7f:9f:9b:2a:72:cb:3f:
         ac:90:d2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:09:48 2025 by rpki-client