Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
File:                     64742A2EF43282A0509E6A31574C96C8006ECCD5.mft (raw, json)
Hash identifier:          MOjRZRKD6RYGmV4xIiBC9HTbgkRAtJKCGncSm7nK1q4=
Subject key identifier:   E2:0D:ED:26:29:83:25:BB:51:B3:4D:6C:46:20:05:2C:4F:D1:B3:C7
Authority key identifier: 64:74:2A:2E:F4:32:82:A0:50:9E:6A:31:57:4C:96:C8:00:6E:CC:D5
Certificate issuer:       /CN=64742a2ef43282a0509e6a31574c96c8006eccd5
Certificate serial:       376C0D67F6771EC22FCB05D64B2866AA0F8B5972
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHQqLvQygqBQnmoxV0yWyABuzNU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
Manifest number:          1F
Signing time:             Sun 20 Jul 2025 01:26:09 +0000
Manifest this update:     Sun 20 Jul 2025 01:21:09 +0000
Manifest next update:     Mon 21 Jul 2025 04:57:09 +0000
Files and hashes:         1: 64742A2EF43282A0509E6A31574C96C8006ECCD5.crl (hash: jzOM6wHM0wNl5v+l3BaCC0A94kVaqz3MI1EuM/7oF8Y=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHQqLvQygqBQnmoxV0yWyABuzNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 04:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6c:0d:67:f6:77:1e:c2:2f:cb:05:d6:4b:28:66:aa:0f:8b:59:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64742a2ef43282a0509e6a31574c96c8006eccd5
        Validity
            Not Before: Jul 20 01:21:09 2025 GMT
            Not After : Jul 21 04:57:09 2025 GMT
        Subject: CN=E20DED26298325BB51B34D6C4620052C4FD1B3C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:98:93:7f:3e:8d:ec:aa:44:45:ad:dc:c0:02:
                    7c:50:bb:07:23:e0:46:69:20:e7:7e:7c:44:51:74:
                    a5:c1:99:c8:00:c7:66:f5:be:69:77:e6:04:52:41:
                    ef:f7:17:74:15:fe:25:6d:87:d0:bc:98:81:bd:0e:
                    10:5f:f8:e2:11:96:db:79:74:81:3a:b5:ca:c5:58:
                    56:b8:52:6c:32:0b:c7:fd:e5:64:d7:f0:57:21:d7:
                    f0:c2:44:df:f1:65:65:75:46:32:86:8c:7b:a1:f2:
                    f8:ef:64:9c:96:6c:7d:f8:45:15:d1:c0:9a:1d:26:
                    ff:a6:ea:59:9d:fc:88:ac:f2:40:69:5e:af:dc:b8:
                    a8:c3:d4:96:2c:10:47:82:f9:6e:39:4d:7f:33:c7:
                    84:3f:81:c8:c7:be:dc:24:74:78:66:c5:24:54:8b:
                    ca:00:85:fc:c1:40:a0:65:43:96:de:18:dd:5d:3a:
                    66:73:47:72:68:ad:5f:0e:ca:4c:57:72:20:c6:19:
                    e4:c6:05:12:0d:2f:7d:64:71:ce:a1:43:0b:fb:cb:
                    96:ae:c4:ca:7a:17:a2:51:90:d8:11:bd:c9:8b:00:
                    42:de:50:9c:4d:29:54:c2:8a:b4:aa:2a:5e:51:ec:
                    28:2f:65:9c:a9:3c:1b:f8:3a:2f:0f:53:cb:ea:bf:
                    3d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0D:ED:26:29:83:25:BB:51:B3:4D:6C:46:20:05:2C:4F:D1:B3:C7
            X509v3 Authority Key Identifier:
                keyid:64:74:2A:2E:F4:32:82:A0:50:9E:6A:31:57:4C:96:C8:00:6E:CC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHQqLvQygqBQnmoxV0yWyABuzNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:16:70:30:9b:fa:fc:6b:23:27:c6:a6:73:4a:21:4a:e3:1e:
         d8:92:bc:b2:44:74:76:60:95:66:7f:9d:a2:fd:88:7b:8c:e0:
         13:f0:2c:b3:86:14:66:e8:7d:87:93:c4:b5:73:b2:ca:16:d1:
         17:8e:7f:7e:04:bb:60:e1:52:f2:40:f3:00:1c:ee:ba:90:23:
         d8:8a:c8:70:4e:9e:a4:16:70:03:2e:31:81:33:50:72:9f:a1:
         d2:71:36:7d:06:e6:79:ec:96:ca:7a:0b:37:e6:e9:6a:32:d1:
         92:ef:a7:57:c3:d0:6b:85:b3:01:77:7d:31:0d:4c:51:4d:28:
         21:34:38:9c:d0:69:39:df:e6:db:1c:a7:55:72:3e:e1:1c:cb:
         96:9a:ba:71:12:1d:af:54:55:b0:44:0b:12:ea:16:d8:db:22:
         10:b7:f2:eb:6b:54:02:0d:fb:cc:b7:3e:ed:af:38:7f:d0:df:
         42:31:d5:1f:a0:91:82:00:6e:ed:c0:e7:8f:88:12:4c:be:39:
         c9:d1:ba:5c:46:f4:be:91:d4:a4:3e:9e:e5:9b:14:c3:bb:c5:
         a1:05:c7:a8:52:fe:f8:c1:5f:98:a6:fa:60:da:bc:da:3b:74:
         b0:f2:ba:ac:46:7f:f8:d4:cd:a2:4a:ca:b6:30:4f:56:b1:1f:
         8b:54:2c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:11:09 2025 by rpki-client