Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.mft
File:                     7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.mft (raw, json)
Hash identifier:          ZjCCvdIg+Fqv07mkNard3SHVzk8MhTGlAu84pQCi9WY=
Subject key identifier:   B1:F4:D1:67:DF:71:52:33:E2:A8:51:00:A8:12:76:1B:8E:FC:B8:23
Authority key identifier: 7B:08:E2:6E:A9:F3:D8:25:EC:CD:64:E5:FD:C3:55:C8:52:A7:AF:54
Certificate issuer:       /CN=7b08e26ea9f3d825eccd64e5fdc355c852a7af54
Certificate serial:       6C12ACBA452731F2C0FEACA343A8F9803BCA54B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ewjibqnz2CXszWTl_cNVyFKnr1Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.mft
Manifest number:          018F
Signing time:             Sat 29 Jun 2024 21:36:01 +0000
Manifest this update:     Sat 29 Jun 2024 21:31:01 +0000
Manifest next update:     Mon 01 Jul 2024 01:08:01 +0000
Files and hashes:         1: 7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.crl (hash: soEvUpigXoTnZaR1lrXk4+x5IKsEUP33MXVEz2pfbTA=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ewjibqnz2CXszWTl_cNVyFKnr1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 20:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:12:ac:ba:45:27:31:f2:c0:fe:ac:a3:43:a8:f9:80:3b:ca:54:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b08e26ea9f3d825eccd64e5fdc355c852a7af54
        Validity
            Not Before: Jun 29 21:31:01 2024 GMT
            Not After : Jul  1 01:08:01 2024 GMT
        Subject: CN=B1F4D167DF715233E2A85100A812761B8EFCB823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bd:ba:22:27:0a:09:10:28:ce:b6:3c:1a:fd:
                    3c:8d:cb:64:a5:ca:84:3d:13:3b:73:bc:72:1d:0f:
                    64:02:23:60:b9:8e:9e:6c:11:03:86:74:81:e8:2c:
                    cf:19:4b:03:26:97:0b:0b:d5:20:f2:3f:c0:8a:30:
                    6d:35:15:ed:cd:fd:d9:79:f0:4a:44:18:76:ff:a3:
                    ce:bf:8e:8d:c2:2c:ff:81:4a:75:fb:c0:4a:39:30:
                    23:93:33:ce:b4:0e:a4:b8:e8:0f:b0:e1:dc:67:94:
                    93:60:8c:7a:f6:c1:12:4d:bd:8d:5d:df:0a:d8:33:
                    02:80:42:14:ed:bb:8c:6b:48:b9:51:87:62:d2:e5:
                    c5:be:11:ab:c0:48:8e:40:ef:63:4b:f9:0d:db:99:
                    cf:37:86:76:73:72:ae:04:0d:e2:58:7a:71:ef:c6:
                    5a:d9:bc:99:33:88:ae:eb:3e:35:c4:e1:a6:81:54:
                    80:4f:d9:19:e6:d4:c2:dc:07:64:0d:35:5e:4d:16:
                    9f:30:44:02:e2:90:a6:84:07:3c:33:a6:c8:d8:37:
                    40:7c:fb:e3:3d:6f:4b:a5:79:b9:3c:fd:5f:dc:f5:
                    92:ab:8e:e1:e3:ad:3a:e1:cb:5e:1e:b1:ff:9a:ec:
                    27:36:e3:f7:da:84:40:fa:82:b4:fe:66:86:cd:43:
                    04:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F4:D1:67:DF:71:52:33:E2:A8:51:00:A8:12:76:1B:8E:FC:B8:23
            X509v3 Authority Key Identifier:
                keyid:7B:08:E2:6E:A9:F3:D8:25:EC:CD:64:E5:FD:C3:55:C8:52:A7:AF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewjibqnz2CXszWTl_cNVyFKnr1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:5c:59:f7:32:67:a7:4a:01:1f:1a:cb:31:74:65:37:36:a6:
         ad:9c:8f:87:db:7c:d0:15:2e:9c:da:37:e5:53:a2:7a:49:38:
         83:53:f3:08:8d:07:d1:76:25:67:02:73:a6:7f:6a:5c:dd:1c:
         1c:53:32:20:bf:5c:39:b4:17:06:ea:af:d8:a2:c8:c6:1e:87:
         c1:72:c2:71:df:cc:8e:17:ec:dc:40:50:4c:f5:ba:71:8b:fe:
         92:26:68:b7:7f:4c:0f:fd:72:ac:fb:0b:c7:3f:fa:83:53:cc:
         76:fd:1a:3b:2d:91:bd:5f:b0:82:da:36:00:b8:75:3e:a8:1a:
         21:ec:d0:44:77:af:c1:ce:08:bb:b5:9d:17:76:df:eb:67:72:
         85:cc:f0:30:11:bb:ab:6f:cc:bd:aa:4a:2a:69:c9:21:d2:83:
         b7:d5:09:ff:7a:bb:9b:96:29:f3:17:bd:7c:3a:bb:95:b7:91:
         7b:f2:d8:8c:0f:12:db:bb:e0:83:c6:76:2d:39:7d:dd:bf:46:
         5c:a5:a9:79:b3:5e:c5:4f:b9:3f:96:68:9f:8b:7a:7a:18:e5:
         e2:f7:27:ae:46:5a:e7:f5:a0:1b:f2:79:09:db:2f:a7:3a:f6:
         ee:ff:55:b1:0a:eb:d6:07:e0:8d:b0:af:b6:68:bd:c1:4b:07:
         9d:7a:3e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 01:20:52 2024 by rpki-client on console-fra.rpki-client.org