Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
File:                     47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json)
Hash identifier:          JpNjR6i08rkDMckKLoxCBjgaOjeT3K2KlMwu7/dBbGo=
Subject key identifier:   9A:CE:A6:63:47:ED:76:06:A0:FF:E4:DD:30:7D:D7:D9:DB:53:51:B5
Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41
Certificate issuer:       /CN=47E9555355C6B007AACD5D45BF41E3383E991641
Certificate serial:       359D457255387AB7A2CAC62C82CFA08DA8088CB9
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
Manifest number:          040E
Signing time:             Thu 24 Jul 2025 01:57:46 +0000
Manifest this update:     Thu 24 Jul 2025 01:52:46 +0000
Manifest next update:     Fri 25 Jul 2025 02:48:46 +0000
Files and hashes:         1: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: 3CuKVTzzcDVwdtYnzal63GSNTwwWf/il7Uu0SET/Nt8=)
                          2: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: 3ipGYMDZ54FZdaI4eg46OMa/ZV0a0Q3rHUY9RUekrv8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
                          rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
                          rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
                          rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 10:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:9d:45:72:55:38:7a:b7:a2:ca:c6:2c:82:cf:a0:8d:a8:08:8c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641
        Validity
            Not Before: Jul 24 01:52:46 2025 GMT
            Not After : Jul 25 02:48:46 2025 GMT
        Subject: CN=9ACEA66347ED7606A0FFE4DD307DD7D9DB5351B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ca:7d:99:34:fc:fb:a1:ff:a6:9b:3e:e6:ed:
                    9c:44:ba:8e:5d:ae:db:7f:78:38:80:47:7a:93:45:
                    28:2f:df:d1:35:c1:c5:71:72:91:51:a5:d4:7c:2f:
                    07:89:c2:3c:ef:07:73:96:b3:a9:e3:9e:38:ab:33:
                    2b:b4:33:92:cb:5f:5c:e9:34:84:6b:24:d3:36:3e:
                    32:10:f3:e1:35:28:8b:a2:ca:13:f7:93:17:ba:5f:
                    0d:e5:b1:e7:0b:55:e4:52:2a:64:13:e4:23:b9:aa:
                    49:3d:d3:f4:ce:55:95:11:61:34:6a:a1:8b:5f:6c:
                    38:56:1e:6e:61:71:49:bd:d0:71:a3:2f:d0:ff:72:
                    47:ad:01:ad:4c:8c:91:19:b1:f4:01:9e:dc:e7:20:
                    ca:de:e2:2f:a5:4d:6a:3b:d8:81:b0:9d:30:4f:21:
                    3e:5d:e6:63:2c:89:98:67:f1:6a:dc:24:25:fb:6c:
                    13:d8:b1:41:5f:fd:e3:a0:0b:22:15:03:b6:53:f8:
                    f5:5d:aa:6d:c6:9b:f6:af:ef:07:5c:15:fe:58:48:
                    ce:32:c0:c6:50:8c:6c:56:a3:93:64:ac:3d:63:ae:
                    25:26:0a:eb:63:88:de:5b:c1:94:51:d5:4e:6f:e5:
                    5f:0c:f7:dc:7e:51:27:2f:5e:ad:42:9f:c8:5f:9d:
                    e3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CE:A6:63:47:ED:76:06:A0:FF:E4:DD:30:7D:D7:D9:DB:53:51:B5
            X509v3 Authority Key Identifier:
                keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ed:bc:56:20:63:05:25:c5:9c:a5:48:cb:f5:09:58:5c:7f:
         5f:74:e4:09:21:90:ce:6d:5b:05:61:04:b5:1d:e5:8b:db:1c:
         be:20:6f:23:9a:93:73:02:62:dd:68:ea:79:1e:f3:f8:98:cf:
         6c:35:83:9a:fc:3f:59:db:d4:e7:d8:dd:05:74:bc:7f:c6:bb:
         91:db:e0:5b:d9:f1:ee:23:8d:63:5a:ab:10:e4:1e:8b:6e:10:
         7c:50:38:47:e4:1f:26:27:12:0a:84:c1:d6:18:69:a9:2b:32:
         24:39:76:e4:31:03:54:aa:a5:c9:4e:6f:42:90:b2:2a:dd:d5:
         95:f1:81:b1:78:99:08:75:af:a5:f6:50:6c:a6:09:53:c3:32:
         9c:8e:c7:0e:49:12:41:0c:77:d8:b8:a9:86:24:eb:6d:c5:9d:
         de:af:24:23:a6:ec:7a:70:af:64:30:b3:25:29:34:9c:3e:ae:
         f6:f6:32:be:37:6f:9e:1b:8e:dd:26:97:85:e8:36:de:fa:63:
         a6:a8:c9:fb:68:3c:f6:b9:1e:8d:b2:bd:53:f8:d9:13:b4:71:
         4f:49:7f:10:c9:61:ff:28:a2:8c:69:8c:21:34:8b:6e:40:5c:
         b9:d9:57:f6:9f:c7:c3:cf:99:e8:af:30:77:23:35:71:1d:5c:
         e6:4c:48:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 04:54:27 2025 by rpki-client