Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
File:                     8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft (raw, json)
Hash identifier:          G8rNjRFbni8cDlsNR83sQWi4hXOcHS9YAv/MOiKClpw=
Subject key identifier:   9C:94:FA:27:CB:FA:9C:27:F2:31:8A:58:9C:C2:4D:4E:AC:88:EF:CC
Authority key identifier: 8B:E2:14:DB:33:7D:72:6A:1F:AC:5F:FB:2E:9D:A1:05:F2:E4:20:25
Certificate issuer:       /CN=8be214db337d726a1fac5ffb2e9da105f2e42025
Certificate serial:       0FAB52B34B93B297EA2C1031410FAE4DFABD24B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
Manifest number:          01F8
Signing time:             Fri 06 Jun 2025 07:05:09 +0000
Manifest this update:     Fri 06 Jun 2025 07:00:09 +0000
Manifest next update:     Sat 07 Jun 2025 09:05:09 +0000
Files and hashes:         1: 8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl (hash: Tfhbe6WaOWV7Qd8xNEyJraqPdch+BR6zgfhmK8edUyA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 09:05:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ab:52:b3:4b:93:b2:97:ea:2c:10:31:41:0f:ae:4d:fa:bd:24:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8be214db337d726a1fac5ffb2e9da105f2e42025
        Validity
            Not Before: Jun  6 07:00:09 2025 GMT
            Not After : Jun  7 09:05:09 2025 GMT
        Subject: CN=9C94FA27CBFA9C27F2318A589CC24D4EAC88EFCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5d:17:f6:9e:29:ec:d1:c2:6a:d0:b3:04:8b:
                    c9:a0:79:cc:d3:44:8d:5a:84:6c:c5:e0:84:61:68:
                    ec:4f:c3:d1:64:bb:a1:33:82:41:f7:a4:5d:c6:13:
                    a0:c9:0d:d4:24:3f:af:0f:2f:dd:77:54:f3:39:80:
                    41:db:0d:a5:5c:83:19:73:66:2a:46:61:85:59:7f:
                    f3:d8:38:93:0d:37:d4:07:0f:c4:a3:86:71:c0:1b:
                    c7:1f:91:e2:ad:75:13:5a:5a:8b:05:de:4b:68:e0:
                    3a:0d:fb:3d:35:56:ba:cb:f6:93:4e:17:34:33:a9:
                    32:9c:15:36:46:e4:f0:be:5d:02:11:69:61:0d:74:
                    1e:52:fc:9d:75:97:a5:12:ee:c9:9f:4d:0e:84:6f:
                    58:0c:12:ea:97:b1:33:fe:89:70:0f:68:d9:98:74:
                    ed:31:6d:fe:f4:85:84:91:63:75:f8:ca:e0:2a:63:
                    8b:2c:14:5d:31:39:4e:0f:03:97:e9:48:73:b1:4f:
                    a8:e7:f0:cb:95:f7:17:94:08:f4:cb:e6:9c:41:cf:
                    99:3a:2b:ca:98:43:43:32:5d:fd:cb:82:63:6e:b9:
                    3b:95:9c:d1:8e:9b:36:52:ac:ed:b9:6a:3a:f9:63:
                    1e:83:03:af:1a:10:19:cc:73:16:6d:c3:4e:7f:4d:
                    75:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:94:FA:27:CB:FA:9C:27:F2:31:8A:58:9C:C2:4D:4E:AC:88:EF:CC
            X509v3 Authority Key Identifier:
                keyid:8B:E2:14:DB:33:7D:72:6A:1F:AC:5F:FB:2E:9D:A1:05:F2:E4:20:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e0:2d:d5:55:da:38:40:ae:80:77:1e:48:7e:55:b3:59:80:
         95:6f:37:78:b7:b0:82:8c:b0:20:2f:f0:da:88:9b:64:71:a3:
         01:c3:0e:8a:2f:1d:1b:38:fb:0c:8b:3b:34:45:f5:e3:4e:eb:
         29:57:b8:f4:e4:06:e4:af:e2:de:ce:83:b5:e8:c9:dc:82:f8:
         c7:dd:99:a4:c4:98:aa:c3:c5:d9:3c:87:eb:0b:be:5d:7c:50:
         cc:14:61:59:f5:e0:97:a6:89:9c:83:f6:e7:b9:31:03:d3:b7:
         cf:1c:8e:5d:81:8d:52:35:89:8e:b2:9c:0f:11:05:61:ab:fb:
         69:b8:87:cb:32:c5:c9:4c:8c:18:8b:0b:a2:54:5c:b8:5b:00:
         2c:8d:3d:4c:aa:e2:76:44:e7:c0:6c:84:3d:5e:f5:ac:7a:e5:
         48:71:79:88:2d:0d:87:5d:5c:59:d8:95:ee:d4:7f:88:2a:9f:
         4d:a1:63:ef:c7:d2:76:f8:7f:1b:64:80:0d:a8:03:83:95:16:
         f3:41:2d:7c:05:02:1d:fe:56:49:c6:1f:25:34:f0:71:0d:a8:
         2c:c4:43:44:03:74:56:a5:06:29:3b:4b:c1:3b:cb:dc:0c:81:
         dd:df:62:e0:b4:52:c2:d7:5d:90:6c:46:7b:3b:e9:1f:ef:40:
         b9:75:c5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:49:02 2025 by rpki-client