Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
File:                     6578E79662000496EB1540D8BD8FA65ED8D63A62.mft (raw, json)
Hash identifier:          uumLPiWW1vuPcK3CbwSmnYAhcLcJM2+AZQdNsjIGLdA=
Subject key identifier:   AF:97:64:49:BF:58:63:CF:00:69:36:BE:5D:0B:87:FC:78:A3:BB:7C
Authority key identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62
Certificate issuer:       /CN=6578E79662000496EB1540D8BD8FA65ED8D63A62
Certificate serial:       574CE892E1B840F26B547D22DF53C405EB19D89F
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
Manifest number:          05
Signing time:             Fri 04 Jul 2025 21:45:33 +0000
Manifest this update:     Fri 04 Jul 2025 21:40:33 +0000
Manifest next update:     Sat 05 Jul 2025 22:31:33 +0000
Files and hashes:         1: 6578E79662000496EB1540D8BD8FA65ED8D63A62.crl (hash: yjhr3sSbgKqjQjCvF8dRAi2np8nc9L/VJXWS+HmceHQ=)
                          2: 326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa (hash: 52mHsWa4VgNp8igpY75YRE/bqiZx2ZdwnVE8gr1/unY=)
                          3: 326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa (hash: CAs4yn2E+Z/tR5i90G5tFQhJLWheBQDwrBHMrZXdGBo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 22:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:4c:e8:92:e1:b8:40:f2:6b:54:7d:22:df:53:c4:05:eb:19:d8:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6578E79662000496EB1540D8BD8FA65ED8D63A62
        Validity
            Not Before: Jul  4 21:40:33 2025 GMT
            Not After : Jul  5 22:31:33 2025 GMT
        Subject: CN=AF976449BF5863CF006936BE5D0B87FC78A3BB7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:65:51:2b:23:20:fb:18:6e:21:19:04:28:8a:
                    11:c1:df:1a:fd:9c:e7:75:d9:e8:09:05:23:bb:44:
                    6b:a9:dc:dc:91:85:45:a4:a0:4b:e4:ab:31:23:18:
                    07:2a:7b:e5:08:da:eb:79:eb:d4:a1:21:71:dd:24:
                    31:54:90:cf:ad:dc:23:b6:ae:04:32:49:a2:f1:e0:
                    62:ea:0a:b3:4b:b4:68:08:ba:2f:0b:d1:0d:f9:55:
                    ed:c4:90:ea:4c:95:a8:3c:64:49:45:60:d7:2b:20:
                    ce:cf:4d:b9:74:c9:c1:fe:98:78:e6:4d:05:dd:b8:
                    88:df:a0:6e:a5:3b:3b:ed:37:5b:a1:a1:07:7c:99:
                    af:9f:88:9b:4a:a9:22:50:f5:fb:a3:d4:ac:2b:30:
                    94:f4:30:f0:11:5e:ae:d3:6f:fb:fb:e8:1d:55:6d:
                    80:83:1d:c3:29:e3:e7:db:79:0f:d0:94:7f:d2:70:
                    dd:15:a7:ef:7d:0e:8b:40:d8:be:8f:a3:d6:03:25:
                    05:8a:fe:8b:6d:ac:d7:fb:cd:04:37:9d:74:8c:b5:
                    6d:24:0a:90:08:a8:e4:6c:54:0e:25:75:89:9d:35:
                    70:60:59:d8:cf:aa:9e:42:af:5b:99:d7:ee:3c:7e:
                    18:8a:41:ce:14:2c:45:2e:23:c4:81:ad:3b:ae:7a:
                    79:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:97:64:49:BF:58:63:CF:00:69:36:BE:5D:0B:87:FC:78:A3:BB:7C
            X509v3 Authority Key Identifier:
                keyid:65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:19:64:1b:71:09:d9:cb:01:c0:3b:97:3d:cb:c7:66:61:c5:
         93:fd:34:c7:3b:ef:94:aa:c2:b3:6f:08:db:6f:2f:b2:a9:7c:
         52:b1:f3:bc:7d:79:15:b6:bc:65:d3:80:47:90:a1:8c:0f:ea:
         c9:70:d9:a8:c5:73:5f:a2:d5:7f:69:d3:7e:61:b3:56:25:16:
         26:01:7f:6c:5f:41:6a:4e:16:9b:a9:df:5c:3f:81:86:25:4a:
         cf:2d:a5:b9:bc:c7:3e:3b:aa:14:59:7e:bd:5d:5e:70:b1:b4:
         16:68:4e:b1:5d:47:57:75:2a:47:f2:d6:58:68:09:5d:d8:a5:
         0f:91:ae:30:7b:04:f8:63:2c:37:b9:6d:94:6d:7d:6f:19:87:
         e6:05:7c:ec:17:ae:0a:38:a1:31:53:98:10:a7:de:e5:1f:31:
         36:8e:ba:36:e5:48:d6:0c:0c:27:9a:6b:09:94:10:75:80:0d:
         06:9f:85:d8:92:75:83:68:9d:88:91:6b:62:32:77:f4:34:f4:
         7f:5d:25:7b:f6:20:84:b0:23:f0:9c:9e:89:46:24:69:6f:2f:
         4b:f1:cc:ad:b4:92:40:0e:c8:e3:19:84:18:aa:82:df:bc:c9:
         00:74:56:b1:e5:6f:20:7a:f9:9f:e6:5a:3d:90:03:1d:d8:e7:
         86:cc:83:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:28:44 2025 by rpki-client