Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
File:                     A715A7C4243DFD5608AC7C5962055125B94D1763.mft (raw, json)
Hash identifier:          Ao/4Ppe2ka/d3qDIcK0c8hNGY8PhP/lxgt4IJPuo2Dk=
Subject key identifier:   7F:81:65:10:D2:A7:5D:20:D8:27:08:D9:B9:75:3A:B6:1C:87:6D:22
Authority key identifier: A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
Certificate issuer:       /CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Certificate serial:       0EE87E9BB513C9D975668DC3B9D539F7877C7991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
Manifest number:          0516
Signing time:             Sat 07 Jun 2025 05:27:18 +0000
Manifest this update:     Sat 07 Jun 2025 05:22:18 +0000
Manifest next update:     Sun 08 Jun 2025 06:04:18 +0000
Files and hashes:         1: A715A7C4243DFD5608AC7C5962055125B94D1763.crl (hash: WpCUMqA5JzR2vHxMsP7rbcw3nPP6muodAjkZbILXM2E=)
                          2: 698CBB9E641A60FE66E1B58C92ACD281637ED767.cer (hash: tNwFc0wxK30edc2dJgBKjPLV9///2mnITAEpNIZ0d8k=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e8:7e:9b:b5:13:c9:d9:75:66:8d:c3:b9:d5:39:f7:87:7c:79:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a715a7c4243dfd5608ac7c5962055125b94d1763
        Validity
            Not Before: Jun  7 05:22:18 2025 GMT
            Not After : Jun  8 06:04:18 2025 GMT
        Subject: CN=7F816510D2A75D20D82708D9B9753AB61C876D22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:14:04:cd:d1:46:ce:d5:62:4b:0a:a2:6d:25:
                    0c:d4:60:cb:ba:29:c3:cd:05:8b:c2:24:8e:96:ac:
                    72:4d:1a:7d:20:e9:1f:bd:ba:94:c2:c1:1c:56:a4:
                    2a:2f:92:13:25:41:40:65:c3:06:9b:a8:b2:93:1e:
                    fa:59:0a:c4:70:bc:a1:0d:04:1c:78:80:8b:5c:48:
                    73:a5:1a:be:54:67:88:8e:e3:2d:ba:50:ed:cb:03:
                    94:cc:6d:d2:6c:39:7b:ef:f4:7c:da:8f:d8:6f:a7:
                    85:e2:31:77:b8:01:8d:23:0b:44:f1:2b:09:4f:c6:
                    77:4f:dc:a7:05:be:6a:8a:ed:c5:da:71:20:b1:69:
                    27:50:35:8a:9d:2b:b0:f2:28:54:4f:1a:6c:ce:eb:
                    14:90:c7:ba:4a:0f:50:2d:4b:9c:45:d0:77:3b:f0:
                    40:12:dd:27:ce:43:fb:2d:1f:95:8c:9a:56:90:58:
                    2d:61:e7:62:39:14:79:5b:bd:da:4d:43:62:b0:76:
                    86:ff:d4:7c:9c:4e:6e:6e:62:47:de:fe:5a:82:6f:
                    ea:ae:ea:89:8d:b6:55:51:cf:4f:b5:46:e6:1d:b4:
                    0b:2d:8c:e1:10:3e:bd:8d:dd:68:55:a7:61:56:48:
                    c2:06:cb:12:90:a3:57:64:a2:40:bd:de:d2:e0:a3:
                    45:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:81:65:10:D2:A7:5D:20:D8:27:08:D9:B9:75:3A:B6:1C:87:6D:22
            X509v3 Authority Key Identifier:
                keyid:A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:74:45:7b:0e:37:7b:53:53:a9:6e:3c:e8:5b:90:cb:93:bf:
         66:38:e5:bd:0e:97:a5:48:d6:52:91:fb:b4:02:61:62:68:2b:
         77:ef:61:45:73:f7:36:9e:f2:f5:7e:fc:0c:d7:68:0a:09:b7:
         33:3f:8d:51:d1:b1:8b:d8:a5:ed:72:37:d0:74:a8:bb:18:df:
         34:f1:19:eb:fb:1c:de:b5:b3:e6:24:09:8e:65:e9:07:1a:0f:
         24:4c:7d:4b:06:61:7f:90:66:18:00:75:d5:1a:5f:36:df:39:
         0b:1c:46:62:7e:f7:53:4b:5d:eb:61:38:54:9c:1d:39:c6:db:
         55:83:ec:cb:0c:ae:b3:31:9a:c7:15:7b:18:b9:a5:c2:4f:5b:
         8f:9c:a2:d7:5a:b4:99:1d:c5:07:1a:10:18:e4:8d:21:1c:fd:
         4a:52:69:ad:d6:f7:01:0d:a8:a8:cb:86:90:29:c2:13:2d:08:
         c7:e1:dc:94:fa:0e:33:b2:f7:b7:ee:7f:89:50:bc:d9:34:20:
         83:46:12:cb:3d:62:b4:64:e3:1a:a7:c2:9a:f5:22:fe:bc:97:
         9f:9e:81:58:4d:6f:92:32:20:00:aa:68:3e:ef:71:d3:b8:ce:
         b0:34:d3:f9:08:40:2b:80:a3:17:49:d1:22:7d:85:91:be:0f:
         dd:60:d6:46
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUDuh+m7UTydl1Zo3DudU594d8eZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTcxNWE3YzQyNDNkZmQ1NjA4YWM3YzU5NjIwNTUxMjVi
OTRkMTc2MzAeFw0yNTA2MDcwNTIyMThaFw0yNTA2MDgwNjA0MThaMDMxMTAvBgNV
BAMTKDdGODE2NTEwRDJBNzVEMjBEODI3MDhEOUI5NzUzQUI2MUM4NzZEMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZFATN0UbO1WJLCqJtJQzUYMu6
KcPNBYvCJI6WrHJNGn0g6R+9upTCwRxWpCovkhMlQUBlwwabqLKTHvpZCsRwvKEN
BBx4gItcSHOlGr5UZ4iO4y26UO3LA5TMbdJsOXvv9Hzaj9hvp4XiMXe4AY0jC0Tx
KwlPxndP3KcFvmqK7cXacSCxaSdQNYqdK7DyKFRPGmzO6xSQx7pKD1AtS5xF0Hc7
8EAS3SfOQ/stH5WMmlaQWC1h52I5FHlbvdpNQ2Kwdob/1HycTm5uYkfe/lqCb+qu
6omNtlVRz0+1RuYdtAstjOEQPr2N3WhVp2FWSMIGyxKQo1dkokC93tLgo0VTAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUf4FlENKnXSDYJwjZuXU6thyHbSIwHwYDVR0j
BBgwFoAUpxWnxCQ9/VYIrHxZYgVRJblNF2MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzEvQTcxNUE3QzQyNDNERkQ1NjA4QUM3QzU5NjIwNTUxMjVCOTREMTc2My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3B4V254Q1E5X1ZZSXJIeFpZZ1ZSSmJs
TkYyTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03
Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvMS9BNzE1QTdDNDI0M0RGRDU2MDhB
QzdDNTk2MjA1NTEyNUI5NEQxNzYzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnRFew43e1NTqW486FuQ
y5O/ZjjlvQ6XpUjWUpH7tAJhYmgrd+9hRXP3Np7y9X78DNdoCgm3Mz+NUdGxi9il
7XI30HSouxjfNPEZ6/sc3rWz5iQJjmXpBxoPJEx9SwZhf5BmGAB11RpfNt85CxxG
Yn73U0td62E4VJwdOcbbVYPsywyuszGaxxV7GLmlwk9bj5yi11q0mR3FBxoQGOSN
IRz9SlJprdb3AQ2oqMuGkCnCEy0Ix+HclPoOM7L3t+5/iVC82TQgg0YSyz1itGTj
GqfCmvUi/ryXn56BWE1vkjIgAKpoPu9x07jOsDTT+QhAK4CjF0nRIn2Fkb4P3WDW
Rg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 08:33:20 2025 by rpki-client