Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft
File:                     AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft (raw, json)
Hash identifier:          qFWEvnkoE4WyYCHdpLkE80gUtELfnkx17s5MKzxaH5I=
Subject key identifier:   05:34:72:23:D5:17:A3:AC:F8:8E:99:81:2F:BE:C2:71:9C:B5:EE:0D
Authority key identifier: AD:7B:DA:1D:05:90:7A:5F:B9:FA:4E:7E:3C:FB:4B:9A:E2:12:87:C2
Certificate issuer:       /CN=ad7bda1d05907a5fb9fa4e7e3cfb4b9ae21287c2
Certificate serial:       0B267F52E31049C11CA6F3002F1594B89ADCC5F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rXvaHQWQel-5-k5-PPtLmuISh8I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft
Manifest number:          0115
Signing time:             Fri 04 Apr 2025 21:06:48 +0000
Manifest this update:     Fri 04 Apr 2025 21:01:48 +0000
Manifest next update:     Sat 05 Apr 2025 23:00:48 +0000
Files and hashes:         1: AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.crl (hash: VO0xtpyl7vvsIX5M+uAPsBDbnxZh0eAjYMI+LfsutQM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rXvaHQWQel-5-k5-PPtLmuISh8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:26:7f:52:e3:10:49:c1:1c:a6:f3:00:2f:15:94:b8:9a:dc:c5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad7bda1d05907a5fb9fa4e7e3cfb4b9ae21287c2
        Validity
            Not Before: Apr  4 21:01:48 2025 GMT
            Not After : Apr  5 23:00:48 2025 GMT
        Subject: CN=05347223D517A3ACF88E99812FBEC2719CB5EE0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a7:05:a1:96:95:34:a7:00:e5:ee:b9:fc:2c:
                    6e:b6:bc:7f:44:ab:e7:08:0c:54:fb:3f:7e:6c:49:
                    3a:fa:2e:1e:7a:de:9e:8f:55:12:52:f1:42:c2:72:
                    31:e3:47:eb:35:6c:6d:00:bd:44:ea:4d:35:16:b1:
                    25:d7:95:e1:47:8f:5b:d5:d5:79:04:1c:1b:51:18:
                    29:24:17:11:65:39:7f:ba:83:d8:b9:a1:1a:ba:dd:
                    de:b0:d6:60:5f:ec:a4:ae:5b:b6:bf:03:2b:39:fe:
                    03:21:50:d7:0e:1b:ac:cc:bb:2b:0f:5f:3f:b6:78:
                    42:82:a6:60:ed:b2:51:df:40:c8:8b:e9:30:0a:b8:
                    26:b1:07:08:53:4a:7e:1e:92:df:3d:28:ca:00:7d:
                    9b:54:2e:7d:8e:90:a7:01:d6:0d:d6:a9:62:d8:b9:
                    f6:72:79:2d:20:4d:51:bd:e7:6d:f0:86:a4:cf:ea:
                    71:86:24:37:1f:30:b1:a4:1f:28:89:e2:eb:0d:14:
                    a6:8a:c5:3b:fb:8a:f8:84:cc:96:bc:c9:ee:f1:54:
                    d9:d1:f3:28:2a:a1:09:2c:1e:59:de:36:e2:47:10:
                    61:55:4b:b4:0d:f5:08:ee:31:01:c9:4a:21:55:b0:
                    24:56:fe:60:28:2a:a1:cc:00:09:03:a9:68:0b:65:
                    f2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:34:72:23:D5:17:A3:AC:F8:8E:99:81:2F:BE:C2:71:9C:B5:EE:0D
            X509v3 Authority Key Identifier:
                keyid:AD:7B:DA:1D:05:90:7A:5F:B9:FA:4E:7E:3C:FB:4B:9A:E2:12:87:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXvaHQWQel-5-k5-PPtLmuISh8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:41:20:6e:88:33:39:87:03:71:d3:ca:38:ce:88:5f:69:3f:
         4a:76:61:10:93:80:93:f0:e9:ef:84:87:8f:1d:b0:47:07:6e:
         fa:cf:43:1b:7b:84:18:14:ac:54:8f:e2:b2:8e:e7:f1:8c:a8:
         50:b5:92:99:a4:2d:fb:12:1b:93:00:d4:ae:0e:12:70:26:5f:
         99:e9:35:74:41:cd:c1:4b:54:2a:59:6a:20:2e:4a:93:fa:e3:
         e4:ff:b9:56:1d:64:e7:a4:63:d9:d5:76:01:b3:64:80:aa:fa:
         fe:71:66:65:c0:71:2e:45:c9:c0:77:7b:91:d7:6e:e7:ba:10:
         a4:c5:b5:61:d8:0a:d0:46:27:93:14:e2:be:09:d9:77:5d:5f:
         eb:6a:03:19:f0:fd:f1:29:2d:6e:42:02:f2:74:a7:da:70:d2:
         e9:6c:ad:ad:27:e1:29:8f:b8:b1:62:73:64:45:f4:a5:46:fe:
         be:55:b0:a8:0c:39:51:f3:5e:95:08:d6:4e:16:ee:97:ce:fd:
         4d:b0:fd:f3:84:c9:39:93:b9:ac:3c:b4:ab:6f:3f:5a:c2:50:
         a5:cb:a6:e7:10:db:c3:d3:30:ad:9c:cd:f7:c5:5f:69:b5:b2:
         ce:5e:94:82:de:1c:30:81:2a:88:e4:7f:ee:ae:1e:85:d1:b0:
         5f:7a:2d:59
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUCyZ/UuMQScEcpvMALxWUuJrcxfQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWQ3YmRhMWQwNTkwN2E1ZmI5ZmE0ZTdlM2NmYjRiOWFl
MjEyODdjMjAeFw0yNTA0MDQyMTAxNDhaFw0yNTA0MDUyMzAwNDhaMDMxMTAvBgNV
BAMTKDA1MzQ3MjIzRDUxN0EzQUNGODhFOTk4MTJGQkVDMjcxOUNCNUVFMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMpwWhlpU0pwDl7rn8LG62vH9E
q+cIDFT7P35sSTr6Lh563p6PVRJS8ULCcjHjR+s1bG0AvUTqTTUWsSXXleFHj1vV
1XkEHBtRGCkkFxFlOX+6g9i5oRq63d6w1mBf7KSuW7a/Ays5/gMhUNcOG6zMuysP
Xz+2eEKCpmDtslHfQMiL6TAKuCaxBwhTSn4ekt89KMoAfZtULn2OkKcB1g3WqWLY
ufZyeS0gTVG9523whqTP6nGGJDcfMLGkHyiJ4usNFKaKxTv7iviEzJa8ye7xVNnR
8ygqoQksHlneNuJHEGFVS7QN9QjuMQHJSiFVsCRW/mAoKqHMAAkDqWgLZfK5AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUBTRyI9UXo6z4jpmBL77CcZy17g0wHwYDVR0j
BBgwFoAUrXvaHQWQel+5+k5+PPtLmuISh8IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNjZGY5Y2EtZGQ2NC00ZjMxLWFiZjMtMGYzMmI4ZTdm
ZTc5LzAvQUQ3QkRBMUQwNTkwN0E1RkI5RkE0RTdFM0NGQjRCOUFFMjEyODdDMi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JYdmFIUVdRZWwtNS1rNS1QUHRMbXVJ
U2g4SS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yM2NkZjljYS1k
ZDY0LTRmMzEtYWJmMy0wZjMyYjhlN2ZlNzkvMC9BRDdCREExRDA1OTA3QTVGQjlG
QTRFN0UzQ0ZCNEI5QUUyMTI4N0MyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArEEgbogzOYcDcdPKOM6I
X2k/SnZhEJOAk/Dp74SHjx2wRwdu+s9DG3uEGBSsVI/iso7n8YyoULWSmaQt+xIb
kwDUrg4ScCZfmek1dEHNwUtUKllqIC5Kk/rj5P+5Vh1k56Rj2dV2AbNkgKr6/nFm
ZcBxLkXJwHd7kddu57oQpMW1YdgK0EYnkxTivgnZd11f62oDGfD98SktbkIC8nSn
2nDS6WytrSfhKY+4sWJzZEX0pUb+vlWwqAw5UfNelQjWThbul879TbD984TJOZO5
rDy0q28/WsJQpcum5xDbw9MwrZzN98VfabWyzl6Ugt4cMIEqiOR/7q4ehdGwX3ot
WQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:29 2025 by rpki-client