Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
File:                     2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft (raw, json)
Hash identifier:          tGl3YuZ6yps7qYbAZr1ZQM3kX+0NlnIsP6CfVmria94=
Subject key identifier:   45:8C:4C:2E:A3:1A:F8:6F:63:8E:36:29:D7:0E:EC:2A:E4:EB:9F:A1
Authority key identifier: 22:11:E2:5C:22:34:C1:E5:A2:BF:CF:7F:DC:AC:54:B0:1A:F3:73:BD
Certificate issuer:       /CN=2211e25c2234c1e5a2bfcf7fdcac54b01af373bd
Certificate serial:       6F4A54DFD8F006C23B7426FA598DC33643B173EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
Manifest number:          02B6
Signing time:             Fri 06 Jun 2025 19:52:31 +0000
Manifest this update:     Fri 06 Jun 2025 19:47:31 +0000
Manifest next update:     Sat 07 Jun 2025 21:57:31 +0000
Files and hashes:         1: 2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl (hash: c4v5bqC993Jh4GiXixjIYSRzAvLpsbAa9tdxziT/qHA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:57:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4a:54:df:d8:f0:06:c2:3b:74:26:fa:59:8d:c3:36:43:b1:73:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2211e25c2234c1e5a2bfcf7fdcac54b01af373bd
        Validity
            Not Before: Jun  6 19:47:31 2025 GMT
            Not After : Jun  7 21:57:31 2025 GMT
        Subject: CN=458C4C2EA31AF86F638E3629D70EEC2AE4EB9FA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f7:bf:60:38:a9:83:3c:b4:33:e9:f6:29:e0:
                    66:9f:ce:17:e5:5f:2e:dd:e4:59:f8:0b:b3:48:5e:
                    98:83:0f:c3:ac:27:91:87:33:0b:78:38:3b:59:e4:
                    8f:00:b1:7d:0f:91:a9:10:a3:11:95:4a:36:88:fe:
                    f6:a5:67:2f:a0:ef:56:d1:20:7e:de:18:c5:84:e9:
                    53:13:92:45:28:a2:91:b5:f4:a4:58:ba:12:b0:81:
                    e5:d5:4c:de:95:92:98:6c:16:a2:1d:e5:44:8d:14:
                    65:92:25:69:28:c0:58:ee:09:60:aa:26:1f:54:0f:
                    c4:ef:fa:6f:32:1e:66:0f:6d:e7:d8:f2:38:84:1d:
                    64:88:d0:d0:29:2e:75:11:3c:3c:b2:f9:03:da:00:
                    73:b7:6d:cd:a3:79:6b:16:30:94:6d:aa:3a:72:e8:
                    65:ac:fa:d0:1b:95:cd:b2:d2:ba:8b:a0:1e:8f:c1:
                    79:42:fb:3a:3f:12:a4:fd:1a:7d:bb:c0:cc:f9:18:
                    9f:b9:a1:2f:2d:bd:8e:46:88:f9:f9:e3:d7:18:31:
                    1a:92:7c:8e:ad:13:8d:9f:5b:e7:09:67:ec:e1:24:
                    1b:f5:c9:bf:19:45:3d:7b:72:5d:b4:9e:fd:f6:6a:
                    bf:9d:d2:fd:b5:2a:60:01:56:eb:d0:55:35:46:05:
                    1c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8C:4C:2E:A3:1A:F8:6F:63:8E:36:29:D7:0E:EC:2A:E4:EB:9F:A1
            X509v3 Authority Key Identifier:
                keyid:22:11:E2:5C:22:34:C1:E5:A2:BF:CF:7F:DC:AC:54:B0:1A:F3:73:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:5f:68:de:1c:45:13:2b:7c:26:63:a3:0c:5f:f6:0d:f8:ea:
         47:46:0f:c7:00:2c:66:6a:87:52:dd:32:5f:7e:9f:c6:d1:0f:
         4d:1f:3f:d0:e4:6e:2d:fe:a7:9d:71:37:1d:20:14:59:8d:28:
         e5:4f:2e:a6:23:96:ae:f0:74:e8:f5:ed:9e:f0:43:44:dc:a7:
         64:c4:d0:71:a9:e8:95:a0:fa:df:ed:75:b9:fe:39:d6:88:fe:
         9c:c3:ee:c8:70:0a:75:2d:2f:a0:b3:1e:fe:67:30:e4:09:36:
         47:5e:59:13:17:f1:d0:58:95:37:54:6a:ec:91:06:6f:f4:10:
         52:18:08:86:29:d6:55:5b:d6:54:a9:9f:ca:17:6c:ea:bc:34:
         a5:e8:56:83:61:4c:b8:54:93:e3:31:64:30:cd:79:79:e8:92:
         c7:ea:6c:fe:bc:1e:17:c0:f5:e3:69:0a:86:8c:d5:09:63:56:
         eb:b7:ae:de:e0:80:65:8d:66:0b:19:63:df:bb:de:39:af:82:
         b8:43:65:70:e6:3e:95:11:10:b5:71:8d:10:59:c0:db:f9:ca:
         06:e5:48:fb:34:8c:23:71:e0:c7:13:2b:ce:22:db:cb:84:83:
         d3:1a:e3:69:1e:52:23:54:b0:3c:e3:c4:92:24:7f:10:c8:ef:
         d8:00:45:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:43:00 2025 by rpki-client