Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft
File:                     C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft (raw, json)
Hash identifier:          Rwpq/rbvD8b9RHdLLwH9ZvExxcil/xFNav+z731kvLw=
Subject key identifier:   A3:D0:16:46:E5:2F:F2:83:65:EA:62:B8:99:BB:BD:A7:27:0E:9D:6C
Authority key identifier: C9:E7:59:75:E6:6E:7B:C4:34:4F:9C:DE:2C:30:73:B8:E5:4A:2F:0E
Certificate issuer:       /CN=c9e75975e66e7bc4344f9cde2c3073b8e54a2f0e
Certificate serial:       28AAADAEF5892341A08727B240D6F945D8774DA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft
Manifest number:          0197
Signing time:             Sun 20 Apr 2025 03:06:52 +0000
Manifest this update:     Sun 20 Apr 2025 03:01:52 +0000
Manifest next update:     Mon 21 Apr 2025 05:48:52 +0000
Files and hashes:         1: C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl (hash: LT+is1BHL9PSLfGaDxsjPuk37saFYirNpvp1Vk53grs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 05:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:aa:ad:ae:f5:89:23:41:a0:87:27:b2:40:d6:f9:45:d8:77:4d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e75975e66e7bc4344f9cde2c3073b8e54a2f0e
        Validity
            Not Before: Apr 20 03:01:52 2025 GMT
            Not After : Apr 21 05:48:52 2025 GMT
        Subject: CN=A3D01646E52FF28365EA62B899BBBDA7270E9D6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:32:6f:eb:d3:8d:28:f2:b1:99:70:88:45:f9:
                    b7:f5:47:f4:a0:a3:69:14:71:aa:5d:57:e0:e6:11:
                    c9:c6:da:c7:06:40:f3:d4:d3:0d:3d:70:59:62:ea:
                    6a:f1:4a:9b:f1:ee:5f:d6:d6:50:78:82:fe:29:59:
                    76:0b:68:03:c5:b5:19:17:4b:6e:15:2d:0a:36:a2:
                    06:88:10:b5:38:fc:16:7c:f3:38:86:b6:14:28:d7:
                    36:d8:22:27:a6:65:c8:fc:e6:6b:a1:5e:64:3d:6f:
                    3e:93:84:bd:55:8b:e9:f3:76:1f:9d:fd:dc:b8:06:
                    7d:f5:29:09:80:ec:bd:53:3c:30:8c:31:c4:84:10:
                    29:58:a7:e8:03:6d:8d:b8:3a:5b:03:13:52:82:a6:
                    0b:84:c8:11:92:8c:15:d7:8e:d5:80:90:5e:3f:ab:
                    3c:10:8d:e9:d7:08:b0:c5:0e:6b:d6:81:58:56:27:
                    1f:54:ab:60:43:7a:3b:06:6a:86:04:ad:51:cf:98:
                    9d:67:78:93:c6:b2:cf:50:2d:bf:70:f6:ba:62:be:
                    e5:5b:bc:1b:9e:21:0b:39:01:df:ef:ae:12:74:e9:
                    05:ae:7e:aa:ec:9b:ad:e1:d7:dc:52:2b:54:18:9d:
                    4c:d5:60:d9:ae:c5:b3:18:94:85:77:45:48:66:db:
                    bb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D0:16:46:E5:2F:F2:83:65:EA:62:B8:99:BB:BD:A7:27:0E:9D:6C
            X509v3 Authority Key Identifier:
                keyid:C9:E7:59:75:E6:6E:7B:C4:34:4F:9C:DE:2C:30:73:B8:E5:4A:2F:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e9:7c:3d:7c:1f:82:9b:b6:92:7f:ee:2f:e4:3f:f6:f2:99:
         9a:94:b8:bb:14:9b:98:b9:73:01:11:8a:a5:0f:c8:32:25:b8:
         cd:5e:83:b7:33:64:0e:d8:82:80:90:ad:9c:c1:23:05:d1:da:
         4c:f4:30:f3:b5:d9:82:b6:e9:06:7f:1d:17:13:f0:97:1e:bd:
         16:86:ba:d2:4d:59:ab:c3:90:88:21:3a:5c:7f:ad:0a:57:27:
         d6:5b:67:f8:61:19:3c:13:e7:79:a4:4f:23:c5:23:fc:c1:f1:
         84:92:7d:18:ec:5f:e4:0b:53:cb:3e:cf:03:c9:7c:36:c4:45:
         21:a8:89:cb:ac:54:25:a7:22:ce:86:40:e7:9e:e5:3d:5b:79:
         91:88:38:f7:48:61:06:d4:e2:7b:29:bc:3a:db:ca:15:e2:00:
         d6:ad:bf:61:53:e7:d0:5f:f3:61:07:8e:30:36:d8:ac:7d:27:
         72:6f:45:d1:49:a0:6a:78:e7:53:a3:6d:46:49:46:67:42:3c:
         ff:51:b6:43:08:98:b1:cb:11:30:32:64:16:03:c3:da:04:1d:
         9f:33:37:27:68:42:2b:2f:c4:bf:39:f1:c5:3c:b6:7a:e6:1b:
         6a:64:bd:c8:24:91:f9:fa:63:12:2a:aa:0a:f8:7c:d6:3d:ec:
         8a:6e:34:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:18:39 2025 by rpki-client