Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
File:                     5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft (raw, json)
Hash identifier:          YFY+r7yVJRb4RF3kKX8sAjH3npvaMNLFnuwMb72lMls=
Subject key identifier:   91:B9:08:9F:07:6B:C7:88:4A:98:01:6F:7B:22:6C:27:36:2B:44:80
Authority key identifier: 5E:DB:D6:E7:9C:68:9C:56:A8:4F:A4:6C:D7:C9:FA:31:51:DF:E0:BB
Certificate issuer:       /CN=5edbd6e79c689c56a84fa46cd7c9fa3151dfe0bb
Certificate serial:       0780277C24985785DF9CDB4D58EB6820BF126B66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
Manifest number:          01EE
Signing time:             Tue 11 Nov 2025 06:18:52 +0000
Manifest this update:     Tue 11 Nov 2025 06:13:52 +0000
Manifest next update:     Wed 12 Nov 2025 07:24:52 +0000
Files and hashes:         1: 5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl (hash: g8KoUpkUhOEPz4r8iRb0ngBgzRdGUp/hr0Fyi4g1uN4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:24:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:80:27:7c:24:98:57:85:df:9c:db:4d:58:eb:68:20:bf:12:6b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5edbd6e79c689c56a84fa46cd7c9fa3151dfe0bb
        Validity
            Not Before: Nov 11 06:13:52 2025 GMT
            Not After : Nov 12 07:24:52 2025 GMT
        Subject: CN=91B9089F076BC7884A98016F7B226C27362B4480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:19:4f:05:09:63:92:1f:72:5d:fb:9c:5d:55:
                    2a:e8:75:5c:cf:3e:df:21:ad:6a:26:e6:22:b8:7a:
                    25:7e:53:0c:35:4d:3f:8e:7f:48:32:af:e1:d6:ab:
                    1d:df:87:24:d2:b7:47:77:d0:17:74:1d:d9:f3:a1:
                    36:5f:d3:0f:ca:29:c7:0e:c0:2b:31:2c:60:30:c1:
                    5f:1a:7e:e6:84:62:c5:67:84:56:f9:7f:06:43:47:
                    9b:f4:40:74:1b:15:97:58:c5:98:50:cf:5f:05:ae:
                    d8:1c:dd:c2:11:77:94:9f:77:fb:c0:06:86:6a:1d:
                    1e:c0:e1:95:19:ae:83:b3:a0:73:50:14:fd:bf:11:
                    fd:8b:70:97:24:c3:df:3c:e0:ad:cf:fa:02:5e:90:
                    17:a6:fb:aa:a5:fb:5f:82:14:68:70:41:24:7b:3b:
                    50:58:72:c7:f5:02:af:30:8e:de:0c:ab:18:a9:71:
                    a7:40:62:96:31:6c:ec:43:a2:24:84:7a:5f:0c:d1:
                    52:6f:cf:8e:1d:2f:e5:e6:de:ab:5d:12:55:b3:a5:
                    2f:ca:90:4d:e3:98:cb:a4:bf:5f:ff:67:6b:69:06:
                    4f:1c:a6:55:ee:86:cb:37:fa:fb:d2:e7:d7:84:30:
                    97:14:97:e0:e1:91:34:1f:16:42:cf:dd:3e:94:94:
                    e3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B9:08:9F:07:6B:C7:88:4A:98:01:6F:7B:22:6C:27:36:2B:44:80
            X509v3 Authority Key Identifier:
                keyid:5E:DB:D6:E7:9C:68:9C:56:A8:4F:A4:6C:D7:C9:FA:31:51:DF:E0:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d1:fc:88:e3:1a:87:60:34:3e:79:83:32:01:5d:44:8e:79:
         a8:fa:09:7b:0d:73:3e:79:7e:84:f1:fc:d4:4f:4e:30:5e:77:
         34:57:f8:7d:a1:20:42:1d:60:ed:6b:68:56:11:b7:47:3a:15:
         9f:28:d5:a8:b9:e7:11:19:6c:ca:ba:1a:f9:86:c8:92:d7:e3:
         da:c6:6e:64:f8:c4:93:68:70:19:51:c0:41:cd:7a:51:1c:9a:
         d3:67:b7:5c:ba:be:67:2c:9b:e6:36:61:f6:63:d1:7c:c5:9e:
         d6:35:d4:e1:34:99:52:a6:38:29:fc:af:a7:5c:93:4f:77:72:
         93:be:71:76:42:b7:8e:7d:71:1a:7e:2d:b2:54:69:48:c9:c7:
         58:9c:75:00:6d:e3:01:c4:47:1e:71:0b:ed:a6:dd:90:2a:6f:
         f0:40:ac:cb:49:aa:59:9b:48:a3:b1:c1:86:d5:19:01:ba:9d:
         3f:8c:14:e0:9f:f7:2d:a7:ff:92:88:db:7d:9e:d7:c4:1b:fc:
         6d:ee:71:8b:49:bc:0c:ef:20:d1:66:87:bc:7a:b5:32:af:36:
         69:aa:18:d5:01:21:b9:d4:d6:89:17:b1:10:81:aa:c2:6a:36:
         52:74:62:ff:b5:2e:b7:29:25:39:b1:6a:b0:f9:15:b0:28:16:
         ba:bb:86:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:42 2025 by rpki-client