Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
File:                     5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft (raw, json)
Hash identifier:          juGr7lv/pkkGyj+saQVgoJmmw/DRLTcg1rsVXeECciA=
Subject key identifier:   A9:C0:49:80:AD:86:B4:20:CD:EB:78:69:57:74:31:F5:6F:DE:28:9F
Authority key identifier: 5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
Certificate issuer:       /CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
Certificate serial:       1AC1155365B67290BF157715816E3AFB026EAB62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
Manifest number:          010A
Signing time:             Sun 16 Feb 2025 08:38:48 +0000
Manifest this update:     Sun 16 Feb 2025 08:33:48 +0000
Manifest next update:     Mon 17 Feb 2025 12:06:48 +0000
Files and hashes:         1: 5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl (hash: Sw6b1YQJSmxY6V8Y8KZkq3M16/p1FL0Do8R9F4emSlg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 12:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c1:15:53:65:b6:72:90:bf:15:77:15:81:6e:3a:fb:02:6e:ab:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
        Validity
            Not Before: Feb 16 08:33:48 2025 GMT
            Not After : Feb 17 12:06:48 2025 GMT
        Subject: CN=A9C04980AD86B420CDEB7869577431F56FDE289F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bf:88:9f:6b:49:9c:08:d0:71:8d:26:c7:04:
                    42:c0:4c:b4:d0:74:d2:3b:57:9c:03:d7:81:87:c1:
                    c9:5e:54:d3:ac:d2:25:9d:29:d3:97:ac:c8:a5:ea:
                    9d:07:ce:75:f9:c2:75:2f:cc:31:2b:bc:09:8d:f6:
                    3f:49:7a:1d:9f:80:35:45:11:62:b7:83:54:3f:3e:
                    6e:92:68:f0:02:22:88:44:d8:1e:2f:df:a6:ff:36:
                    5a:b3:f2:5a:76:d2:9c:2e:02:dc:0b:6b:45:df:a4:
                    b0:32:90:f8:3a:cf:94:83:76:ce:9c:72:a9:93:37:
                    b4:58:43:b6:39:b8:54:60:34:ff:aa:9e:a6:09:62:
                    dd:0f:00:e2:18:6b:f5:cd:d4:d3:bd:b3:13:e0:b5:
                    77:54:26:0f:a2:39:3c:3e:2c:2e:29:39:dc:7a:d6:
                    a6:38:77:ba:a7:a9:7d:f1:4f:3f:00:e9:25:4c:7e:
                    a2:6f:31:80:d4:db:6b:68:cd:b5:c3:25:7f:74:3f:
                    06:06:f0:1e:f1:3f:e7:41:ca:37:a1:29:51:75:31:
                    78:73:b4:09:62:5c:e8:40:63:16:cc:5b:50:76:02:
                    c3:79:6e:19:93:f1:90:bf:16:18:1e:66:00:a0:5d:
                    ae:36:8c:90:3e:05:9d:40:63:44:8d:c0:35:3b:4b:
                    e4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C0:49:80:AD:86:B4:20:CD:EB:78:69:57:74:31:F5:6F:DE:28:9F
            X509v3 Authority Key Identifier:
                keyid:5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:9f:6b:5d:dc:01:f1:24:a7:9a:dd:0a:88:93:1f:f2:16:49:
         fa:d1:6b:5c:bf:8f:7a:64:d3:15:51:a3:a7:e5:34:86:9d:b4:
         81:24:c8:8c:37:ae:43:27:8f:df:9f:a2:84:fa:fc:b6:14:57:
         40:0f:dd:ed:34:15:74:11:35:05:a3:02:cf:69:8d:47:2f:c1:
         91:e2:ef:5d:30:22:e5:42:13:0f:6b:06:58:13:73:d2:af:10:
         01:51:05:ee:2a:d7:18:5e:cc:98:42:3f:99:15:7c:6a:d5:c6:
         e5:95:25:dc:39:33:61:e3:b5:d1:b0:a5:cd:fa:ea:48:dc:9f:
         93:97:ee:30:e0:e1:ee:b3:ca:aa:22:d1:9b:1f:62:7f:0c:03:
         c6:a5:d6:f3:61:0c:b2:a5:42:90:3e:cd:6d:9a:f3:b7:d9:0d:
         23:9c:3d:e0:9c:a2:2f:7d:5f:22:50:e0:82:1d:54:50:01:11:
         80:ca:8d:f1:49:37:3f:ab:99:30:f0:b5:ef:f8:53:0c:d6:5e:
         ef:69:cc:ff:8d:9c:29:7d:3a:3b:04:30:65:5e:da:7b:38:c4:
         57:2f:2b:44:14:55:9e:60:ae:0e:6a:db:08:7c:d0:b1:c3:93:
         94:be:61:24:c8:db:de:f3:07:13:98:f8:96:00:cd:2f:7f:f8:
         15:88:a3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:10 2025 by rpki-client