Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
File:                     3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft (raw, json)
Hash identifier:          cwqdVl1jW7zL5RORtjo9o59hw7hg3iWyqCuQlwRiiqo=
Subject key identifier:   B5:E6:F1:97:EE:62:20:AC:75:19:46:C9:94:DE:6D:F8:82:56:8C:C1
Authority key identifier: 36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
Certificate issuer:       /CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Certificate serial:       20A32883A40557B1E8B573DF5230FBE3A1D6C234
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
Manifest number:          0333
Signing time:             Fri 06 Jun 2025 20:39:20 +0000
Manifest this update:     Fri 06 Jun 2025 20:34:20 +0000
Manifest next update:     Sat 07 Jun 2025 20:47:20 +0000
Files and hashes:         1: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl (hash: tuaIVYcp5GChoThL+l64JE9WsxNN0m18VuHGYe6MaWs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a3:28:83:a4:05:57:b1:e8:b5:73:df:52:30:fb:e3:a1:d6:c2:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
        Validity
            Not Before: Jun  6 20:34:20 2025 GMT
            Not After : Jun  7 20:47:20 2025 GMT
        Subject: CN=B5E6F197EE6220AC751946C994DE6DF882568CC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:05:93:08:1c:38:2b:c1:2a:93:35:d8:23:d8:
                    cb:46:90:a3:71:cc:3f:3a:c6:60:f0:48:f5:21:db:
                    d9:90:e6:41:9e:02:9a:e5:fe:85:b1:3b:0d:a6:5c:
                    22:2a:71:de:66:de:21:6f:29:19:d9:6a:95:e6:ba:
                    6e:9b:b9:8c:1a:02:83:b0:02:16:70:5d:73:c4:60:
                    20:9e:72:e3:64:10:59:e9:5e:dd:24:0a:7b:bc:a0:
                    17:81:68:79:87:61:1f:6b:42:2d:55:84:7b:6c:84:
                    24:45:f4:81:99:91:49:64:81:27:df:03:e4:05:2a:
                    99:45:c5:ae:55:ce:86:0f:60:11:1a:95:7a:f1:27:
                    ad:79:0d:52:fd:89:34:23:6f:c5:ed:fe:05:b1:ce:
                    11:6a:2c:56:70:24:ad:04:78:22:bb:d1:e2:92:f5:
                    a5:d6:4f:d6:a7:61:73:97:36:63:55:d9:4d:9d:3e:
                    7c:30:27:59:91:02:a3:91:21:f9:47:fb:d8:db:73:
                    3a:97:a7:ce:ff:f7:27:18:df:5f:93:63:c5:7b:97:
                    d5:f3:f3:29:37:e4:d1:03:b5:c4:28:ce:44:55:e1:
                    72:b2:c8:4d:78:14:e0:4c:14:1c:75:5b:e4:5f:df:
                    9c:76:3c:3f:7b:01:b6:eb:0b:e3:cf:f8:cb:88:a9:
                    4d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E6:F1:97:EE:62:20:AC:75:19:46:C9:94:DE:6D:F8:82:56:8C:C1
            X509v3 Authority Key Identifier:
                keyid:36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:db:88:92:72:61:f9:9a:e6:67:13:75:44:2e:44:1c:df:a7:
         c4:14:9d:51:2a:48:85:52:8f:ab:a2:70:cd:e3:3d:f8:76:0a:
         90:e9:fc:b9:9c:48:b7:fe:69:d2:a2:a5:b6:00:09:94:68:9b:
         6f:00:81:d2:38:2b:76:49:42:bf:62:fb:ad:03:a4:24:ce:2c:
         db:32:0f:5b:2f:6a:4f:7f:e2:6c:67:f6:bc:b0:a5:40:38:90:
         4b:33:7b:85:4f:d7:de:bb:39:48:87:dc:c0:d8:f1:1f:08:02:
         13:40:bd:6b:84:f3:f2:53:99:65:6f:9b:63:94:39:0f:5b:9e:
         44:3d:92:0f:c6:bf:09:56:f5:49:c1:64:72:82:89:df:a8:b6:
         4d:58:ec:7e:15:32:43:0d:1e:7a:94:92:b0:ba:c4:c1:85:40:
         75:f5:00:12:3c:76:68:46:4c:77:42:26:2e:4c:30:10:de:0c:
         02:70:45:c4:f7:7d:9a:db:61:7c:e3:78:fe:32:59:0c:16:b8:
         12:e4:2b:49:7c:ab:fe:ad:c7:e7:68:a2:07:af:73:ab:fe:73:
         d6:a8:16:5c:45:e7:71:1b:32:58:ab:fa:90:41:0f:2b:f2:60:
         48:b4:ac:82:88:12:c0:f1:c7:04:47:65:6f:68:12:56:d0:d3:
         8a:16:9f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:44:48 2025 by rpki-client