Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
File:                     6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft (raw, json)
Hash identifier:          C9WYtWXHlDBNPe5WmhjRZx8GVwiiouJtOYWndxYLytA=
Subject key identifier:   0E:7C:B6:0C:4A:2B:AF:F1:3D:0F:BC:D5:3D:35:7F:7A:EB:D9:23:B7
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Certificate issuer:       /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial:       57C495704CE118D933ECEBB61DBDD94E3CBC805F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
Manifest number:          032E
Signing time:             Fri 06 Jun 2025 13:54:20 +0000
Manifest this update:     Fri 06 Jun 2025 13:49:20 +0000
Manifest next update:     Sat 07 Jun 2025 16:48:20 +0000
Files and hashes:         1: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl (hash: JU+NFYFw8habNxlwbS6vjHnWspVl3GplXS8UN6fJOR0=)
                          2: 3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa (hash: ds98Ml9DDwJOnbFWnKuYftmXTBL5e6vB9e43egQhGMs=)
                          3: EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (hash: HGmIGZLAwtENWMckwsQ8hWTMC9jCNzhQYJENgR6PUlg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 16:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c4:95:70:4c:e1:18:d9:33:ec:eb:b6:1d:bd:d9:4e:3c:bc:80:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
        Validity
            Not Before: Jun  6 13:49:20 2025 GMT
            Not After : Jun  7 16:48:20 2025 GMT
        Subject: CN=0E7CB60C4A2BAFF13D0FBCD53D357F7AEBD923B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:aa:4c:86:19:63:2a:67:68:9c:28:38:47:4e:
                    84:e6:07:54:91:b0:dd:17:d4:99:e2:4a:18:65:9f:
                    96:82:d5:3c:70:10:ac:fa:06:0f:d0:a4:00:b9:73:
                    58:cc:8d:ca:29:1e:1c:b8:ef:18:36:92:93:d9:1a:
                    37:a0:82:2e:48:1b:fa:68:17:25:12:38:21:81:d6:
                    17:51:a5:33:7f:84:b6:c1:82:bd:75:d5:91:b4:e0:
                    70:ee:98:84:bd:9b:e8:e6:c2:17:0b:0f:e9:7c:b9:
                    c0:de:94:2d:8a:2f:0b:94:ad:a2:74:99:de:3d:e3:
                    7a:49:87:ac:42:6b:29:eb:c2:99:0d:13:f7:e7:6a:
                    2c:c7:4c:a8:f1:14:a4:64:62:b2:8a:e2:52:25:7d:
                    32:48:09:9d:71:c4:c3:c1:24:f6:37:c7:48:92:16:
                    86:93:92:ed:e0:4e:29:55:4d:ed:d2:87:68:86:59:
                    21:fa:a1:52:36:6c:ab:c6:2c:24:ef:6f:bb:dc:9e:
                    ed:2c:af:10:82:91:23:47:65:80:79:2a:6c:42:37:
                    07:5f:ed:d4:da:44:8e:e1:d1:2e:e1:35:17:50:d5:
                    36:94:f1:2d:86:6c:2f:16:c1:5b:e6:4a:92:a6:db:
                    26:20:54:a8:3b:ea:e4:20:c8:4a:28:63:e3:4a:60:
                    fd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7C:B6:0C:4A:2B:AF:F1:3D:0F:BC:D5:3D:35:7F:7A:EB:D9:23:B7
            X509v3 Authority Key Identifier:
                keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:3d:5e:98:d7:36:89:85:c0:06:b8:67:3e:d8:c2:0a:ed:79:
         48:c0:68:d6:76:31:84:ee:2a:44:82:b6:17:bd:ee:a5:4e:85:
         8d:14:a5:62:a8:74:56:ce:14:8d:03:74:df:08:0c:48:38:06:
         8f:38:c5:3a:28:3b:92:3c:be:9f:cf:59:aa:2f:64:12:f8:23:
         de:dc:34:7b:8f:35:9a:27:c4:6c:02:b6:28:ea:1b:56:4d:39:
         69:e1:cb:fb:48:d1:bc:4e:8d:ff:d7:c0:c2:6a:5f:3b:aa:ae:
         55:ea:19:aa:3d:ec:82:96:0a:ba:42:20:12:b2:ea:ca:67:33:
         c9:b0:64:55:06:57:95:fc:eb:b0:60:f5:07:fc:26:b5:f7:8c:
         95:80:0d:99:8c:4c:1f:40:ae:a0:96:d4:b9:a1:40:9e:eb:22:
         c6:f3:e9:59:32:12:89:57:da:fd:5e:59:fd:ff:34:77:da:53:
         e8:14:3b:fb:0e:1d:01:16:4f:1e:3a:d3:a8:a8:da:b2:47:32:
         af:97:ec:d8:1f:21:a9:4a:1f:ff:f1:db:d9:10:6e:dd:2a:10:
         40:7c:fd:f1:4e:0d:20:7a:17:b3:ca:61:59:61:0f:a2:33:22:
         fd:de:c2:3e:ca:87:fd:5c:e6:c7:ee:a1:c1:b6:38:27:af:df:
         24:13:43:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:37:57 2025 by rpki-client