Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft
File:                     C284E54726A876081FA2857EF4AF5B1A78D096B4.mft (raw, json)
Hash identifier:          +VWqFQrfRx2xs3uB79KBx8+7Zp4nX/+ypZYdRfvbDyA=
Subject key identifier:   C1:54:D5:45:99:16:36:EF:44:B4:A8:9E:F8:36:20:FD:61:EB:83:EC
Authority key identifier: C2:84:E5:47:26:A8:76:08:1F:A2:85:7E:F4:AF:5B:1A:78:D0:96:B4
Certificate issuer:       /CN=C284E54726A876081FA2857EF4AF5B1A78D096B4
Certificate serial:       5DF599B6D12534C517EE3AE64024A905FF360081
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft
Manifest number:          43
Signing time:             Thu 21 Aug 2025 02:15:41 +0000
Manifest this update:     Thu 21 Aug 2025 02:10:41 +0000
Manifest next update:     Fri 22 Aug 2025 02:41:41 +0000
Files and hashes:         1: C284E54726A876081FA2857EF4AF5B1A78D096B4.crl (hash: K1sdFVgPELReOXfmQ+4uNtwAauUKqTU2aFLErSSVXKE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 16:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f5:99:b6:d1:25:34:c5:17:ee:3a:e6:40:24:a9:05:ff:36:00:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C284E54726A876081FA2857EF4AF5B1A78D096B4
        Validity
            Not Before: Aug 21 02:10:41 2025 GMT
            Not After : Aug 22 02:41:41 2025 GMT
        Subject: CN=C154D545991636EF44B4A89EF83620FD61EB83EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a4:33:2e:96:01:ae:96:e0:2d:8c:9e:25:71:
                    a4:59:95:c8:03:c5:a6:c5:d5:8d:7c:9e:d2:6a:f6:
                    93:a4:95:c2:18:2a:e9:16:8c:c3:1f:02:ec:8d:de:
                    fa:97:26:18:e4:ef:1f:b4:95:d0:92:eb:c2:90:10:
                    1f:2e:3b:33:09:12:8a:f5:25:bd:9d:0c:d9:82:56:
                    12:a2:db:b0:2a:60:a6:09:e3:63:16:9d:5e:1f:3a:
                    2d:cf:1b:ca:10:8c:b9:f6:31:a1:e2:50:54:d9:24:
                    75:ea:a6:2b:4a:be:34:0f:d5:23:78:ca:f3:71:ff:
                    f4:e4:e2:0e:c0:5a:18:44:1a:64:04:56:69:be:35:
                    01:09:3f:70:1c:4d:6f:49:c5:40:3c:17:77:36:51:
                    7f:3a:7c:7f:b4:83:a7:e2:09:97:fd:04:90:a5:6e:
                    3b:1a:d0:dc:5f:bb:6c:0d:dc:6f:b7:33:10:4e:2e:
                    30:67:83:3a:68:59:7c:fc:49:61:35:ea:f5:cf:d7:
                    b2:17:5e:7a:e2:c4:e9:dc:eb:62:41:db:55:df:76:
                    65:c5:d6:20:14:73:4f:40:85:45:5a:fe:21:8c:c7:
                    7e:35:09:39:83:f3:ad:62:78:64:66:83:6d:09:36:
                    d3:f2:33:85:3d:80:b4:c1:d6:c6:f8:84:7f:a0:af:
                    f3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:54:D5:45:99:16:36:EF:44:B4:A8:9E:F8:36:20:FD:61:EB:83:EC
            X509v3 Authority Key Identifier:
                keyid:C2:84:E5:47:26:A8:76:08:1F:A2:85:7E:F4:AF:5B:1A:78:D0:96:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b2:47:8c:d9:6b:4e:8e:09:7b:fe:9a:e3:64:78:ae:54:86:
         a1:58:fa:f7:95:aa:e2:23:e1:ba:15:b6:41:84:fb:08:6b:9c:
         fc:a3:2c:3a:c2:26:4b:b1:09:f1:85:f6:ce:55:38:8b:17:39:
         e9:59:c7:c6:cc:db:08:13:72:fb:4f:8d:8b:4e:ff:a2:1e:cf:
         0e:d7:aa:4b:e1:a3:83:50:7a:5e:84:71:b5:7a:fe:14:3c:cc:
         7f:90:d4:25:65:fb:b2:bc:af:2b:8b:73:60:d3:dd:40:f5:d3:
         96:53:00:25:a4:f8:22:1b:54:aa:8b:9d:7e:52:20:1f:03:21:
         11:53:46:89:6e:47:7e:9e:93:aa:64:7a:98:23:6c:c8:2a:38:
         ed:1e:d4:ff:ad:e0:c8:a3:eb:19:43:16:80:ac:3d:4f:85:73:
         25:ed:6d:ce:e4:44:94:aa:cb:d5:f9:55:5a:49:d9:dd:23:ff:
         4e:e3:23:22:c6:fc:e5:d8:a6:fd:ba:8a:20:45:2a:0c:e9:de:
         3d:b3:ab:2e:09:0d:e9:59:7f:7a:16:96:75:0a:ec:3f:fe:66:
         93:d0:e5:08:d2:7b:33:b8:af:57:bf:42:d5:cc:b2:1b:87:fe:
         0c:14:c9:c0:a6:a8:ad:ad:4d:c9:7e:54:1d:bd:80:f9:1e:e9:
         14:a9:ab:7c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUXfWZttElNMUX7jrmQCSpBf82AIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI4NEU1NDcyNkE4NzYwODFGQTI4NTdFRjRBRjVCMUE3
OEQwOTZCNDAeFw0yNTA4MjEwMjEwNDFaFw0yNTA4MjIwMjQxNDFaMDMxMTAvBgNV
BAMTKEMxNTRENTQ1OTkxNjM2RUY0NEI0QTg5RUY4MzYyMEZENjFFQjgzRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDepDMulgGuluAtjJ4lcaRZlcgD
xabF1Y18ntJq9pOklcIYKukWjMMfAuyN3vqXJhjk7x+0ldCS68KQEB8uOzMJEor1
Jb2dDNmCVhKi27AqYKYJ42MWnV4fOi3PG8oQjLn2MaHiUFTZJHXqpitKvjQP1SN4
yvNx//Tk4g7AWhhEGmQEVmm+NQEJP3AcTW9JxUA8F3c2UX86fH+0g6fiCZf9BJCl
bjsa0Nxfu2wN3G+3MxBOLjBngzpoWXz8SWE16vXP17IXXnrixOnc62JB21XfdmXF
1iAUc09AhUVa/iGMx341CTmD861ieGRmg20JNtPyM4U9gLTB1sb4hH+gr/PLAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUwVTVRZkWNu9EtKie+DYg/WHrg+wwHwYDVR0j
BBgwFoAUwoTlRyaodggfooV+9K9bGnjQlrQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5
YjNkLzUvQzI4NEU1NDcyNkE4NzYwODFGQTI4NTdFRjRBRjVCMUE3OEQwOTZCNC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk
YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9DMjg0RTU0NzI2QTg3NjA4MUZBMjg1N0VG
NEFGNUIxQTc4RDA5NkI0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzZmZjdhOTg5LWVjZGYtNDNkNi04NmUxLWY2YzM5MzViOWIzZC81L0MyODRFNTQ3
MjZBODc2MDgxRkEyODU3RUY0QUY1QjFBNzhEMDk2QjQubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAYskeM
2WtOjgl7/prjZHiuVIahWPr3lariI+G6FbZBhPsIa5z8oyw6wiZLsQnxhfbOVTiL
FznpWcfGzNsIE3L7T42LTv+iHs8O16pL4aODUHpehHG1ev4UPMx/kNQlZfuyvK8r
i3Ng091A9dOWUwAlpPgiG1Sqi51+UiAfAyERU0aJbkd+npOqZHqYI2zIKjjtHtT/
reDIo+sZQxaArD1PhXMl7W3O5ESUqsvV+VVaSdndI/9O4yMixvzl2Kb9uoogRSoM
6d49s6suCQ3pWX96FpZ1Cuw//maT0OUI0nszuK9Xv0LVzLIbh/4MFMnApqitrU3J
flQdvYD5HukUqat8
-----END CERTIFICATE-----
Generated at Thu Aug 21 06:53:23 2025 by rpki-client