Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft
File:                     B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft (raw, json)
Hash identifier:          FUk5VLzRGofZUo9bBFW2LkcCoMgC2vffZ7ebuWzO7vk=
Subject key identifier:   82:FF:12:22:C9:B5:5E:FF:6A:17:51:D0:03:B6:9E:36:47:94:D8:6B
Authority key identifier: B1:D3:04:9A:B9:0B:73:31:4F:2A:DF:CA:D6:39:33:6D:93:20:B3:5E
Certificate issuer:       /CN=b1d3049ab90b73314f2adfcad639336d9320b35e
Certificate serial:       4F059205F75B82E6AFF175F62B69D3816EC8BE1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sdMEmrkLczFPKt_K1jkzbZMgs14.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft
Manifest number:          C3
Signing time:             Sat 07 Jun 2025 22:27:16 +0000
Manifest this update:     Sat 07 Jun 2025 22:22:16 +0000
Manifest next update:     Mon 09 Jun 2025 00:57:16 +0000
Files and hashes:         1: B1D3049AB90B73314F2ADFCAD639336D9320B35E.crl (hash: JkKeGuSAMQQF7uFHgHaiRcgRTzHuUL/p+rzIgFj0LwQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sdMEmrkLczFPKt_K1jkzbZMgs14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:57:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:05:92:05:f7:5b:82:e6:af:f1:75:f6:2b:69:d3:81:6e:c8:be:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d3049ab90b73314f2adfcad639336d9320b35e
        Validity
            Not Before: Jun  7 22:22:16 2025 GMT
            Not After : Jun  9 00:57:16 2025 GMT
        Subject: CN=82FF1222C9B55EFF6A1751D003B69E364794D86B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6a:78:41:27:54:b0:ea:ac:cb:27:c2:73:d8:
                    64:35:1e:72:fe:08:b8:1b:78:d1:bf:90:f7:4f:e0:
                    33:a3:43:67:a3:8a:ef:80:15:e8:ec:bc:50:b7:5b:
                    41:c1:49:b4:20:56:39:85:90:30:5c:e3:fb:e3:1e:
                    61:b3:c5:bb:2f:8d:bb:f7:09:33:94:56:f0:82:1d:
                    38:af:24:f2:46:b7:84:b9:f1:64:46:7b:73:4a:f4:
                    11:e1:e0:70:0f:79:ec:11:82:e5:65:9b:f6:2f:5f:
                    3d:ab:f2:fa:12:15:d0:63:0d:3b:f8:9f:28:37:de:
                    87:52:25:11:d3:8a:df:e2:00:7b:b5:98:20:a5:fe:
                    13:31:7f:4c:c1:0e:dc:f7:25:3f:95:8d:67:36:5b:
                    bc:1b:c2:60:03:fa:ab:92:32:14:45:fc:e2:db:34:
                    a6:c8:1c:67:6f:5b:fc:d0:06:58:9c:c5:56:00:aa:
                    16:3d:f8:95:d6:1b:0a:a5:67:f3:52:a1:33:e6:27:
                    19:51:7d:dc:47:0f:a0:56:5d:0d:19:e4:e1:ba:30:
                    43:92:ad:50:39:4a:30:9b:ed:e7:0c:51:19:b6:3d:
                    63:01:e6:fc:80:5b:a8:92:d0:3b:1c:51:41:dc:35:
                    ed:95:e8:3f:92:79:d3:f1:f9:7b:55:90:1f:f7:d7:
                    fc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FF:12:22:C9:B5:5E:FF:6A:17:51:D0:03:B6:9E:36:47:94:D8:6B
            X509v3 Authority Key Identifier:
                keyid:B1:D3:04:9A:B9:0B:73:31:4F:2A:DF:CA:D6:39:33:6D:93:20:B3:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdMEmrkLczFPKt_K1jkzbZMgs14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:46:01:4b:ac:f4:11:1e:7a:d1:72:7c:97:ec:ec:43:5b:4b:
         40:2d:53:49:6f:c5:4d:d3:a6:82:46:4f:f5:c9:6c:d1:77:c0:
         23:1e:ac:d2:63:eb:b0:c4:74:2b:17:a1:ac:36:b5:c8:dc:af:
         42:19:f6:a9:e5:99:ca:50:93:74:d9:41:7a:db:91:f6:6d:eb:
         f2:28:30:f0:22:ff:30:72:45:aa:ad:f3:9d:05:8a:14:1d:38:
         e2:d3:74:92:b8:c6:8f:69:c0:da:07:34:8d:27:83:ff:fa:3b:
         40:60:9e:5f:60:b4:b6:c8:5b:b9:53:da:ed:9b:69:b9:9c:fd:
         72:14:02:8b:77:9c:03:8b:0a:a5:da:0c:cf:f5:3f:d6:f8:07:
         3f:8d:45:77:df:b9:36:28:96:4a:21:c1:e5:1a:c8:68:bd:ff:
         f8:03:46:45:3c:49:9f:09:d6:cd:08:65:af:c7:dc:26:a4:a9:
         df:88:44:4b:1e:1b:8f:2b:1f:dc:d4:8c:a8:83:8f:a7:62:ac:
         f3:5a:d1:99:a7:df:3a:5f:ba:9f:f8:ef:df:21:cd:5e:d6:79:
         7c:b2:f7:81:a7:fb:ec:66:ff:84:2a:55:62:1f:d1:ba:c3:bd:
         11:44:13:74:70:9a:39:5d:f4:b2:03:f4:b8:c1:90:9a:7a:59:
         3e:1b:74:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:45:17 2025 by rpki-client