Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft
File:                     C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft (raw, json)
Hash identifier:          pve5ctekgPr9FSH0A/IlPU4z5mjWHhJ3RwDVf9rYCYI=
Subject key identifier:   A5:B7:6E:AA:33:7D:7A:8A:83:7F:D1:84:EC:73:2F:FA:9E:BB:0C:FF
Authority key identifier: C4:45:F6:C1:C3:A7:CA:8B:30:F8:5E:7D:B8:56:30:9C:AB:E6:8A:08
Certificate issuer:       /CN=c445f6c1c3a7ca8b30f85e7db856309cabe68a08
Certificate serial:       41933E6838C187A3AAFC3194020D95E943EDFA4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xEX2wcOnyosw-F59uFYwnKvmigg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft
Manifest number:          1B
Signing time:             Wed 02 Jul 2025 22:24:30 +0000
Manifest this update:     Wed 02 Jul 2025 22:19:30 +0000
Manifest next update:     Fri 04 Jul 2025 01:43:30 +0000
Files and hashes:         1: C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.crl (hash: i2tFaWNJkLm0m80oGc1aSj/1WW2UxFHTsMg1ZS90ml4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xEX2wcOnyosw-F59uFYwnKvmigg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:93:3e:68:38:c1:87:a3:aa:fc:31:94:02:0d:95:e9:43:ed:fa:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c445f6c1c3a7ca8b30f85e7db856309cabe68a08
        Validity
            Not Before: Jul  2 22:19:30 2025 GMT
            Not After : Jul  4 01:43:30 2025 GMT
        Subject: CN=A5B76EAA337D7A8A837FD184EC732FFA9EBB0CFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5b:77:fd:48:23:1b:ed:c6:61:66:41:0a:91:
                    65:6a:0b:dc:07:8a:13:91:81:9e:f7:31:70:82:fa:
                    7f:3e:ca:20:0a:0b:e0:30:e7:f9:1d:ce:71:81:63:
                    ee:db:48:02:0b:57:9d:9b:ba:49:13:37:6d:8e:20:
                    c4:e8:39:91:eb:a2:30:91:13:18:9f:83:87:d8:64:
                    99:61:b9:63:49:33:7f:7d:87:96:23:0f:ce:a9:6a:
                    93:b1:2f:67:38:a4:66:7e:ce:a4:56:08:2f:2c:7f:
                    14:cb:34:2a:6a:1f:3c:fb:58:5e:6d:18:40:b9:0d:
                    fa:ff:19:2b:9a:18:df:4a:33:1b:33:42:f5:81:ab:
                    b5:f1:4c:5b:22:18:37:bb:b3:c8:fd:14:37:a9:af:
                    e1:0b:dc:39:f4:b7:10:38:7c:21:0d:9d:39:71:bf:
                    30:6e:45:56:8c:d0:4e:bd:e2:c0:a0:4c:e5:38:75:
                    a0:8e:31:01:db:12:f4:c3:e1:e2:f6:09:64:d1:a4:
                    05:31:76:48:40:8b:96:02:b0:a2:ec:a6:15:d2:be:
                    b6:5c:22:bf:f8:28:83:0f:50:a0:09:92:b6:f5:59:
                    9a:39:e5:ac:7a:7c:f9:13:0f:a3:d9:5e:38:8f:f3:
                    b1:62:49:71:c4:21:70:96:09:e8:38:e2:f3:aa:f8:
                    7d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B7:6E:AA:33:7D:7A:8A:83:7F:D1:84:EC:73:2F:FA:9E:BB:0C:FF
            X509v3 Authority Key Identifier:
                keyid:C4:45:F6:C1:C3:A7:CA:8B:30:F8:5E:7D:B8:56:30:9C:AB:E6:8A:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEX2wcOnyosw-F59uFYwnKvmigg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:fa:b7:bd:f9:48:e8:77:83:db:ca:95:88:ff:44:b8:18:9e:
         89:50:e2:39:28:3c:1f:16:db:5f:1b:f8:4d:6b:f4:61:3e:cf:
         eb:3b:b3:34:63:b5:b1:48:b8:27:fe:a6:58:a3:60:02:0d:a0:
         39:12:79:cf:0f:5b:53:6d:4b:6c:8c:5e:db:6d:97:15:f9:1f:
         30:c0:3c:1a:74:76:4e:d1:28:22:dd:92:a0:5b:28:9e:33:02:
         85:9e:d9:66:6f:10:02:8e:52:63:05:7c:0c:04:a1:53:8c:6d:
         dd:fb:68:69:6e:6e:41:79:f4:01:91:a9:2f:04:1d:38:78:e2:
         73:33:7d:b5:29:f1:79:c0:c5:8f:e1:3c:09:8c:c1:d6:ec:04:
         47:3f:d6:ca:50:d9:40:3d:0c:3e:e3:1b:42:99:be:b6:53:8a:
         7f:d3:8c:ba:20:a8:16:f6:4b:90:75:03:ac:69:82:c3:dc:48:
         55:85:f5:98:3b:b5:cc:24:ab:5e:33:4a:56:c5:8b:05:09:72:
         c3:88:89:72:86:27:ff:d3:79:d6:4d:34:85:85:4e:59:4c:57:
         a4:55:4e:11:bd:de:32:7f:8d:fa:18:ed:2f:bf:a7:24:30:ab:
         0d:57:eb:e0:1e:9c:75:9a:b0:6e:b5:b0:98:9a:da:5c:1d:63:
         d8:5a:44:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:07:28 2025 by rpki-client