Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
File:                     FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft (raw, json)
Hash identifier:          qF1IFIg2aIiCUZm0Y5DeOWUnt9k/VFvySvGZNiCU+40=
Subject key identifier:   53:E5:44:C9:86:92:A9:C8:2C:6B:7E:68:80:11:8D:69:0F:AA:E4:1A
Authority key identifier: FF:4F:0B:35:8C:BD:6C:54:EC:CB:EB:F2:6F:6D:1A:05:F1:D5:37:E8
Certificate issuer:       /CN=ff4f0b358cbd6c54eccbebf26f6d1a05f1d537e8
Certificate serial:       7C52391096F4B464DFC069B6A3DBD417E3012F7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
Manifest number:          01AA
Signing time:             Wed 02 Jul 2025 10:26:33 +0000
Manifest this update:     Wed 02 Jul 2025 10:21:33 +0000
Manifest next update:     Thu 03 Jul 2025 13:01:33 +0000
Files and hashes:         1: FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.crl (hash: 8O8zO7utfholnCLpLUqDU+j6SalyN0I1mcS5OsgF1gY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:52:39:10:96:f4:b4:64:df:c0:69:b6:a3:db:d4:17:e3:01:2f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff4f0b358cbd6c54eccbebf26f6d1a05f1d537e8
        Validity
            Not Before: Jul  2 10:21:33 2025 GMT
            Not After : Jul  3 13:01:33 2025 GMT
        Subject: CN=53E544C98692A9C82C6B7E6880118D690FAAE41A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5c:6b:cf:7b:e8:04:89:b6:07:8c:01:e9:b3:
                    b0:9f:f7:4e:de:dd:ad:03:11:3d:c8:69:f9:1e:8a:
                    51:af:63:ad:6a:cb:db:69:b5:35:b4:c4:39:6a:98:
                    eb:8e:7c:30:2b:36:37:6c:7f:17:fc:90:bd:31:85:
                    fe:32:be:f3:77:7b:61:99:2c:41:87:5c:65:15:13:
                    04:2b:55:62:de:13:a3:1f:7e:c4:04:01:4c:80:46:
                    a3:a3:08:04:fa:3b:10:aa:d3:ce:57:96:c8:8c:2b:
                    35:cb:1e:74:db:5b:52:f4:69:2c:85:cd:70:67:14:
                    8d:24:05:6e:49:91:3f:11:b5:1b:c5:f6:13:95:c5:
                    9b:6b:6b:84:da:62:23:90:2f:e2:ea:4f:34:5c:5f:
                    22:cd:1f:8b:d6:15:70:46:ae:97:b3:ff:8c:b7:23:
                    b5:bb:85:aa:b2:fe:17:93:e3:1d:74:2c:ad:12:65:
                    9f:ef:c1:5f:2b:fb:c3:d1:e1:35:81:57:59:12:04:
                    68:3b:a5:76:b5:ef:8b:3e:fb:fd:e2:7e:03:2f:b2:
                    af:ce:ef:8c:ed:5f:b1:ba:72:e5:21:bc:02:09:8f:
                    dd:cf:e0:77:cd:72:5e:d6:27:0b:f2:7c:3c:7a:5e:
                    70:2f:54:18:9e:cb:73:80:79:f7:f0:18:ff:05:24:
                    db:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E5:44:C9:86:92:A9:C8:2C:6B:7E:68:80:11:8D:69:0F:AA:E4:1A
            X509v3 Authority Key Identifier:
                keyid:FF:4F:0B:35:8C:BD:6C:54:EC:CB:EB:F2:6F:6D:1A:05:F1:D5:37:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:0f:e9:70:73:ed:43:4f:da:25:d5:7f:5c:f4:7e:88:ac:a0:
         70:de:8d:2e:47:2c:7c:d4:64:0d:ab:29:80:f4:92:02:53:cc:
         89:49:ff:2d:97:ce:11:77:c5:bc:52:c1:4f:12:e0:2f:45:c6:
         f3:f4:1b:4a:30:6f:21:28:ce:c5:ed:39:ea:ed:77:7a:b3:b6:
         59:3c:91:cb:03:7c:bf:b9:31:d7:57:5e:16:46:88:fd:d7:7a:
         34:f8:a1:c7:6d:6d:10:57:88:84:2a:59:31:1b:da:b3:e0:75:
         07:d9:67:86:0f:7d:a6:9f:5c:44:95:9a:9e:5a:10:2c:c1:7e:
         0a:4b:db:93:04:ab:a7:c6:a6:63:14:a3:a6:c8:ce:ae:19:69:
         d3:50:5e:72:64:c4:75:c1:42:c7:68:86:d2:37:bf:a2:af:d2:
         37:3a:e3:e3:ae:f9:f5:e6:da:e3:73:05:5d:07:6b:c5:a8:1c:
         cf:3e:97:4a:38:77:4e:c7:59:f7:9e:d9:3c:a5:80:1f:76:7c:
         ed:9d:95:e2:f3:bc:d0:b9:3d:8c:6a:4d:1c:1a:7a:5e:35:29:
         78:44:6f:eb:e3:5a:56:cc:a9:24:0c:fd:ba:66:2e:f8:ef:2c:
         8f:b0:3c:75:0a:81:e9:22:b0:22:84:5f:a3:68:b9:9b:55:ab:
         d9:f3:b8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:52:12 2025 by rpki-client