Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
File:                     FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft (raw, json)
Hash identifier:          xqgyJY6Pa9MZCMPfHRHBKOubOuyVb+YjXmELDm9aWMQ=
Subject key identifier:   61:E6:E7:11:50:34:19:50:DE:CD:97:36:3A:64:91:0F:9D:3E:6E:5D
Authority key identifier: FF:4F:0B:35:8C:BD:6C:54:EC:CB:EB:F2:6F:6D:1A:05:F1:D5:37:E8
Certificate issuer:       /CN=ff4f0b358cbd6c54eccbebf26f6d1a05f1d537e8
Certificate serial:       373C0EA1828183BB58C7A6F90376E162F5D0A40B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
Manifest number:          29
Signing time:             Fri 20 Sep 2024 05:27:49 +0000
Manifest this update:     Fri 20 Sep 2024 05:22:49 +0000
Manifest next update:     Sat 21 Sep 2024 08:56:49 +0000
Files and hashes:         1: FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.crl (hash: i3WkQRfu7KpEwUbF34+RZ9MmKMnFROjLuDEOBDIjpUw=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Sep 2024 06:48:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3c:0e:a1:82:81:83:bb:58:c7:a6:f9:03:76:e1:62:f5:d0:a4:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff4f0b358cbd6c54eccbebf26f6d1a05f1d537e8
        Validity
            Not Before: Sep 20 05:22:49 2024 GMT
            Not After : Sep 21 08:56:49 2024 GMT
        Subject: CN=61E6E71150341950DECD97363A64910F9D3E6E5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b9:82:75:d6:d8:18:3d:a5:d7:be:91:aa:1d:
                    e8:56:58:45:f3:6c:d7:f5:18:bb:84:85:68:4a:dc:
                    57:a2:ca:c0:d2:b5:a8:66:16:c6:81:1f:1f:01:02:
                    bb:d9:6e:c5:e8:52:09:e3:cb:1f:cb:ed:c1:70:13:
                    4d:09:cc:0b:1c:b2:b8:17:f7:c2:da:92:71:d5:b0:
                    68:51:ad:ec:9e:19:cb:96:f8:6a:75:b0:01:8e:da:
                    17:d1:35:77:5a:1e:4c:b7:71:11:8f:1e:ae:21:d1:
                    ec:47:cc:65:d8:3d:fd:30:26:4f:94:ef:7d:30:34:
                    25:fb:8c:0b:3b:8b:d8:3e:0d:94:dc:83:71:d0:88:
                    28:6e:7a:2a:03:8c:f0:76:6d:41:52:c7:ad:e1:ce:
                    1e:50:a3:8d:7c:27:98:7a:36:28:b9:7a:83:f5:9b:
                    aa:9f:d9:51:25:e5:f9:f6:a3:95:65:25:f0:85:8f:
                    f0:a4:44:43:32:63:16:34:50:9a:2f:02:16:96:9d:
                    e7:d9:1e:c8:4a:2f:66:04:83:4a:c5:ca:e3:de:bb:
                    f8:d4:28:b2:0d:9d:3d:08:b8:a6:b7:b6:3b:dc:6b:
                    49:e8:bb:e0:11:8d:92:de:2e:9b:47:33:81:6f:6c:
                    57:f4:e8:6f:35:cc:be:6f:60:7f:0d:91:54:08:66:
                    87:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E6:E7:11:50:34:19:50:DE:CD:97:36:3A:64:91:0F:9D:3E:6E:5D
            X509v3 Authority Key Identifier:
                keyid:FF:4F:0B:35:8C:BD:6C:54:EC:CB:EB:F2:6F:6D:1A:05:F1:D5:37:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:74:6b:11:95:47:f3:2f:2e:dc:13:bf:75:f3:00:78:3e:dd:
         26:aa:00:10:05:55:dd:d0:ab:53:41:18:47:80:59:d7:ae:ab:
         ef:d2:f4:5c:6e:f3:3d:18:73:f1:be:00:b2:dd:a6:9c:af:fc:
         a3:5a:39:d0:53:aa:ed:5b:e5:05:16:dd:d1:e1:6e:f2:d1:ed:
         a1:d1:1b:f2:b1:d6:2a:07:f2:a4:d5:13:5c:3f:53:e1:38:bb:
         64:f8:7d:c0:82:be:88:96:4e:b1:e3:83:43:0c:76:7a:bb:2c:
         e9:93:4f:b0:6a:58:e8:fb:04:94:3e:3f:ed:9f:58:ec:9c:49:
         9a:13:3a:55:4b:4d:31:4b:60:d3:89:f8:ff:a4:09:12:b1:58:
         f3:19:a1:43:dd:6b:4a:01:9b:bc:09:05:c2:9c:a4:c2:ad:c1:
         61:73:a4:c8:69:6e:2d:12:6e:17:66:40:ad:ee:f1:c7:29:4d:
         09:89:03:d9:db:d5:3e:13:04:da:45:79:d1:04:34:93:2b:95:
         fe:b8:58:2c:b2:bc:f0:e5:ab:50:9f:45:ff:2b:41:81:07:6e:
         91:73:69:2e:47:9c:bc:9f:26:c2:04:32:e0:8a:ae:1c:97:15:
         46:78:fb:7b:bd:c0:38:9f:56:4b:e6:85:72:05:6b:01:7b:0f:
         e5:44:32:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 09:06:54 2024 by rpki-client on console-ams.rpki-client.org