Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
File:                     7D7059638411E3231E759E74A813BF9376209E77.mft (raw, json)
Hash identifier:          XLTHoyyZkFGgy/SKy5/0ZeFVhcuKtr3ekD8nrvV4/Oc=
Subject key identifier:   90:58:F0:70:39:95:ED:3D:B5:7A:B3:9A:84:12:B2:1B:AB:D2:D1:BD
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Certificate issuer:       /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial:       037998C49300EB20E5450CE62B74DBC6DED8994A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
Manifest number:          018D
Signing time:             Sat 07 Jun 2025 09:43:17 +0000
Manifest this update:     Sat 07 Jun 2025 09:38:17 +0000
Manifest next update:     Sun 08 Jun 2025 12:55:17 +0000
Files and hashes:         1: 7D7059638411E3231E759E74A813BF9376209E77.crl (hash: 3ujRyIYnONzWMEPEPTXZGlzFXjtn2EKDMw3wV7byF2k=)
                          2: AS215849.asa (hash: WRilh/6hJb7kAkUd7i3j3vQPKdOIGwVbb9ZLfAC7rKQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:79:98:c4:93:00:eb:20:e5:45:0c:e6:2b:74:db:c6:de:d8:99:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
        Validity
            Not Before: Jun  7 09:38:17 2025 GMT
            Not After : Jun  8 12:55:17 2025 GMT
        Subject: CN=9058F0703995ED3DB57AB39A8412B21BABD2D1BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:58:63:36:98:f7:b7:b7:44:2e:93:94:1a:d6:
                    c4:f3:40:4a:58:1d:a4:c9:1f:42:14:20:f7:3b:9c:
                    e0:9d:7f:3d:ca:f0:de:87:b1:73:71:56:e4:cc:fa:
                    5b:66:8c:75:28:3b:11:b2:ec:bb:17:ee:8e:88:6d:
                    dc:c1:6d:10:bd:1e:de:6c:79:25:f8:f7:a9:40:be:
                    79:f1:de:a5:cd:a1:9b:b2:24:92:e7:63:e7:76:6d:
                    82:bc:13:b1:cc:47:2c:e8:50:6b:fa:26:ea:a6:6b:
                    d3:22:37:66:70:d6:03:07:c5:9c:3e:39:05:3c:9f:
                    f6:7c:0f:0a:b9:28:b5:b9:fa:50:e6:69:59:b2:48:
                    52:60:b6:c1:c7:a8:96:b4:03:7b:c4:b0:4e:79:e0:
                    ac:c4:0a:c5:3c:d7:6e:5e:57:57:35:43:67:7f:ab:
                    e1:e6:db:ab:00:35:03:c1:04:67:23:f8:7f:ca:95:
                    d5:16:3e:b3:44:e0:7c:3a:87:f8:7c:8a:bb:80:72:
                    1f:1a:be:1f:55:ce:64:09:70:ea:e4:21:ce:43:73:
                    50:58:e4:6b:c9:25:ca:54:68:7a:e9:8d:f6:30:b4:
                    5f:62:e5:16:83:64:4c:98:77:53:35:61:56:fc:ef:
                    f0:b8:50:a0:aa:49:62:b7:f8:cc:39:6d:68:17:0c:
                    97:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:58:F0:70:39:95:ED:3D:B5:7A:B3:9A:84:12:B2:1B:AB:D2:D1:BD
            X509v3 Authority Key Identifier:
                keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:1a:58:a2:6f:af:c0:fc:5f:51:35:63:6c:41:07:c3:20:92:
         86:05:4c:17:7c:27:e9:43:a3:8b:df:22:06:c3:7a:24:92:5e:
         c4:75:d3:32:42:15:00:6e:c3:bb:1b:66:f5:22:c1:5b:31:c5:
         b0:29:6d:98:b5:6c:3c:61:f3:c1:5f:25:95:26:5e:ac:5b:53:
         c6:32:ed:83:d2:17:ca:4d:e1:00:30:d5:db:e0:17:b4:43:c3:
         b5:85:53:0e:3a:b9:53:02:bb:b2:9d:7a:77:ad:9d:fb:9f:83:
         3f:a2:04:90:4e:44:fa:90:f7:ae:75:45:57:dd:78:f0:9c:fe:
         03:9d:92:08:21:da:c2:fe:33:fe:8f:18:b4:59:7a:2c:fb:31:
         c2:71:da:16:c3:b3:3d:37:c0:75:cf:05:f5:be:c2:29:29:8f:
         07:82:34:ae:42:c3:81:dd:8c:b7:84:98:6d:21:69:53:8c:ef:
         43:f7:53:65:04:14:c2:03:b6:57:77:57:0a:b7:b7:b9:39:c0:
         0f:0e:9d:7c:b6:56:be:ca:ed:a8:e8:41:a4:e9:92:1b:30:28:
         a2:e9:0c:43:73:72:c8:a0:56:12:ab:18:ad:9a:a2:72:9d:59:
         2d:ca:63:10:05:35:ad:44:fd:6d:e4:08:48:d1:a1:83:5a:8d:
         fd:e1:16:51
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUA3mYxJMA6yDlRQzmK3Tbxt7YmUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2Q3MDU5NjM4NDExZTMyMzFlNzU5ZTc0YTgxM2JmOTM3
NjIwOWU3NzAeFw0yNTA2MDcwOTM4MTdaFw0yNTA2MDgxMjU1MTdaMDMxMTAvBgNV
BAMTKDkwNThGMDcwMzk5NUVEM0RCNTdBQjM5QTg0MTJCMjFCQUJEMkQxQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNWGM2mPe3t0Quk5Qa1sTzQEpY
HaTJH0IUIPc7nOCdfz3K8N6HsXNxVuTM+ltmjHUoOxGy7LsX7o6IbdzBbRC9Ht5s
eSX496lAvnnx3qXNoZuyJJLnY+d2bYK8E7HMRyzoUGv6Juqma9MiN2Zw1gMHxZw+
OQU8n/Z8Dwq5KLW5+lDmaVmySFJgtsHHqJa0A3vEsE554KzECsU8125eV1c1Q2d/
q+Hm26sANQPBBGcj+H/KldUWPrNE4Hw6h/h8iruAch8avh9VzmQJcOrkIc5Dc1BY
5GvJJcpUaHrpjfYwtF9i5RaDZEyYd1M1YVb87/C4UKCqSWK3+Mw5bWgXDJf7AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUkFjwcDmV7T21erOahBKyG6vS0b0wHwYDVR0j
BBgwFoAUfXBZY4QR4yMedZ50qBO/k3YgnncwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll
OGJiLzYvN0Q3MDU5NjM4NDExRTMyMzFFNzU5RTc0QTgxM0JGOTM3NjIwOUU3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZYQlpZNFFSNHlNZWRaNTBxQk9fazNZ
Z25uYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YzBlZDA0Ni1m
YTk1LTQ1YzMtOTE0Ni05NzFkYjhhOWU4YmIvNi83RDcwNTk2Mzg0MTFFMzIzMUU3
NTlFNzRBODEzQkY5Mzc2MjA5RTc3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAthpYom+vwPxfUTVjbEEH
wyCShgVMF3wn6UOji98iBsN6JJJexHXTMkIVAG7Duxtm9SLBWzHFsCltmLVsPGHz
wV8llSZerFtTxjLtg9IXyk3hADDV2+AXtEPDtYVTDjq5UwK7sp16d62d+5+DP6IE
kE5E+pD3rnVFV9148Jz+A52SCCHawv4z/o8YtFl6LPsxwnHaFsOzPTfAdc8F9b7C
KSmPB4I0rkLDgd2Mt4SYbSFpU4zvQ/dTZQQUwgO2V3dXCre3uTnADw6dfLZWvsrt
qOhBpOmSGzAooukMQ3NyyKBWEqsYrZqicp1ZLcpjEAU1rUT9beQISNGhg1qN/eEW
UQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:47:42 2025 by rpki-client