Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
File:                     8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft (raw, json)
Hash identifier:          VSjyrp8RhQHsl23oKhQ/Ghn0MMh2Nn6UrfIa6lhcp34=
Subject key identifier:   40:30:26:3A:E5:06:A2:80:CD:98:36:10:22:38:EE:36:E0:5E:3E:A3
Authority key identifier: 8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
Certificate issuer:       /CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Certificate serial:       4E044154123717A8160D41EBED36FE3FCD01483D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
Manifest number:          26
Signing time:             Sat 19 Apr 2025 14:04:19 +0000
Manifest this update:     Sat 19 Apr 2025 13:59:18 +0000
Manifest next update:     Sun 20 Apr 2025 17:19:18 +0000
Files and hashes:         1: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl (hash: qSW8h0SZSdZiPGeX6p3OgYVQM+ZzLM9VX7esg9fanKA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:04:41:54:12:37:17:a8:16:0d:41:eb:ed:36:fe:3f:cd:01:48:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fbab13db123c5d63dbbc550d214b3e10c091998
        Validity
            Not Before: Apr 19 13:59:18 2025 GMT
            Not After : Apr 20 17:19:18 2025 GMT
        Subject: CN=4030263AE506A280CD9836102238EE36E05E3EA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a4:3c:65:b4:ab:3f:c5:79:9b:8c:4f:5d:47:
                    f6:df:62:5e:e3:34:d5:ee:e0:fb:d0:f9:0b:c2:60:
                    bf:12:74:f7:23:35:6d:57:0f:b0:23:74:a5:ab:4a:
                    15:d1:2e:4f:04:f3:3e:d7:56:72:8d:7f:8c:a4:93:
                    cf:9e:4d:6d:b4:f7:2a:08:47:d9:d4:48:6a:81:92:
                    f2:ed:2e:c0:4d:95:1c:93:b9:fd:d8:d4:17:07:b6:
                    ea:98:8f:fe:6c:0a:5a:0e:b0:de:91:d3:38:95:05:
                    8d:e1:f8:2c:3d:6b:6c:62:f3:5d:1a:1d:d0:1b:e4:
                    20:ed:2b:9f:29:7a:e1:b4:40:4a:70:05:c9:db:bc:
                    d7:e4:33:37:79:3b:ee:80:11:b7:24:0e:f8:35:c4:
                    81:76:50:68:97:49:b1:2d:17:22:28:46:2e:d2:26:
                    1e:db:1d:05:dc:05:39:d5:8c:f6:8c:d8:08:71:30:
                    c8:1f:bd:1e:bd:fa:79:b0:95:c9:4e:fe:96:8a:3d:
                    7b:d7:34:40:91:e9:44:0d:2b:e7:2f:10:d6:b6:de:
                    25:99:48:e6:4b:e7:81:ed:23:7c:c9:13:29:7d:70:
                    30:bb:37:75:31:8f:f1:83:a0:62:f5:e8:93:0c:29:
                    b2:5f:e9:bf:d2:15:78:15:cb:20:be:69:96:c7:d4:
                    82:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:30:26:3A:E5:06:A2:80:CD:98:36:10:22:38:EE:36:E0:5E:3E:A3
            X509v3 Authority Key Identifier:
                keyid:8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:5f:8d:9c:d2:d5:ba:70:a1:0d:8f:d9:82:16:14:94:96:1e:
         76:84:be:fe:71:75:77:08:29:b4:83:35:45:58:b7:eb:ae:9c:
         be:a7:81:4f:c5:5d:6f:2f:55:3f:af:b3:f0:87:80:62:67:f6:
         8c:4a:f3:7a:5c:2a:80:76:0d:4d:f9:50:79:41:34:c2:57:45:
         ab:0b:2c:92:6a:f6:4e:18:c4:4b:5b:c2:41:73:aa:58:56:81:
         1b:13:ed:3f:52:d4:f9:81:e1:18:0e:58:08:8f:03:39:ee:b1:
         d0:b2:8a:cc:23:b6:3d:60:a0:f7:a3:6d:f3:69:7a:bf:a1:11:
         aa:7e:ac:0f:04:8c:6f:5e:e5:74:ae:77:cb:fb:8b:0e:3e:31:
         29:c1:71:33:60:af:ac:7e:73:b0:23:ab:bf:3d:20:53:7e:64:
         cb:0d:6b:3a:00:e4:ec:8c:7b:f5:3e:1f:40:45:ec:f8:4b:94:
         bc:76:91:2c:e7:ee:8b:d8:89:24:b4:3f:97:f4:a2:57:98:87:
         db:ca:b3:07:ef:43:4b:3b:62:de:79:0c:c2:68:43:d0:63:40:
         2f:53:46:6e:39:44:bf:c3:9a:ab:2e:50:75:97:fc:29:c5:dd:
         ff:5a:73:8f:1a:f0:7d:29:41:b3:99:10:c5:63:41:c8:68:ef:
         f0:9b:aa:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:11:37 2025 by rpki-client