Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
File:                     8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft (raw, json)
Hash identifier:          lb8n7nNuYiZsQdTpGctK2MGQk5hBEHNIrgPsNxpff7g=
Subject key identifier:   6A:7F:3E:C0:9A:75:D5:FF:09:91:44:22:EF:73:39:10:7B:57:90:83
Authority key identifier: 8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
Certificate issuer:       /CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Certificate serial:       6B009A27E6547DF87315AFF51D11AB008F3430C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
Manifest number:          65
Signing time:             Fri 06 Jun 2025 08:49:17 +0000
Manifest this update:     Fri 06 Jun 2025 08:44:17 +0000
Manifest next update:     Sat 07 Jun 2025 12:27:17 +0000
Files and hashes:         1: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl (hash: 3qpFPFM0sMK6mM+Thi8J0cx3xpCl+18vEIjoISbv0bM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 12:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:00:9a:27:e6:54:7d:f8:73:15:af:f5:1d:11:ab:00:8f:34:30:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fbab13db123c5d63dbbc550d214b3e10c091998
        Validity
            Not Before: Jun  6 08:44:17 2025 GMT
            Not After : Jun  7 12:27:17 2025 GMT
        Subject: CN=6A7F3EC09A75D5FF09914422EF7339107B579083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7a:92:7a:30:b6:b1:5f:02:d8:0d:b0:98:6e:
                    22:77:76:8b:d6:0d:81:e7:4d:47:59:b1:76:37:e7:
                    fd:9b:2a:51:fa:cf:3b:df:5f:2b:c5:e3:03:36:82:
                    04:9a:24:fc:70:12:34:6a:e8:43:7c:e1:e8:35:9a:
                    11:a4:5c:9a:24:35:37:1e:e0:7e:e7:84:49:7e:61:
                    c5:31:93:fb:f9:70:33:13:c5:d5:90:59:a3:a5:9b:
                    c9:98:df:42:e3:5e:fd:1c:90:8f:53:19:c0:84:74:
                    1b:ad:29:2a:67:13:23:55:85:65:51:2d:8f:78:9e:
                    4b:fe:f4:49:d3:a7:99:aa:e6:73:de:d8:9a:e1:9d:
                    05:34:d1:4c:31:16:b2:63:dd:8b:c3:2e:45:50:01:
                    4b:e4:ee:f6:5c:be:a8:2d:e7:a9:6a:8e:b3:72:98:
                    93:c8:28:5b:05:ac:e8:ee:51:0a:9f:b6:17:bd:10:
                    c0:12:84:21:9d:92:6b:33:20:6b:23:14:6a:78:af:
                    9e:28:e6:f5:78:72:02:85:9d:85:73:4e:f8:25:e4:
                    65:7f:e7:ac:4c:43:01:2b:71:f8:46:c6:10:d2:9a:
                    1e:0f:ca:2a:48:84:81:bf:75:f6:39:d2:b6:d5:da:
                    0c:1f:96:c8:ec:3f:ae:d6:32:af:c8:67:6c:ba:9a:
                    68:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7F:3E:C0:9A:75:D5:FF:09:91:44:22:EF:73:39:10:7B:57:90:83
            X509v3 Authority Key Identifier:
                keyid:8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:40:8b:ad:13:2b:6e:bc:a2:8c:79:c3:e6:46:9a:95:2c:33:
         3d:de:a9:4e:f1:0f:b3:44:c1:09:c4:ec:b2:b8:25:3a:6c:aa:
         a7:29:be:59:d0:ea:90:af:2c:2e:39:9a:ec:32:e9:da:88:4f:
         15:ef:9b:c6:53:f9:6b:90:6f:e7:ef:ea:eb:84:d8:87:f6:20:
         d4:83:d0:50:28:ca:ab:12:4d:8b:6c:b1:20:a5:63:54:1b:31:
         06:de:d4:a3:a1:cf:34:97:71:5b:15:78:68:07:f7:50:ac:60:
         9d:80:1d:49:ba:10:d1:82:03:8b:0c:23:d7:52:6e:d4:9c:8e:
         10:c7:5e:0c:20:76:2a:49:7c:1a:9a:ec:f8:24:5a:55:9f:4a:
         90:bf:e6:3c:a2:b9:5c:ae:d3:ac:9d:cf:72:20:df:04:39:85:
         25:79:37:2f:b1:fd:db:19:ae:c8:30:81:9e:5a:2d:3f:1f:fa:
         a8:20:24:55:7b:77:4f:6e:c1:17:e8:1f:c7:48:31:ca:32:5a:
         bf:2e:d2:04:04:4f:5f:28:23:dd:40:b1:8e:38:2b:74:7a:29:
         95:b3:dd:fe:4f:50:b8:1c:3b:ea:ee:18:43:c7:29:86:09:18:
         c0:36:48:77:da:b6:48:8a:96:6a:95:6b:4e:5e:0f:46:45:04:
         18:fa:75:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:34:13 2025 by rpki-client