Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
File:                     E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft (raw, json)
Hash identifier:          W4sQBDQ4lW2NNWspXZqfvjj/FwlhxJ8/IcnS8bW07uA=
Subject key identifier:   7D:42:51:DC:83:68:C7:EE:E3:7D:FA:8E:BE:E8:09:83:A0:CC:E4:2D
Authority key identifier: E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8
Certificate issuer:       /CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
Certificate serial:       1999CF4508F6A6BB2E4F44F10D0431F87164A536
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
Manifest number:          01F7
Signing time:             Sat 07 Jun 2025 01:04:18 +0000
Manifest this update:     Sat 07 Jun 2025 00:59:18 +0000
Manifest next update:     Sun 08 Jun 2025 03:39:18 +0000
Files and hashes:         1: E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl (hash: Mwz+gAd0LpTmMF16ygJzt82Ph+f2wNJ3KbahTfULh80=)
                          2: 323030313a3637633a6535633a3a2f34382d3438203d3e20323135313331.roa (hash: /8lHhKIuzTcsmBKH0ioYgR3QJ/GmZe2e/TKZ5GWlTv0=)
                          3: AS215131.asa (hash: fdxXAZ8vlKpf5EccUmAW+hZmsZidklCajd1vBNkiavk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:99:cf:45:08:f6:a6:bb:2e:4f:44:f1:0d:04:31:f8:71:64:a5:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
        Validity
            Not Before: Jun  7 00:59:18 2025 GMT
            Not After : Jun  8 03:39:18 2025 GMT
        Subject: CN=7D4251DC8368C7EEE37DFA8EBEE80983A0CCE42D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:20:e0:d5:7f:64:2b:dc:df:bc:d5:4e:a5:f6:
                    02:4f:6f:fd:85:ec:f5:52:9f:07:fa:de:6d:4b:73:
                    f7:91:e5:cc:a6:56:9a:a6:94:d9:f8:38:8a:e8:7d:
                    05:ae:61:97:91:80:55:ad:c0:74:96:02:67:9b:38:
                    99:1c:1b:0c:f5:83:3f:c9:13:9e:4e:d7:bd:77:1c:
                    87:a6:e7:c9:f9:d4:f1:13:8c:a3:d9:69:18:83:4d:
                    a8:54:3a:7c:42:d3:9c:4a:bb:dc:d2:67:c7:5a:44:
                    bd:9c:0f:8b:05:2f:66:b3:74:44:77:e9:83:df:41:
                    d5:82:5d:2b:83:d9:32:0b:fd:fe:03:01:05:bb:90:
                    2d:92:c3:56:53:b0:59:7e:f3:ed:1d:ee:64:9e:7b:
                    5d:35:cc:cc:cb:43:f2:88:e5:7c:8d:74:10:0a:f2:
                    58:09:b2:fe:8d:8b:d8:18:39:1b:2a:f7:2a:e2:d3:
                    a7:3f:75:50:64:92:99:01:06:70:10:ca:3f:31:56:
                    63:f7:96:7e:65:29:2f:71:9f:f8:f3:73:e6:0f:2f:
                    9c:f7:fd:a3:16:d9:a4:c2:c7:9b:74:1a:2d:bf:df:
                    1c:9d:b7:f8:d2:d2:f2:85:b1:63:97:ed:ef:1e:2e:
                    03:9d:a7:03:07:42:54:d3:9c:29:99:74:1b:b3:81:
                    38:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:42:51:DC:83:68:C7:EE:E3:7D:FA:8E:BE:E8:09:83:A0:CC:E4:2D
            X509v3 Authority Key Identifier:
                keyid:E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:46:7d:dd:39:fc:f1:71:d0:1a:30:18:e2:e6:12:33:c9:16:
         50:86:4e:33:ee:0e:29:ec:89:71:a9:9f:90:64:3b:0c:27:5b:
         ef:d6:1e:b0:ff:59:2d:e4:19:69:04:3c:99:db:0c:c7:1b:ba:
         5d:ca:c8:1b:b5:fc:5f:48:73:82:d8:ef:c7:59:38:64:03:91:
         29:e2:8a:20:52:ab:9d:2a:59:b3:d2:52:3b:aa:7e:47:29:44:
         52:38:31:a3:4e:f1:11:a3:7a:a0:a9:01:9b:3b:26:7b:dc:3d:
         04:3f:38:f1:71:aa:4e:c7:83:ce:ae:df:ea:2d:73:81:4f:df:
         4b:31:5b:80:0b:3e:50:c4:22:28:e0:a1:24:15:3f:33:bb:93:
         36:52:77:f5:e0:98:4e:28:b3:28:ec:6e:4c:a3:0e:67:77:d3:
         5a:b3:f6:6f:63:b3:da:02:bd:7a:f5:3d:0d:c5:86:2f:2d:6f:
         7d:aa:78:aa:4a:78:1c:a6:8f:8e:dc:c2:03:47:7b:b5:1c:8e:
         c8:9b:89:fb:5d:a7:13:22:26:57:29:6b:1b:0a:8f:90:8d:8e:
         59:4a:e7:ae:a3:f5:61:90:51:c6:bb:ff:cc:5d:7a:e7:f9:2f:
         cf:0a:fd:8f:5b:82:24:98:52:fc:86:df:6f:4d:e9:66:a8:10:
         95:4b:14:25
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUGZnPRQj2prsuT0TxDQQx+HFkpTYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTRiYTk4ZmMzZWJlODA2Yzc4MmU1ODlmYWY1Mjk1YzMy
NTkyMTJhODAeFw0yNTA2MDcwMDU5MThaFw0yNTA2MDgwMzM5MThaMDMxMTAvBgNV
BAMTKDdENDI1MURDODM2OEM3RUVFMzdERkE4RUJFRTgwOTgzQTBDQ0U0MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEIODVf2Qr3N+81U6l9gJPb/2F
7PVSnwf63m1Lc/eR5cymVpqmlNn4OIrofQWuYZeRgFWtwHSWAmebOJkcGwz1gz/J
E55O1713HIem58n51PETjKPZaRiDTahUOnxC05xKu9zSZ8daRL2cD4sFL2azdER3
6YPfQdWCXSuD2TIL/f4DAQW7kC2Sw1ZTsFl+8+0d7mSee101zMzLQ/KI5XyNdBAK
8lgJsv6Ni9gYORsq9yri06c/dVBkkpkBBnAQyj8xVmP3ln5lKS9xn/jzc+YPL5z3
/aMW2aTCx5t0Gi2/3xydt/jS0vKFsWOX7e8eLgOdpwMHQlTTnCmZdBuzgTizAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUfUJR3INox+7jffqOvugJg6DM5C0wHwYDVR0j
BBgwFoAU5LqY/D6+gGx4Llifr1KVwyWSEqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjY0MjE5MDgtNzVkYy00MzBiLThmYjktNzQ4Yzc1YmIw
MmMyLzAvRTRCQTk4RkMzRUJFODA2Qzc4MkU1ODlGQUY1Mjk1QzMyNTkyMTJBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVMcVlfRDYtZ0d4NExsaWZyMUtWd3lX
U0VxZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iNjQyMTkwOC03
NWRjLTQzMGItOGZiOS03NDhjNzViYjAyYzIvMC9FNEJBOThGQzNFQkU4MDZDNzgy
RTU4OUZBRjUyOTVDMzI1OTIxMkE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0Z93Tn88XHQGjAY4uYS
M8kWUIZOM+4OKeyJcamfkGQ7DCdb79YesP9ZLeQZaQQ8mdsMxxu6XcrIG7X8X0hz
gtjvx1k4ZAORKeKKIFKrnSpZs9JSO6p+RylEUjgxo07xEaN6oKkBmzsme9w9BD84
8XGqTseDzq7f6i1zgU/fSzFbgAs+UMQiKOChJBU/M7uTNlJ39eCYTiizKOxuTKMO
Z3fTWrP2b2Oz2gK9evU9DcWGLy1vfap4qkp4HKaPjtzCA0d7tRyOyJuJ+12nEyIm
VylrGwqPkI2OWUrnrqP1YZBRxrv/zF165/kvzwr9j1uCJJhS/Ibfb03pZqgQlUsU
JQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:26:29 2025 by rpki-client