Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
File:                     4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft (raw, json)
Hash identifier:          2B5P1aRyXCXLvdEG09gj8ZzMHggeStBXi2iqpaJ59+8=
Subject key identifier:   54:32:32:7C:79:28:A0:25:B2:0A:EC:A4:11:01:03:EE:1D:6C:2D:DC
Authority key identifier: 4C:6E:A5:A3:C5:3B:EF:2E:65:17:0C:03:7C:44:51:CF:A7:8E:F4:58
Certificate issuer:       /CN=4c6ea5a3c53bef2e65170c037c4451cfa78ef458
Certificate serial:       67FC20843AD3D78A3181D85E0BE15F8F9924FBFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TG6lo8U77y5lFwwDfERRz6eO9Fg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
Manifest number:          84
Signing time:             Fri 06 Jun 2025 06:03:36 +0000
Manifest this update:     Fri 06 Jun 2025 05:58:36 +0000
Manifest next update:     Sat 07 Jun 2025 06:25:36 +0000
Files and hashes:         1: 4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.crl (hash: E42ENXOShq6lbFOaHWnsiquMShCGdXMN2BmthsSYO0k=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TG6lo8U77y5lFwwDfERRz6eO9Fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:25:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:fc:20:84:3a:d3:d7:8a:31:81:d8:5e:0b:e1:5f:8f:99:24:fb:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c6ea5a3c53bef2e65170c037c4451cfa78ef458
        Validity
            Not Before: Jun  6 05:58:36 2025 GMT
            Not After : Jun  7 06:25:36 2025 GMT
        Subject: CN=5432327C7928A025B20AECA4110103EE1D6C2DDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0f:e0:fb:cc:aa:70:92:3a:8f:11:4c:fe:6a:
                    db:64:3c:e2:e0:f5:10:23:d0:0c:da:ff:5a:d6:3d:
                    e2:81:46:5a:5f:67:49:f6:6b:6a:11:22:04:ce:95:
                    8f:04:fc:55:b9:43:ce:21:5f:53:f1:2b:22:7e:51:
                    23:f6:5e:6a:b7:4f:99:07:52:8e:62:98:c4:12:ce:
                    81:a0:66:50:a9:fc:b6:24:4e:1d:fa:32:c1:5a:6d:
                    d1:9e:82:93:43:24:4d:c1:05:91:82:92:a3:e4:66:
                    e3:86:03:96:a2:89:63:ae:dd:0d:83:7d:79:e6:d5:
                    51:f7:b1:a8:9c:ba:ff:bc:be:bc:e9:78:dc:e1:97:
                    32:66:fa:9a:e4:7a:05:fc:2e:52:2e:94:9a:f1:51:
                    72:29:34:6a:a6:06:a6:73:c2:3e:e0:b4:fa:57:b4:
                    75:dd:46:9c:4e:de:56:61:b1:1d:19:95:8f:38:d5:
                    0f:3b:8f:70:6b:7e:54:3d:9f:cd:47:b0:20:45:61:
                    4e:2d:43:87:b4:bc:9f:ee:24:f7:08:aa:84:d1:20:
                    21:55:10:02:91:a9:5b:a6:e7:af:ca:a3:e6:da:34:
                    16:01:7b:d2:4e:3e:c3:c3:6f:fb:67:60:13:4e:f1:
                    3a:4f:f0:9d:3e:68:77:51:55:43:60:7e:a6:58:f0:
                    ae:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:32:32:7C:79:28:A0:25:B2:0A:EC:A4:11:01:03:EE:1D:6C:2D:DC
            X509v3 Authority Key Identifier:
                keyid:4C:6E:A5:A3:C5:3B:EF:2E:65:17:0C:03:7C:44:51:CF:A7:8E:F4:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TG6lo8U77y5lFwwDfERRz6eO9Fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:28:99:8b:f4:19:1a:f6:e4:41:e8:81:62:4b:6e:25:f5:5f:
         8e:ff:bd:8a:3d:65:30:50:e3:c0:94:85:87:35:1a:dd:28:27:
         ae:e1:a4:c5:f7:ba:a9:e8:c9:e2:ea:82:19:18:23:8e:0f:24:
         dd:0b:1b:d9:92:65:27:04:27:47:e8:62:36:0b:51:42:c6:3a:
         85:7c:e5:cf:24:c0:f0:0c:ff:a1:3f:e5:93:e4:12:20:bd:b6:
         b7:29:25:b3:94:6e:3a:8d:b5:15:ec:33:3d:81:62:52:13:04:
         65:02:29:fe:74:33:ec:a7:fc:38:c7:5b:e3:82:f3:a6:fa:e7:
         ac:f8:c5:98:74:68:9b:4c:ed:e1:57:d7:1c:58:4d:fd:92:ad:
         e8:1a:a1:58:f5:7c:d6:4e:e9:ed:7a:9b:e3:5e:6e:8b:c4:26:
         a5:79:08:a3:11:bf:e0:dc:1c:9b:49:d6:3c:11:6f:57:65:da:
         20:37:61:f7:74:01:40:98:fb:06:15:0b:4c:a9:73:de:0a:4b:
         bf:29:ee:da:c3:82:46:c5:49:83:a7:de:25:54:be:69:ba:76:
         a3:af:1e:86:df:a3:c1:58:9c:9f:ee:f0:31:ab:29:04:05:fb:
         c1:31:4f:b8:8f:6b:4b:97:c6:26:67:3c:2d:03:f8:ab:73:fa:
         8a:15:16:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:53:56 2025 by rpki-client