Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
File:                     926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json)
Hash identifier:          TPHoMLQmJcptUBnxf+gzgkiqtlkV8eKgGSyTf+aZ0yc=
Subject key identifier:   1D:B5:A3:9E:48:59:46:F2:5F:1F:CF:BA:D4:71:D5:55:38:34:DC:90
Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
Certificate issuer:       /CN=926cb33722a3493216283dc80cae0ee9d58874f2
Certificate serial:       1179BFBADFB8B7377245BB41268DD4D1D8D3B16C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
Manifest number:          04B4
Signing time:             Fri 06 Jun 2025 16:46:25 +0000
Manifest this update:     Fri 06 Jun 2025 16:41:25 +0000
Manifest next update:     Sat 07 Jun 2025 19:21:25 +0000
Files and hashes:         1: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: vwSEUgdFJ5PPtETvmVfTCVmULHvCJLz5jSqlSjdS13k=)
                          2: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: G0pJKexFl5iJSj7RvTDDHGwylbeAPcm6mkIGuJ7MB4g=)
                          3: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: yAo/iMzpXFuUVaeVSImlnmqjntA42KxU3ZzGYZRhdgM=)
                          4: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: kkkt+CdVzC7OjY449gnOlMwgGCN8KNpK56RTONBzmFY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:79:bf:ba:df:b8:b7:37:72:45:bb:41:26:8d:d4:d1:d8:d3:b1:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2
        Validity
            Not Before: Jun  6 16:41:25 2025 GMT
            Not After : Jun  7 19:21:25 2025 GMT
        Subject: CN=1DB5A39E485946F25F1FCFBAD471D5553834DC90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:da:93:93:fd:7e:d7:ff:bd:49:00:f3:75:f0:
                    63:60:81:7d:9a:ba:c8:10:cf:ee:07:bb:e0:80:0a:
                    72:4b:6c:b6:69:06:31:b3:3d:03:2b:a5:78:b5:11:
                    0b:5e:37:6c:4f:46:db:f0:d9:bd:3b:05:d7:2e:3f:
                    72:16:9a:45:2c:0c:e1:2e:d1:87:40:79:13:d3:75:
                    74:61:64:3c:aa:b5:57:ad:a8:3f:18:13:b6:52:7e:
                    3c:82:4e:24:dd:a8:c9:a3:26:36:c8:a4:a7:db:25:
                    6f:ff:29:ce:90:35:d2:c0:49:e3:02:73:81:f5:f1:
                    07:c9:5f:31:54:a3:f7:7a:60:61:ad:e2:ed:37:75:
                    da:6f:22:22:5e:8a:73:5e:a1:95:cd:bc:6d:d9:ae:
                    11:8b:97:aa:9d:46:1a:3b:ac:29:ef:61:04:a7:41:
                    bc:f4:af:96:9e:89:db:07:6f:f4:90:8f:10:77:07:
                    e4:40:f2:09:d7:29:af:83:50:49:3c:d3:84:f7:88:
                    72:56:78:4c:73:a2:5a:39:82:1f:e7:67:b6:b7:1f:
                    bb:41:27:2a:b7:c7:94:60:b7:43:cd:bf:13:72:41:
                    76:57:34:26:0b:3e:41:09:58:bb:a6:3f:7d:fb:66:
                    83:91:35:be:61:c5:72:4a:94:d8:1c:7e:4f:c2:00:
                    9d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B5:A3:9E:48:59:46:F2:5F:1F:CF:BA:D4:71:D5:55:38:34:DC:90
            X509v3 Authority Key Identifier:
                keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:bd:90:b8:53:26:55:8c:4b:e8:f5:f9:15:94:7f:f3:03:b0:
         a8:72:cb:12:5f:eb:7b:06:f5:71:44:ad:88:d0:34:89:68:14:
         ac:68:4b:34:6d:8d:04:a1:0c:9e:8d:97:30:0c:9e:5c:43:c2:
         32:e0:3c:f1:4f:72:84:d4:3a:47:1d:98:6b:fa:6f:4e:0e:8e:
         63:dc:2b:a7:66:3a:36:d3:a1:e8:0d:b3:13:08:8d:3d:a3:9f:
         ff:1b:77:90:17:24:69:60:04:82:19:26:d6:04:3f:55:5a:a8:
         57:64:18:4d:88:9f:84:a3:0c:0b:4a:22:31:81:ea:13:16:db:
         25:d8:9a:79:a1:eb:52:1b:bc:fb:b2:58:02:fe:bb:ee:f7:8c:
         0b:ec:8c:c1:d5:bc:54:24:54:f1:67:3d:30:51:fe:86:7e:72:
         3f:02:52:e1:2e:30:54:30:3a:27:d0:11:f5:82:48:e6:1c:4d:
         69:a4:6a:96:1d:f4:15:26:fd:66:64:65:de:bb:b9:5b:e5:91:
         f3:a0:fd:f3:ba:43:97:df:18:51:98:16:03:0e:2e:14:1a:cd:
         3d:63:d2:e9:f4:49:02:1e:65:76:fb:57:85:75:b9:17:e4:9b:
         ad:6b:25:15:97:24:9c:04:41:fa:74:bb:d1:e6:4e:ab:59:85:
         fd:1d:0f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:00:39 2025 by rpki-client