Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
File:                     C678CC0A7BAA95891441AD80954491DFED87D33A.mft (raw, json)
Hash identifier:          iAnuk/3NG1RrhTM45o0IuuHumSYiNJcefEyibURuTuw=
Subject key identifier:   51:DE:36:00:27:50:88:B7:CC:B4:DB:77:56:40:16:B0:29:30:F4:17
Authority key identifier: C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
Certificate issuer:       /CN=c678cc0a7baa95891441ad80954491dfed87d33a
Certificate serial:       498F258E87042FD0A489A4B3DAB58B7AD1FEA2FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
Manifest number:          01FE
Signing time:             Fri 04 Apr 2025 15:04:12 +0000
Manifest this update:     Fri 04 Apr 2025 14:59:12 +0000
Manifest next update:     Sat 05 Apr 2025 15:45:12 +0000
Files and hashes:         1: C678CC0A7BAA95891441AD80954491DFED87D33A.crl (hash: 0aKY39qIG+ohEKg8gfCHttSAj+KpjstCWdwHmajORF0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:45:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:8f:25:8e:87:04:2f:d0:a4:89:a4:b3:da:b5:8b:7a:d1:fe:a2:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c678cc0a7baa95891441ad80954491dfed87d33a
        Validity
            Not Before: Apr  4 14:59:12 2025 GMT
            Not After : Apr  5 15:45:12 2025 GMT
        Subject: CN=51DE3600275088B7CCB4DB77564016B02930F417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ca:fb:34:6f:cd:ce:60:19:94:3e:3d:b4:7f:
                    5c:a0:3a:a2:91:d4:f7:34:03:d2:35:34:5d:b2:95:
                    64:4d:4c:ee:b9:1b:4e:83:36:41:4f:f5:12:f4:ad:
                    4f:40:47:b8:d2:1e:bb:66:d7:ae:64:46:4c:05:46:
                    b0:eb:47:6f:94:e1:54:d6:d7:a9:c0:ae:26:a8:76:
                    e2:a4:a6:b1:7e:16:45:b7:49:37:98:89:02:24:aa:
                    4c:9e:63:d0:b4:04:c2:27:dd:3c:c0:fb:f0:fa:98:
                    a6:d9:37:b8:16:1a:6a:09:d0:9e:89:e5:f0:fb:56:
                    80:41:8d:b9:e6:9d:1c:30:ac:84:44:25:c9:25:92:
                    a5:7f:62:6c:53:7d:b0:94:91:45:b2:35:27:95:2e:
                    69:e8:19:72:70:41:3a:c1:bd:08:cf:bf:ac:0e:6e:
                    6b:39:2e:3e:f2:9b:b8:4d:80:3c:6d:5b:c9:5d:b3:
                    39:45:b1:61:49:45:92:61:b8:71:c3:5f:df:56:e8:
                    17:ba:89:dd:08:a2:d8:3b:06:8d:c9:ea:e0:cd:ef:
                    e6:91:7c:f0:34:39:f7:cd:2a:89:3f:e9:b8:2d:3e:
                    d7:80:b3:7b:25:ca:9e:ed:f3:73:76:75:3c:54:65:
                    7b:67:1f:35:2f:d1:57:a5:80:21:2c:26:1b:44:6b:
                    01:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DE:36:00:27:50:88:B7:CC:B4:DB:77:56:40:16:B0:29:30:F4:17
            X509v3 Authority Key Identifier:
                keyid:C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:3b:90:f4:ac:d1:a8:31:e0:3c:25:78:9f:d6:5d:d3:6a:53:
         48:21:d0:33:bf:66:55:fa:2f:8e:ca:23:40:dc:15:c5:d8:38:
         d1:21:b3:56:d7:bd:76:a7:58:7b:1a:7c:e7:02:8e:f0:63:47:
         45:c3:e5:29:e7:b0:df:cb:f1:4d:77:61:a7:72:2b:f5:0b:f9:
         d3:41:0c:12:be:b6:06:eb:d5:73:86:27:4c:25:05:15:7c:d6:
         d7:38:1f:7b:66:66:37:b7:96:f1:b4:7f:a9:6a:08:28:c4:c5:
         0e:67:eb:ba:fc:4d:4e:dc:5b:5d:3a:09:d8:dc:8b:13:cb:7d:
         bc:26:3a:ef:6a:11:6d:84:a9:36:28:2e:f9:c4:36:e9:03:65:
         1d:1e:31:65:58:ab:26:a7:a8:f2:39:8f:54:66:fa:88:a2:2b:
         bd:b0:78:75:9a:16:d2:e8:24:5b:c4:2f:47:90:f4:ab:b1:c2:
         d8:a0:67:aa:7c:ef:d4:15:84:10:17:97:9d:b0:ac:c0:80:d0:
         42:1e:95:5f:f4:51:54:41:92:3c:b2:b3:12:be:7d:a1:0c:8d:
         20:3c:32:d4:1c:38:36:1b:cf:d0:ac:16:40:7f:03:4e:46:6c:
         86:9a:0e:00:2f:95:88:e3:93:a4:b4:4a:18:77:03:69:18:c8:
         c3:c8:62:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:49 2025 by rpki-client