Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
File:                     91A33711A470A1CAF41284B368F40FD2BDF16F01.mft (raw, json)
Hash identifier:          8XqEhajK56saoVGMMwxO7Kpjmqt5xspTt9cd6rOvfi0=
Subject key identifier:   32:5E:A7:F5:78:92:35:B9:53:7D:6D:02:58:BD:BF:F8:5D:76:98:95
Authority key identifier: 91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01
Certificate issuer:       /CN=91a33711a470a1caf41284b368f40fd2bdf16f01
Certificate serial:       3809EE74F3842D1DAA260AA6AF4C233DC2A1D491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
Manifest number:          02FD
Signing time:             Fri 06 Jun 2025 11:07:30 +0000
Manifest this update:     Fri 06 Jun 2025 11:02:30 +0000
Manifest next update:     Sat 07 Jun 2025 11:28:30 +0000
Files and hashes:         1: 91A33711A470A1CAF41284B368F40FD2BDF16F01.crl (hash: lZzo0MH/nBhgohtD9+sLg6lmuawGb/zpO2Ve8WxokW4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 11:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:09:ee:74:f3:84:2d:1d:aa:26:0a:a6:af:4c:23:3d:c2:a1:d4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a33711a470a1caf41284b368f40fd2bdf16f01
        Validity
            Not Before: Jun  6 11:02:30 2025 GMT
            Not After : Jun  7 11:28:30 2025 GMT
        Subject: CN=325EA7F5789235B9537D6D0258BDBFF85D769895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ae:8b:1c:05:4b:dd:29:7d:74:41:41:31:89:
                    d7:ad:82:dd:87:b5:5d:a9:82:ac:42:62:35:54:68:
                    b1:ab:8e:45:7b:69:f4:99:19:fa:63:02:c8:80:61:
                    29:c2:a4:06:90:18:40:01:cb:0c:e1:d9:4d:6c:20:
                    15:21:f2:5a:88:7f:be:05:62:9b:3a:cb:22:cd:c2:
                    35:a9:42:22:4b:d4:7c:96:a0:3f:ce:8f:67:81:ad:
                    a8:a7:9d:de:4b:02:ef:4f:f0:1b:13:93:d8:63:19:
                    59:52:42:20:da:b9:ea:7f:b8:53:f4:99:34:88:e7:
                    8b:db:61:91:9c:aa:6c:98:4c:7c:d2:2e:2a:64:70:
                    52:86:74:04:27:8d:08:d3:81:f7:21:86:9b:71:e5:
                    89:16:b9:03:34:1c:51:94:ad:49:30:14:c0:e4:78:
                    b0:d5:e4:3c:06:99:4d:4c:e1:ef:24:dd:2c:66:d5:
                    8d:77:62:e6:ec:94:cc:b7:87:66:f2:7f:11:e7:9e:
                    34:7f:0f:5c:ae:99:32:14:d7:f0:be:76:96:22:70:
                    85:ac:0f:8b:57:de:20:bd:8b:d4:d4:d8:58:87:e2:
                    f8:22:88:ba:1d:1d:1b:b0:3c:e3:8b:54:e2:f2:75:
                    aa:02:10:55:64:ff:b3:d2:5b:34:5a:36:73:e6:04:
                    bc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5E:A7:F5:78:92:35:B9:53:7D:6D:02:58:BD:BF:F8:5D:76:98:95
            X509v3 Authority Key Identifier:
                keyid:91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:4c:ab:70:9a:1d:62:27:29:9c:5f:a0:70:91:e1:5c:6f:3c:
         ae:3f:35:07:35:78:44:fe:ba:f0:f8:ce:99:1f:b8:79:20:89:
         24:43:e0:72:90:e4:61:80:6a:a6:36:1f:d5:80:79:b0:eb:b8:
         78:20:da:ab:f0:4f:2b:18:ad:4a:d0:ea:4b:dd:73:62:6f:ba:
         8e:2a:9d:b4:d5:fc:d5:ab:43:78:12:dd:44:1f:72:ce:40:be:
         34:f0:f0:69:5d:bd:6b:fe:e8:5f:86:b8:22:5f:be:87:8b:19:
         f2:6f:38:f8:b7:7b:dd:32:ee:85:49:a7:43:89:76:2a:20:43:
         61:06:89:b9:0c:c5:e7:db:bb:da:76:e7:12:f5:81:e0:f9:c2:
         00:c2:36:b5:10:9f:cc:04:68:52:c2:11:a9:8e:fe:e1:4f:3a:
         98:aa:ec:69:a7:d3:3c:4a:2f:89:93:81:55:74:34:52:c1:da:
         11:88:61:5d:fd:d1:1c:eb:32:9b:8d:88:9c:29:71:0c:39:f1:
         28:3b:42:b8:36:25:20:90:94:4a:08:32:22:73:fb:de:e7:39:
         e1:bf:99:4f:43:cc:bb:05:74:c6:7b:b4:2e:68:be:18:a7:69:
         51:53:3e:bd:5c:74:59:f1:42:16:77:87:dc:40:85:58:e6:ad:
         53:0c:84:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:22:19 2025 by rpki-client