Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
File:                     C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft (raw, json)
Hash identifier:          mRypnxOECilHT5+rW2H3qQl7T49kbQkYBViEn0+LWV8=
Subject key identifier:   84:C0:B8:EE:90:21:47:CA:85:76:40:52:BE:BC:73:B2:DB:33:07:3F
Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Certificate issuer:       /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Certificate serial:       33EBBA3CFDFF123B8C0EA4939BA637D65F28BA30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
Manifest number:          01D8
Signing time:             Fri 06 Jun 2025 20:22:39 +0000
Manifest this update:     Fri 06 Jun 2025 20:17:39 +0000
Manifest next update:     Sat 07 Jun 2025 21:41:39 +0000
Files and hashes:         1: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl (hash: 9jXcR8sG8nVOj/Hz3nA8aFzrwx6F5OJiZLqLrebncQE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:eb:ba:3c:fd:ff:12:3b:8c:0e:a4:93:9b:a6:37:d6:5f:28:ba:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
        Validity
            Not Before: Jun  6 20:17:39 2025 GMT
            Not After : Jun  7 21:41:39 2025 GMT
        Subject: CN=84C0B8EE902147CA85764052BEBC73B2DB33073F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:32:32:27:14:7e:4b:1c:c0:08:51:d7:3e:05:
                    81:b9:6e:64:9f:83:3b:98:1f:79:e9:23:b6:93:e9:
                    42:20:35:12:0c:b5:78:a0:69:86:fe:0d:aa:4c:1f:
                    e4:2f:85:72:46:cd:a0:a3:af:f0:42:2d:d8:36:c3:
                    69:b1:e2:38:31:54:77:e2:01:e4:96:27:f3:e7:de:
                    91:36:17:1f:4f:72:9f:20:c9:12:0e:c0:1e:64:fe:
                    e6:39:06:78:7f:a6:74:77:06:4e:fa:79:16:02:f3:
                    06:a7:b3:2b:80:3e:90:c6:1c:b2:b8:41:3e:48:43:
                    3f:d6:46:75:92:e4:a7:06:d2:89:d4:7b:b5:ea:07:
                    bc:56:e5:29:1b:a2:a9:99:2c:e6:9b:db:e3:70:5d:
                    bf:a2:27:b9:21:f6:24:71:ba:b3:fa:65:36:00:19:
                    9b:ee:23:10:e7:ff:b5:47:36:32:67:85:70:ce:06:
                    8c:59:8b:11:cf:de:ba:9b:ea:52:b0:d6:47:34:65:
                    ea:c7:7a:2c:43:b9:95:31:80:06:f6:81:5a:ed:ef:
                    1b:9f:77:d3:12:49:a2:7c:9c:74:bd:58:1c:b0:29:
                    7d:d0:8a:52:ab:2b:bc:cf:07:c0:e7:93:72:31:da:
                    77:a4:4f:6b:89:88:70:d6:cf:76:35:eb:f9:b7:5d:
                    f1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C0:B8:EE:90:21:47:CA:85:76:40:52:BE:BC:73:B2:DB:33:07:3F
            X509v3 Authority Key Identifier:
                keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f4:9d:38:0a:c9:e7:20:1d:c3:c4:8f:ca:48:31:64:04:b5:
         ab:fa:de:d6:dc:dc:fd:9a:0b:ff:61:96:48:48:7d:44:c8:ac:
         e3:52:14:65:80:66:0c:4a:4b:e1:4a:69:90:b0:41:a9:a1:59:
         45:67:df:92:a0:cd:cf:ff:8e:63:3b:93:6b:6e:63:bc:b3:85:
         aa:c9:e2:8c:39:9d:f5:53:25:7d:3a:d3:b0:16:91:eb:45:50:
         0e:d7:3e:12:71:44:76:29:36:b6:dc:31:bf:48:82:cf:45:f7:
         82:19:90:ca:2e:cf:6b:45:b5:3a:1f:c0:33:70:c6:61:78:b9:
         aa:b6:dc:cd:f8:03:15:3a:88:41:57:0c:d0:2b:0e:3c:66:71:
         0c:78:48:26:be:88:ae:a3:d8:27:11:12:7f:59:5b:2d:25:36:
         f3:c5:32:3c:20:45:a3:05:25:9d:01:15:ee:d4:6f:20:ea:9c:
         3c:08:77:f6:be:b3:0e:1b:66:34:9c:3d:96:15:a9:13:70:fb:
         f0:a6:80:39:58:53:87:00:1a:5b:59:78:d1:3f:97:5c:ef:b8:
         0f:3f:9c:42:e8:d6:68:c6:42:9b:5c:ae:72:14:3d:9c:28:7b:
         dd:0e:3e:52:95:ff:7b:96:87:d1:c8:e1:2d:7d:ab:da:57:2c:
         0b:9a:27:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:41:32 2025 by rpki-client