Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
File:                     C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft (raw, json)
Hash identifier:          9f1hBFta9Amh59GiyUOzpo8niAhPWoX1CrR9cyhaSfA=
Subject key identifier:   5A:05:BB:61:04:BE:37:5E:6C:36:3A:9A:56:D9:2F:BA:53:C2:16:E5
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Certificate issuer:       /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial:       31DD6D518E9C4CFF917F63D60C8E2729BDDFA5CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
Manifest number:          048D
Signing time:             Wed 04 Jun 2025 21:07:23 +0000
Manifest this update:     Wed 04 Jun 2025 21:02:23 +0000
Manifest next update:     Thu 05 Jun 2025 22:37:23 +0000
Files and hashes:         1: 3139332e3234362e342e302f32342d3234203d3e20313335343032.roa (hash: x5G3aikxww4wLRaoWnz2KkIIppe2I2SZAi3PiElvQpI=)
                          2: 3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa (hash: C9UN/z7rRSIBHXCw3Mn5S1vnSskjCCo5azhWVB5o2V8=)
                          3: 3139332e3234362e3130322e302f32342d3234203d3e203630373831.roa (hash: DsxMlBpnaDBCTZCwZ+4l21L/Mim9agw8EK48LHeXcxw=)
                          4: 3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa (hash: hv8+1ab3SlqVr0lUzuXGkIAi200jEC6ydrdZg2cy0KU=)
                          5: C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl (hash: yi0TxKH/Rp3ZE/cFLydgAO/GPayrL9k2KX+4YBpR5LY=)
                          6: 3139332e3234362e352e302f32342d3234203d3e20313939343135.roa (hash: 3pORVfocHqarnsqwM793nrdIxMZCxCypYkq+seLhAgU=)
                          7: 3231372e3139382e3138372e302f32342d3234203d3e20323132363039.roa (hash: DHsuIdClDCk2AbtF+6NodfNI3JEU6gbRKvoUSbt4bMQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:dd:6d:51:8e:9c:4c:ff:91:7f:63:d6:0c:8e:27:29:bd:df:a5:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
        Validity
            Not Before: Jun  4 21:02:23 2025 GMT
            Not After : Jun  5 22:37:23 2025 GMT
        Subject: CN=5A05BB6104BE375E6C363A9A56D92FBA53C216E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e6:d2:8b:12:4c:71:c9:9c:49:92:37:a8:8a:
                    e2:60:4d:a6:62:a5:02:90:fc:89:2d:ed:dd:fa:8e:
                    0d:6a:0e:d9:ed:bc:1f:1b:92:5e:47:0f:a8:22:43:
                    08:58:dd:45:2e:24:25:e5:dd:14:83:91:0f:7b:4d:
                    86:de:e0:2a:60:7e:76:b5:71:53:a9:ab:99:69:02:
                    c2:78:5c:3a:f6:bd:fb:3e:d5:7a:75:04:a1:67:20:
                    ab:1d:5e:45:97:8d:04:4c:d2:eb:ea:7e:6d:f5:22:
                    df:86:51:9b:5e:73:30:b1:b3:f0:a2:d6:61:ff:c4:
                    42:18:a8:97:7c:ae:20:0c:cb:d1:bc:88:a4:e9:e0:
                    c5:6f:97:8f:2c:e9:bd:00:04:1e:2f:86:67:c7:90:
                    65:67:62:09:67:43:c7:80:4a:3f:0d:3c:b1:12:95:
                    d3:55:dc:53:ae:68:fa:79:f4:ce:cb:8a:c1:f9:12:
                    dc:c2:42:2a:db:45:26:6a:d9:54:c3:80:34:9e:76:
                    60:34:ac:61:55:b4:5e:1c:c1:9d:98:a4:81:ee:26:
                    5c:05:12:fb:da:29:c6:d7:a0:9f:02:3e:ac:d7:bf:
                    39:f7:c8:27:e6:fe:69:86:e1:1a:33:be:b3:a5:da:
                    56:fa:ba:54:3e:bf:cd:54:75:aa:33:37:94:83:cf:
                    1c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:05:BB:61:04:BE:37:5E:6C:36:3A:9A:56:D9:2F:BA:53:C2:16:E5
            X509v3 Authority Key Identifier:
                keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f2:f2:bd:39:1c:21:55:4b:ba:f4:50:7e:71:40:dc:c8:c3:
         00:28:07:f4:d5:df:cf:5d:13:d3:06:fa:27:c2:70:9d:d0:65:
         b0:33:32:f7:cb:cf:e2:1b:5c:32:b2:26:07:d8:5c:a5:54:9c:
         0b:03:89:42:92:58:68:43:ef:7f:d9:52:e9:0a:33:9b:12:f4:
         58:38:de:31:85:a1:d1:3e:11:05:f4:99:29:7c:6a:2a:7f:79:
         47:12:26:e6:ab:16:a7:34:fe:d2:24:45:90:f3:70:51:2f:9b:
         a4:87:c3:2a:63:fe:e9:92:e7:21:46:21:7d:7b:d9:0d:50:33:
         10:fe:ec:fd:44:d7:c6:40:24:8c:8e:a3:d7:30:c2:04:ad:6a:
         05:36:3a:ec:0b:c8:d9:de:4e:9c:26:08:5e:95:ca:fd:29:f3:
         d9:e2:34:a3:10:54:92:bc:56:af:a9:62:27:f5:00:e9:8c:d6:
         b4:de:bc:33:c7:05:95:45:70:7b:bf:fb:b9:75:ad:00:34:a2:
         13:8c:95:00:55:f0:26:15:e3:a4:d4:56:0d:97:55:d5:67:5b:
         9b:ba:cc:cc:3f:12:02:34:61:a7:06:76:72:b8:77:b6:a0:72:
         93:54:86:3b:fe:3b:93:f5:7d:21:8c:13:e5:f0:27:95:cc:1b:
         ab:84:f4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 22:48:29 2025 by rpki-client