Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File:                     0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier:          oNmfgaWEpVii2ABGvQmd8q9EODXVQFP4uSHOFngqEOE=
Subject key identifier:   47:02:2E:F8:A0:DB:31:A0:9C:B9:63:C2:F2:4B:E5:B2:E0:50:7C:F8
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer:       /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial:       3381118DDCF5D6DFAFE4245538DFE0427D0E05B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number:          027B
Signing time:             Sun 31 Aug 2025 03:33:37 +0000
Manifest this update:     Sun 31 Aug 2025 03:28:37 +0000
Manifest next update:     Mon 01 Sep 2025 04:31:37 +0000
Files and hashes:         1: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: enIH+G3Is0Y6VAPVU5xqFw/M04Fv1Nv4x/2clfkFqbI=)
                          2: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: +FUmQfKGqa7l1UgyL4zjqDbJWdoQDDjzi+PS6gpsjlM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Sep 2025 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:81:11:8d:dc:f5:d6:df:af:e4:24:55:38:df:e0:42:7d:0e:05:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
        Validity
            Not Before: Aug 31 03:28:37 2025 GMT
            Not After : Sep  1 04:31:37 2025 GMT
        Subject: CN=47022EF8A0DB31A09CB963C2F24BE5B2E0507CF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e3:36:05:05:ab:2a:73:49:23:b4:2a:fa:0c:
                    75:ec:5a:e3:e7:fd:da:23:9f:38:6a:9b:35:d9:d3:
                    f9:1c:26:d0:d7:09:0e:e6:a3:45:00:03:d2:8d:c4:
                    1e:76:0c:37:84:cb:7c:73:cb:10:32:45:c0:6b:7e:
                    56:c5:63:40:5c:c7:cb:09:78:7e:45:61:93:3c:cf:
                    73:aa:a8:2e:e4:94:25:2b:c3:2f:90:e8:23:e0:e2:
                    ed:0e:e2:9d:eb:47:2e:4e:ca:e9:4e:a7:79:dd:78:
                    2f:83:a1:3b:f0:27:33:55:13:7d:2c:c4:02:62:df:
                    b5:13:4a:f5:fa:2c:69:ac:dd:40:15:9b:ba:a7:28:
                    8c:ab:e5:b7:70:86:56:9f:59:a9:a1:bb:c1:92:7c:
                    44:d6:d7:34:55:50:4c:aa:bb:85:5b:0c:e6:ac:e0:
                    62:a4:19:62:d8:83:82:26:be:2b:db:5b:6c:0b:0a:
                    2d:0b:82:d5:b4:d3:d1:64:21:24:a7:74:14:66:2a:
                    6d:12:01:60:c3:71:2a:ae:23:c5:ed:a7:91:a7:a3:
                    9e:91:ae:c6:53:2d:48:d0:91:09:11:9b:29:02:80:
                    f6:97:7e:1c:74:2f:ef:86:37:27:37:ef:b0:a5:76:
                    e4:37:78:20:1b:cf:f1:63:c0:40:83:64:9a:72:55:
                    33:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:02:2E:F8:A0:DB:31:A0:9C:B9:63:C2:F2:4B:E5:B2:E0:50:7C:F8
            X509v3 Authority Key Identifier:
                keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:41:43:26:be:a2:2e:a9:5b:a3:4e:ad:78:2f:51:6b:01:87:
         eb:c4:96:93:d8:a2:ba:26:05:05:97:03:0e:74:16:0e:d3:6c:
         77:1a:38:04:da:8e:99:2a:9b:c1:c8:cc:e3:f3:14:9c:40:7f:
         79:9e:5c:64:d7:0b:55:8a:c6:bf:5f:0c:ae:91:73:5d:a8:90:
         6e:da:98:64:3f:77:85:8b:10:4f:1a:12:f9:3e:2d:d4:12:59:
         e0:85:a2:49:84:c0:57:62:c3:a6:fe:c2:f9:1f:81:29:8b:48:
         09:70:47:c1:38:28:f3:98:48:0a:cd:b7:0c:ab:21:3f:0f:d3:
         72:72:8d:2a:fc:62:7d:6c:c5:68:c2:01:83:d9:b4:f2:3d:eb:
         f1:dc:f8:07:05:f5:c6:57:2a:d2:a5:72:00:cf:ee:1f:35:ac:
         b8:1a:1f:85:03:9b:69:5d:5f:9a:af:d9:4c:18:9b:35:bd:83:
         e6:e2:a1:56:42:bc:6c:bc:2a:55:d2:21:f7:b0:32:e7:cd:25:
         5f:53:ab:fe:b7:9c:37:39:25:d2:3e:d7:80:56:a6:00:dd:59:
         6d:5b:e0:30:60:22:e5:be:08:a1:81:c9:c7:da:07:38:73:b0:
         87:16:5d:9d:96:ca:ae:77:25:5c:01:0e:38:5e:55:33:2d:75:
         a0:ae:e7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 31 18:02:35 2025 by rpki-client