Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.mft
File:                     A6E0BBA193794B8146B360D50420A9C4DC77C845.mft (raw, json)
Hash identifier:          nulwNG5sEcmnD6kDuiOeD3TlwAK8znDBKzS4XQBrZT8=
Subject key identifier:   17:AA:D0:45:AE:2E:51:83:6C:06:1D:8B:A9:B7:1A:AA:0E:EE:DB:14
Authority key identifier: A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45
Certificate issuer:       /CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
Certificate serial:       342DBD0B1F6D03AD5292C043AE8F85AD5C1BEAD7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.mft
Manifest number:          83
Signing time:             Fri 04 Apr 2025 18:28:45 +0000
Manifest this update:     Fri 04 Apr 2025 18:23:45 +0000
Manifest next update:     Sat 05 Apr 2025 18:42:45 +0000
Files and hashes:         1: 326130613a363034343a613530383a3a2f34362d3438203d3e20323135393536.roa (hash: L3iy+YX86wWmGOZpZV8HiBAb6AR0XfxqCfBWi0Rg3BI=)
                          2: 326130613a363034343a613533303a3a2f34362d3438203d3e20323135393536.roa (hash: CK3PS9j38uaVPLBRoVvR4Rt55/HO6enhIH3okOIphew=)
                          3: A6E0BBA193794B8146B360D50420A9C4DC77C845.crl (hash: TsoIVgIYAjYM+EiFN4qZcmT9s50WGS7VtklJ1tIV9wo=)
                          4: 326130613a363034343a613530303a3a2f34362d3438203d3e20323135393536.roa (hash: xUPPpdCDSqoWg3s5y1davUFioaoYAU/44ExaIUjs6aI=)
                          5: 326130613a363034343a626230303a3a2f34302d3430203d3e20323135393536.roa (hash: EMfRivpVVkkRHPmgBone6RlxxUukb9hWMuKhZxdYoxE=)
                          6: 326130613a363034343a613533383a3a2f34372d3438203d3e20323135393536.roa (hash: rPSDGVuTVruIjvRfksdF4Y+fTmI+HVOgQaDh/y5/7Uw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 18:42:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2d:bd:0b:1f:6d:03:ad:52:92:c0:43:ae:8f:85:ad:5c:1b:ea:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E0BBA193794B8146B360D50420A9C4DC77C845
        Validity
            Not Before: Apr  4 18:23:45 2025 GMT
            Not After : Apr  5 18:42:45 2025 GMT
        Subject: CN=17AAD045AE2E51836C061D8BA9B71AAA0EEEDB14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2a:02:08:84:ac:cc:87:e9:14:30:e6:4e:bd:
                    14:fb:0b:02:4c:f5:9e:ee:2e:de:fb:24:de:bf:95:
                    58:7d:c3:6d:b6:36:24:96:8a:4c:c9:d3:48:0e:43:
                    ba:95:bb:69:60:11:3b:56:ea:fa:7c:b2:0e:0c:0d:
                    d1:f4:96:1c:fb:2f:21:cf:a4:cd:fb:fa:61:bd:24:
                    30:b3:f9:ca:da:0a:9a:aa:07:ab:92:8a:cb:d0:72:
                    4d:fa:2f:61:2b:61:6f:5d:51:97:37:bf:ac:2d:65:
                    3e:0f:e9:c3:ab:37:2a:9f:b0:31:e6:7b:3d:e4:1d:
                    e2:18:ae:78:c2:6e:0e:44:c4:07:27:b0:b7:e4:c9:
                    60:80:44:8e:52:07:d6:25:81:97:fd:38:dd:41:5f:
                    a5:58:9f:d9:b4:fa:28:eb:48:c0:29:d6:d0:51:ea:
                    3e:32:9d:e2:6f:48:23:3e:fb:9f:e7:74:63:df:5d:
                    88:10:ff:08:02:ba:c5:76:38:54:f8:61:97:46:18:
                    a1:50:86:fd:4d:9a:12:11:64:a3:93:aa:34:ec:29:
                    51:f6:a7:7a:ca:b1:aa:90:40:63:84:ce:1d:eb:61:
                    78:9b:ab:35:e3:6e:a8:c7:2d:af:19:02:ee:1d:e7:
                    f1:24:f6:12:ea:09:13:91:93:ce:a2:f4:c3:7c:34:
                    83:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AA:D0:45:AE:2E:51:83:6C:06:1D:8B:A9:B7:1A:AA:0E:EE:DB:14
            X509v3 Authority Key Identifier:
                keyid:A6:E0:BB:A1:93:79:4B:81:46:B3:60:D5:04:20:A9:C4:DC:77:C8:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/A6E0BBA193794B8146B360D50420A9C4DC77C845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/2/A6E0BBA193794B8146B360D50420A9C4DC77C845.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:78:3c:52:19:f2:a3:e1:09:a1:2a:4c:98:1f:c1:10:6c:b6:
         28:75:7e:92:bc:63:e9:fc:c2:d1:ca:47:95:28:e4:74:ba:1b:
         ed:0c:39:44:e3:6d:8e:25:8c:24:13:da:b2:37:75:f2:74:5b:
         82:3a:38:eb:d9:f7:0d:af:21:04:58:ec:7b:61:f3:44:82:4f:
         0a:ee:d6:38:b9:e8:7e:65:68:5c:9e:c9:c8:3c:01:2d:8a:4e:
         8a:8a:20:79:9e:9a:fe:c7:38:99:16:db:71:51:f7:3f:4d:23:
         58:9e:e7:e4:e4:06:98:eb:31:ba:20:a6:ba:7f:5a:17:57:b8:
         1d:b9:62:7b:75:30:55:d2:e8:a1:c8:90:d5:33:c4:c1:79:ee:
         10:6f:f4:4a:8d:f8:5d:ad:f2:44:7f:70:54:59:52:c6:ab:c7:
         09:69:3d:63:89:2d:d8:5f:63:6f:b3:10:0d:68:37:a2:37:21:
         5d:7b:8f:f7:fb:84:e6:6d:94:af:69:a1:e6:1b:29:15:c7:58:
         52:d8:1e:7b:58:a1:1b:fe:2f:8c:e3:16:0c:ba:46:4c:1c:a7:
         63:07:42:1c:e2:bd:63:ef:08:fa:89:35:67:af:eb:51:64:b4:
         2c:7b:a9:7f:6b:b9:86:f5:76:11:15:cb:7e:8f:29:77:77:d1:
         53:4c:3a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:10 2025 by rpki-client