Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft
File:                     01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft (raw, json)
Hash identifier:          hPX56E6uv7RAEWbTOoTu3bsermQd6aCORUHlaal4mug=
Subject key identifier:   30:45:F4:BF:FD:38:F2:57:39:62:26:CB:D4:93:23:44:58:62:D6:6F
Authority key identifier: 01:CF:F7:E7:41:89:56:3B:0E:C4:5D:0E:9B:B7:C5:62:8B:2E:43:88
Certificate issuer:       /CN=01CFF7E74189563B0EC45D0E9BB7C5628B2E4388
Certificate serial:       686B55C98CA15D9E6A70FD5A7657696291DDEFA5
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft
Manifest number:          0101
Signing time:             Fri 06 Jun 2025 12:33:57 +0000
Manifest this update:     Fri 06 Jun 2025 12:28:57 +0000
Manifest next update:     Sat 07 Jun 2025 16:14:57 +0000
Files and hashes:         1: 01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.crl (hash: KUSj6g79HPxAjzovBT36AwNVStw9a7JLPEsTIDFM7Wc=)
                          2: 3139322e36372e33352e302f32342d3332203d3e203236353536.roa (hash: 6b1VpbvMsE50o/1KffApiCFgdzfb7zhZLiCWQ7W3KvI=)
                          3: 3139322e36372e33352e302f32342d3332203d3e203437323732.roa (hash: ksX8z7ZW9gymrqj00x+2X/C8X7o9+JqUVnJjpd/TsDA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 16:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:6b:55:c9:8c:a1:5d:9e:6a:70:fd:5a:76:57:69:62:91:dd:ef:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01CFF7E74189563B0EC45D0E9BB7C5628B2E4388
        Validity
            Not Before: Jun  6 12:28:57 2025 GMT
            Not After : Jun  7 16:14:57 2025 GMT
        Subject: CN=3045F4BFFD38F257396226CBD49323445862D66F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f7:bc:e9:43:bb:8a:19:48:64:c1:37:e1:3c:
                    a3:23:76:c7:54:3d:cf:34:e0:24:ea:ed:4e:06:ea:
                    45:2d:59:53:1d:c9:e0:76:e6:5c:bd:6f:d3:66:39:
                    fc:3e:c8:7e:90:14:27:62:d0:c6:eb:58:14:2d:df:
                    b4:a7:53:bf:5a:79:a9:58:44:fa:73:d2:bc:3d:40:
                    1b:9f:11:de:26:f1:69:a1:d9:6b:e5:51:e6:ff:fe:
                    17:58:a3:08:8d:19:6b:07:c7:91:84:61:17:37:88:
                    61:67:b0:5b:3e:d1:8a:df:2d:a1:d0:2f:8c:95:29:
                    6d:5a:5b:c0:2a:e6:c6:bb:50:74:02:fb:86:a5:74:
                    11:72:28:71:ae:0c:64:4d:b3:ac:a1:ba:dd:85:ee:
                    7b:bc:b6:a7:52:60:76:71:3d:ba:69:25:2b:8a:ff:
                    8f:82:fb:c0:4a:52:41:18:2b:f2:33:11:18:f4:b7:
                    e8:9d:59:d7:12:0e:c2:50:bd:48:01:a9:2d:b8:3a:
                    15:6f:11:dd:44:51:46:b7:4e:f4:d6:69:71:18:17:
                    ec:44:85:b9:87:d3:f5:d1:88:77:84:9a:cf:e7:b5:
                    9f:37:62:50:1c:e3:54:5b:d8:3a:cd:e5:ba:ea:5a:
                    08:f0:3e:59:58:ee:96:b3:ad:a5:9e:74:ef:3d:dc:
                    0a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:45:F4:BF:FD:38:F2:57:39:62:26:CB:D4:93:23:44:58:62:D6:6F
            X509v3 Authority Key Identifier:
                keyid:01:CF:F7:E7:41:89:56:3B:0E:C4:5D:0E:9B:B7:C5:62:8B:2E:43:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:56:0a:8b:a1:59:94:fe:09:f1:a8:2c:69:57:b8:14:9d:c6:
         15:8d:2c:f1:05:c6:56:37:0d:58:84:81:f4:4d:f4:e4:fd:0c:
         92:46:1b:4f:b6:b6:ad:ec:d5:31:d0:c7:3f:e4:dd:e7:f9:1e:
         68:b1:6d:1d:40:43:52:05:06:48:26:a4:a1:14:e0:9a:a0:5e:
         50:20:ec:a6:15:c3:fc:d6:b6:88:fb:e0:98:d2:67:64:81:33:
         3b:f8:5c:21:c4:f6:ed:a6:c4:99:cb:84:1f:5d:60:06:61:90:
         f4:00:48:42:92:2e:bd:a0:14:ac:0f:2c:f1:3c:5f:fb:f4:ff:
         af:3e:c4:04:86:cb:35:f0:77:02:7c:25:6e:ef:90:73:23:90:
         06:fe:d0:9d:8d:93:54:cb:c6:40:56:d6:fe:b1:e8:7a:ff:85:
         0b:97:5e:92:34:52:1e:47:1a:30:97:4a:92:55:87:0c:f2:c6:
         92:fb:f3:d4:1e:cb:d5:f1:de:8f:8b:68:1d:a7:d3:ee:4d:1d:
         4d:fd:d1:a7:bb:6c:d7:c7:3d:3b:d2:40:4e:c8:0e:17:ba:05:
         89:8b:dc:83:2b:ed:92:2f:a8:7c:49:e0:50:2b:d6:4e:32:c3:
         20:17:f8:70:a3:64:a1:45:3d:d2:19:fe:42:0e:d3:21:eb:c7:
         98:ed:71:87
-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgIUaGtVyYyhXZ5qcP1adldpYpHd76UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFDRkY3RTc0MTg5NTYzQjBFQzQ1RDBFOUJCN0M1NjI4
QjJFNDM4ODAeFw0yNTA2MDYxMjI4NTdaFw0yNTA2MDcxNjE0NTdaMDMxMTAvBgNV
BAMTKDMwNDVGNEJGRkQzOEYyNTczOTYyMjZDQkQ0OTMyMzQ0NTg2MkQ2NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW97zpQ7uKGUhkwTfhPKMjdsdU
Pc804CTq7U4G6kUtWVMdyeB25ly9b9NmOfw+yH6QFCdi0MbrWBQt37SnU79aealY
RPpz0rw9QBufEd4m8Wmh2WvlUeb//hdYowiNGWsHx5GEYRc3iGFnsFs+0YrfLaHQ
L4yVKW1aW8Aq5sa7UHQC+4aldBFyKHGuDGRNs6yhut2F7nu8tqdSYHZxPbppJSuK
/4+C+8BKUkEYK/IzERj0t+idWdcSDsJQvUgBqS24OhVvEd1EUUa3TvTWaXEYF+xE
hbmH0/XRiHeEms/ntZ83YlAc41Rb2DrN5brqWgjwPllY7pazraWedO893AovAgMB
AAGjggJtMIICaTAdBgNVHQ4EFgQUMEX0v/048lc5YibL1JMjRFhi1m8wHwYDVR0j
BBgwFoAUAc/350GJVjsOxF0Om7fFYosuQ4gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5
OTVkLzQvMDFDRkY3RTc0MTg5NTYzQjBFQzQ1RDBFOUJCN0M1NjI4QjJFNDM4OC5j
cmwwgYkGCCsGAQUFBwEBBH0wezB5BggrBgEFBQcwAoZtcnN5bmM6Ly9rcmlsbC5h
Y2N1cmlzdGVjaG5vbG9naWVzLmNhL3JlcG8vQWNjdXJpcy1UZWNobm9sb2dpZXMv
MC8wMUNGRjdFNzQxODk1NjNCMEVDNDVEMEU5QkI3QzU2MjhCMkU0Mzg4LmNlcjCB
ngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzovL3JzeW5jLnBh
YXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05
YjZjLTljOWYzODk4OTk1ZC80LzAxQ0ZGN0U3NDE4OTU2M0IwRUM0NUQwRTlCQjdD
NTYyOEIyRTQzODgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6VgqLoVmU/gnxqCxpV7gUncYVjSzxBcZW
Nw1YhIH0TfTk/QySRhtPtrat7NUx0Mc/5N3n+R5osW0dQENSBQZIJqShFOCaoF5Q
IOymFcP81raI++CY0mdkgTM7+FwhxPbtpsSZy4QfXWAGYZD0AEhCki69oBSsDyzx
PF/79P+vPsQEhss18HcCfCVu75BzI5AG/tCdjZNUy8ZAVtb+seh6/4ULl16SNFIe
Rxowl0qSVYcM8saS+/PUHsvV8d6Pi2gdp9PuTR1N/dGnu2zXxz070kBOyA4XugWJ
i9yDK+2SL6h8SeBQK9ZOMsMgF/hwo2ShRT3SGf5CDtMh68eY7XGH
-----END CERTIFICATE-----
Generated at Fri Jun 6 23:37:13 2025 by rpki-client