Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
File:                     B056811CB944A23C757F57AFFD483C6FCFB80119.mft (raw, json)
Hash identifier:          DCIARNBgahiKMpDyaNhpgsp3wEs4akKDFDZjZwTMndA=
Subject key identifier:   30:49:86:EF:6B:E8:5F:90:C7:F5:4B:77:B3:97:1E:7F:AE:65:0A:F1
Authority key identifier: B0:56:81:1C:B9:44:A2:3C:75:7F:57:AF:FD:48:3C:6F:CF:B8:01:19
Certificate issuer:       /CN=b056811cb944a23c757f57affd483c6fcfb80119
Certificate serial:       7C2C3AB41A18280305048223019A65DC784DB010
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
Manifest number:          0CC8
Signing time:             Sat 07 Jun 2025 05:31:19 +0000
Manifest this update:     Sat 07 Jun 2025 05:26:19 +0000
Manifest next update:     Sun 08 Jun 2025 08:01:19 +0000
Files and hashes:         1: 33372e31362e38392e302f32342d3234203d3e20323035363539.roa (hash: 6QRhHbC8A6tvkoInC0OAQAidq/KLzHjtVgzI9mMUm4k=)
                          2: B056811CB944A23C757F57AFFD483C6FCFB80119.crl (hash: RHNg2l94XQ7ZcdUuzQCBjJpITFaTyCn3UokFlN3M4R8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:2c:3a:b4:1a:18:28:03:05:04:82:23:01:9a:65:dc:78:4d:b0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b056811cb944a23c757f57affd483c6fcfb80119
        Validity
            Not Before: Jun  7 05:26:19 2025 GMT
            Not After : Jun  8 08:01:19 2025 GMT
        Subject: CN=304986EF6BE85F90C7F54B77B3971E7FAE650AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:73:f2:12:7b:54:50:6b:2d:f4:67:b7:ca:a5:
                    1f:50:2e:1f:5c:0b:f6:d8:fe:d4:ed:4d:71:f9:cc:
                    f7:75:eb:15:1c:a8:22:82:c6:23:78:20:1d:fd:02:
                    1b:7e:22:a3:5c:09:65:9e:c9:9d:51:ed:f3:31:33:
                    0b:cc:bd:50:e7:e3:61:83:2d:10:5d:da:b0:b5:89:
                    7a:ac:1f:70:89:80:d0:15:c3:86:88:db:05:77:fb:
                    22:05:c1:57:a4:d3:fd:b5:f4:28:c1:db:1c:31:8c:
                    ed:5d:c3:34:37:e3:4e:57:75:ce:3a:e8:a6:0e:a7:
                    e5:c6:1d:ee:d7:76:e2:d8:00:3e:b2:a8:02:76:6f:
                    15:7f:a7:b4:97:3a:78:7c:a2:22:c7:45:42:8c:19:
                    6c:6a:d0:fd:a6:9b:f2:be:28:00:4f:0a:e7:d2:fb:
                    f2:8f:31:71:6d:14:c0:5a:7c:fb:d8:62:23:fd:df:
                    69:06:02:51:1f:92:65:04:48:6b:fb:24:e8:fd:ff:
                    1a:ea:51:4c:3a:bb:ff:7f:06:89:66:b1:01:66:f3:
                    a1:c9:0f:11:c6:d9:95:3e:b3:2c:4c:39:5b:1d:bf:
                    61:67:73:34:d2:dd:96:a8:7a:da:8d:3a:ae:14:e4:
                    1e:b8:8d:b1:57:55:4d:62:c5:a2:4a:49:8c:6e:6f:
                    84:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:49:86:EF:6B:E8:5F:90:C7:F5:4B:77:B3:97:1E:7F:AE:65:0A:F1
            X509v3 Authority Key Identifier:
                keyid:B0:56:81:1C:B9:44:A2:3C:75:7F:57:AF:FD:48:3C:6F:CF:B8:01:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:73:9c:ee:98:f6:b4:ab:bd:63:0f:e8:25:eb:53:ac:b5:64:
         3b:2d:60:94:88:59:7e:24:01:a9:2a:00:67:3f:ce:3e:d2:03:
         4d:af:9f:2f:bd:8d:54:66:7b:0e:23:9d:6c:0e:1e:1e:3e:2f:
         5d:8d:a0:0a:ac:20:60:7d:96:6b:f4:aa:85:18:5d:82:52:96:
         06:86:bc:40:6f:60:79:6d:15:74:4f:1b:ec:6e:3e:26:8b:de:
         23:f8:8b:2e:4a:08:e6:cf:bb:4d:dc:8e:f0:52:3b:f1:d4:36:
         30:1c:15:4d:dc:f0:56:ce:a9:57:92:81:52:f0:41:21:06:44:
         1c:43:d4:5e:ce:0b:95:c0:b0:b0:c5:16:73:2b:a4:20:0c:42:
         bf:bf:b1:2e:e4:21:8b:87:7d:a1:5d:5a:86:56:a5:61:65:86:
         5c:dd:ec:44:b3:b2:b4:8e:5c:e0:f6:55:7e:5f:f5:2d:7e:4c:
         a2:cd:98:15:23:84:db:87:cd:91:f8:24:25:11:9c:c9:45:6f:
         f4:b1:39:8b:90:c7:3e:63:36:3f:51:64:a5:c6:28:a4:4e:ad:
         01:d0:21:37:60:56:14:13:87:17:57:20:08:c7:0c:d1:7e:4a:
         96:e9:dd:6c:7d:bd:e0:67:0d:7c:0a:f4:17:89:55:80:c2:3d:
         be:54:1e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:16:54 2025 by rpki-client