Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
File:                     B056811CB944A23C757F57AFFD483C6FCFB80119.mft (raw, json)
Hash identifier:          qVe0c/f1PrqcmW+v79iYUzAIvkm0rXaNfJAiutHAUwU=
Subject key identifier:   EA:43:43:3A:8E:86:76:BF:C3:7D:B9:DF:B5:00:90:64:F2:42:07:FE
Authority key identifier: B0:56:81:1C:B9:44:A2:3C:75:7F:57:AF:FD:48:3C:6F:CF:B8:01:19
Certificate issuer:       /CN=b056811cb944a23c757f57affd483c6fcfb80119
Certificate serial:       4472A3C11BB032600C14EC2349D13C459AE4FE35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
Manifest number:          0DC4
Signing time:             Wed 23 Jul 2025 11:46:46 +0000
Manifest this update:     Wed 23 Jul 2025 11:41:46 +0000
Manifest next update:     Thu 24 Jul 2025 12:14:46 +0000
Files and hashes:         1: 33372e31362e38392e302f32342d3234203d3e20323035363539.roa (hash: 6QRhHbC8A6tvkoInC0OAQAidq/KLzHjtVgzI9mMUm4k=)
                          2: B056811CB944A23C757F57AFFD483C6FCFB80119.crl (hash: cpQG2Z+PmhBrpC9WE/ffUdk2yRWWw4On/ZPOpywit2c=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 12:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:72:a3:c1:1b:b0:32:60:0c:14:ec:23:49:d1:3c:45:9a:e4:fe:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b056811cb944a23c757f57affd483c6fcfb80119
        Validity
            Not Before: Jul 23 11:41:46 2025 GMT
            Not After : Jul 24 12:14:46 2025 GMT
        Subject: CN=EA43433A8E8676BFC37DB9DFB5009064F24207FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:11:e9:0d:d6:a2:d6:22:87:8e:3a:ec:21:
                    a5:43:d9:02:fd:6b:dc:db:95:61:1d:99:9d:a8:c3:
                    0b:e7:cd:55:59:46:45:89:03:27:6d:6f:6f:99:04:
                    9c:d1:f4:e0:d5:93:da:b4:65:3b:6f:55:11:b5:37:
                    3c:a9:93:c1:5f:f1:4b:a4:fa:47:6d:a2:a9:f4:21:
                    23:64:45:4d:07:85:2b:65:10:1b:9a:d0:ba:f9:04:
                    a8:d9:f2:34:42:4f:e7:ef:1d:78:0f:ad:22:c2:c1:
                    7d:e0:d3:69:ad:04:29:3f:20:fd:ad:5f:6f:0f:ec:
                    22:59:78:5e:0e:a7:22:3e:93:ff:31:52:f8:26:56:
                    9a:fe:4a:6b:25:f0:95:9a:48:da:7a:f5:7e:24:44:
                    bc:1c:d9:5c:b5:63:2b:ce:ab:f5:a5:00:1a:57:bb:
                    47:54:12:9d:32:7a:f3:9d:bf:18:be:92:84:64:8e:
                    db:a4:9d:f0:53:a8:70:43:90:f5:03:10:78:0e:19:
                    8b:43:88:cf:4a:0a:18:ca:ab:10:5e:08:bb:72:b2:
                    d1:7c:ff:06:f0:be:f5:f0:90:23:0d:27:04:e3:38:
                    b5:ca:ab:33:46:e8:60:37:c7:b0:6a:a7:b6:aa:ca:
                    58:1e:0b:9d:bf:ff:92:d4:60:38:c0:19:d1:a0:6f:
                    06:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:43:43:3A:8E:86:76:BF:C3:7D:B9:DF:B5:00:90:64:F2:42:07:FE
            X509v3 Authority Key Identifier:
                keyid:B0:56:81:1C:B9:44:A2:3C:75:7F:57:AF:FD:48:3C:6F:CF:B8:01:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e1:c4:d6:85:4d:47:a5:3a:42:28:5e:2d:69:30:24:fc:bb:
         46:13:1e:2d:7f:4c:43:01:31:1f:bc:a9:ef:45:f5:15:b4:9f:
         c0:f9:4e:9e:12:af:cf:be:0d:94:33:53:84:0b:98:fe:bf:40:
         16:6c:45:f8:5a:9a:c3:d3:dc:2e:e0:49:70:04:07:f2:95:76:
         fc:aa:58:b6:e9:47:c7:c3:54:b0:89:72:9b:b9:d4:fd:70:ef:
         6e:34:c0:e7:1a:b2:ae:d6:5c:04:d1:84:ab:cb:34:43:22:65:
         c4:c3:d5:77:f8:87:75:24:34:4e:8c:62:c0:92:2c:59:e3:6a:
         30:d5:c1:b6:7d:e0:f4:0f:45:77:16:25:68:85:f0:01:61:11:
         99:94:9c:36:13:eb:bb:91:3b:e8:bf:0a:2d:c6:7e:e9:2a:f7:
         6f:ad:eb:25:d4:1f:94:fe:32:5c:ba:e7:aa:52:fe:51:2d:44:
         d4:7b:59:da:67:24:e9:37:3d:d8:3f:80:40:8d:af:11:5d:9b:
         a3:e4:b8:c7:c1:fa:82:e7:55:be:2c:8d:8c:74:c0:b1:77:0c:
         79:68:8e:78:41:16:a0:3d:33:99:28:f0:3e:57:dc:fd:7b:43:
         cc:c6:ad:d2:b7:02:e5:bd:cb:26:37:49:3b:7c:96:c0:a6:78:
         5f:47:cc:7a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIURHKjwRuwMmAMFOwjSdE8RZrk/jUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjA1NjgxMWNiOTQ0YTIzYzc1N2Y1N2FmZmQ0ODNjNmZj
ZmI4MDExOTAeFw0yNTA3MjMxMTQxNDZaFw0yNTA3MjQxMjE0NDZaMDMxMTAvBgNV
BAMTKEVBNDM0MzNBOEU4Njc2QkZDMzdEQjlERkI1MDA5MDY0RjI0MjA3RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwzRHpDdai1iKHjjrsIaVD2QL9
a9zblWEdmZ2owwvnzVVZRkWJAydtb2+ZBJzR9ODVk9q0ZTtvVRG1Nzypk8Ff8Uuk
+kdtoqn0ISNkRU0HhStlEBua0Lr5BKjZ8jRCT+fvHXgPrSLCwX3g02mtBCk/IP2t
X28P7CJZeF4OpyI+k/8xUvgmVpr+Smsl8JWaSNp69X4kRLwc2Vy1YyvOq/WlABpX
u0dUEp0yevOdvxi+koRkjtuknfBTqHBDkPUDEHgOGYtDiM9KChjKqxBeCLtystF8
/wbwvvXwkCMNJwTjOLXKqzNG6GA3x7Bqp7aqylgeC52//5LUYDjAGdGgbwaJAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU6kNDOo6Gdr/DfbnftQCQZPJCB/4wHwYDVR0j
BBgwFoAUsFaBHLlEojx1f1ev/Ug8b8+4ARkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xODkvQjA1NjgxMUNCOTQ0QTIzQzc1N0Y1N0FGRkQ0ODNDNkZDRkI4MDEx
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NGYUJITGxFb2p4MWYxZXZfVWc4
YjgtNEFSay5jZXIwgaEGCCsGAQUFBwELBIGUMIGRMIGOBggrBgEFBQcwC4aBgXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE4OS9CMDU2ODExQ0I5NDRB
MjNDNzU3RjU3QUZGRDQ4M0M2RkNGQjgwMTE5Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIeHE1oVNR6U6
QiheLWkwJPy7RhMeLX9MQwExH7yp70X1FbSfwPlOnhKvz74NlDNThAuY/r9AFmxF
+Fqaw9PcLuBJcAQH8pV2/KpYtulHx8NUsIlym7nU/XDvbjTA5xqyrtZcBNGEq8s0
QyJlxMPVd/iHdSQ0ToxiwJIsWeNqMNXBtn3g9A9FdxYlaIXwAWERmZScNhPru5E7
6L8KLcZ+6Sr3b63rJdQflP4yXLrnqlL+US1E1HtZ2mck6Tc92D+AQI2vEV2bo+S4
x8H6gudVviyNjHTAsXcMeWiOeEEWoD0zmSjwPlfc/XtDzMat0rcC5b3LJjdJO3yW
wKZ4X0fMeg==
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:57:37 2025 by rpki-client