Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
File:                     84101CECAA6A71465DCF665D716279A008341EA4.mft (raw, json)
Hash identifier:          tS7YR9L0T0d7oB7u+WywwYz746AdYpQvDJJaPzq0zv8=
Subject key identifier:   23:5A:20:7C:37:83:79:B6:9F:05:BE:0A:74:9F:57:70:5E:7B:F0:49
Authority key identifier: 84:10:1C:EC:AA:6A:71:46:5D:CF:66:5D:71:62:79:A0:08:34:1E:A4
Certificate issuer:       /CN=84101cecaa6a71465dcf665d716279a008341ea4
Certificate serial:       1E1F6198E68CB281CB37E0E01F9BB7158F19FCCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
Manifest number:          5B
Signing time:             Sat 14 Jun 2025 17:47:55 +0000
Manifest this update:     Sat 14 Jun 2025 17:42:55 +0000
Manifest next update:     Sun 15 Jun 2025 21:01:55 +0000
Files and hashes:         1: 84101CECAA6A71465DCF665D716279A008341EA4.crl (hash: 5hXvueCVfNtN1fwVVkO2ts9SY7fACGUoa+AlrbSnmD4=)
                          2: AS216311.asa (hash: Dmw7omaWtWOpKd5S/DPOujGFLODAQcprPtQE3Nwf75E=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1f:61:98:e6:8c:b2:81:cb:37:e0:e0:1f:9b:b7:15:8f:19:fc:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84101cecaa6a71465dcf665d716279a008341ea4
        Validity
            Not Before: Jun 14 17:42:55 2025 GMT
            Not After : Jun 15 21:01:55 2025 GMT
        Subject: CN=235A207C378379B69F05BE0A749F57705E7BF049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:82:f6:46:25:92:4e:f4:be:da:20:d4:84:f6:
                    13:96:6c:f1:74:f4:bb:2c:9c:a0:99:72:bf:97:8a:
                    64:dd:fb:41:42:65:aa:09:de:e9:46:38:7d:86:9c:
                    e8:24:66:cd:9f:f1:cf:e3:1a:b1:fe:ee:1a:82:a6:
                    9a:5e:74:ff:6a:1f:5a:92:ec:b3:01:c9:ae:d5:88:
                    bd:f5:4b:09:f0:4c:8f:45:90:f4:94:8c:b3:f2:10:
                    34:86:07:e0:b0:aa:ae:0c:2e:bf:aa:10:36:05:0f:
                    38:8c:bc:58:ad:84:21:66:01:d4:57:32:84:e9:18:
                    4e:42:a4:72:51:a2:bb:48:05:a1:1c:4b:81:bf:ac:
                    3b:91:32:f1:24:5a:f0:03:fb:6c:33:60:99:bc:2c:
                    3c:3e:ec:b0:8c:ce:55:bb:de:2a:ed:83:c2:87:c2:
                    1e:6f:09:bb:71:7f:c1:0c:d5:38:73:cb:eb:e5:cb:
                    bf:4c:e3:63:60:13:35:f0:12:65:1c:5e:5c:db:a0:
                    f4:cd:f1:3f:1e:0f:3a:09:ba:8b:11:e0:17:1a:4d:
                    2b:ef:77:62:74:02:43:6d:0d:9b:2a:f2:f2:22:90:
                    8b:d6:91:d9:2d:04:66:c2:ca:64:4b:56:bb:fe:2d:
                    a7:c5:82:7b:1f:e6:54:aa:29:99:7c:58:95:c5:5c:
                    49:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5A:20:7C:37:83:79:B6:9F:05:BE:0A:74:9F:57:70:5E:7B:F0:49
            X509v3 Authority Key Identifier:
                keyid:84:10:1C:EC:AA:6A:71:46:5D:CF:66:5D:71:62:79:A0:08:34:1E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:13:82:d5:91:32:00:37:7c:98:8b:e8:0f:e1:70:6b:e0:40:
         15:2b:b1:bf:94:1f:c9:a3:07:20:21:54:d4:b7:14:08:74:43:
         81:9e:a5:1c:04:58:43:0c:61:39:c4:cf:ab:85:53:a7:92:a2:
         6a:ec:6b:42:16:31:b9:b9:af:98:fa:fe:54:db:27:8b:68:34:
         11:95:72:b5:43:42:23:4f:df:b4:2e:e4:8b:d4:9a:45:ea:50:
         49:66:33:49:18:7e:3f:bb:63:58:b5:27:48:29:c8:62:e0:fd:
         62:2c:ac:39:af:98:9e:3b:7d:b5:f5:1e:92:c8:ed:9a:80:6c:
         2c:83:4c:37:83:41:7f:b0:61:af:17:30:30:8f:be:80:83:0a:
         b7:5e:a0:53:f3:eb:6d:63:fb:98:23:b2:e6:44:81:65:f4:91:
         1b:f5:28:20:f2:26:b7:4f:31:35:ac:3e:8a:b3:9d:3d:e9:3a:
         85:80:93:5d:68:78:ab:fd:1a:c8:50:b7:3a:f3:0d:3a:53:9d:
         d4:3f:9a:57:c3:8f:a1:63:35:a4:af:13:d0:83:5a:f2:3e:a5:
         02:fd:f1:d4:33:90:21:56:77:f5:38:ad:9f:9e:26:68:39:48:
         17:bd:d8:bd:38:30:9c:35:bd:b3:9c:ed:0b:2a:f4:c6:85:23:
         f0:fb:f7:37
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUHh9hmOaMsoHLN+DgH5u3FY8Z/MowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQxMDFjZWNhYTZhNzE0NjVkY2Y2NjVkNzE2Mjc5YTAw
ODM0MWVhNDAeFw0yNTA2MTQxNzQyNTVaFw0yNTA2MTUyMTAxNTVaMDMxMTAvBgNV
BAMTKDIzNUEyMDdDMzc4Mzc5QjY5RjA1QkUwQTc0OUY1NzcwNUU3QkYwNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzgvZGJZJO9L7aINSE9hOWbPF0
9LssnKCZcr+XimTd+0FCZaoJ3ulGOH2GnOgkZs2f8c/jGrH+7hqCpppedP9qH1qS
7LMBya7ViL31SwnwTI9FkPSUjLPyEDSGB+Cwqq4MLr+qEDYFDziMvFithCFmAdRX
MoTpGE5CpHJRortIBaEcS4G/rDuRMvEkWvAD+2wzYJm8LDw+7LCMzlW73irtg8KH
wh5vCbtxf8EM1Thzy+vly79M42NgEzXwEmUcXlzboPTN8T8eDzoJuosR4BcaTSvv
d2J0AkNtDZsq8vIikIvWkdktBGbCymRLVrv+LafFgnsf5lSqKZl8WJXFXEm9AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUI1ogfDeDebafBb4KdJ9XcF578EkwHwYDVR0j
BBgwFoAUhBAc7KpqcUZdz2ZdcWJ5oAg0HqQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDFiMjAxNzYtNzZiOS00MDAwLWE2ZTYtYmE1NDdiNTI0
MTQzLzAvODQxMDFDRUNBQTZBNzE0NjVEQ0Y2NjVENzE2Mjc5QTAwODM0MUVBNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2hCQWM3S3BxY1VaZHoyWmRjV0o1b0Fn
MEhxUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMWIyMDE3Ni03
NmI5LTQwMDAtYTZlNi1iYTU0N2I1MjQxNDMvMC84NDEwMUNFQ0FBNkE3MTQ2NURD
RjY2NUQ3MTYyNzlBMDA4MzQxRUE0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhOC1ZEyADd8mIvoD+Fw
a+BAFSuxv5QfyaMHICFU1LcUCHRDgZ6lHARYQwxhOcTPq4VTp5KiauxrQhYxubmv
mPr+VNsni2g0EZVytUNCI0/ftC7ki9SaRepQSWYzSRh+P7tjWLUnSCnIYuD9Yiys
Oa+Ynjt9tfUeksjtmoBsLINMN4NBf7BhrxcwMI++gIMKt16gU/PrbWP7mCOy5kSB
ZfSRG/UoIPImt08xNaw+irOdPek6hYCTXWh4q/0ayFC3OvMNOlOd1D+aV8OPoWM1
pK8T0INa8j6lAv3x1DOQIVZ39Titn54maDlIF73YvTgwnDW9s5ztCyr0xoUj8Pv3
Nw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:32:31 2025 by rpki-client