Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
File:                     6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft (raw, json)
Hash identifier:          jnRAr1joSwdcGvoYIzhfalf1XM2Ew04D7wH0BEpHJyc=
Subject key identifier:   DA:2E:22:DD:C0:1D:44:8A:9C:36:C8:42:60:68:29:64:2A:EE:D9:91
Authority key identifier: 6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A
Certificate issuer:       /CN=6a3130acfbfba9017addef637acd312fc763829a
Certificate serial:       46F75C0E567F7AEE97F0E3A09A4BC9F1C7A1F74B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
Manifest number:          0211
Signing time:             Wed 06 Aug 2025 09:39:13 +0000
Manifest this update:     Wed 06 Aug 2025 09:34:13 +0000
Manifest next update:     Thu 07 Aug 2025 12:50:13 +0000
Files and hashes:         1: 6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl (hash: W+mgc1TMMQBd7VrOL1uo5woUhaRwdWbwXGmciDI94pA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f7:5c:0e:56:7f:7a:ee:97:f0:e3:a0:9a:4b:c9:f1:c7:a1:f7:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a3130acfbfba9017addef637acd312fc763829a
        Validity
            Not Before: Aug  6 09:34:13 2025 GMT
            Not After : Aug  7 12:50:13 2025 GMT
        Subject: CN=DA2E22DDC01D448A9C36C842606829642AEED991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:76:b7:54:8c:76:e8:0d:95:cb:eb:14:a8:85:
                    9d:57:a1:45:a4:dc:ae:45:80:b7:ff:2d:25:c9:6a:
                    58:75:61:6b:ff:ae:3f:13:1c:04:ff:ce:a0:4a:77:
                    ef:43:00:c1:dd:88:5f:5c:29:7a:c9:24:a8:2b:19:
                    f5:92:6f:fa:1f:e8:5f:3d:2a:8e:51:db:28:4c:81:
                    34:06:4a:c3:3b:12:96:ad:a6:48:c9:4f:fc:eb:76:
                    3b:14:23:1e:7f:3a:11:4a:1b:ed:60:23:34:8f:67:
                    b0:51:cb:76:21:24:59:0b:c7:e1:b4:62:a5:58:c4:
                    d6:02:7a:80:3f:7c:96:47:cb:8a:8f:28:a2:ca:ad:
                    35:d0:ae:c8:96:e5:b4:39:af:cb:a1:7c:2f:93:7e:
                    4d:03:60:54:59:ff:af:8f:b6:b2:d9:80:c5:89:15:
                    3d:03:59:e8:80:9a:1c:7c:e3:b7:dc:9f:a0:9f:5e:
                    23:f7:bd:cf:16:0d:ec:6c:99:35:56:e4:5d:cf:7a:
                    8f:24:30:bd:a5:c2:59:dc:b1:c3:b9:61:35:d3:39:
                    f1:f0:0c:9e:ae:bb:02:f1:b5:78:aa:6a:5a:fe:47:
                    ee:63:36:5d:ed:aa:50:31:b1:9a:76:79:16:e7:e3:
                    f3:86:17:63:df:ca:36:35:a6:b8:4c:b1:ef:e5:d9:
                    d0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2E:22:DD:C0:1D:44:8A:9C:36:C8:42:60:68:29:64:2A:EE:D9:91
            X509v3 Authority Key Identifier:
                keyid:6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:21:5c:bd:04:15:29:3e:5b:ba:3b:0e:91:9e:71:52:8c:77:
         c0:31:9f:8d:f6:4f:4e:3e:b3:31:2a:02:10:3e:53:9e:4f:d8:
         82:58:3e:41:0a:b6:48:a6:f0:e3:3c:6d:4a:d7:80:c2:8e:bd:
         00:3f:fb:8a:6f:ac:b2:ff:30:dd:d6:15:60:b9:0b:23:86:a1:
         d4:a7:72:cc:b1:4e:71:bd:95:37:97:ac:67:e6:62:46:55:a9:
         f6:25:18:fa:3b:8f:73:99:25:0a:20:25:0a:77:18:d2:48:db:
         1f:16:32:22:ca:52:42:fd:79:95:8c:55:e2:78:61:59:15:fb:
         bf:9e:89:61:a6:d5:ba:f0:c9:a0:10:7e:07:d7:8e:5a:2b:cb:
         eb:e9:98:12:50:04:da:88:57:e7:c8:6b:a2:a3:83:77:87:18:
         32:b0:7e:ba:15:cb:e0:fe:af:7b:7f:9f:d9:fd:2f:77:ed:a0:
         73:b7:84:d6:5a:ec:1d:61:38:c9:38:d8:37:27:dd:9b:df:74:
         fd:c9:33:cd:c2:87:8d:3d:ab:d3:6a:70:1e:6c:45:ba:7b:ca:
         96:06:e9:04:ff:c2:74:a0:99:51:d0:e0:c5:2b:03:73:d5:61:
         4d:c4:7e:4f:67:16:48:31:90:05:83:46:9c:5e:c8:35:e2:eb:
         10:8d:3d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:40:16 2025 by rpki-client