Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft
File:                     C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft (raw, json)
Hash identifier:          AX04QBTEccWoNnhszTMeTp9lVHqlmmSWzlB/OIKHYA4=
Subject key identifier:   BE:AE:33:23:E9:C8:21:1B:88:96:95:76:0A:03:67:F8:BB:C6:D9:EE
Authority key identifier: C9:E7:59:75:E6:6E:7B:C4:34:4F:9C:DE:2C:30:73:B8:E5:4A:2F:0E
Certificate issuer:       /CN=c9e75975e66e7bc4344f9cde2c3073b8e54a2f0e
Certificate serial:       4B092483C11A4AE4B856820B48128B01318B9DC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft
Manifest number:          01A7
Signing time:             Fri 02 May 2025 07:56:09 +0000
Manifest this update:     Fri 02 May 2025 07:51:09 +0000
Manifest next update:     Sat 03 May 2025 10:56:09 +0000
Files and hashes:         1: C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl (hash: q7uISvH5WVboy/KpwZSYO8bS/UFOwb5YjEHjVxcSHb0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:09:24:83:c1:1a:4a:e4:b8:56:82:0b:48:12:8b:01:31:8b:9d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e75975e66e7bc4344f9cde2c3073b8e54a2f0e
        Validity
            Not Before: May  2 07:51:09 2025 GMT
            Not After : May  3 10:56:09 2025 GMT
        Subject: CN=BEAE3323E9C8211B889695760A0367F8BBC6D9EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a6:8a:27:d8:99:cb:cc:a6:e5:5a:60:1b:9e:
                    89:f0:4b:a4:ff:d4:64:b9:38:fe:b7:21:64:15:ed:
                    ad:f5:aa:30:6c:18:e5:a5:61:7a:4d:ea:3b:2c:c1:
                    23:24:df:66:cd:22:f6:59:38:bf:e0:a1:59:aa:08:
                    58:07:91:fd:81:75:a3:89:97:b0:73:22:ce:d6:52:
                    81:c3:d3:1c:f8:44:3f:d8:bc:d5:fb:15:02:38:7e:
                    64:6a:37:3f:f1:79:c8:d9:6d:1f:54:58:6c:6b:1b:
                    5e:d9:ac:14:e5:98:4f:7c:08:70:c0:69:9e:a1:1d:
                    34:f8:4a:63:76:c8:15:74:31:41:02:71:eb:22:7d:
                    8f:71:16:9b:c4:00:20:5e:bb:1b:12:72:62:10:6c:
                    16:ff:b8:dd:ab:2d:8f:1a:57:1b:7c:9b:b0:88:5a:
                    db:18:42:df:de:5a:ec:62:19:82:47:13:67:18:cd:
                    ca:8e:c0:13:8a:f0:ad:43:28:8f:0f:31:94:ab:c9:
                    7d:fc:5f:6b:dc:6f:de:0d:e2:3e:85:5d:b4:2b:25:
                    e7:9b:8d:87:1e:37:45:7d:ed:66:28:1c:ec:35:f4:
                    a9:8d:32:f3:fa:38:60:f5:26:8f:84:68:75:7e:af:
                    82:2e:62:a8:a3:79:c5:60:1f:b5:28:ee:bd:32:ae:
                    43:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AE:33:23:E9:C8:21:1B:88:96:95:76:0A:03:67:F8:BB:C6:D9:EE
            X509v3 Authority Key Identifier:
                keyid:C9:E7:59:75:E6:6E:7B:C4:34:4F:9C:DE:2C:30:73:B8:E5:4A:2F:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:94:06:8b:e8:c7:61:6d:f7:59:9f:ac:9c:4a:09:26:74:b0:
         92:93:2f:95:2c:a2:5f:b0:f6:3a:c5:9b:2d:5a:50:12:f5:66:
         43:27:8c:84:29:4e:f7:32:2e:07:ef:17:dc:4c:07:38:90:e6:
         7e:52:37:26:92:61:08:03:ed:87:eb:95:00:c7:7d:b8:03:ee:
         01:ce:57:49:0c:53:51:82:01:78:cb:38:77:68:03:fe:c3:06:
         bd:de:a4:c8:6d:40:16:6e:4d:39:27:8f:49:b7:77:2e:7a:0b:
         c6:b1:7a:f6:3d:a5:90:47:5a:c6:87:28:5f:54:88:0c:3c:54:
         4e:a8:ee:f6:9b:39:e6:03:45:0b:02:e7:c3:a3:9c:46:99:a7:
         63:70:96:b6:57:5e:21:a6:27:9c:62:99:5b:16:b7:a3:3b:0b:
         27:97:5c:c3:fb:7c:d2:82:41:e4:6d:7d:95:74:ea:28:d5:61:
         f0:6c:30:11:d7:74:a4:d4:61:b3:9c:32:e6:95:a0:7c:9d:65:
         43:3e:63:13:22:25:42:cb:04:e6:7e:93:94:aa:4e:54:33:96:
         3b:92:e8:78:ac:58:cf:cc:62:f2:e1:9c:15:71:87:ca:0d:16:
         3a:e4:b8:fd:23:0e:04:d7:e1:2d:6a:7e:e7:3f:61:6c:62:3a:
         cd:f8:1a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:47:42 2025 by rpki-client