Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft
File:                     6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft (raw, json)
Hash identifier:          HpJHR2NrR5hvhP/oLdiTmWOBTnEeMp/F72N9oIRukbA=
Subject key identifier:   F9:EB:FF:91:4A:21:70:08:1E:72:5D:FA:B0:4C:B5:AA:0E:28:2C:3D
Authority key identifier: 6E:51:CB:9A:48:1B:5A:E9:9D:8B:E1:18:3E:3F:B0:87:FF:5C:8B:6F
Certificate issuer:       /CN=6e51cb9a481b5ae99d8be1183e3fb087ff5c8b6f
Certificate serial:       5CA713929B35C2A61CB78A11241DF164C8B4B8DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/blHLmkgbWumdi-EYPj-wh_9ci28.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft
Manifest number:          012C
Signing time:             Sat 26 Apr 2025 15:46:00 +0000
Manifest this update:     Sat 26 Apr 2025 15:41:00 +0000
Manifest next update:     Sun 27 Apr 2025 17:40:00 +0000
Files and hashes:         1: 6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.crl (hash: GcSAayykIt4N0a1EW0cZ4CxNvTMGyKTkcnDHq9uqJiE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/blHLmkgbWumdi-EYPj-wh_9ci28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a7:13:92:9b:35:c2:a6:1c:b7:8a:11:24:1d:f1:64:c8:b4:b8:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e51cb9a481b5ae99d8be1183e3fb087ff5c8b6f
        Validity
            Not Before: Apr 26 15:41:00 2025 GMT
            Not After : Apr 27 17:40:00 2025 GMT
        Subject: CN=F9EBFF914A2170081E725DFAB04CB5AA0E282C3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ab:d6:a9:04:f6:4e:34:1e:c1:41:22:cf:9a:
                    2e:3a:e7:8f:0b:d9:97:57:13:e6:63:76:9d:c0:96:
                    fb:13:dd:4a:eb:82:74:1a:f3:a3:e2:1e:dd:b8:aa:
                    f1:d8:7b:f8:3b:61:0d:cb:f5:01:4e:42:8f:94:60:
                    6a:c4:f0:e5:37:96:08:46:75:40:62:2a:27:5f:03:
                    67:ec:32:71:01:1b:b1:59:03:55:6e:22:dc:bf:11:
                    cc:16:37:1c:0d:48:95:e5:e4:c6:2f:68:f4:44:54:
                    c4:47:db:e1:ad:77:0e:8d:96:e9:5a:85:d2:a0:76:
                    88:f3:40:24:e4:60:bd:98:8f:3a:74:53:52:61:4a:
                    6e:af:40:1f:07:fd:4d:7b:39:b3:98:98:5f:a2:e7:
                    7c:33:72:9d:14:c1:b7:99:05:67:33:c5:f5:15:2b:
                    62:46:60:54:ec:42:d0:9b:f7:68:76:bf:47:d5:84:
                    42:5d:1f:4d:e4:82:6b:a9:40:7a:3d:27:4e:a0:de:
                    7d:66:27:74:f3:1f:99:75:24:22:47:49:53:26:9f:
                    c6:d6:70:ee:25:4b:34:9c:08:63:db:79:24:d4:71:
                    83:a3:99:57:b7:72:6c:16:16:fb:0b:ba:0a:f9:99:
                    99:7f:c5:72:0f:c2:8c:d3:79:b0:74:c1:32:82:79:
                    6d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EB:FF:91:4A:21:70:08:1E:72:5D:FA:B0:4C:B5:AA:0E:28:2C:3D
            X509v3 Authority Key Identifier:
                keyid:6E:51:CB:9A:48:1B:5A:E9:9D:8B:E1:18:3E:3F:B0:87:FF:5C:8B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blHLmkgbWumdi-EYPj-wh_9ci28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:f5:60:6b:ab:af:1d:59:6a:04:76:f5:94:08:b7:d6:48:03:
         f7:9f:d0:a6:29:ce:c7:3e:88:fe:bd:04:0f:7f:c2:a4:e1:ed:
         b4:b2:06:8a:79:a2:ab:bd:ed:11:a9:e0:62:12:2c:f1:d0:25:
         60:97:63:08:93:0d:c4:8f:cb:fc:0f:aa:c3:df:07:8e:2f:90:
         8e:92:62:a1:dd:11:20:2e:72:f2:6d:5e:86:8c:d5:13:08:8d:
         55:97:73:fb:28:4b:7c:13:f5:06:45:44:02:ae:31:77:16:39:
         b6:fa:2d:6f:15:9a:69:69:b6:a3:ad:1b:1f:bc:34:24:3e:99:
         e2:c3:24:d9:16:55:2d:6e:ba:30:21:41:42:2c:a2:bb:f2:f3:
         31:1b:0c:3a:50:75:6f:a0:bc:4e:91:bb:be:aa:5c:aa:91:cf:
         39:ef:ad:ed:3b:27:2f:d1:77:2f:c7:77:ee:45:48:23:cf:97:
         b2:ea:8c:54:15:11:e3:6a:b9:45:9e:4e:58:70:0f:b8:52:c5:
         b5:2e:95:44:dd:5a:5c:9c:c9:1c:94:74:50:34:0f:a2:8a:9f:
         cb:60:22:7b:d2:1a:75:31:86:fe:01:79:18:ca:d6:0d:c8:21:
         81:39:f9:2e:e3:bd:f6:8f:06:e1:a8:90:80:d4:dc:f9:d1:92:
         2c:56:2c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:36:02 2025 by rpki-client