Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
File:                     3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft (raw, json)
Hash identifier:          FFfT3/LHIcS83pDhmXCp79tG6z89vR6M91CzYNE/hFw=
Subject key identifier:   83:2E:64:72:93:B4:32:59:6E:A3:19:6B:C8:08:9A:1C:EA:FC:2A:84
Authority key identifier: 36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
Certificate issuer:       /CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Certificate serial:       7121D7DB91635945DDD196FB3102D79DDC62B16E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
Manifest number:          0308
Signing time:             Mon 05 May 2025 18:37:40 +0000
Manifest this update:     Mon 05 May 2025 18:32:40 +0000
Manifest next update:     Tue 06 May 2025 20:44:40 +0000
Files and hashes:         1: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl (hash: ah4ij1nTyeyl8RFhaau1TL/Iw3/JRLvDzH2eDeDAuhI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:21:d7:db:91:63:59:45:dd:d1:96:fb:31:02:d7:9d:dc:62:b1:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
        Validity
            Not Before: May  5 18:32:40 2025 GMT
            Not After : May  6 20:44:40 2025 GMT
        Subject: CN=832E647293B432596EA3196BC8089A1CEAFC2A84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:36:b3:c5:7c:91:9d:ff:db:a0:75:68:2e:ad:
                    4d:aa:80:0b:58:45:0f:85:5e:1e:13:7a:9d:34:e4:
                    48:25:14:ab:40:1b:33:7f:0d:6b:81:0c:b7:19:e8:
                    07:e2:31:8a:f0:c2:94:e2:cc:96:e3:88:a7:65:58:
                    02:34:15:c1:d0:f8:1b:6b:b2:a0:29:41:52:00:86:
                    31:43:7c:93:3a:75:56:37:be:1d:d8:bd:2b:aa:02:
                    b5:81:20:3f:48:ec:45:62:57:c1:1e:15:96:9e:f9:
                    b9:61:ad:ca:50:3d:ab:45:73:20:f2:23:39:0c:09:
                    fe:26:ba:8a:92:51:b0:2e:61:ee:d1:09:ea:7d:69:
                    3a:ac:2b:aa:8f:c5:83:37:89:a3:84:9c:8b:3f:60:
                    70:4e:60:81:65:7b:b4:83:e6:ad:60:0c:64:83:d7:
                    68:9a:15:48:99:0e:18:a1:88:71:01:46:10:da:9c:
                    59:4e:39:64:c5:6c:e4:bb:34:e3:41:5d:28:f3:0c:
                    e0:55:dd:bd:2e:9a:74:b9:a2:d9:34:44:d7:f3:e3:
                    0f:ed:55:8c:8f:36:f5:3b:e2:ca:41:b4:e2:d6:d1:
                    30:70:e9:27:c4:f0:24:a2:31:c8:c6:6f:a4:ba:da:
                    f6:dd:a8:9f:8f:98:fa:f0:d8:6b:04:fd:01:e8:75:
                    71:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2E:64:72:93:B4:32:59:6E:A3:19:6B:C8:08:9A:1C:EA:FC:2A:84
            X509v3 Authority Key Identifier:
                keyid:36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:5e:0f:30:cd:ba:5e:f8:92:90:90:30:b9:88:d6:3a:0b:ae:
         68:ec:c6:5d:ba:36:ef:be:fb:ae:36:41:3f:52:ae:a4:21:f3:
         02:d0:7f:6b:82:7a:06:6a:3b:3a:44:b5:70:89:85:e8:62:8e:
         72:31:5f:35:ea:8b:fa:08:09:c7:0e:de:e0:be:5e:f1:25:81:
         88:29:9d:87:c7:78:88:65:c7:f5:4a:6d:f8:07:17:b6:46:bb:
         a8:0a:5d:9d:15:d2:31:f0:85:fc:a8:dd:50:c9:a0:7c:03:3f:
         48:17:ed:3c:e1:38:45:d7:87:d7:ab:8f:67:d6:e0:4d:66:df:
         0d:34:1c:ee:f7:93:85:21:b6:b6:ce:a4:33:84:d4:35:42:fd:
         07:7a:9a:39:eb:ee:62:ca:b2:d5:98:c9:db:a3:f1:99:04:d3:
         b1:1b:fc:86:c6:98:39:cf:42:6a:96:df:d8:07:ed:77:86:63:
         a1:60:21:f2:3f:74:ee:05:72:3b:c5:19:10:94:1a:3b:12:33:
         87:7d:30:df:13:47:0d:1b:e4:43:94:ad:2c:17:8e:6b:9a:3f:
         b4:5f:c1:27:cf:b4:fb:48:21:0d:01:9e:1b:70:cf:07:70:67:
         22:d1:ec:f0:1b:c3:6f:ed:73:a4:5e:97:b7:89:6c:1b:bf:41:
         3c:37:22:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:10:27 2025 by rpki-client