Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
File:                     EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft (raw, json)
Hash identifier:          21l9du1M2zr4mGnQ2qKVlacDdlXFBVBfDqlU70kHkbQ=
Subject key identifier:   64:C1:87:D4:E7:C4:ED:89:C1:50:65:61:49:35:5F:3F:12:9A:8C:54
Authority key identifier: ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
Certificate issuer:       /CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Certificate serial:       1D48FF6F6CACDCD71FB81BC13D82F6911823761E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
Manifest number:          0359
Signing time:             Sat 14 Jun 2025 08:17:52 +0000
Manifest this update:     Sat 14 Jun 2025 08:12:52 +0000
Manifest next update:     Sun 15 Jun 2025 09:12:52 +0000
Files and hashes:         1: 3138352e33372e3231382e302f32332d3234203d3e20323132323338.roa (hash: huwsUB31uBfbleT8W3liIVEEjjwoWiPQyT4oqqDXvCQ=)
                          2: 3138352e33372e3231362e302f32332d3234203d3e203433363431.roa (hash: R1hn+hKIX3uDtuYXayOgRshxOBIjYwYDCqH1e+zmsz0=)
                          3: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl (hash: T5JumEapDfJU/9eb08kB7QAVkJQkhFMab0VLYEbfXQE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 09:12:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:48:ff:6f:6c:ac:dc:d7:1f:b8:1b:c1:3d:82:f6:91:18:23:76:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
        Validity
            Not Before: Jun 14 08:12:52 2025 GMT
            Not After : Jun 15 09:12:52 2025 GMT
        Subject: CN=64C187D4E7C4ED89C150656149355F3F129A8C54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:23:65:3b:2c:68:dc:2f:e5:7b:60:a5:8a:c8:
                    03:a8:77:b3:4a:42:a2:98:0c:be:8d:b4:0a:f1:06:
                    af:1a:ec:19:d6:63:43:d1:a2:08:20:6a:30:5e:4a:
                    7c:d5:22:09:4d:17:87:8f:0f:63:b0:e4:36:28:fd:
                    a7:eb:87:60:fc:09:d1:68:88:09:1e:2f:31:07:b6:
                    58:4b:30:94:ec:ec:ba:b5:a6:38:c2:06:8f:a1:c0:
                    ea:e8:7e:0b:65:31:41:ae:fe:4a:7a:38:bf:94:ba:
                    f8:35:30:a2:97:8e:82:e2:c6:ec:6a:90:28:31:ef:
                    07:20:7d:3f:a4:c7:d6:90:b0:c2:96:57:f5:10:36:
                    2d:51:8e:ce:7e:e4:ed:c3:48:79:7b:39:76:04:52:
                    07:10:97:ea:0f:55:5e:5d:ee:54:9a:90:5e:e8:19:
                    9d:25:c5:a2:9c:78:49:9e:b5:bd:9b:50:cc:de:dc:
                    be:12:ef:06:48:74:7f:4a:92:87:c3:07:fc:21:e3:
                    0a:4c:31:5d:1a:87:dd:d7:75:17:e2:13:36:e3:0c:
                    47:cd:8f:0f:65:81:a2:01:6d:d3:fa:91:2f:68:46:
                    19:3b:e0:06:7a:d6:4e:13:d9:99:e0:41:70:0d:41:
                    40:92:85:db:e7:ba:cd:7e:38:91:fe:52:c0:eb:23:
                    00:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C1:87:D4:E7:C4:ED:89:C1:50:65:61:49:35:5F:3F:12:9A:8C:54
            X509v3 Authority Key Identifier:
                keyid:ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:37:88:d1:93:9e:3b:cd:14:e0:fc:5a:2e:e9:ad:28:e7:97:
         90:3c:1a:a5:9a:af:e7:e8:f8:e8:ae:2b:1d:a8:19:ef:21:a8:
         68:83:5d:af:eb:2b:f3:84:7d:09:8c:09:bd:e2:36:6c:04:d7:
         2d:9f:17:b7:cc:79:f1:8c:8d:c8:63:1e:51:45:f5:03:d4:9d:
         47:d3:e6:9a:7f:60:5f:2a:5c:e6:cf:30:a4:96:a3:cc:60:32:
         6d:c4:87:c5:a1:65:fc:29:b9:7e:26:85:3c:7e:87:b7:6f:a9:
         97:b4:b0:60:ef:82:70:1b:b9:f5:c1:23:69:7b:38:d9:75:46:
         05:c3:97:47:a0:fd:bb:26:c9:a9:85:23:ab:08:8a:e6:4e:7c:
         94:99:42:f4:64:f5:73:09:a8:ff:2a:dd:28:f7:7e:6b:d8:ee:
         6d:d1:be:cf:3b:cd:df:a2:95:dc:9b:52:db:04:b8:34:17:10:
         c1:11:0e:b6:96:6c:a9:06:27:cb:36:14:a4:35:6d:8a:81:7c:
         12:7e:ba:f5:13:d9:16:aa:8f:67:e1:aa:43:96:0b:70:18:2a:
         42:00:60:41:94:f2:b0:d2:dd:7d:38:88:14:b2:65:8d:b9:2d:
         38:9b:95:83:d5:d9:ef:5e:ff:0a:42:5e:af:02:cb:42:4e:a5:
         d4:81:c2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:10:07 2025 by rpki-client