Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft
File:                     307456E03A11DBB48443E93538958B15B4E9E0F0.mft (raw, json)
Hash identifier:          3YS7Os9XJ+j6m2kksVMGMU7DnNgy/majHrTi6PL5rNU=
Subject key identifier:   46:3F:79:B5:A3:E3:DA:20:A5:80:BA:34:FD:86:E9:52:52:00:13:17
Authority key identifier: 30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0
Certificate issuer:       /CN=307456E03A11DBB48443E93538958B15B4E9E0F0
Certificate serial:       4B08FE6E8E4FA7CA44EAFCB0E9A6E2E357A5B69B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft
Manifest number:          18
Signing time:             Wed 06 Aug 2025 21:02:49 +0000
Manifest this update:     Wed 06 Aug 2025 20:57:49 +0000
Manifest next update:     Fri 08 Aug 2025 00:47:49 +0000
Files and hashes:         1: 307456E03A11DBB48443E93538958B15B4E9E0F0.crl (hash: CT94562rejcnI+8jxgzLTkVrQpgFmfP0lWQH0xwtsug=)
                          2: 3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa (hash: aBp6U2aVMH3hSM5eeFVi+p63pJd0WYDoQYC72uEJ/w8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:08:fe:6e:8e:4f:a7:ca:44:ea:fc:b0:e9:a6:e2:e3:57:a5:b6:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307456E03A11DBB48443E93538958B15B4E9E0F0
        Validity
            Not Before: Aug  6 20:57:49 2025 GMT
            Not After : Aug  8 00:47:49 2025 GMT
        Subject: CN=463F79B5A3E3DA20A580BA34FD86E95252001317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:bc:51:79:4c:4e:67:66:2b:6a:68:98:3e:59:
                    3a:ab:43:c0:5c:f5:15:fe:2e:fc:c1:9e:7d:2d:b8:
                    38:86:8a:16:9f:37:9a:ca:64:cc:b3:b3:29:a1:f8:
                    59:14:30:62:16:09:af:e6:50:ec:1b:e8:b0:ba:01:
                    89:0d:fb:e4:50:41:b8:70:39:b5:0e:e7:ca:64:58:
                    24:52:74:e3:ed:f0:57:ca:71:02:c7:df:ce:30:84:
                    3e:06:60:7c:ca:eb:a5:fa:12:b8:89:f0:7a:c2:8c:
                    73:90:4c:b3:5d:37:dc:e6:83:62:f5:93:44:40:06:
                    c9:0b:47:63:72:44:69:2a:54:12:95:c3:c9:93:00:
                    7d:28:41:45:f9:ab:12:4f:a4:14:85:b5:12:a6:38:
                    f0:b7:2a:bf:54:bb:08:ca:f5:0a:c8:6e:ff:d2:63:
                    ad:3c:56:36:5d:45:7a:c2:82:7d:33:56:4d:eb:fe:
                    5f:bf:01:43:1e:8d:f9:53:3c:0e:04:44:05:e9:c6:
                    2e:f0:dc:ba:cb:12:95:5d:c0:b1:31:98:0d:5a:2e:
                    27:3d:0b:72:cc:31:94:6e:13:94:fa:2a:7c:aa:9d:
                    91:5a:f0:df:db:75:c3:75:cb:f7:7d:09:99:dc:82:
                    de:7f:3f:16:34:bf:1c:2b:73:7d:13:a9:04:25:a6:
                    5f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3F:79:B5:A3:E3:DA:20:A5:80:BA:34:FD:86:E9:52:52:00:13:17
            X509v3 Authority Key Identifier:
                keyid:30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e9:b1:1d:35:2b:bb:01:69:76:35:58:01:a5:0e:77:f5:4e:
         11:a0:78:5d:3c:01:fc:b0:11:f5:23:c0:d9:d9:a3:a0:7f:e8:
         03:88:75:7e:94:ec:20:cc:ed:b2:9b:01:92:ab:98:df:d9:ae:
         01:1e:cf:22:0c:3d:3f:39:0a:79:6c:f3:b4:78:ed:cb:67:aa:
         0c:bd:70:d6:92:09:89:82:44:a6:9b:40:b8:23:54:1f:a6:6a:
         2a:14:64:ed:0f:ee:8d:9a:b7:f9:dd:69:18:2d:8a:d4:9c:69:
         0a:65:29:08:b3:64:73:25:7b:11:3f:4b:e8:64:00:5b:07:d2:
         42:d8:cd:eb:2d:bf:ba:4f:63:f1:41:78:3f:64:b9:4e:2d:7d:
         56:f8:9c:e4:fd:a9:6d:15:0e:bc:b9:d1:fe:89:eb:ef:55:28:
         76:fc:7e:e4:cb:cf:56:58:81:cb:58:29:c1:0a:d0:a7:c6:a1:
         2c:c3:96:55:98:7b:41:96:1f:f5:4d:eb:11:af:87:96:39:c9:
         25:7d:a8:5b:7f:aa:5b:b9:1d:c9:c2:c2:0c:84:66:5f:a7:ab:
         6c:eb:2f:07:12:52:d2:75:21:6c:7b:3a:b6:db:7b:51:95:69:
         66:60:f8:8b:ee:78:e8:15:d0:34:de:ba:37:d6:d4:d4:d9:7e:
         d1:50:47:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:17:22 2025 by rpki-client