Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File:                     E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier:          W7JkK7CMRSxmyLuI83qZ3DUPkKu4FeCs0jqi3CsQdiI=
Subject key identifier:   A8:11:95:DC:B6:E0:33:80:8B:C7:07:D8:BC:E7:BC:67:CB:1D:5C:DD
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer:       /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial:       365CD65B181CBFE6FC4A9FCB4EA78DCAFB900249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number:          0455
Signing time:             Thu 07 Aug 2025 06:15:22 +0000
Manifest this update:     Thu 07 Aug 2025 06:10:22 +0000
Manifest next update:     Fri 08 Aug 2025 08:18:22 +0000
Files and hashes:         1: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: EDEurT5DDeKE/M4Ih5E87FtZXs18k/9eoVzUk7d0J1M=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5c:d6:5b:18:1c:bf:e6:fc:4a:9f:cb:4e:a7:8d:ca:fb:90:02:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
        Validity
            Not Before: Aug  7 06:10:22 2025 GMT
            Not After : Aug  8 08:18:22 2025 GMT
        Subject: CN=A81195DCB6E033808BC707D8BCE7BC67CB1D5CDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:c3:80:ab:36:cf:93:f6:b0:8f:8b:f1:cf:
                    8b:ae:42:0d:ed:b5:00:08:cd:60:0e:c5:86:d7:5a:
                    22:b2:c3:43:48:19:5a:68:67:6d:63:f4:7f:41:fd:
                    30:83:8b:3a:78:f9:fa:60:2b:e0:74:f7:63:14:ca:
                    03:18:7b:1a:65:26:b0:ab:a0:c1:42:86:7f:7f:b4:
                    9a:a0:a5:8f:0a:28:0e:23:b8:1c:45:d7:30:b7:37:
                    09:c5:75:c7:7c:d9:25:de:69:01:55:bf:16:2a:6e:
                    8e:84:64:aa:7e:20:53:de:97:8e:e5:a9:6d:a0:2b:
                    0b:52:e0:a4:92:33:30:ba:4c:95:e8:c9:e2:99:9a:
                    d7:09:92:12:2a:4a:76:f5:4b:11:f3:fe:97:a7:ff:
                    64:f1:6c:86:93:05:b9:6f:6a:b5:9d:88:a7:a5:77:
                    05:16:a0:5a:c5:17:7d:67:ac:9c:91:b2:9a:98:da:
                    03:db:d3:78:06:af:fa:11:92:e6:59:b7:e9:c1:01:
                    32:09:2d:b0:70:4e:7a:92:16:74:0d:fb:de:3d:fb:
                    25:27:72:db:8d:d0:fd:43:59:0d:75:08:8e:27:8a:
                    ae:d9:aa:c5:d0:d9:a1:d2:58:48:b0:cd:01:f5:17:
                    e3:e5:e5:ee:d7:0e:5b:a7:a2:ae:15:9a:f4:d7:0f:
                    48:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:11:95:DC:B6:E0:33:80:8B:C7:07:D8:BC:E7:BC:67:CB:1D:5C:DD
            X509v3 Authority Key Identifier:
                keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:6e:e3:02:a3:7a:71:38:bf:d8:22:1a:7b:77:4a:03:02:f3:
         c3:ec:40:1c:48:96:b0:6e:81:21:2c:f6:3b:c7:96:4a:31:86:
         9c:d3:2e:13:71:f2:bc:4b:c3:af:ff:42:ff:7e:53:fa:57:d9:
         00:a7:63:d9:34:70:15:61:c3:8c:52:c0:6c:75:9a:40:03:4a:
         f9:9a:da:5f:df:46:65:2e:88:cf:fd:d1:8b:b4:e0:f9:bd:6d:
         80:1c:83:8b:63:74:37:d9:bb:7f:82:d4:62:43:63:11:b0:ac:
         7d:e6:1a:e6:f6:39:a4:b9:1c:93:c4:4d:c3:16:4f:b0:56:78:
         f8:23:fe:8f:f5:f2:c3:8f:c7:7a:30:01:55:db:d6:93:66:52:
         88:1b:53:14:2a:86:fd:fa:18:b5:6a:79:b8:d0:a3:7c:e1:c6:
         30:f2:a3:9d:67:62:b6:9f:14:b5:f3:4d:cc:ae:eb:40:09:fd:
         62:1d:3f:1a:7f:55:0a:19:e4:ed:56:e4:83:a9:c7:5f:4c:54:
         93:5c:14:88:7d:d3:37:ec:47:84:c9:bc:6e:0d:81:27:0d:ea:
         25:38:58:b1:a6:53:0c:5a:24:a4:14:55:92:a4:c9:26:73:37:
         5c:07:99:f4:2f:87:cd:3c:1b:46:64:5d:48:f3:0f:c9:3d:48:
         d1:62:02:bb
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUNlzWWxgcv+b8Sp/LTqeNyvuQAkkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZThiYzk4NzYxNzRkOWE3Mzg1ZmNlOTM0M2UyYmI3ZDk4
ZjUyM2IxMTAeFw0yNTA4MDcwNjEwMjJaFw0yNTA4MDgwODE4MjJaMDMxMTAvBgNV
BAMTKEE4MTE5NURDQjZFMDMzODA4QkM3MDdEOEJDRTdCQzY3Q0IxRDVDREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxrcOAqzbPk/awj4vxz4uuQg3t
tQAIzWAOxYbXWiKyw0NIGVpoZ21j9H9B/TCDizp4+fpgK+B092MUygMYexplJrCr
oMFChn9/tJqgpY8KKA4juBxF1zC3NwnFdcd82SXeaQFVvxYqbo6EZKp+IFPel47l
qW2gKwtS4KSSMzC6TJXoyeKZmtcJkhIqSnb1SxHz/pen/2TxbIaTBblvarWdiKel
dwUWoFrFF31nrJyRspqY2gPb03gGr/oRkuZZt+nBATIJLbBwTnqSFnQN+949+yUn
ctuN0P1DWQ11CI4niq7ZqsXQ2aHSWEiwzQH1F+Pl5e7XDlunoq4VmvTXD0g/AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUqBGV3LbgM4CLxwfYvOe8Z8sdXN0wHwYDVR0j
BBgwFoAU6LyYdhdNmnOF/Ok0Piu32Y9SOxEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj
MTFiLzAvRThCQzk4NzYxNzREOUE3Mzg1RkNFOTM0M0UyQkI3RDk4RjUyM0IxMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZMeVlkaGRObW5PRl9PazBQaXUzMlk5
U094RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTQ3NmQ2Mi05
Y2ZhLTQ4NzEtYTJkOS1mYWRmNTc4MWMxMWIvMC9FOEJDOTg3NjE3NEQ5QTczODVG
Q0U5MzQzRTJCQjdEOThGNTIzQjExLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEm7jAqN6cTi/2CIae3dK
AwLzw+xAHEiWsG6BISz2O8eWSjGGnNMuE3HyvEvDr/9C/35T+lfZAKdj2TRwFWHD
jFLAbHWaQANK+ZraX99GZS6Iz/3Ri7Tg+b1tgByDi2N0N9m7f4LUYkNjEbCsfeYa
5vY5pLkck8RNwxZPsFZ4+CP+j/Xyw4/HejABVdvWk2ZSiBtTFCqG/foYtWp5uNCj
fOHGMPKjnWditp8UtfNNzK7rQAn9Yh0/Gn9VChnk7Vbkg6nHX0xUk1wUiH3TN+xH
hMm8bg2BJw3qJThYsaZTDFokpBRVkqTJJnM3XAeZ9C+HzTwbRmRdSPMPyT1I0WIC
uw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:16:52 2025 by rpki-client