Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
File:                     3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json)
Hash identifier:          MOkdboqZY0IiVYYgY5eTeLurPOUtIglaIoDEXG4Edzk=
Subject key identifier:   9B:5B:B9:3E:5D:A9:2E:AE:1A:EF:86:69:F5:85:0D:41:0E:80:AA:ED
Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A
Certificate issuer:       /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b
Certificate serial:       583D10009F41A1C8BA54CBA545057208CFCD1AB6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
Manifest number:          013D
Signing time:             Sat 14 Jun 2025 22:53:06 +0000
Manifest this update:     Sat 14 Jun 2025 22:48:06 +0000
Manifest next update:     Mon 16 Jun 2025 00:24:06 +0000
Files and hashes:         1: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: dVW6ZUsxUgXCaz0kq7P1NzZswddC3cxPIFG0EovOzUk=)
                          2: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: WxVhmr57OUdhuE56i4svXhba82pXBlCim9Y+iaTZ6Vo=)
                          3: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: lO4v+9qZpYNTU13Fx5YYbE7NTGKX+3JJpxrHn0W/uvQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 00:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3d:10:00:9f:41:a1:c8:ba:54:cb:a5:45:05:72:08:cf:cd:1a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b
        Validity
            Not Before: Jun 14 22:48:06 2025 GMT
            Not After : Jun 16 00:24:06 2025 GMT
        Subject: CN=9B5BB93E5DA92EAE1AEF8669F5850D410E80AAED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:66:c7:d6:d9:f2:3d:2f:a5:83:fa:31:49:e6:
                    0e:dd:dc:80:ab:d2:4b:b3:3e:bc:75:5a:93:21:28:
                    03:f7:4b:e0:f6:45:77:49:29:cd:57:c1:b7:da:7f:
                    44:1b:30:24:bb:83:ca:4f:9f:2f:ce:71:b4:b0:cf:
                    40:3c:07:48:8b:d7:f8:d0:c5:55:fe:4d:7e:c1:0a:
                    8f:84:d1:96:3f:cd:12:cd:02:39:f7:c1:12:39:6a:
                    5a:fe:0d:e4:3c:37:ca:ad:34:d2:ce:6d:f2:11:f8:
                    a6:f2:dd:d2:2d:d7:30:98:5d:ab:ab:8e:b1:2c:c8:
                    90:f3:6e:a4:97:3a:91:aa:56:29:84:b7:ab:78:36:
                    6c:3a:2b:44:6b:3d:44:0b:80:3f:60:03:fb:cc:26:
                    57:42:70:54:55:6c:2d:e9:52:0e:01:2d:8d:88:62:
                    e3:9c:c5:50:c7:63:90:7e:9f:fa:1b:9b:97:35:b3:
                    5a:1b:9e:4f:2b:05:21:23:2c:ae:c6:3c:80:0a:a2:
                    46:9f:71:2f:4e:7d:19:c5:51:ac:81:cc:2d:ea:29:
                    dc:58:3e:cd:c4:03:7b:fe:7e:2d:04:e8:84:ef:7e:
                    39:2d:8a:67:e6:26:db:0a:38:26:5d:51:a9:5f:f7:
                    2f:fa:e1:30:d3:3a:55:bb:10:e1:6b:9c:7c:70:4a:
                    16:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5B:B9:3E:5D:A9:2E:AE:1A:EF:86:69:F5:85:0D:41:0E:80:AA:ED
            X509v3 Authority Key Identifier:
                keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:e6:1f:c3:8a:1d:1e:1e:28:5b:51:91:a9:f4:13:44:a6:22:
         90:1c:f0:56:81:cd:8a:ca:03:98:93:e8:cd:12:de:d1:33:4a:
         d3:ec:85:e3:6a:ab:43:c4:b0:e3:bf:14:74:a4:75:98:a6:af:
         d6:3e:7e:7f:45:9d:5c:39:3b:21:1b:83:86:79:2d:1a:73:b9:
         a2:ab:3c:22:de:3c:47:9b:b9:8c:4a:de:1a:40:c8:11:8a:35:
         44:67:77:f8:6f:1f:eb:c5:a6:0c:59:3a:51:df:b6:26:b8:d9:
         e1:70:49:89:5c:ca:e1:a7:c1:4c:74:3d:48:e8:a6:c1:8b:88:
         8f:e7:27:80:62:36:b4:26:a4:04:74:fa:f5:b2:61:4a:f6:8e:
         2a:9d:c4:f8:9c:c6:cc:f1:93:07:f6:e9:80:28:58:5c:7c:0b:
         53:67:e9:37:a8:4b:a5:e9:df:4a:3a:d2:53:c7:27:0c:6a:9c:
         03:2b:82:4d:5d:b7:60:0d:30:84:1f:48:2d:9a:f1:42:7e:b1:
         fd:ec:40:c1:dc:db:4a:65:3f:4e:c8:dd:c1:2e:67:d8:f1:03:
         02:6f:5c:e4:a1:11:37:2e:5a:15:2d:be:4a:a7:53:05:76:ba:
         eb:48:9f:a8:92:39:7d:43:25:49:54:fb:20:04:ce:a1:d0:48:
         62:6d:84:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:55:23 2025 by rpki-client