Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
File:                     6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft (raw, json)
Hash identifier:          Lgnr/23E2HwkXT2g7Kk04HO//g40vR5B4PQEKWUBonw=
Subject key identifier:   9C:F1:1A:29:14:A1:26:80:12:CE:0F:6C:72:7B:CA:52:84:6B:18:8A
Authority key identifier: 64:64:04:5D:A5:BE:D0:68:7D:15:CB:DA:67:A0:4E:B8:7A:8F:B0:3E
Certificate issuer:       /CN=6464045da5bed0687d15cbda67a04eb87a8fb03e
Certificate serial:       6C6C9DC49BC34EDC4765D94E883533F41C64FD2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
Manifest number:          0262
Signing time:             Sun 27 Apr 2025 07:24:59 +0000
Manifest this update:     Sun 27 Apr 2025 07:19:59 +0000
Manifest next update:     Mon 28 Apr 2025 10:23:59 +0000
Files and hashes:         1: 6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl (hash: jgIoPS4xDGJTLpRIujAQgD4QCSgUMb0uy3DD5wbL4RA=)
                          2: 3138352e33312e3230322e302f32342d3234203d3e2037303138.roa (hash: iL7YLdjFSsy+StKeV2OynMplvfVvVqa5nzn9JGMln1g=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6c:9d:c4:9b:c3:4e:dc:47:65:d9:4e:88:35:33:f4:1c:64:fd:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6464045da5bed0687d15cbda67a04eb87a8fb03e
        Validity
            Not Before: Apr 27 07:19:59 2025 GMT
            Not After : Apr 28 10:23:59 2025 GMT
        Subject: CN=9CF11A2914A1268012CE0F6C727BCA52846B188A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:74:73:68:39:f5:b5:cb:92:1d:c6:38:cc:f1:
                    2a:8a:6f:5c:c6:e4:70:c0:de:73:01:cd:9d:68:0b:
                    82:31:c9:58:f5:30:4b:81:75:0f:8c:c0:b8:e5:e3:
                    d6:c8:05:09:4f:a8:7b:25:83:88:75:2d:03:d6:8a:
                    9f:45:45:4e:c0:6a:0e:65:15:25:73:ca:64:81:c2:
                    1b:07:ee:35:91:1d:93:7a:05:09:2a:b0:e8:7d:98:
                    b1:24:ba:df:5e:03:b1:e8:78:81:72:ef:38:2d:8e:
                    94:96:9b:85:db:be:36:96:5d:34:64:15:f4:c6:87:
                    6d:8d:f9:d8:55:be:af:3e:02:fc:73:50:d2:1b:3f:
                    12:7b:c7:92:4d:52:e2:dc:84:f4:65:cb:42:51:58:
                    96:1f:8d:2d:88:9c:ca:69:6e:fb:d9:7d:c9:ed:4b:
                    d9:85:c4:d0:13:c7:31:23:72:63:b0:bd:85:09:89:
                    f6:ba:d2:11:cf:40:ce:1f:3a:23:3a:d1:ba:90:b3:
                    c4:bc:aa:8d:ba:4b:ea:6c:a5:77:94:3b:e2:81:d6:
                    e8:a9:20:85:65:a1:67:f4:39:d6:be:49:58:5e:2e:
                    50:b4:2d:1a:58:20:b9:36:cf:18:44:4b:cf:b7:9c:
                    9b:6d:97:99:a7:3d:f5:a8:91:61:67:dd:1b:bb:22:
                    58:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F1:1A:29:14:A1:26:80:12:CE:0F:6C:72:7B:CA:52:84:6B:18:8A
            X509v3 Authority Key Identifier:
                keyid:64:64:04:5D:A5:BE:D0:68:7D:15:CB:DA:67:A0:4E:B8:7A:8F:B0:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:03:ba:e0:2b:95:a7:36:89:11:63:8f:56:2a:1a:9a:b3:eb:
         b1:76:44:ae:11:50:48:97:bf:a2:ce:99:dc:c8:65:74:e5:f6:
         ec:33:d9:db:cd:05:fa:42:97:74:e3:0a:f9:27:44:9e:e4:66:
         87:3c:ad:01:63:21:eb:cf:c0:5c:42:fd:05:f4:85:e6:81:63:
         eb:2f:a2:9f:f0:fa:4c:73:26:50:6b:12:2e:cb:f3:bd:43:dd:
         ef:72:c5:d6:85:29:7b:78:4a:dc:87:37:75:d3:e5:69:6c:16:
         c3:db:78:14:e0:b9:33:85:35:5e:cf:71:e5:7a:58:a8:a9:50:
         b8:94:02:78:db:cc:bb:00:95:4b:4a:69:4d:79:5e:46:1f:db:
         d0:c4:28:d6:77:38:81:4e:34:cd:a8:15:e0:d2:84:d9:2a:dc:
         47:48:44:ad:3c:28:2d:d4:0b:04:f9:b9:98:89:f8:03:2d:30:
         52:29:c2:c3:9e:1f:db:90:da:56:6b:9b:92:4e:b8:18:a0:85:
         3d:e0:32:fe:c7:f5:a0:c4:ef:74:68:df:b0:c4:12:b3:cc:e2:
         28:0c:44:e6:5c:d7:00:2f:63:a4:3b:e3:d1:61:5d:4b:7d:1b:
         db:ac:a0:09:ea:ac:a9:cd:98:f2:56:3d:28:2d:bb:b2:55:65:
         a4:8e:91:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:52:07 2025 by rpki-client