Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft
File:                     B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft (raw, json)
Hash identifier:          hqbZ9gf1wABVGCLBcSgsl3bXgGjfuQU/L0xn/nkS58A=
Subject key identifier:   D6:1D:0D:40:CC:A2:E8:93:7D:84:56:7F:FF:D3:02:D4:E2:B2:EA:E1
Authority key identifier: B1:D3:04:9A:B9:0B:73:31:4F:2A:DF:CA:D6:39:33:6D:93:20:B3:5E
Certificate issuer:       /CN=b1d3049ab90b73314f2adfcad639336d9320b35e
Certificate serial:       19C8E4C3C7900BC1672F619751C675C6A82D4FB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sdMEmrkLczFPKt_K1jkzbZMgs14.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft
Manifest number:          CC
Signing time:             Sat 14 Jun 2025 15:47:38 +0000
Manifest this update:     Sat 14 Jun 2025 15:42:38 +0000
Manifest next update:     Sun 15 Jun 2025 18:14:38 +0000
Files and hashes:         1: B1D3049AB90B73314F2ADFCAD639336D9320B35E.crl (hash: TVnlUca1kRCc+pt+Lb6AWF4BriMe1rXoKeTpqaZbU7I=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sdMEmrkLczFPKt_K1jkzbZMgs14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c8:e4:c3:c7:90:0b:c1:67:2f:61:97:51:c6:75:c6:a8:2d:4f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d3049ab90b73314f2adfcad639336d9320b35e
        Validity
            Not Before: Jun 14 15:42:38 2025 GMT
            Not After : Jun 15 18:14:38 2025 GMT
        Subject: CN=D61D0D40CCA2E8937D84567FFFD302D4E2B2EAE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:54:d8:46:f2:4b:85:62:c0:06:f6:e0:37:52:
                    62:e4:01:b0:0b:a1:e8:08:29:88:c2:c6:31:51:c9:
                    9a:7a:79:05:c8:53:2d:bc:ea:68:8d:e1:5d:be:9a:
                    c3:65:e7:c3:67:a8:46:e5:32:d8:e2:ac:65:02:d3:
                    6d:0a:92:c7:e1:10:36:45:e8:53:1c:12:76:c6:9f:
                    c0:e2:cd:cb:fb:98:24:17:64:9a:d6:bb:c4:40:32:
                    cc:74:b6:7b:17:aa:11:a9:f3:22:d7:bf:b6:ff:e4:
                    d2:df:e5:f4:3c:c9:80:25:e7:ee:a2:85:1d:52:e3:
                    56:26:56:3b:cc:19:71:be:34:eb:72:d8:c2:95:d0:
                    c0:f1:18:a9:16:64:61:dc:cf:02:8a:b1:44:9d:46:
                    9c:e0:40:87:e7:a0:c9:56:a5:72:a2:d6:58:b3:7c:
                    2f:13:88:74:58:b8:8f:9e:ee:5b:69:26:1e:5b:68:
                    6d:a0:07:33:c7:4a:2a:32:28:93:07:35:45:a3:d8:
                    d1:62:c9:de:53:1f:0b:2f:a9:fc:02:0e:cf:84:22:
                    e8:2c:67:58:12:66:3d:7b:86:09:78:1b:3d:fe:a5:
                    2a:dc:ed:31:8a:3c:c7:77:37:df:94:9f:7d:81:2c:
                    69:31:ba:61:bc:32:d9:da:03:d3:b2:a1:89:de:0c:
                    a9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:1D:0D:40:CC:A2:E8:93:7D:84:56:7F:FF:D3:02:D4:E2:B2:EA:E1
            X509v3 Authority Key Identifier:
                keyid:B1:D3:04:9A:B9:0B:73:31:4F:2A:DF:CA:D6:39:33:6D:93:20:B3:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdMEmrkLczFPKt_K1jkzbZMgs14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:38:29:f3:94:11:c3:9e:04:57:89:f8:08:99:1f:d3:2c:e4:
         b1:20:c4:04:2a:a3:41:0f:40:52:e3:fd:c4:f9:9e:87:6b:61:
         fb:72:f1:df:38:6d:3c:fe:e3:7b:fc:8f:1b:fc:10:68:15:ce:
         0a:08:14:6a:9f:36:aa:ac:ba:8f:5a:b5:ae:b5:66:68:ae:ae:
         d9:55:82:f6:40:8e:a3:be:05:e6:10:e1:f4:72:14:89:ce:58:
         01:c6:0e:a7:af:cc:84:a1:9a:5e:95:39:99:2e:4c:3c:cb:74:
         ac:13:a8:07:99:0d:f8:7a:83:56:5a:42:6c:8d:b3:22:43:0c:
         35:8f:c1:12:2c:ac:da:73:31:8e:1a:34:d0:9c:58:1c:92:08:
         72:00:e6:bb:89:7d:ac:60:41:04:0c:a4:3a:d7:6b:0f:97:dd:
         ad:23:b6:14:32:3b:26:c6:b6:a6:13:23:da:b6:7d:2d:e9:0f:
         dc:2d:d2:75:f7:37:db:8d:f3:08:8e:4c:0c:f6:3f:c7:35:d0:
         33:fc:fe:39:79:0a:33:73:f8:a1:d3:b5:bd:17:12:d4:6a:9a:
         5f:72:40:da:7e:a5:b7:9c:1d:02:a4:25:d3:8f:d0:fa:af:95:
         37:00:7c:f6:be:35:46:8d:8a:32:1d:31:41:c2:c7:9e:8f:8e:
         82:a3:10:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:19:09 2025 by rpki-client