Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
File:                     7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft (raw, json)
Hash identifier:          lyH7Ok8ExPfwnbwrYfo10OEj7GHe12ZPUqDcsK4SaIE=
Subject key identifier:   AD:A9:B2:C3:51:74:5A:B8:2E:8B:E0:60:3E:47:88:9D:AC:29:1B:CD
Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
Certificate issuer:       /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Certificate serial:       20F98CC970A87A87107A20371081B39C68CD28D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
Manifest number:          73
Signing time:             Sun 27 Apr 2025 07:34:59 +0000
Manifest this update:     Sun 27 Apr 2025 07:29:59 +0000
Manifest next update:     Mon 28 Apr 2025 07:45:59 +0000
Files and hashes:         1: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl (hash: CagqjBWCs68vxTXd5zRmwG+WIbjmVt7ly12JxvkqA6g=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f9:8c:c9:70:a8:7a:87:10:7a:20:37:10:81:b3:9c:68:cd:28:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
        Validity
            Not Before: Apr 27 07:29:59 2025 GMT
            Not After : Apr 28 07:45:59 2025 GMT
        Subject: CN=ADA9B2C351745AB82E8BE0603E47889DAC291BCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:36:25:2b:04:a4:ad:4f:c2:54:46:c6:98:c4:
                    0d:37:c7:17:ab:68:50:f6:42:23:f1:32:58:81:f1:
                    14:0a:65:93:74:1a:7b:79:49:76:3b:5d:c6:e7:32:
                    13:21:c7:06:90:14:2e:11:f6:f3:93:6c:a6:54:37:
                    d4:17:02:7b:ae:ae:e0:0e:87:e4:06:55:15:02:de:
                    e5:62:74:16:71:2a:68:d1:00:50:1d:09:61:28:f1:
                    01:6d:77:cf:30:6b:51:dd:29:35:cc:86:c8:43:47:
                    29:39:1e:a8:24:fc:e4:aa:12:83:7d:5d:c9:e8:d2:
                    37:4a:9e:d9:83:df:36:27:70:57:10:b3:6d:42:c2:
                    bf:04:11:8a:90:c3:8f:74:18:65:6a:d3:c9:5c:75:
                    d0:10:b4:e6:99:28:d0:49:a4:ce:b8:67:6f:e3:52:
                    5b:e5:8a:53:91:4d:68:5f:03:b0:8f:f3:73:9c:62:
                    8f:31:5f:4d:58:87:ea:f4:b4:fc:e6:62:40:21:09:
                    ab:9c:3f:68:db:80:68:74:49:cd:05:0d:bf:71:85:
                    7a:d2:f3:0e:f0:e2:bd:c2:0f:a3:7d:08:f6:bf:64:
                    17:81:81:85:21:f3:e8:42:ca:0d:84:0c:e7:00:9f:
                    a4:0e:80:24:3c:66:1e:ce:44:61:39:34:4a:c6:04:
                    93:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A9:B2:C3:51:74:5A:B8:2E:8B:E0:60:3E:47:88:9D:AC:29:1B:CD
            X509v3 Authority Key Identifier:
                keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e1:ad:06:9a:b9:63:b6:63:f6:9e:a7:78:73:f0:b2:f6:52:
         dd:31:af:48:a0:be:7e:7d:f1:85:b0:92:5d:a3:df:9f:25:7b:
         70:7b:5e:f3:32:71:1e:16:42:8f:e9:7e:61:7d:13:fd:a3:7c:
         99:0c:1e:d3:a4:98:fb:3e:94:27:91:91:a7:f3:64:fb:be:de:
         b2:19:fc:37:5d:b8:4d:49:5e:7a:a0:7f:3e:50:e4:e0:bc:11:
         5f:69:80:96:df:5e:30:88:cc:81:4d:d8:29:4f:e1:dd:d7:45:
         b1:33:9c:de:46:80:f3:31:70:8e:4f:58:37:ad:da:3a:04:8f:
         ac:0f:b8:90:ba:a6:27:e5:fa:32:1c:0c:8c:57:62:33:b6:9a:
         2f:12:cb:21:95:66:9d:d6:f3:cb:3a:f0:2d:52:2e:60:19:1a:
         64:40:a2:bc:c1:10:3a:e5:68:08:28:00:0a:2f:fb:83:f5:26:
         ad:a4:e1:9f:66:a1:ba:98:af:18:eb:c1:20:1c:32:18:25:56:
         0d:6d:d7:7b:a8:4a:de:55:40:ec:1e:bd:67:c1:1e:3b:0b:75:
         f0:ae:c2:2f:ff:da:44:39:1f:9b:f0:5c:bc:81:a7:93:95:da:
         5a:cb:c7:06:ed:7d:9e:e4:76:09:15:1f:d1:35:c5:cc:26:53:
         70:a6:4d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:49:42 2025 by rpki-client