Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft
File:                     94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft (raw, json)
Hash identifier:          T1ji3+TCGEgUgKdJuZJXzEFzcd1BFABXZcyl+9iyxrA=
Subject key identifier:   42:10:D5:93:A9:B0:23:A7:C0:BA:AE:AC:D4:E3:7A:E5:E4:E2:BC:EA
Authority key identifier: 94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5
Certificate issuer:       /CN=A91443440000/serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5
Certificate serial:       51C8CCB465E8D06915938BBCD4B9080D1B14EB49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft
Manifest number:          01A3
Signing time:             Mon 04 Aug 2025 09:02:58 +0000
Manifest this update:     Mon 04 Aug 2025 08:57:58 +0000
Manifest next update:     Tue 05 Aug 2025 11:45:58 +0000
Files and hashes:         1: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl (hash: OWv20caYu5sNqfisGa0xPfD8aePOg6zEkNkvjkBV4Q4=)
                          2: 323030313a6466343a316463303a3a2f34382d3438203d3e20313533313736.roa (hash: kx3ayya4lPrQllp+nogQF65nwTl1whhZEUlAaHtTvAM=)
                          3: AS153176.asa (hash: nTAPGafaR0TwBdv5jCAijmg7tuOn6F8lJBqMjy7Nxfk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 05 Aug 2025 11:45:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c8:cc:b4:65:e8:d0:69:15:93:8b:bc:d4:b9:08:0d:1b:14:eb:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91443440000, serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5
        Validity
            Not Before: Aug  4 08:57:58 2025 GMT
            Not After : Aug  5 11:45:58 2025 GMT
        Subject: CN=4210D593A9B023A7C0BAAEACD4E37AE5E4E2BCEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:91:f9:bb:cd:0b:11:b7:72:82:7a:17:90:bc:
                    f6:ff:21:33:14:b7:f0:49:98:db:d7:e1:e1:03:e7:
                    98:52:6e:f8:14:91:d7:3a:6e:b2:0b:03:d3:c5:bd:
                    31:6c:ab:8e:3c:f8:2e:3d:ad:60:8e:d5:a0:59:e8:
                    67:2f:b9:e1:df:49:f5:9e:75:84:bd:6e:65:16:7a:
                    69:cc:de:82:73:0a:60:16:ef:23:28:ea:30:fb:85:
                    3d:7b:24:d3:d2:b1:51:49:c1:90:0e:98:8f:4f:62:
                    fd:74:a5:e0:2f:37:70:94:ec:1b:61:6e:b2:05:e2:
                    b7:b9:f1:18:c4:0b:3a:5c:a2:a6:01:8f:43:f5:ce:
                    69:ed:79:51:7a:b6:5f:6d:c1:40:4d:c8:6c:45:03:
                    9e:20:a7:c4:f2:ab:8a:61:d7:a7:4c:3b:f3:0c:20:
                    94:53:85:00:2c:02:a9:7b:7c:b3:b5:dd:70:94:77:
                    cd:f6:99:e9:0c:95:cd:72:d5:03:02:b5:a0:0d:dc:
                    98:33:8f:c3:a2:33:cd:5f:9c:f0:5a:19:11:11:a1:
                    d8:49:20:8f:e1:9a:c6:b9:aa:b5:44:9a:76:54:cb:
                    cd:f5:0a:5e:3d:b3:6c:7d:28:83:47:de:62:6b:70:
                    c3:5d:72:2a:d9:f1:b1:4f:a4:84:16:93:af:b6:17:
                    b7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:10:D5:93:A9:B0:23:A7:C0:BA:AE:AC:D4:E3:7A:E5:E4:E2:BC:EA
            X509v3 Authority Key Identifier:
                keyid:94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:6c:8e:20:4e:39:da:c5:f4:88:d8:b3:95:cd:d6:78:66:e0:
         96:12:5e:af:b8:97:97:b7:08:39:0e:05:71:fa:fe:01:c5:89:
         cc:1e:49:eb:d1:b4:6d:be:c7:c0:0c:24:fd:69:7f:98:f2:21:
         be:47:a7:d7:91:3b:91:07:66:cc:ae:dd:7e:2d:e0:99:58:e9:
         46:d6:ca:d4:ae:94:f1:be:a3:6f:1e:e3:4b:23:31:e0:05:57:
         f2:20:10:01:00:0c:51:b1:a2:fd:e9:d3:11:68:24:92:95:77:
         5b:dd:2f:75:0c:79:f4:c9:ef:57:b3:8a:b5:7c:ac:51:ef:8e:
         72:62:d8:20:c8:c8:d3:da:8f:83:c6:0a:6f:d4:3d:e3:25:7d:
         af:96:b2:71:9d:4c:6c:ea:d4:58:bf:bc:4b:60:27:7f:d0:f4:
         08:ee:db:8f:4d:56:1e:0e:51:5e:67:cd:9d:e7:7a:99:e0:16:
         32:7c:92:d9:c0:1a:e5:04:4a:8e:c7:0b:f2:f4:73:de:cb:07:
         6b:6e:24:66:92:a7:93:dd:21:87:16:fa:ca:b6:86:a0:4a:91:
         59:a0:16:42:91:7b:3d:6e:39:a9:a0:e3:a6:2f:c5:a6:28:7f:
         b2:8c:09:86:ae:0e:f5:af:94:d6:0c:84:79:be:42:89:6d:13:
         dc:3d:cb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:35 2025 by rpki-client