Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
File:                     05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft (raw, json)
Hash identifier:          Fg1O1wPIRcdOne1SA4BnETHhxfTEySYBE6W5KCIKQWM=
Subject key identifier:   3D:ED:04:D4:DB:C8:79:86:C7:D0:CE:EA:D6:1E:0F:C4:2B:2B:69:C9
Authority key identifier: 05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD
Certificate issuer:       /CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
Certificate serial:       5E909943FC3DD653F141C5D8D35925A78768B65A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
Manifest number:          03D4
Signing time:             Fri 13 Jun 2025 11:32:48 +0000
Manifest this update:     Fri 13 Jun 2025 11:27:48 +0000
Manifest next update:     Sat 14 Jun 2025 13:06:48 +0000
Files and hashes:         1: 05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl (hash: ZomNOUCEVxKG2TIgnGo3CFgNL5fxtWMsNbhWeIsYTe0=)
                          2: 38342e33382e3235342e302f32342d3234203d3e203634323637.roa (hash: 9kep0y5iWWXIJpO3TiiRho2v0RZ/t5nwkbbRFjNIkHc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:90:99:43:fc:3d:d6:53:f1:41:c5:d8:d3:59:25:a7:87:68:b6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
        Validity
            Not Before: Jun 13 11:27:48 2025 GMT
            Not After : Jun 14 13:06:48 2025 GMT
        Subject: CN=3DED04D4DBC87986C7D0CEEAD61E0FC42B2B69C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f8:bc:74:04:d5:66:7b:4c:6f:a6:42:68:c7:
                    21:4b:b9:b5:cf:f9:18:9b:6d:6a:5d:5c:e5:ba:11:
                    75:9a:f4:f2:5d:e8:71:2f:f8:06:74:27:a3:d4:73:
                    26:b8:40:ba:b3:e2:88:7f:cf:01:e5:b0:5c:49:f5:
                    8e:bd:eb:a8:b3:fd:a5:b7:9e:e3:6f:0c:05:6f:3d:
                    aa:f2:82:7f:c6:8c:24:d2:1f:83:31:06:c8:68:9c:
                    58:b7:5e:22:35:ef:9c:43:97:d3:11:3b:cf:31:2d:
                    9a:8b:7d:48:58:8e:79:26:4d:3b:6a:6a:2e:71:87:
                    fc:18:85:ab:96:82:5d:1e:3a:f3:af:8f:3d:5d:dd:
                    8a:f9:e4:f4:12:22:e7:7b:ed:a6:63:8e:98:bc:c0:
                    aa:d0:a7:eb:6c:ce:a6:a9:d9:00:0b:47:19:83:32:
                    00:fb:78:dd:0f:73:30:42:67:10:3b:27:00:c1:e2:
                    d3:71:4e:16:67:30:90:05:d1:f9:69:98:4d:30:25:
                    ed:0f:65:c1:e1:e9:cd:c0:0a:e2:b0:6d:27:a0:b9:
                    66:9b:90:e4:36:39:ac:c8:5e:c7:c4:b6:dc:51:a1:
                    f8:6f:a1:dd:98:e1:25:14:2d:a6:ac:7f:49:82:af:
                    b7:73:4b:eb:15:e1:6a:0d:ee:a2:aa:c4:a7:8e:79:
                    47:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:ED:04:D4:DB:C8:79:86:C7:D0:CE:EA:D6:1E:0F:C4:2B:2B:69:C9
            X509v3 Authority Key Identifier:
                keyid:05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:78:56:5e:f5:47:82:36:20:59:3e:c7:c9:0e:84:ca:04:7b:
         0c:4a:62:f4:4e:63:2b:43:76:ff:f2:3c:02:17:5b:c6:17:e9:
         4b:26:f4:d2:1d:a1:77:64:b9:cb:d4:6d:35:b4:03:2a:f5:b6:
         29:3e:75:73:a6:c0:14:d2:19:fc:7d:08:4a:e6:dd:c5:57:49:
         76:f9:47:eb:e3:b4:6c:a3:a2:32:9a:7c:a7:9a:78:58:79:79:
         6e:1d:46:d8:28:25:c7:7a:07:ba:84:fb:7e:34:46:c8:53:04:
         77:c4:73:cb:d8:04:4b:b9:14:d5:b7:0e:72:de:e2:66:83:48:
         76:ff:17:62:d9:d5:ab:79:1f:4a:33:59:68:4a:81:b4:2d:4c:
         fc:5c:cc:10:e4:fb:8b:cf:b5:3e:c2:e9:94:26:69:76:48:86:
         45:3f:a7:7d:0f:e4:2c:f8:44:81:a9:b2:22:73:fd:b7:6b:03:
         ae:65:be:70:5b:ee:7c:ec:3d:8a:00:21:ec:ed:af:54:f4:4b:
         bb:57:bd:3e:35:dd:b5:4d:f6:8e:0f:c3:28:6b:15:1a:75:1b:
         15:39:4b:4e:d3:61:bf:c0:f8:8c:c2:ab:5c:a5:2e:7c:1e:84:
         44:06:be:ab:ac:6f:ea:eb:77:a3:3d:bf:24:de:bd:8d:51:80:
         f3:88:52:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:26 2025 by rpki-client