Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
File:                     4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft (raw, json)
Hash identifier:          hRFkrduMh97sDeLMt33hcduRWaxg64MpvaBLzZ5wjIg=
Subject key identifier:   90:FA:CC:E6:6A:84:79:19:B9:DE:81:2D:D7:39:16:EE:86:8E:19:05
Authority key identifier: 4E:34:34:F1:3A:57:2B:F5:E1:89:F1:B7:FA:14:8F:5D:10:7F:6F:57
Certificate issuer:       /CN=4e3434f13a572bf5e189f1b7fa148f5d107f6f57
Certificate serial:       19722A77E44D1FA400B194D2D0494ADD618C31DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
Manifest number:          BE
Signing time:             Sun 03 Aug 2025 15:33:29 +0000
Manifest this update:     Sun 03 Aug 2025 15:28:29 +0000
Manifest next update:     Mon 04 Aug 2025 18:02:29 +0000
Files and hashes:         1: 4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl (hash: Y+pN2Eom54yEHQxXj2gCtK7pxvncEJvqFLQRIExrTpM=)
                          2: AS215277.asa (hash: /NSm7byRzs0tpnovtHnCzzB6PpqZTxUH8EmHV77zmWY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Aug 2025 18:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:72:2a:77:e4:4d:1f:a4:00:b1:94:d2:d0:49:4a:dd:61:8c:31:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e3434f13a572bf5e189f1b7fa148f5d107f6f57
        Validity
            Not Before: Aug  3 15:28:29 2025 GMT
            Not After : Aug  4 18:02:29 2025 GMT
        Subject: CN=90FACCE66A847919B9DE812DD73916EE868E1905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:81:0e:6c:a6:cb:db:62:7c:4b:19:e3:30:35:
                    55:a4:de:95:c4:37:10:74:80:1a:e9:76:76:7e:d4:
                    9f:2a:11:c4:68:e3:9f:16:db:e0:e4:f0:88:b9:96:
                    82:5d:5d:de:58:40:78:3c:c8:27:bd:ae:9a:0d:67:
                    ee:e9:4a:41:20:d4:7c:2a:2a:9a:54:78:c2:ee:de:
                    5d:69:5a:8d:38:7d:01:db:0e:0e:e4:ae:c1:4a:22:
                    e6:1c:0e:51:ec:a9:1b:0e:57:0e:7d:c0:d2:a8:6e:
                    0a:21:17:df:e0:02:d5:25:ce:de:6d:40:20:7d:bc:
                    c5:29:5c:c8:92:cc:03:ca:06:90:f6:cf:45:62:7c:
                    a9:8c:96:eb:9d:a6:36:4c:46:fe:65:b9:2f:6d:ba:
                    4e:be:d7:9b:97:9d:15:a0:2c:1b:87:2c:c3:80:75:
                    2f:31:8a:c3:b1:47:52:a3:16:a1:ad:19:1d:59:be:
                    9b:71:23:7c:44:9c:e1:32:9b:12:be:1b:77:54:67:
                    6b:67:4f:15:a7:6e:6e:0b:3f:bd:5d:e6:80:1a:f0:
                    ff:4c:34:79:82:28:42:40:36:a9:2e:56:5b:52:bf:
                    04:02:d2:cc:93:5c:18:ba:d1:30:c1:19:98:9f:48:
                    ba:f4:f9:a8:c7:cd:86:36:69:e9:e5:04:6b:b5:c7:
                    c5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FA:CC:E6:6A:84:79:19:B9:DE:81:2D:D7:39:16:EE:86:8E:19:05
            X509v3 Authority Key Identifier:
                keyid:4E:34:34:F1:3A:57:2B:F5:E1:89:F1:B7:FA:14:8F:5D:10:7F:6F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d1:3c:8e:f9:33:d1:b7:e7:30:9c:3d:cd:cf:f4:15:f8:47:
         a1:d7:68:f1:56:65:58:b3:61:76:87:05:38:77:78:88:e4:bd:
         d0:65:05:08:e5:8e:ed:c0:d7:49:ab:17:e8:05:22:f6:11:27:
         a4:63:ec:c6:e8:37:b7:51:f0:41:fe:c7:5d:47:7c:e0:8b:75:
         7c:34:23:d3:d2:85:da:43:5c:b3:49:5e:ea:90:86:64:60:70:
         6d:84:7a:3c:87:0f:ed:6d:69:cf:30:6d:01:e4:73:89:dd:a4:
         fb:54:8e:77:ca:77:4b:f0:2e:21:55:1b:6c:e0:70:6f:da:7c:
         fc:70:9d:52:b3:e0:77:aa:d1:8b:f4:7b:ea:ff:4a:2b:ac:b7:
         e3:2a:98:10:d0:6c:7b:54:22:84:9a:c8:41:67:16:6c:d5:d3:
         9c:62:91:04:3d:cb:d9:8a:d8:68:97:19:1c:40:dd:88:80:cd:
         0f:b7:36:d3:26:3b:28:97:4d:fa:c8:30:66:1d:02:9d:69:08:
         3f:29:99:26:3d:56:32:b2:36:16:16:ea:c1:17:ed:e6:bb:e0:
         cd:bd:2f:59:df:f8:ea:ee:0d:1c:69:15:65:1b:23:76:c4:f6:
         aa:4a:72:00:4d:db:b3:06:c5:e3:01:fe:ec:18:54:e6:28:6d:
         4a:d6:7c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:05 2025 by rpki-client