Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
File:                     4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft (raw, json)
Hash identifier:          76RFxbBKoCvlF5VgXLbcR4h80zwcnjRLABxYeBE5HpY=
Subject key identifier:   E9:A5:55:32:AB:3A:4C:D9:97:D9:A2:CB:14:CA:52:A6:3D:B4:66:03
Authority key identifier: 4E:34:34:F1:3A:57:2B:F5:E1:89:F1:B7:FA:14:8F:5D:10:7F:6F:57
Certificate issuer:       /CN=4e3434f13a572bf5e189f1b7fa148f5d107f6f57
Certificate serial:       69207C3926A48D56A49EEB65B74A90F860B6B06F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
Manifest number:          7A
Signing time:             Sat 14 Jun 2025 08:37:19 +0000
Manifest this update:     Sat 14 Jun 2025 08:32:19 +0000
Manifest next update:     Sun 15 Jun 2025 08:47:19 +0000
Files and hashes:         1: 4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl (hash: l1WJFdAOxgZ2QWifFK9usNo8pl9pjA/alt0HvW1yMbg=)
                          2: AS215277.asa (hash: /NSm7byRzs0tpnovtHnCzzB6PpqZTxUH8EmHV77zmWY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:20:7c:39:26:a4:8d:56:a4:9e:eb:65:b7:4a:90:f8:60:b6:b0:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e3434f13a572bf5e189f1b7fa148f5d107f6f57
        Validity
            Not Before: Jun 14 08:32:19 2025 GMT
            Not After : Jun 15 08:47:19 2025 GMT
        Subject: CN=E9A55532AB3A4CD997D9A2CB14CA52A63DB46603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b7:b0:8e:b5:1e:8d:44:46:9f:18:29:0a:f5:
                    b6:d6:82:01:23:f0:81:e9:29:ab:91:5d:66:a9:26:
                    4f:22:53:87:30:02:a2:ab:9f:a4:0e:42:dc:74:81:
                    76:5e:8b:ed:3c:b3:02:aa:06:20:35:1b:ec:7e:90:
                    36:47:df:c0:f3:94:6f:1e:dd:13:2e:bc:d8:81:60:
                    e3:ee:2a:47:47:e8:52:aa:48:07:f3:22:d8:15:7d:
                    9c:9a:87:73:df:23:16:e6:ce:72:96:5b:6e:bc:5d:
                    b6:8c:ff:41:67:41:6b:63:50:5b:fc:dc:c0:59:49:
                    8a:74:2f:79:7a:8c:aa:68:40:43:bd:c9:57:3c:e4:
                    19:11:a2:c9:e6:3c:0a:c6:73:a5:42:f8:3f:fe:92:
                    23:78:e3:dd:32:f9:20:97:df:a6:c4:23:ea:83:43:
                    76:67:b2:c2:58:00:20:40:14:74:a5:af:20:8d:e6:
                    98:0d:0e:d1:0f:38:4c:e3:52:30:f6:5f:46:7d:61:
                    88:47:e8:86:fb:e7:fc:d6:db:0c:02:28:14:6c:86:
                    dc:5f:34:60:cb:77:9c:3d:d9:42:a7:66:dd:f6:52:
                    b9:1a:97:77:05:cc:e4:5b:e4:5b:fc:af:d8:9f:fc:
                    44:f2:eb:ab:0d:d6:c8:d8:1d:28:0b:65:b9:8a:59:
                    33:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A5:55:32:AB:3A:4C:D9:97:D9:A2:CB:14:CA:52:A6:3D:B4:66:03
            X509v3 Authority Key Identifier:
                keyid:4E:34:34:F1:3A:57:2B:F5:E1:89:F1:B7:FA:14:8F:5D:10:7F:6F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:20:87:c3:53:fd:94:11:94:80:da:e8:46:33:9b:d9:9a:e5:
         02:15:0c:19:35:4a:85:d5:51:26:6d:b6:4c:2e:7e:91:d0:a3:
         c0:cb:f2:4f:33:90:6d:94:fd:73:01:ea:3c:f3:4b:0c:e0:ef:
         74:d6:85:53:70:32:30:a4:be:3f:2c:73:2b:00:3a:b8:5d:d8:
         ed:bc:fe:63:fe:50:03:fa:67:06:ce:9e:50:3b:16:bd:39:2f:
         15:93:f7:10:35:29:af:ed:b4:0c:c6:17:7a:b2:35:c8:9e:85:
         b9:a9:fd:aa:87:f9:70:20:ef:7e:bf:06:c8:3b:e7:b6:71:fa:
         33:d0:7b:0a:3f:b2:45:d1:1b:16:8e:c5:ff:4f:b0:20:11:56:
         c5:38:3c:db:1f:e6:f9:56:cf:08:d9:47:8b:26:3d:29:2e:30:
         b0:f9:4d:1b:6b:10:25:9c:65:10:40:b5:87:52:12:d2:81:f8:
         62:0d:47:14:88:9c:e1:1e:2c:42:4d:25:ff:3b:d6:4b:5f:0c:
         86:9d:dc:d1:d4:9d:a0:02:32:19:d7:2d:ed:cb:1e:1b:18:e2:
         2d:c5:70:cc:03:45:19:d6:e1:20:ae:8a:26:94:14:f4:06:f7:
         fd:9f:7f:bc:e7:f2:82:d9:d4:92:cf:11:5b:01:b4:b3:31:4f:
         c8:f4:84:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:26:02 2025 by rpki-client