Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft
File:                     D70A91D89E34C7A20009B1E160FB6C627063630C.mft (raw, json)
Hash identifier:          qkGCgkRlGNt5xnUMphAoM8KhAWb613mDIs01ARc0jls=
Subject key identifier:   0E:E3:61:3E:0C:C5:68:21:5B:17:D3:BC:6C:75:E8:30:0E:6C:99:0E
Authority key identifier: D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C
Certificate issuer:       /CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d
Certificate serial:       084FE3B6486D00A76A44474E7CB1C0FFAEB491CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft
Manifest number:          01DE
Signing time:             Sun 15 Jun 2025 18:45:05 +0000
Manifest this update:     Sun 15 Jun 2025 18:40:05 +0000
Manifest next update:     Mon 16 Jun 2025 21:38:05 +0000
Files and hashes:         1: 32332e3138332e3133362e302f32342d3234203d3e2030.roa (hash: swtuTdCu9qwtIFReZr0cVz+AYUZ4/a/i2nv3LPMJAJ8=)
                          2: 323630323a663838323a3a2f33362d3438203d3e20343031323138.roa (hash: Dizjuv2g3xNyGUDZ8X1oRA6GQacDJJP6dGAQzPkf04o=)
                          3: D70A91D89E34C7A20009B1E160FB6C627063630C.crl (hash: gMqfzeQrpVgoI8oVBGwY1Q7rqbPGsQ83aOjQjZhYjno=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:4f:e3:b6:48:6d:00:a7:6a:44:47:4e:7c:b1:c0:ff:ae:b4:91:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d
        Validity
            Not Before: Jun 15 18:40:05 2025 GMT
            Not After : Jun 16 21:38:05 2025 GMT
        Subject: CN=0EE3613E0CC568215B17D3BC6C75E8300E6C990E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:10:a8:00:a6:02:f6:07:3b:69:29:51:ca:0a:
                    3d:d3:8f:4b:25:1f:40:38:55:4f:3b:87:3c:b7:b1:
                    35:3f:b7:de:59:d9:78:e0:13:ad:b4:47:06:c2:8e:
                    42:e2:52:d3:44:ce:76:c5:b6:ff:ea:60:9f:c6:4a:
                    06:9a:81:bf:ce:f0:b9:29:f9:d8:1c:8e:03:5b:ad:
                    8d:1c:11:88:d7:ed:18:89:1f:42:05:40:00:53:aa:
                    39:4a:eb:96:86:6d:5a:11:95:c0:1f:ff:8e:c0:f2:
                    9a:91:6b:60:2e:a9:65:f8:11:cb:2f:40:7e:c0:09:
                    c4:b1:a2:1f:cf:06:aa:71:1f:cc:3a:fd:31:95:b8:
                    e4:0a:1b:93:cd:41:1a:7a:18:2f:ec:85:29:a8:4e:
                    99:20:25:99:cb:86:c5:f9:ab:1f:0f:9a:04:3e:79:
                    11:c6:82:9e:90:df:d7:4e:07:ac:68:67:75:aa:94:
                    7a:ac:47:8e:2d:06:cc:f5:73:27:ce:4f:23:cf:e4:
                    cb:f2:a1:2d:90:a3:6f:40:be:cd:49:48:48:3b:9a:
                    a3:c7:a8:2c:7a:d5:62:8b:89:18:43:09:71:34:5a:
                    75:a3:49:a5:7c:a7:44:32:79:c2:f2:f8:c8:8c:79:
                    71:14:b0:e3:ff:91:62:2b:ff:68:52:ff:f4:2f:6b:
                    d1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E3:61:3E:0C:C5:68:21:5B:17:D3:BC:6C:75:E8:30:0E:6C:99:0E
            X509v3 Authority Key Identifier:
                keyid:D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:9d:66:65:49:85:1e:aa:2f:3e:4e:5a:f3:b8:f5:45:ff:ee:
         4a:46:7b:e7:ba:0b:1a:f0:d5:83:19:0f:a3:68:44:a9:18:7b:
         db:62:c7:25:df:3b:ab:d0:5f:b4:63:0e:09:38:8e:d9:35:20:
         9d:db:96:ab:01:5d:73:b1:9c:ae:3c:1b:76:40:f9:e1:fc:08:
         d0:5e:35:c2:92:b1:21:8d:dc:2b:3f:37:95:53:f3:f0:62:cb:
         e9:89:d3:47:80:f6:0e:36:98:38:e5:41:3f:67:b9:e6:5b:8e:
         f7:9c:ce:b2:dd:6b:dd:23:f1:86:29:8e:cd:87:3c:af:ff:c8:
         62:01:dc:09:75:27:44:c4:43:75:6e:ce:65:46:8f:c4:d1:cd:
         da:49:02:ec:61:25:64:77:31:3f:ff:fe:37:9a:6b:0b:8c:85:
         23:5c:f3:40:a3:ad:c2:b0:77:68:ad:16:ef:b6:0a:83:8c:bc:
         6c:d7:46:90:73:3a:40:36:ce:64:f0:aa:93:08:e4:95:0c:09:
         ef:b3:aa:4a:e5:81:b2:ee:1c:d6:2f:05:0a:45:b0:36:b6:be:
         24:a1:95:2b:6a:f4:7b:b4:fd:b1:2b:1c:00:23:7e:f3:d9:16:
         59:1a:19:53:71:e7:4d:67:e4:5a:56:0b:9b:41:d7:36:e6:9b:
         5c:8f:9d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:11:12 2025 by rpki-client