Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
File:                     8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft (raw, json)
Hash identifier:          b/Mle5yptTxavo+UGYGznSdsE7IHo/b/FKGYneiSs2Y=
Subject key identifier:   95:50:DC:AB:B6:75:75:14:15:D9:49:91:0B:B5:5F:70:21:06:DC:2E
Authority key identifier: 8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
Certificate issuer:       /CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Certificate serial:       1E2906D4965B4A0DC9636E60E820D2537A34B919
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
Manifest number:          31
Signing time:             Mon 28 Apr 2025 02:24:26 +0000
Manifest this update:     Mon 28 Apr 2025 02:19:26 +0000
Manifest next update:     Tue 29 Apr 2025 06:13:26 +0000
Files and hashes:         1: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl (hash: 2GOtd40HBSwkreeEqo5inJ2dZfES/C37HJVnNQIu9oc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:29:06:d4:96:5b:4a:0d:c9:63:6e:60:e8:20:d2:53:7a:34:b9:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fbab13db123c5d63dbbc550d214b3e10c091998
        Validity
            Not Before: Apr 28 02:19:26 2025 GMT
            Not After : Apr 29 06:13:26 2025 GMT
        Subject: CN=9550DCABB675751415D949910BB55F702106DC2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6f:83:9f:e7:22:8f:92:ff:2b:a9:d9:e3:a8:
                    c5:be:7f:b6:32:bb:e4:9f:e6:71:cf:f9:ce:8b:ea:
                    ea:e6:6a:d4:bf:37:98:7a:1f:91:15:a8:0d:b9:66:
                    d1:2a:ac:cb:ce:59:39:d6:50:65:47:55:36:08:c3:
                    68:0d:e5:5e:29:66:27:c8:67:2b:e2:38:5d:d2:d3:
                    e7:b3:3d:29:1c:da:64:a1:c4:ec:e2:8e:ef:4c:3a:
                    b6:c0:13:3e:5d:15:95:ba:cf:00:75:a9:f3:2a:c0:
                    95:5e:32:ad:06:94:4d:02:91:ae:6a:61:61:c8:3c:
                    e4:0e:89:ce:e4:05:f3:8f:24:72:28:f4:d9:83:15:
                    ae:9c:9c:5c:2c:c9:5c:c5:d3:9f:fd:46:1d:90:d6:
                    12:4e:01:e8:69:74:7b:06:c9:36:26:2a:1e:9a:ac:
                    82:04:39:f3:c0:09:91:7f:78:de:de:3b:0e:e6:08:
                    14:6d:31:3e:ef:df:1a:b5:56:8e:8e:d6:88:43:16:
                    6f:04:95:b2:08:32:1a:b8:09:48:9d:3f:07:13:35:
                    e4:7b:32:ff:7d:eb:58:b5:eb:7d:16:65:2d:53:5c:
                    9c:04:84:4d:2d:2f:cf:75:2a:3d:c2:6b:70:e9:b5:
                    b6:4d:4f:d4:44:e7:77:9b:dd:ce:5a:df:a2:88:32:
                    7a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:50:DC:AB:B6:75:75:14:15:D9:49:91:0B:B5:5F:70:21:06:DC:2E
            X509v3 Authority Key Identifier:
                keyid:8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:1f:2d:59:75:70:4c:ef:8f:03:4c:1a:e4:2b:2f:40:a2:40:
         87:43:7a:97:4e:fc:76:02:f5:0a:a3:cb:b8:6d:20:18:d0:8e:
         28:11:23:6a:62:d3:d7:ea:97:5a:dc:50:63:16:c2:11:93:cd:
         5a:27:e8:63:a2:f5:d1:95:9a:67:8f:28:33:20:e9:b6:4c:1c:
         e6:4a:32:d7:30:01:8f:ca:bb:b2:30:1a:82:81:4b:bb:0b:d9:
         8b:0e:8e:69:88:44:d3:33:1f:b5:df:82:ae:b0:be:3e:6f:da:
         d3:92:62:b5:1d:10:27:66:90:79:1c:2b:e4:be:e4:03:27:20:
         f0:a8:71:61:bc:da:e2:5e:d4:a7:82:23:ed:ca:59:7b:bc:06:
         e1:a5:c8:b9:fb:b9:cd:e9:21:1f:2c:d8:63:77:f0:d4:5f:fb:
         d2:60:fc:6c:6d:81:c3:b7:a1:22:2c:61:1c:c2:e1:c8:f3:2b:
         2a:8e:7e:48:d0:f6:29:02:dd:39:b3:f5:72:3f:c9:d7:22:bb:
         5b:94:b7:68:60:65:b2:7a:c8:b5:2a:a1:db:d3:ae:14:3b:81:
         d4:b1:6e:b8:e7:d6:c9:25:77:d0:fa:92:74:d1:9e:b9:a1:a7:
         cc:e1:a5:8a:29:25:30:ac:b9:cf:2e:f7:71:bd:c7:30:c1:d4:
         e5:bd:f9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:23:18 2025 by rpki-client