Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
File:                     4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft (raw, json)
Hash identifier:          Y6z/l0dcj4RH5EBtUkcGLVF1B7dQLXWUs0xayF49Wr4=
Subject key identifier:   C5:C8:BD:AE:DC:8F:6E:4C:CC:02:73:F0:AF:8A:34:CF:34:F1:92:6B
Authority key identifier: 4C:6E:A5:A3:C5:3B:EF:2E:65:17:0C:03:7C:44:51:CF:A7:8E:F4:58
Certificate issuer:       /CN=4c6ea5a3c53bef2e65170c037c4451cfa78ef458
Certificate serial:       53D68BC9414F6F707737647E2A47DB587B76873A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TG6lo8U77y5lFwwDfERRz6eO9Fg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
Manifest number:          4A
Signing time:             Sun 27 Apr 2025 08:56:22 +0000
Manifest this update:     Sun 27 Apr 2025 08:51:22 +0000
Manifest next update:     Mon 28 Apr 2025 09:38:22 +0000
Files and hashes:         1: 4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.crl (hash: rdJrB9hHNgTHl0pESNtrtrSr7l0BZ9wNK2hzqfj6Ruo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TG6lo8U77y5lFwwDfERRz6eO9Fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 09:38:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d6:8b:c9:41:4f:6f:70:77:37:64:7e:2a:47:db:58:7b:76:87:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c6ea5a3c53bef2e65170c037c4451cfa78ef458
        Validity
            Not Before: Apr 27 08:51:22 2025 GMT
            Not After : Apr 28 09:38:22 2025 GMT
        Subject: CN=C5C8BDAEDC8F6E4CCC0273F0AF8A34CF34F1926B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a6:b8:52:fb:09:9e:04:5e:e6:77:92:00:e6:
                    2d:66:1e:58:2c:57:08:a9:33:a9:42:7d:de:13:f5:
                    03:46:81:cb:22:cc:67:0e:01:7d:1c:47:44:22:c9:
                    b0:b9:3a:0c:ae:e8:00:4c:90:22:30:99:b0:ba:24:
                    43:6f:cd:41:3c:c7:e8:bf:de:ea:b9:fc:fe:69:36:
                    55:cd:2b:4e:1e:a1:88:31:2b:44:ee:99:a9:f8:e5:
                    d9:9c:4b:aa:65:93:61:76:57:61:fb:f0:9b:e4:35:
                    a2:7a:8b:7f:a9:e6:16:c8:82:56:3d:bd:53:f5:23:
                    4b:89:27:59:41:9d:f0:df:21:60:07:c5:28:6c:4f:
                    30:aa:b1:60:3e:32:36:4c:9b:d2:dc:4b:2d:36:61:
                    76:6f:f2:b6:56:12:36:17:06:7a:f1:34:44:e7:22:
                    e7:7c:b7:a5:f8:ba:d1:91:f5:d6:27:c9:e1:e7:fb:
                    93:36:5e:cb:74:fa:cb:0a:1a:18:61:f9:96:02:a7:
                    53:1b:c5:92:6d:58:8e:94:36:b3:35:7c:0a:66:f3:
                    8a:45:47:83:a9:45:f8:25:cf:a5:82:35:da:56:3b:
                    5f:be:c1:3f:fe:f4:bf:45:7b:a2:ab:eb:79:ce:89:
                    5a:ea:37:d5:b5:1a:c5:81:0c:f1:ca:f1:d8:ce:09:
                    83:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C8:BD:AE:DC:8F:6E:4C:CC:02:73:F0:AF:8A:34:CF:34:F1:92:6B
            X509v3 Authority Key Identifier:
                keyid:4C:6E:A5:A3:C5:3B:EF:2E:65:17:0C:03:7C:44:51:CF:A7:8E:F4:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TG6lo8U77y5lFwwDfERRz6eO9Fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ee:6f:7b:95:f7:2a:38:a4:bd:28:ba:6b:5a:5e:8f:d7:80:
         a0:6d:8c:cd:01:d3:c5:14:a8:e6:07:0a:42:f7:c2:20:1c:99:
         7f:67:a0:6b:43:05:76:30:61:4e:a2:5a:27:83:75:19:b2:26:
         50:3d:ec:94:a2:ff:20:d2:5e:f8:db:70:6e:9e:a3:6f:40:d6:
         08:43:6a:d5:d2:c8:2d:2f:d3:69:57:df:1b:34:52:e4:93:c4:
         20:cc:a8:57:6b:38:a3:bf:87:44:c5:ae:c2:51:33:f3:70:eb:
         d4:96:f2:7f:e8:e5:56:00:f8:3f:0c:d8:d8:de:c6:5d:a2:c4:
         9a:61:dc:53:53:af:b5:d5:40:89:e6:db:d8:fb:52:dd:45:69:
         e4:cd:32:8f:7d:27:e8:f5:c2:9e:d2:66:0d:01:49:f5:ff:02:
         27:04:aa:7e:8c:38:d8:62:df:62:33:23:50:02:6e:2c:af:7d:
         e7:8c:3a:ad:75:81:d2:9c:b0:c5:43:a1:c4:71:b6:b4:26:44:
         7e:8e:4e:60:7f:05:b2:43:1c:d1:24:22:7d:db:b4:30:67:0d:
         82:58:b1:00:c9:ce:de:a7:a5:e7:1f:58:53:f8:8a:85:93:cb:
         fe:5e:91:f9:35:e4:12:c6:d6:f6:e5:d4:3e:94:83:60:89:fd:
         32:a3:50:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:58 2025 by rpki-client