Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
File:                     4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft (raw, json)
Hash identifier:          X0QzhgMkO0rBeRUDQsNLe6YVdiGjHxPl608v7vL6Ndk=
Subject key identifier:   C0:36:22:5D:E9:9C:C2:87:A4:B5:84:E9:A5:78:02:53:05:AF:B8:34
Authority key identifier: 4C:6E:A5:A3:C5:3B:EF:2E:65:17:0C:03:7C:44:51:CF:A7:8E:F4:58
Certificate issuer:       /CN=4c6ea5a3c53bef2e65170c037c4451cfa78ef458
Certificate serial:       07CE143D76F54AEA5880CE05199B93403B011B77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TG6lo8U77y5lFwwDfERRz6eO9Fg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
Manifest number:          D8
Signing time:             Fri 08 Aug 2025 22:14:17 +0000
Manifest this update:     Fri 08 Aug 2025 22:09:17 +0000
Manifest next update:     Sun 10 Aug 2025 01:40:17 +0000
Files and hashes:         1: 4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.crl (hash: YsXlmIZYcCdZT3JzI6tJ1V86pzfomUKe1TQ+fHZaABU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TG6lo8U77y5lFwwDfERRz6eO9Fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ce:14:3d:76:f5:4a:ea:58:80:ce:05:19:9b:93:40:3b:01:1b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c6ea5a3c53bef2e65170c037c4451cfa78ef458
        Validity
            Not Before: Aug  8 22:09:17 2025 GMT
            Not After : Aug 10 01:40:17 2025 GMT
        Subject: CN=C036225DE99CC287A4B584E9A578025305AFB834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:0c:d8:d0:c5:77:ad:b8:9e:16:60:fc:8b:
                    84:b4:36:bd:ab:48:56:46:23:95:53:fe:52:59:c4:
                    69:c6:17:8b:7b:d1:2b:5c:7f:45:76:dc:36:98:c5:
                    cf:5f:d7:b2:8b:69:7d:2d:63:99:87:23:a8:8b:5c:
                    f8:e0:81:e2:56:92:c7:a4:7d:16:51:d3:b5:b7:db:
                    db:0f:fd:f8:9b:a8:04:a7:1e:ca:08:d1:0f:8e:21:
                    62:bd:3e:33:f9:dc:c4:0b:9b:0c:92:c5:85:7b:22:
                    e3:a8:81:9a:c3:83:b6:d3:33:37:4d:67:b2:6f:70:
                    dc:19:b3:c6:53:88:ff:87:43:ae:a0:84:34:a0:88:
                    5c:b6:8c:8e:14:69:51:27:e2:54:2d:56:b6:f7:5f:
                    64:78:f2:3a:3f:d1:93:79:02:f4:1f:1f:4a:c5:97:
                    a4:33:bc:a4:66:b3:78:94:0b:25:9e:c7:80:b3:0e:
                    8d:f8:3b:2a:aa:12:c7:c9:a4:a0:29:0a:05:17:0a:
                    4f:d3:5f:10:b8:c4:3f:ee:79:18:b3:8e:71:f2:ee:
                    6c:d5:57:d7:84:57:12:67:b7:32:dd:f4:17:c6:54:
                    64:c8:74:b5:b2:8d:df:15:96:46:ee:c6:00:6d:fc:
                    5a:44:7c:42:e6:54:6b:be:10:37:3d:cf:1e:a5:e4:
                    39:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:36:22:5D:E9:9C:C2:87:A4:B5:84:E9:A5:78:02:53:05:AF:B8:34
            X509v3 Authority Key Identifier:
                keyid:4C:6E:A5:A3:C5:3B:EF:2E:65:17:0C:03:7C:44:51:CF:A7:8E:F4:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TG6lo8U77y5lFwwDfERRz6eO9Fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:96:f6:1f:b2:76:d7:38:99:43:1d:08:9a:c1:f1:a9:e2:91:
         11:bb:6f:1f:da:9e:b2:23:a0:5e:97:c6:0b:ec:cc:ce:ed:5c:
         48:f8:a2:01:2f:40:f8:a6:7c:a2:cd:50:c8:d4:e7:66:a4:db:
         d3:1e:6c:ff:1e:be:e5:e9:05:a7:d9:63:40:84:48:11:24:45:
         6c:d0:89:6b:54:10:33:27:6b:b8:dd:97:8b:38:a4:cf:d6:2a:
         93:80:86:ab:ee:53:1e:7e:6f:37:60:ef:26:99:c6:38:1f:60:
         96:b1:85:e9:38:9a:f7:71:bf:e9:3d:dc:79:2d:52:1e:8e:61:
         aa:e0:8c:33:7d:ca:05:37:86:2c:2f:45:e6:a2:c4:8a:7b:05:
         82:e3:49:18:80:e3:9e:40:cc:11:47:7d:7d:97:6c:1e:56:3d:
         5b:68:42:8a:98:11:72:77:6e:84:bd:23:43:66:3f:e4:65:f2:
         9d:0c:33:c8:05:8c:64:71:c2:f9:f0:f9:6e:d5:91:10:ba:f9:
         c6:9a:ea:1e:93:07:ec:1f:96:41:49:37:eb:03:53:2c:01:69:
         68:77:7d:8f:f9:f2:6d:7f:5e:d0:35:9a:5d:2e:a7:aa:f7:d6:
         87:fe:90:32:98:be:2c:28:8c:9d:12:88:2b:d9:f5:9c:ab:d0:
         a4:e9:49:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:24 2025 by rpki-client