Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
File:                     0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft (raw, json)
Hash identifier:          2u0ANbDsYzj+sY0vjseawGnXigmaxu+yZ3Fq8W9pmxQ=
Subject key identifier:   1E:B5:1D:18:70:0B:BF:EC:EB:44:24:51:27:BC:C1:23:80:20:80:DE
Authority key identifier: 0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23
Certificate issuer:       /CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
Certificate serial:       46F228A73907A9AD971FEAF8DBBEC33E90B887A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
Manifest number:          03DB
Signing time:             Sat 14 Jun 2025 13:18:55 +0000
Manifest this update:     Sat 14 Jun 2025 13:13:55 +0000
Manifest next update:     Sun 15 Jun 2025 14:22:55 +0000
Files and hashes:         1: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl (hash: SnEMiXSQ7LozJV/cFPl5fYkpW9mqkmQmPKmQhfOJJzk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f2:28:a7:39:07:a9:ad:97:1f:ea:f8:db:be:c3:3e:90:b8:87:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
        Validity
            Not Before: Jun 14 13:13:55 2025 GMT
            Not After : Jun 15 14:22:55 2025 GMT
        Subject: CN=1EB51D18700BBFECEB44245127BCC123802080DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:12:b7:33:c1:83:42:fc:5a:bd:08:a5:1f:74:
                    d2:30:9c:d8:06:cf:e3:58:b6:e8:cb:90:c7:13:51:
                    3b:c4:ac:97:e9:f6:53:ea:e6:a1:73:cc:05:b7:df:
                    f4:25:35:e5:f5:64:61:0e:f8:7c:c2:73:52:5c:e2:
                    a3:d3:22:59:de:65:ee:6b:54:44:d5:67:bd:42:3e:
                    5f:b1:a6:60:3e:98:12:a0:9c:a9:ca:ff:57:8b:5f:
                    4b:0c:40:16:5a:9c:26:dc:c4:0c:b4:15:71:ba:d7:
                    30:76:ed:69:14:85:c5:bd:0e:14:d7:8e:ae:6f:f3:
                    92:d1:79:43:d7:21:87:6c:bc:d9:70:82:04:9c:e7:
                    b8:75:ce:9d:e2:ef:2a:b3:67:6e:58:cf:ce:6f:c1:
                    69:83:53:a0:9d:c5:90:5b:51:6b:88:09:f1:6e:8b:
                    62:48:b8:9d:56:14:68:ee:47:d0:ce:8d:7c:80:24:
                    1f:fe:89:f0:79:4d:09:8f:81:88:9b:0c:91:2c:6e:
                    f4:9d:35:e8:8c:18:3f:d7:ec:f5:68:79:0f:e6:a6:
                    24:bb:c3:4e:74:9e:d0:6c:88:b7:05:c1:10:12:64:
                    1e:6e:36:cb:75:43:07:80:90:da:ee:b7:83:dc:aa:
                    98:b7:32:ad:5d:0f:45:4e:10:d1:15:33:eb:49:8e:
                    d7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B5:1D:18:70:0B:BF:EC:EB:44:24:51:27:BC:C1:23:80:20:80:DE
            X509v3 Authority Key Identifier:
                keyid:0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:a9:8d:0c:3d:98:22:5e:60:75:98:90:26:0a:ac:ca:3d:2b:
         31:54:fd:7c:96:0a:a2:cb:8a:09:37:ec:a6:d0:8f:45:4f:68:
         91:2b:1d:60:84:17:9e:d3:6a:49:a4:3f:e0:b1:9c:f4:8b:11:
         5a:7e:b1:62:80:b2:70:8b:0b:c9:bd:3b:dc:0c:78:36:77:51:
         db:45:b9:6e:73:27:56:3d:80:6b:3e:3f:0f:4b:3d:ce:7d:4b:
         1e:4f:62:49:f0:bb:20:45:e0:00:33:7e:8e:69:f4:b4:a4:6f:
         31:33:be:ba:4f:a8:c0:fa:19:ce:7c:0b:28:84:80:4a:46:ff:
         66:57:c5:bc:bf:fe:18:ba:41:6b:c7:4c:0e:00:6b:3b:18:c3:
         a7:ea:da:0a:58:08:83:fd:83:a1:87:3e:49:15:8a:bc:22:1b:
         83:ea:14:6a:0f:10:fc:a5:31:da:b9:32:70:ad:f6:ae:58:b1:
         0c:b0:1c:a0:67:70:3c:52:52:02:81:6b:dd:e5:44:da:a3:2b:
         b4:53:65:37:e8:ac:3d:06:38:7b:b7:52:a3:f4:55:0b:2b:82:
         ea:7f:c7:84:f9:bd:2a:d1:00:d7:88:86:a9:f8:ac:41:36:42:
         70:3d:b5:d7:ca:64:09:4f:ff:54:61:64:4f:fd:4e:58:8b:90:
         0a:9b:8c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:47:30 2025 by rpki-client