Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
File:                     CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft (raw, json)
Hash identifier:          UaGeAixQQjD0ZxPC9LrBkY1hMlb3nSHvRAPpmJjEw2M=
Subject key identifier:   1A:98:5D:EC:1D:B5:C4:5C:D0:1F:3D:D0:4A:80:C4:63:F0:CD:EE:54
Authority key identifier: CC:A1:E6:73:6D:B5:34:7C:DA:8F:22:4F:0C:85:72:9C:50:FD:09:1C
Certificate issuer:       /CN=cca1e6736db5347cda8f224f0c85729c50fd091c
Certificate serial:       64A272569C43198CE6604B0A11A081B3EC278E2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
Manifest number:          1D
Signing time:             Wed 06 Aug 2025 21:03:18 +0000
Manifest this update:     Wed 06 Aug 2025 20:58:18 +0000
Manifest next update:     Thu 07 Aug 2025 23:24:18 +0000
Files and hashes:         1: CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl (hash: ww6SG3hdBwfFsFixfnDamCJcMqlot3NtqCmzc5DRCtc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a2:72:56:9c:43:19:8c:e6:60:4b:0a:11:a0:81:b3:ec:27:8e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cca1e6736db5347cda8f224f0c85729c50fd091c
        Validity
            Not Before: Aug  6 20:58:18 2025 GMT
            Not After : Aug  7 23:24:18 2025 GMT
        Subject: CN=1A985DEC1DB5C45CD01F3DD04A80C463F0CDEE54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ab:51:34:37:5d:1e:88:fb:a3:3b:52:c5:78:
                    83:30:77:35:3d:fd:28:75:3f:04:31:d6:e4:66:b5:
                    55:5f:3a:85:74:9a:ee:2a:61:8b:26:3b:9c:5c:1c:
                    ef:b1:45:a1:00:a5:ed:23:a6:5d:9f:93:58:cd:3b:
                    d9:79:19:9c:aa:72:55:96:01:95:b1:95:6b:1f:da:
                    f5:fb:df:94:d4:20:ea:34:cd:e3:8c:ae:3b:64:62:
                    78:19:7a:ae:05:ec:4b:77:7f:f4:de:ec:d0:a0:ed:
                    0e:64:4e:a6:f6:5f:f3:53:d2:36:30:f8:66:75:8a:
                    a1:a5:79:20:85:bd:c5:76:01:30:6f:e3:6a:68:0a:
                    bf:e2:a1:60:6e:ed:0e:8f:f4:82:eb:75:7e:29:46:
                    98:1d:92:21:e0:84:be:a7:03:1d:a7:44:92:06:8b:
                    04:b4:a4:62:14:92:79:3e:c2:94:66:8b:d3:33:56:
                    04:a3:a2:cc:1b:5c:32:bd:b4:38:b2:27:21:c4:5b:
                    83:df:74:71:33:6e:76:9f:ca:de:0c:89:6f:43:32:
                    2b:5a:13:d7:ed:6e:ad:c1:8a:12:2a:6e:05:6e:b5:
                    bf:dd:3f:54:19:e8:37:04:7f:2e:89:2e:09:5a:0d:
                    f5:a3:31:a2:94:4d:67:5b:4f:f4:af:16:eb:f5:1f:
                    f4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:98:5D:EC:1D:B5:C4:5C:D0:1F:3D:D0:4A:80:C4:63:F0:CD:EE:54
            X509v3 Authority Key Identifier:
                keyid:CC:A1:E6:73:6D:B5:34:7C:DA:8F:22:4F:0C:85:72:9C:50:FD:09:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e4:ce:17:e2:77:a2:6d:eb:7c:6c:fa:8b:82:97:55:e3:28:
         ea:c5:ac:ac:49:73:82:f7:fa:f7:21:c3:61:00:3b:ec:72:12:
         dd:84:af:b0:28:20:ac:7d:b9:45:79:1f:68:78:5c:bd:75:92:
         53:cf:d1:b7:bb:38:09:4c:34:ca:8c:e4:d5:a3:be:49:80:dd:
         e3:c4:c7:7d:11:bc:ee:40:da:72:a9:5c:07:c7:11:42:b4:53:
         5b:87:69:0f:16:75:e5:ea:4d:97:12:69:40:5e:f2:d6:d1:fd:
         5f:de:a0:47:f1:bb:03:c2:54:a6:9c:95:2c:31:97:1b:30:10:
         65:a1:fe:76:b8:50:6b:cd:ea:f9:0a:66:db:1c:08:07:1c:f3:
         f5:8d:a9:08:95:34:f2:42:6a:9e:a8:97:72:6f:82:56:46:7e:
         cf:77:9d:d3:12:87:30:f4:a2:0a:e9:20:69:db:87:6d:79:fe:
         d2:f4:4e:ae:ad:38:f2:27:b4:07:36:6e:df:0c:72:61:30:42:
         25:8e:a6:03:27:7d:4c:28:7a:7d:d3:88:bb:07:5e:73:d1:99:
         6d:96:92:f6:95:35:65:ee:fb:64:a9:b3:6f:8e:67:3e:37:d2:
         2c:10:69:c2:4d:c4:38:0b:f5:b9:ea:0c:5c:00:ea:40:c3:bd:
         bd:3e:dc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:16:46 2025 by rpki-client