Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft
File:                     A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft (raw, json)
Hash identifier:          N8Q1h/9QyFQK4Y1opA1To4oqxmtXqFO2kr36iNuFOXE=
Subject key identifier:   57:EE:56:54:74:6E:16:0F:35:CD:84:05:9B:85:37:92:FC:0B:03:BD
Authority key identifier: A6:C1:7E:7D:36:3F:18:F7:3A:2A:8E:34:C1:42:5D:2D:46:56:20:3B
Certificate issuer:       /CN=a6c17e7d363f18f73a2a8e34c1425d2d4656203b
Certificate serial:       7E7BAD78F3A922D424437B3EB9D6FCC96322E76D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psF-fTY_GPc6Ko40wUJdLUZWIDs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft
Manifest number:          013D
Signing time:             Tue 05 Aug 2025 19:20:01 +0000
Manifest this update:     Tue 05 Aug 2025 19:15:01 +0000
Manifest next update:     Wed 06 Aug 2025 22:10:01 +0000
Files and hashes:         1: A6C17E7D363F18F73A2A8E34C1425D2D4656203B.crl (hash: VXX8qAf8xB3ugW2sSnefgxYQBO5VGA1snTXW46isoyw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psF-fTY_GPc6Ko40wUJdLUZWIDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7b:ad:78:f3:a9:22:d4:24:43:7b:3e:b9:d6:fc:c9:63:22:e7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c17e7d363f18f73a2a8e34c1425d2d4656203b
        Validity
            Not Before: Aug  5 19:15:01 2025 GMT
            Not After : Aug  6 22:10:01 2025 GMT
        Subject: CN=57EE5654746E160F35CD84059B853792FC0B03BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:81:e7:14:cc:7a:7c:20:10:66:0d:f5:03:bb:
                    34:6a:ea:97:7e:9c:7a:0b:de:02:ac:90:83:14:ae:
                    47:81:c3:7c:ed:a7:7b:4e:b9:83:04:b8:5e:10:50:
                    c9:8f:9d:0d:e4:0a:9b:0f:70:80:fe:bb:88:63:ed:
                    cf:80:f3:7d:54:9a:ce:5a:16:3d:9c:77:85:d4:e8:
                    c3:31:50:38:ff:6a:bb:ed:bf:d1:47:90:4f:e6:e4:
                    f1:61:52:a7:1a:f9:ef:2a:cf:6b:7e:89:86:6c:ca:
                    50:08:9b:e7:3b:ea:44:86:d5:35:10:40:65:9b:69:
                    aa:87:0d:c2:60:24:41:86:92:19:b3:d4:b0:31:f8:
                    5f:6a:36:c0:17:e9:ee:bf:5f:e8:77:49:f6:f7:fb:
                    35:da:b2:bd:94:27:23:e3:6a:86:34:53:6d:c7:b2:
                    4b:3d:ec:8a:95:72:57:56:f1:1a:0a:35:61:3b:bc:
                    9a:b0:de:06:09:0b:b9:e7:84:93:6d:cf:82:76:90:
                    f3:21:eb:01:88:b5:1d:69:87:78:ba:84:c8:e7:b6:
                    60:9c:29:18:71:75:7c:f2:29:f9:95:77:c4:85:87:
                    cf:02:dd:0e:13:f6:03:4a:8d:c1:d4:c4:81:1b:ab:
                    c9:0e:5f:07:c8:dd:5b:1f:af:5c:f8:d4:7b:f0:bd:
                    87:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EE:56:54:74:6E:16:0F:35:CD:84:05:9B:85:37:92:FC:0B:03:BD
            X509v3 Authority Key Identifier:
                keyid:A6:C1:7E:7D:36:3F:18:F7:3A:2A:8E:34:C1:42:5D:2D:46:56:20:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psF-fTY_GPc6Ko40wUJdLUZWIDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:93:2b:32:34:4f:3e:9c:35:8f:bc:c1:0e:20:b3:4f:7c:98:
         ba:08:61:71:68:6d:bf:7e:0e:d3:b9:73:2e:97:d4:62:4a:1b:
         bc:57:d4:4f:19:44:eb:83:43:54:62:6a:85:46:67:db:a0:03:
         10:d6:28:b4:43:d9:e0:e4:0e:b5:df:c1:5a:45:e1:77:2c:7c:
         61:03:b1:7b:55:3a:87:e7:d8:b1:7b:fd:1b:61:a4:f9:43:5b:
         39:c2:35:38:c7:71:19:2b:dc:9a:6e:fe:bc:f6:70:fa:f6:b0:
         5d:5e:cf:22:2b:11:e3:e6:30:b4:eb:0c:d0:43:5e:f5:06:03:
         d3:dc:ae:35:09:50:69:69:4d:dd:39:43:5f:86:2a:dd:40:92:
         af:4c:d4:7d:d8:9c:75:75:39:93:68:7d:2a:ef:de:99:bd:7e:
         c7:91:b0:a4:00:74:26:99:72:de:92:1e:c6:63:27:ce:6b:4a:
         d5:e6:5f:44:40:61:b7:eb:38:36:7a:ea:09:87:d7:8e:98:4e:
         35:72:0f:e6:2e:a4:1a:73:cb:66:98:21:ca:2f:72:3b:c2:52:
         7b:83:46:98:ce:ae:d3:ca:5e:d0:d3:67:c7:c7:14:e5:77:a0:
         31:95:a4:3f:90:5e:98:f2:27:03:1c:43:fc:12:07:8c:0a:38:
         7c:95:1d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:53:50 2025 by rpki-client