Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft
File:                     A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft (raw, json)
Hash identifier:          kqTkeyyuoqJM3D6XaSmK/NpfA3SQiDbq09vP0SDWSP0=
Subject key identifier:   92:0A:C0:70:4C:52:05:93:D2:56:D0:1B:1F:0D:E3:B1:65:4B:84:B0
Authority key identifier: A6:C1:7E:7D:36:3F:18:F7:3A:2A:8E:34:C1:42:5D:2D:46:56:20:3B
Certificate issuer:       /CN=a6c17e7d363f18f73a2a8e34c1425d2d4656203b
Certificate serial:       27137942D26A78D5F4DDB5F533004E92D2E26B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psF-fTY_GPc6Ko40wUJdLUZWIDs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft
Manifest number:          011F
Signing time:             Sat 14 Jun 2025 15:37:56 +0000
Manifest this update:     Sat 14 Jun 2025 15:32:56 +0000
Manifest next update:     Sun 15 Jun 2025 16:03:56 +0000
Files and hashes:         1: A6C17E7D363F18F73A2A8E34C1425D2D4656203B.crl (hash: +Ftv21e0nKPpFsP2AYuGMiE3yJRa4rBqX96Wt+AnGX4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psF-fTY_GPc6Ko40wUJdLUZWIDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:13:79:42:d2:6a:78:d5:f4:dd:b5:f5:33:00:4e:92:d2:e2:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c17e7d363f18f73a2a8e34c1425d2d4656203b
        Validity
            Not Before: Jun 14 15:32:56 2025 GMT
            Not After : Jun 15 16:03:56 2025 GMT
        Subject: CN=920AC0704C520593D256D01B1F0DE3B1654B84B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4f:a4:a1:0a:9c:b1:c6:65:7a:7a:07:4b:4f:
                    10:59:d7:0b:1c:49:55:01:21:a5:e0:6f:35:8a:5d:
                    22:cf:f5:b6:f1:6f:51:8e:da:21:42:8b:6c:1e:8b:
                    b3:ca:12:ad:f0:6e:3c:32:cd:d4:95:98:94:23:91:
                    e7:28:8c:39:e0:4b:d3:ba:7f:79:1b:97:8f:7c:5d:
                    39:9d:b0:0f:7f:7c:e4:82:15:4e:6f:2a:ca:11:0d:
                    d5:de:bc:e5:00:43:b7:3c:17:6f:ab:ab:fd:71:0b:
                    7e:fd:66:7a:5f:8b:e8:1e:e0:63:dd:18:9e:a7:19:
                    4b:09:7f:1c:0c:cd:f6:e2:52:ef:4a:a6:e7:e4:22:
                    22:34:b0:40:21:d7:4b:14:27:0b:bc:47:a0:17:2a:
                    f1:b7:21:ad:10:ad:41:82:60:9b:09:f3:d6:19:6c:
                    fe:d5:1f:ba:c8:5b:87:6c:49:76:11:6a:cd:54:ba:
                    fc:76:a5:e9:20:ed:be:f3:0f:44:a8:e3:13:e6:db:
                    47:4b:fe:0b:f2:d8:c6:7f:3c:73:50:ad:9a:31:2d:
                    2c:de:d0:b4:e0:e5:9c:ec:45:b5:71:8d:bf:60:be:
                    dc:8a:36:a7:85:04:c3:1d:50:15:a8:1d:78:ff:c7:
                    64:52:b4:11:c2:56:6c:11:45:3f:af:10:f4:51:83:
                    ff:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0A:C0:70:4C:52:05:93:D2:56:D0:1B:1F:0D:E3:B1:65:4B:84:B0
            X509v3 Authority Key Identifier:
                keyid:A6:C1:7E:7D:36:3F:18:F7:3A:2A:8E:34:C1:42:5D:2D:46:56:20:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psF-fTY_GPc6Ko40wUJdLUZWIDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:99:38:3e:db:1b:c2:96:9d:da:4e:66:4b:d0:a8:ae:94:69:
         83:62:7a:5d:fa:99:47:37:c0:a7:34:ac:cd:11:dd:89:5e:54:
         8c:d6:61:6e:31:f8:d8:be:2d:64:4e:be:f8:78:05:70:4d:43:
         3a:a3:d4:a4:f4:1e:8f:f7:e3:3f:10:76:46:1d:d4:b4:58:81:
         3c:1b:23:56:84:d1:fb:14:f2:03:cf:bf:f8:94:6a:98:f9:19:
         0a:a5:f5:63:e6:d5:de:79:0b:20:4b:ef:fb:bf:47:b6:a9:36:
         ee:24:a0:49:ef:c1:f9:65:7b:8b:5a:ea:ff:af:7f:ad:0b:42:
         5b:f3:8c:2f:8e:09:31:07:7e:16:15:46:98:24:fc:8d:1f:e8:
         55:c3:56:18:12:4b:68:c0:c8:da:a0:8a:d3:98:b7:a0:34:e9:
         2d:59:89:59:22:ad:02:38:cb:3f:62:42:17:09:dd:42:83:bd:
         87:82:81:07:b2:ea:6e:57:90:9a:3d:45:b0:1e:5b:5c:04:7f:
         ff:d7:89:68:86:27:01:ca:92:bc:5b:43:29:d6:aa:40:6b:cf:
         de:7d:3f:85:95:f7:07:f1:3c:b8:2f:06:02:7e:5a:ed:5a:23:
         4f:64:21:86:d5:48:72:78:76:c6:69:8d:eb:ba:ea:71:a0:ea:
         4f:53:d8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:27:14 2025 by rpki-client