Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
File:                     91A33711A470A1CAF41284B368F40FD2BDF16F01.mft (raw, json)
Hash identifier:          UHtL0rDR7IBCV+DpgxSohPMpFv4FEAtkNp/Re9CX2e0=
Subject key identifier:   D2:BE:D9:F3:93:AD:17:1D:8A:4B:F1:C7:2C:CE:96:25:A5:4D:A3:75
Authority key identifier: 91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01
Certificate issuer:       /CN=91a33711a470a1caf41284b368f40fd2bdf16f01
Certificate serial:       492178FE43FEA32898B33445BACA0F8727CDDFC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
Manifest number:          0306
Signing time:             Fri 13 Jun 2025 11:32:48 +0000
Manifest this update:     Fri 13 Jun 2025 11:27:48 +0000
Manifest next update:     Sat 14 Jun 2025 14:24:48 +0000
Files and hashes:         1: 91A33711A470A1CAF41284B368F40FD2BDF16F01.crl (hash: g0FeK4+5XiEvGoJ/ozdsry8OcIzo+4kt/g+PbAopqa4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:21:78:fe:43:fe:a3:28:98:b3:34:45:ba:ca:0f:87:27:cd:df:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a33711a470a1caf41284b368f40fd2bdf16f01
        Validity
            Not Before: Jun 13 11:27:48 2025 GMT
            Not After : Jun 14 14:24:48 2025 GMT
        Subject: CN=D2BED9F393AD171D8A4BF1C72CCE9625A54DA375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:47:e5:fc:ba:af:54:d3:72:9a:ee:49:95:
                    35:1a:ef:ce:11:07:22:bf:da:12:ee:07:e4:97:a9:
                    59:99:4b:08:26:88:24:dc:7b:e2:f3:5d:fc:de:b0:
                    e7:ff:da:49:c3:f9:6e:c6:fb:13:dc:38:59:f4:07:
                    3c:d7:b1:98:7f:b3:26:4c:d6:2a:b2:a4:9c:36:2a:
                    ed:0e:08:6b:3f:2e:d7:c4:a6:66:7f:d2:0f:e8:0a:
                    55:8b:00:f6:cf:67:60:7d:c2:1d:03:b7:ad:f4:24:
                    b6:64:54:00:23:b2:97:8e:4e:35:46:ea:51:0f:77:
                    d0:b0:5c:71:34:cb:5b:bd:fd:ad:b1:25:3f:75:1a:
                    17:4a:d7:33:b5:81:10:35:da:79:c2:e1:d4:28:0e:
                    7d:4d:29:31:4d:cc:75:45:da:3c:c5:69:48:cc:91:
                    2b:1f:88:da:e8:50:10:52:c2:7a:91:21:89:c2:27:
                    56:5e:62:31:2f:1f:ef:0d:8a:fb:75:90:72:96:02:
                    bf:c1:e0:ca:6a:10:8d:97:92:45:65:cd:76:b5:52:
                    07:f9:b1:8b:f0:b3:03:84:b8:b9:4b:79:91:56:6b:
                    1d:4a:2b:46:8f:5a:3d:1d:1c:52:a1:f7:e1:ea:7c:
                    50:4f:44:5f:8b:9c:60:d5:cc:85:e0:6f:53:c1:27:
                    1c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BE:D9:F3:93:AD:17:1D:8A:4B:F1:C7:2C:CE:96:25:A5:4D:A3:75
            X509v3 Authority Key Identifier:
                keyid:91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:46:5c:51:7f:01:02:48:04:35:b0:b5:17:44:64:77:de:9c:
         4b:d7:56:47:83:d5:d6:3c:9b:ba:f5:33:f0:9e:43:75:7e:2c:
         8b:d8:58:88:de:df:7b:9e:26:a3:d0:81:01:30:ef:f4:a6:a6:
         4f:43:69:17:70:ec:4a:d6:05:5f:de:6f:c3:73:05:a8:5b:9d:
         5d:12:77:f0:d1:d4:ac:f8:a9:b7:2f:f6:35:5b:cd:99:7d:a0:
         d3:f5:31:99:df:4d:c6:f4:e0:d7:24:ec:17:49:69:16:8c:fe:
         2a:a6:75:5c:1f:1f:47:9e:df:59:34:ae:7f:2b:c2:7e:41:ff:
         a2:20:9b:e3:8a:f0:2d:ff:e4:5d:70:d1:ef:5b:be:98:41:66:
         a3:62:83:a6:ac:52:06:97:42:d5:46:a8:a6:b9:24:fc:86:a6:
         eb:c7:92:b4:2e:55:89:6c:5a:54:4b:8a:60:f5:f7:44:84:70:
         17:55:75:c5:ad:ec:c0:20:34:1e:f9:02:03:f4:ad:c6:3d:e3:
         07:d2:15:af:ca:61:f2:28:55:ef:af:f6:c3:44:26:d1:42:27:
         8b:99:0e:bb:30:91:77:80:dc:f0:67:04:fe:c3:15:f9:89:03:
         20:32:16:df:bf:40:27:6b:2d:8f:7a:e0:b0:87:47:9c:cc:65:
         f0:82:6c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:43 2025 by rpki-client