Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/0/E418F667F3EDC7DF81A4F887F661DD964B26BCB9.mft
File:                     E418F667F3EDC7DF81A4F887F661DD964B26BCB9.mft (raw, json)
Hash identifier:          kSqvcLV8dTewI1+GHrvbf2R9NQGKpAvpilmdE0oRuDE=
Subject key identifier:   9E:10:36:C7:F9:65:DB:16:0B:3D:DF:DA:9A:41:A2:3A:34:FB:6A:3B
Authority key identifier: E4:18:F6:67:F3:ED:C7:DF:81:A4:F8:87:F6:61:DD:96:4B:26:BC:B9
Certificate issuer:       /CN=e418f667f3edc7df81a4f887f661dd964b26bcb9
Certificate serial:       022903F2E63CEE5697B62AE09A96468F07D59E81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Bj2Z_Ptx9-BpPiH9mHdlksmvLk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/0/E418F667F3EDC7DF81A4F887F661DD964B26BCB9.mft
Manifest number:          029C
Signing time:             Fri 08 Aug 2025 22:42:23 +0000
Manifest this update:     Fri 08 Aug 2025 22:37:23 +0000
Manifest next update:     Sat 09 Aug 2025 23:31:23 +0000
Files and hashes:         1: E418F667F3EDC7DF81A4F887F661DD964B26BCB9.crl (hash: +koyeQseAlx32vGT2w1h9s9SPJT7kQsQQXt7HCLMCLA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/0/E418F667F3EDC7DF81A4F887F661DD964B26BCB9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/0/E418F667F3EDC7DF81A4F887F661DD964B26BCB9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Bj2Z_Ptx9-BpPiH9mHdlksmvLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:29:03:f2:e6:3c:ee:56:97:b6:2a:e0:9a:96:46:8f:07:d5:9e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e418f667f3edc7df81a4f887f661dd964b26bcb9
        Validity
            Not Before: Aug  8 22:37:23 2025 GMT
            Not After : Aug  9 23:31:23 2025 GMT
        Subject: CN=9E1036C7F965DB160B3DDFDA9A41A23A34FB6A3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:33:09:81:6b:67:4d:92:f4:20:6c:c5:d6:3f:
                    f9:3d:46:b1:97:d3:86:41:5e:6a:d9:bb:20:7f:56:
                    13:17:91:8e:c9:d1:38:e8:6f:5b:0f:ae:ad:6a:03:
                    9a:5b:73:e4:e0:87:45:10:eb:25:38:cf:c2:50:3f:
                    8e:e4:8a:98:d8:33:d0:cd:b9:c0:45:6e:9c:04:b7:
                    b2:4c:07:88:78:ae:54:f8:3a:22:23:20:9f:c7:2e:
                    74:9c:e6:46:13:f5:63:cd:e4:cb:81:96:e5:c2:bf:
                    82:57:39:b3:7f:2e:6f:14:3e:42:48:65:ea:85:04:
                    c4:a6:6b:07:e7:d9:96:ac:af:2c:48:2a:15:05:26:
                    dd:e2:f0:7f:8c:83:cf:81:96:be:81:a9:5c:a6:d8:
                    6f:a5:70:e4:02:ae:fc:a0:b7:e7:b3:d1:d1:84:44:
                    9d:35:32:eb:01:03:2a:e5:ba:7f:87:0b:22:38:69:
                    ed:84:0f:a2:79:f9:ca:b9:ed:af:be:8d:00:5e:f0:
                    cc:a4:a7:ac:47:19:c2:33:eb:af:fe:cf:e3:27:21:
                    0d:a3:37:ed:dd:73:8a:76:ad:3b:73:c5:de:87:3b:
                    cb:b0:f5:fb:fc:83:e4:c4:83:01:c3:a8:61:5a:a1:
                    82:7e:8a:43:5e:bc:40:15:54:42:1d:c5:0e:10:7d:
                    8b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:10:36:C7:F9:65:DB:16:0B:3D:DF:DA:9A:41:A2:3A:34:FB:6A:3B
            X509v3 Authority Key Identifier:
                keyid:E4:18:F6:67:F3:ED:C7:DF:81:A4:F8:87:F6:61:DD:96:4B:26:BC:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/0/E418F667F3EDC7DF81A4F887F661DD964B26BCB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Bj2Z_Ptx9-BpPiH9mHdlksmvLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/0/E418F667F3EDC7DF81A4F887F661DD964B26BCB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c5:1b:2d:db:b4:06:7e:16:be:0b:db:ef:48:11:05:6d:b9:
         95:e3:8a:0c:87:ca:e1:d9:ea:b8:0c:14:4b:f9:b6:1d:81:2a:
         46:e6:17:d6:36:bd:d8:85:75:d8:9c:65:a1:a8:c2:38:e4:ae:
         46:9f:27:d5:80:af:60:ec:36:b0:11:d8:a8:c8:1f:63:b6:ea:
         77:09:d2:87:e6:02:84:1b:a2:67:8b:36:29:29:d9:84:ec:d2:
         5b:ee:0d:56:ec:20:dd:77:b8:d4:cb:6d:06:00:8f:2f:77:87:
         2e:03:64:b9:fd:f8:10:2c:e3:c2:8b:66:2f:f2:01:c5:63:4b:
         0e:66:b1:09:c0:27:52:09:41:d9:53:36:6f:28:d8:c1:e4:8d:
         bb:c3:0a:2b:6c:24:a8:cf:2d:8b:ba:f6:4f:44:33:6c:20:41:
         aa:52:46:90:fb:25:6d:91:d9:29:e7:30:25:f4:a7:08:cc:c5:
         1e:39:bc:fa:32:29:8b:39:8d:93:3b:14:ba:06:06:05:48:65:
         9c:bd:3e:29:cb:f3:36:f6:a3:84:df:a9:71:c9:89:ec:5a:94:
         08:07:ca:cf:ce:84:2a:bb:09:c0:22:eb:64:61:27:1a:7e:9f:
         0a:98:9c:e6:89:94:ba:b4:b1:6e:7f:85:ef:1b:97:ab:50:6a:
         dc:5d:25:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:36:03 2025 by rpki-client