Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
File:                     547BC28C92A229A5AC78C0DE287D89CE37726409.mft (raw, json)
Hash identifier:          PQHgVaZfGIzS21r6OFQNg6qBIroc7ll8RDHTw45gBUU=
Subject key identifier:   A0:D2:86:A8:BB:71:88:70:7C:79:FE:09:1A:05:72:70:55:88:0A:EE
Authority key identifier: 54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09
Certificate issuer:       /CN=547bc28c92a229a5ac78c0de287d89ce37726409
Certificate serial:       12E79C533BB40C6A8FDD4004A88C861893F8C277
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
Manifest number:          0155
Signing time:             Sat 26 Apr 2025 19:19:09 +0000
Manifest this update:     Sat 26 Apr 2025 19:14:09 +0000
Manifest next update:     Sun 27 Apr 2025 19:47:09 +0000
Files and hashes:         1: 547BC28C92A229A5AC78C0DE287D89CE37726409.crl (hash: W0olabWkx8N1BDkkqYMK4/JsPZFL4sg+BsuY+Fxjmyo=)
                          2: 323030313a3637383a6362303a3a2f34382d3438203d3e203630343331.roa (hash: qPQeu/7M50ShpMjQ7Dkik+VbeEdUIQ58WUoPL4CU+wI=)
                          3: AS204931.asa (hash: VUh2bwan/qhl6vCwU9bDNceRWkwD3FNixDIwjYY8ML8=)
                          4: 323030313a3637383a6362303a3a2f34382d3438203d3e20323034393331.roa (hash: nR48aVSXVSZvCd3jlcODIB7um6yNk/WjtYd9EtNwPFs=)
                          5: AS60431.asa (hash: YU4mmdUSNMR8oSkn1D5qij0INiIudW4VkjQ07YzI6VU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:47:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e7:9c:53:3b:b4:0c:6a:8f:dd:40:04:a8:8c:86:18:93:f8:c2:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547bc28c92a229a5ac78c0de287d89ce37726409
        Validity
            Not Before: Apr 26 19:14:09 2025 GMT
            Not After : Apr 27 19:47:09 2025 GMT
        Subject: CN=A0D286A8BB7188707C79FE091A05727055880AEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3b:4e:dd:48:2c:ce:24:52:22:d9:f4:42:6d:
                    10:72:46:a9:7e:fe:36:1a:5a:c7:a5:fc:56:6c:b5:
                    20:d6:d6:d8:ee:67:d6:a7:06:97:ef:06:92:de:31:
                    a8:b7:45:f6:55:d9:8e:e6:20:78:40:f3:db:dd:93:
                    fd:3b:f8:4f:d3:34:1a:e1:69:89:6c:b0:c1:7a:4f:
                    31:5f:4c:17:e1:04:ff:00:26:44:94:89:01:93:08:
                    70:0d:96:55:24:b4:db:e0:4a:c4:1a:b5:66:a1:be:
                    ca:1b:a4:40:65:b6:b0:4b:cf:8b:3b:a5:d2:2d:70:
                    5d:14:83:a1:22:7d:5e:ff:39:59:a6:a3:b0:51:a9:
                    f1:cf:a5:f2:0b:a2:f5:96:4c:0b:fb:49:c3:6b:8b:
                    40:7f:81:4b:78:2a:9e:38:45:64:52:41:2c:4f:85:
                    9c:25:50:21:49:f5:61:f6:5f:fc:b8:32:53:bd:67:
                    98:fc:4e:55:ab:d8:c6:09:88:d1:c5:19:d4:10:d1:
                    cf:4e:bf:1a:fc:77:b9:75:99:2f:70:9e:82:4b:7b:
                    6a:3b:55:ea:93:d7:7e:e3:93:7b:73:68:f8:50:37:
                    0c:f4:dc:68:5c:cc:0c:6b:93:b5:cd:7f:70:91:ec:
                    9d:42:32:66:15:55:57:48:2a:c3:a3:cc:57:a1:87:
                    b7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D2:86:A8:BB:71:88:70:7C:79:FE:09:1A:05:72:70:55:88:0A:EE
            X509v3 Authority Key Identifier:
                keyid:54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:79:30:8d:44:51:67:ce:d1:38:d4:d2:a3:98:2f:3e:af:69:
         4c:a7:a4:6d:59:ca:75:ca:a3:44:22:05:37:3d:11:ad:a0:43:
         bb:1e:a0:7d:c4:b7:28:61:3c:71:89:18:49:51:ec:0a:a8:65:
         82:53:56:2f:57:fd:0c:76:fe:d8:cb:c1:fc:63:64:de:ad:90:
         5d:d2:1a:40:47:e4:45:ac:08:25:f3:ff:3e:18:bd:27:59:60:
         ba:d8:0f:68:af:fc:66:e0:f9:26:1c:de:66:9c:bf:f0:86:7a:
         90:d9:2f:89:dc:68:20:e7:b5:5f:9c:67:de:3d:b5:b4:0b:0e:
         ef:f3:4a:c2:62:92:42:54:bb:cf:bf:5b:42:cd:b4:7f:53:00:
         b5:dd:0d:64:7a:1e:f8:30:3a:04:96:36:bd:39:b6:ed:31:54:
         8f:28:71:f8:50:ac:ee:15:a0:72:90:6d:f5:72:a3:1b:e6:1e:
         ff:99:a9:ff:20:06:80:3a:13:90:c4:b1:f0:be:d7:09:52:54:
         40:ff:08:b8:bf:7d:9c:5c:82:d3:cc:2b:99:5e:7f:e5:4f:83:
         1e:05:fe:a0:66:a4:c2:e7:06:66:32:0d:04:ec:cc:22:2b:73:
         88:54:17:1f:82:5b:0e:ab:63:69:81:6a:92:7f:ce:b6:eb:e9:
         14:5b:30:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:13:02 2025 by rpki-client