Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
File:                     922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft (raw, json)
Hash identifier:          NWr2B5p+4UhUisHw8/ZByOqbEVEQR9LpbnTr5Qc7Snw=
Subject key identifier:   BC:E8:53:B6:76:53:69:C5:8D:71:99:3E:76:90:DC:9E:9D:10:34:02
Authority key identifier: 92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18
Certificate issuer:       /CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418
Certificate serial:       22CE326FEEF31688E7BCF31AA55242A6EA768AE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
Manifest number:          02C6
Signing time:             Mon 04 Aug 2025 15:22:19 +0000
Manifest this update:     Mon 04 Aug 2025 15:17:19 +0000
Manifest next update:     Tue 05 Aug 2025 15:50:19 +0000
Files and hashes:         1: 922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl (hash: ctB0FC+rA2fGKyAsmQK9kSlbMF4ie6wIOodFdjJc7zM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ce:32:6f:ee:f3:16:88:e7:bc:f3:1a:a5:52:42:a6:ea:76:8a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418
        Validity
            Not Before: Aug  4 15:17:19 2025 GMT
            Not After : Aug  5 15:50:19 2025 GMT
        Subject: CN=BCE853B6765369C58D71993E7690DC9E9D103402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:84:14:3a:a6:81:3f:d0:1e:c9:02:dc:25:23:
                    7b:5c:2a:60:c2:2e:36:a7:80:bb:71:95:be:9c:e2:
                    9a:e3:2b:ba:89:e5:b5:a2:36:65:74:db:ce:9c:ec:
                    3c:9c:63:dc:42:bf:5f:c1:ca:cc:00:ee:3d:fc:ff:
                    0c:e8:4d:05:af:b9:ef:fa:3c:00:9e:34:61:9e:b7:
                    ba:95:14:93:89:f0:03:c3:13:b6:f6:1e:cc:ea:bf:
                    1f:d9:43:29:fd:47:20:5b:7c:eb:27:c4:cb:31:b0:
                    6a:0b:85:b7:dd:dd:33:6a:22:cc:46:d5:ac:a6:06:
                    7e:de:d4:77:0a:da:59:0a:26:a4:33:32:75:9e:19:
                    82:db:0e:47:57:1c:31:ca:72:47:14:ff:b9:fe:b7:
                    30:8e:4a:24:0c:66:8c:46:c3:56:e8:d6:f2:4d:54:
                    18:32:0e:70:19:48:9f:2b:e3:ee:af:25:fc:af:0f:
                    70:f2:bd:79:72:8d:1b:c4:35:3c:14:cb:45:77:34:
                    76:a5:0d:62:8b:31:91:3a:90:8b:2a:97:56:11:9b:
                    b1:f3:5a:ff:56:71:c8:92:6a:78:16:e4:f5:24:8d:
                    1f:e4:4c:89:ae:23:b8:c8:d0:1f:fd:ee:79:1c:f3:
                    39:ed:19:f9:8a:d0:e6:00:16:7e:93:fd:c3:f9:74:
                    a6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E8:53:B6:76:53:69:C5:8D:71:99:3E:76:90:DC:9E:9D:10:34:02
            X509v3 Authority Key Identifier:
                keyid:92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b7:f5:4b:38:d9:14:c8:1a:bb:7d:a7:45:5d:1e:87:72:60:
         99:68:51:4d:f6:48:be:9b:1f:42:40:e9:2a:0c:81:dc:d9:93:
         67:af:57:2c:98:90:ed:a7:a6:60:91:a0:ae:f1:41:1f:df:f4:
         9c:a8:13:fd:ff:06:cd:37:7c:93:fc:94:a3:64:fb:24:21:ec:
         f0:9c:ba:f6:58:db:b0:16:98:eb:37:1f:fe:f7:d4:0e:6e:31:
         9f:bb:9f:b1:61:a0:f4:12:f3:94:d5:2d:ed:60:11:a5:84:10:
         13:0d:a8:90:c7:70:76:dc:fd:d1:4e:3f:b1:f5:56:16:a4:fa:
         0d:15:ee:01:16:30:43:da:80:f6:69:98:c5:b7:a8:f2:40:2a:
         e3:11:53:9a:24:13:48:e5:5b:26:36:ce:66:6b:a9:96:31:68:
         ae:7b:af:0d:2f:52:b8:aa:df:50:d0:d1:0d:50:ad:e0:11:28:
         10:c4:16:b2:75:d6:50:05:4a:2e:e4:87:34:9d:8c:07:ac:a0:
         c6:86:10:cb:3a:c0:e1:be:d3:5c:d7:ca:e2:0a:62:6b:a0:73:
         c2:ea:a1:19:c4:43:15:cb:ec:72:d4:50:9c:3d:09:ce:c6:3d:
         c3:eb:6a:67:1a:6d:a4:93:50:14:f0:43:b6:00:88:97:09:db:
         75:80:7e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:26:01 2025 by rpki-client