Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
File:                     922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft (raw, json)
Hash identifier:          mPAw8NK+m1gJcAk88sxeO5bwyvSaY5V8UaytEynaAy0=
Subject key identifier:   AA:AF:73:02:D9:07:4A:D7:E1:08:73:84:A6:40:89:6D:6A:B3:22:2F
Authority key identifier: 92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18
Certificate issuer:       /CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418
Certificate serial:       0B8916178B888439CA85897CDC3B11BE735C187C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
Manifest number:          0244
Signing time:             Tue 29 Apr 2025 02:24:59 +0000
Manifest this update:     Tue 29 Apr 2025 02:19:59 +0000
Manifest next update:     Wed 30 Apr 2025 05:49:59 +0000
Files and hashes:         1: 922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl (hash: WijfrF21nULNNneVVL4ctOEFyG/AIOlVpV1rZ3Cut00=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 05:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:89:16:17:8b:88:84:39:ca:85:89:7c:dc:3b:11:be:73:5c:18:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418
        Validity
            Not Before: Apr 29 02:19:59 2025 GMT
            Not After : Apr 30 05:49:59 2025 GMT
        Subject: CN=AAAF7302D9074AD7E1087384A640896D6AB3222F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d4:4f:12:fe:9a:84:d1:67:48:dd:51:93:65:
                    da:4e:ff:85:61:e4:45:22:15:d4:c0:2f:68:de:5d:
                    5c:f2:c3:d2:16:d5:f8:75:39:61:d7:0e:b9:0e:0f:
                    be:ab:d7:56:44:d1:06:67:f8:34:a7:aa:87:7f:98:
                    eb:b5:96:ee:ba:e3:a5:26:0c:c5:1e:20:dd:62:78:
                    1e:1b:0c:8d:39:2f:d6:a7:50:3a:93:05:5d:ad:0d:
                    01:df:5b:92:57:11:dd:76:6f:86:a4:46:52:d8:2d:
                    60:fb:24:6c:dd:78:d6:6e:27:25:e7:9f:d1:8c:45:
                    e4:fb:da:33:c8:6d:d6:6d:33:5c:f4:ef:9b:b6:e8:
                    df:a2:fd:10:e8:78:e2:18:4e:06:22:bd:72:6f:c0:
                    1e:de:b9:c3:ff:3b:19:0a:d3:57:c9:6e:ec:cf:f1:
                    ba:6c:16:8d:2b:72:82:2c:1b:50:94:dd:8b:47:9f:
                    eb:d3:84:7f:7f:b1:0a:20:68:a2:31:ad:02:70:e2:
                    d5:79:76:63:0d:f6:5e:e8:35:28:e1:cf:c2:04:a8:
                    14:96:2f:ec:82:b6:a3:1a:86:7e:56:01:7f:7a:bf:
                    08:9d:c2:56:1a:b3:9d:96:f7:7f:ba:d4:bf:f6:80:
                    88:a0:28:92:c2:aa:85:03:84:53:7b:e2:e1:cb:ce:
                    87:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AF:73:02:D9:07:4A:D7:E1:08:73:84:A6:40:89:6D:6A:B3:22:2F
            X509v3 Authority Key Identifier:
                keyid:92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:cc:24:bf:2d:fd:a6:41:2c:c3:ea:c6:52:7e:a9:2a:e2:eb:
         fa:72:26:b4:59:ab:f0:df:84:d9:02:16:2a:55:0d:bb:72:ae:
         a6:1c:5f:f0:5d:60:cc:97:ec:6d:90:6c:41:c0:28:e5:14:bc:
         07:50:2b:e6:5a:2c:12:bc:c9:6f:bb:53:2e:d8:77:b6:bc:66:
         89:c5:97:de:c1:39:3f:e4:a3:8e:5f:fb:30:7f:c3:86:c6:8b:
         e4:d8:5e:b5:d7:07:df:82:e8:55:f9:d8:d1:e5:b8:4b:91:24:
         18:87:92:77:61:34:1f:bd:0a:46:29:84:91:31:fe:8b:a4:45:
         2f:4d:5e:52:ae:79:20:1b:11:64:8c:82:b1:5d:79:99:2c:54:
         1d:ed:eb:ca:d7:69:c8:8b:f3:c9:f6:d3:f5:f1:a1:d9:59:4d:
         2a:b9:5d:57:47:bf:86:15:bf:43:01:0a:ac:6b:55:d8:72:5d:
         e7:6c:04:21:cd:be:4f:f3:86:20:e5:b9:b4:54:f1:fd:d9:c2:
         fc:70:89:0e:4e:0a:e9:32:4c:b3:5b:ac:5d:1e:fe:3a:67:93:
         ed:f5:97:93:6a:bb:38:ff:d4:c9:e6:26:31:3f:47:d0:23:6d:
         07:39:74:20:df:fa:16:be:4a:56:79:66:c0:6b:9c:a4:d6:9c:
         91:36:2f:bd
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUC4kWF4uIhDnKhYl83DsRvnNcGHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTIyMDg1Y2ZmMzY1N2ZhMmFlYzZmOTFkOTFiYmYwY2Q0
ZGQyNDQxODAeFw0yNTA0MjkwMjE5NTlaFw0yNTA0MzAwNTQ5NTlaMDMxMTAvBgNV
BAMTKEFBQUY3MzAyRDkwNzRBRDdFMTA4NzM4NEE2NDA4OTZENkFCMzIyMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ1E8S/pqE0WdI3VGTZdpO/4Vh
5EUiFdTAL2jeXVzyw9IW1fh1OWHXDrkOD76r11ZE0QZn+DSnqod/mOu1lu6646Um
DMUeIN1ieB4bDI05L9anUDqTBV2tDQHfW5JXEd12b4akRlLYLWD7JGzdeNZuJyXn
n9GMReT72jPIbdZtM1z075u26N+i/RDoeOIYTgYivXJvwB7eucP/OxkK01fJbuzP
8bpsFo0rcoIsG1CU3YtHn+vThH9/sQogaKIxrQJw4tV5dmMN9l7oNSjhz8IEqBSW
L+yCtqMahn5WAX96vwidwlYas52W93+61L/2gIigKJLCqoUDhFN74uHLzofxAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUqq9zAtkHStfhCHOEpkCJbWqzIi8wHwYDVR0j
BBgwFoAUkiCFz/Nlf6KuxvkdkbvwzU3SRBgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWQ4MTQ3N2UtNTEwYi00ZDM3LWEyMjktZWQ0ZTg4ZmJl
NjVhLzAvOTIyMDg1Q0ZGMzY1N0ZBMkFFQzZGOTFEOTFCQkYwQ0Q0REQyNDQxOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2tpQ0Z6X05sZjZLdXh2a2RrYnZ3elUz
U1JCZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lZDgxNDc3ZS01
MTBiLTRkMzctYTIyOS1lZDRlODhmYmU2NWEvMC85MjIwODVDRkYzNjU3RkEyQUVD
NkY5MUQ5MUJCRjBDRDRERDI0NDE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGMwkvy39pkEsw+rGUn6p
KuLr+nImtFmr8N+E2QIWKlUNu3Kuphxf8F1gzJfsbZBsQcAo5RS8B1Ar5losErzJ
b7tTLth3trxmicWX3sE5P+Sjjl/7MH/DhsaL5NhetdcH34LoVfnY0eW4S5EkGIeS
d2E0H70KRimEkTH+i6RFL01eUq55IBsRZIyCsV15mSxUHe3rytdpyIvzyfbT9fGh
2VlNKrldV0e/hhW/QwEKrGtV2HJd52wEIc2+T/OGIOW5tFTx/dnC/HCJDk4K6TJM
s1usXR7+OmeT7fWXk2q7OP/UyeYmMT9H0CNtBzl0IN/6Fr5KVnlmwGucpNackTYv
vQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 22:04:33 2025 by rpki-client