Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
File:                     B056811CB944A23C757F57AFFD483C6FCFB80119.mft (raw, json)
Hash identifier:          hYB9ivgwh3y0yt+ED3If3nh6G778oMlPZHjYsH4gYSU=
Subject key identifier:   60:7D:5D:F8:B3:B9:E7:5B:7B:61:4A:76:D4:DD:69:A1:6F:F3:EE:08
Authority key identifier: B0:56:81:1C:B9:44:A2:3C:75:7F:57:AF:FD:48:3C:6F:CF:B8:01:19
Certificate issuer:       /CN=b056811cb944a23c757f57affd483c6fcfb80119
Certificate serial:       1CCBCCC5E209E41CF104AF7279AD255CDEA2BDAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
Manifest number:          0DFE
Signing time:             Mon 04 Aug 2025 10:57:32 +0000
Manifest this update:     Mon 04 Aug 2025 10:52:32 +0000
Manifest next update:     Tue 05 Aug 2025 13:45:32 +0000
Files and hashes:         1: B056811CB944A23C757F57AFFD483C6FCFB80119.crl (hash: +js07pXqAHda0WV8QSLV4THgWkeU6exsLohyoj9LNWA=)
                          2: 33372e31362e38392e302f32342d3234203d3e20323035363539.roa (hash: 6QRhHbC8A6tvkoInC0OAQAidq/KLzHjtVgzI9mMUm4k=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:cb:cc:c5:e2:09:e4:1c:f1:04:af:72:79:ad:25:5c:de:a2:bd:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b056811cb944a23c757f57affd483c6fcfb80119
        Validity
            Not Before: Aug  4 10:52:32 2025 GMT
            Not After : Aug  5 13:45:32 2025 GMT
        Subject: CN=607D5DF8B3B9E75B7B614A76D4DD69A16FF3EE08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f4:d9:17:32:cc:4d:8a:2e:20:c2:d7:4f:60:
                    25:95:c7:30:5d:84:33:69:70:92:76:6e:26:6b:4a:
                    65:bf:c7:86:8a:78:43:87:e7:48:00:ad:12:a7:61:
                    91:a9:fb:5a:cf:fd:21:28:3c:dd:38:3d:ef:0e:7f:
                    a2:08:88:bc:62:f3:d0:12:2b:52:fd:45:3b:7f:cb:
                    74:8b:ea:f4:2e:dd:5e:87:da:b3:55:24:01:9e:c4:
                    aa:12:d9:47:9a:d6:82:97:69:b8:f8:54:47:9c:95:
                    a3:73:71:6c:cf:1b:b3:32:a9:bd:39:ad:f8:92:ed:
                    c0:0f:59:38:c2:b7:cb:68:ba:16:eb:d4:e1:c1:3e:
                    15:88:b6:83:b2:3f:f5:e8:0b:26:da:14:67:ec:ca:
                    f4:18:a9:7f:48:aa:16:76:7f:44:da:77:53:56:44:
                    a6:88:90:58:06:a8:4f:c8:df:e0:0c:f7:6f:f1:63:
                    74:66:87:c3:a6:df:c3:cb:65:5a:e5:25:e6:16:01:
                    46:1c:94:bf:eb:1a:bb:55:aa:ac:fe:a4:88:0a:ec:
                    99:32:64:fd:02:81:d2:f1:a4:88:6d:03:66:8a:d7:
                    e2:d5:e9:58:0b:08:6e:8e:89:75:7c:c3:9f:ba:a3:
                    be:7e:68:76:78:0f:3d:21:b6:ea:ef:b8:14:d1:e5:
                    08:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7D:5D:F8:B3:B9:E7:5B:7B:61:4A:76:D4:DD:69:A1:6F:F3:EE:08
            X509v3 Authority Key Identifier:
                keyid:B0:56:81:1C:B9:44:A2:3C:75:7F:57:AF:FD:48:3C:6F:CF:B8:01:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:56:4e:6c:5a:86:71:ff:7a:28:b0:40:be:ce:e9:57:27:4f:
         d2:76:40:62:21:6a:00:13:5a:74:e0:45:a1:fb:c2:8d:fe:13:
         85:3d:a9:4a:f9:76:49:9b:c9:b1:ad:ab:b7:9d:b9:9a:ee:f5:
         ff:60:35:de:fc:0f:61:5f:41:04:1f:8c:a0:16:e9:a8:a8:01:
         d1:fe:f0:60:8f:08:9e:91:cd:b4:8b:54:88:5f:b8:27:f5:68:
         ae:ef:94:cc:49:c5:f4:8f:ea:84:e5:73:33:94:9b:a1:5a:b2:
         8c:09:1d:8b:d4:72:bc:4f:70:2f:f5:3b:b8:28:8e:df:99:d2:
         0c:6c:32:ce:3b:28:8a:53:ce:f8:63:4d:dd:f5:37:bb:1c:b5:
         73:de:e6:f6:05:00:a3:6c:dd:d3:d1:fd:c1:0b:96:f3:ce:7f:
         eb:6b:46:3b:8b:f9:9e:51:f9:86:25:6b:bb:c8:13:a7:0c:4f:
         01:b4:14:79:e3:fe:03:ee:60:64:a4:13:a2:58:1c:a7:ec:ce:
         16:02:4d:f9:71:54:17:da:6e:68:af:58:3c:48:94:5e:5b:94:
         f8:e0:17:aa:a8:a4:77:b2:3d:d0:3d:eb:72:fb:3b:dd:60:f4:
         a1:c0:e0:a5:00:45:d9:48:62:98:9d:57:ff:ef:7c:13:8c:4e:
         43:ea:07:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:03:12 2025 by rpki-client