Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
File:                     84101CECAA6A71465DCF665D716279A008341EA4.mft (raw, json)
Hash identifier:          7fEbtr/u8f72AyORhV/pI+oYeGbB44BeAn7mT33NwG8=
Subject key identifier:   FA:CE:6C:1A:0A:4D:CB:99:0F:7C:87:1B:5A:13:66:54:30:C5:D6:37
Authority key identifier: 84:10:1C:EC:AA:6A:71:46:5D:CF:66:5D:71:62:79:A0:08:34:1E:A4
Certificate issuer:       /CN=84101cecaa6a71465dcf665d716279a008341ea4
Certificate serial:       7EC5878107FB53DD387231BF66FDE1CA5F1A6513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
Manifest number:          2C
Signing time:             Sat 10 May 2025 05:12:26 +0000
Manifest this update:     Sat 10 May 2025 05:07:26 +0000
Manifest next update:     Sun 11 May 2025 07:11:26 +0000
Files and hashes:         1: 84101CECAA6A71465DCF665D716279A008341EA4.crl (hash: /Mtqrq1uN9N6Kg0P5LkyO/LLpFA/EHCMsTJIptJZfWw=)
                          2: AS216311.asa (hash: Dmw7omaWtWOpKd5S/DPOujGFLODAQcprPtQE3Nwf75E=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c5:87:81:07:fb:53:dd:38:72:31:bf:66:fd:e1:ca:5f:1a:65:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84101cecaa6a71465dcf665d716279a008341ea4
        Validity
            Not Before: May 10 05:07:26 2025 GMT
            Not After : May 11 07:11:26 2025 GMT
        Subject: CN=FACE6C1A0A4DCB990F7C871B5A13665430C5D637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:24:de:af:14:82:d1:62:91:68:68:d8:50:74:
                    79:7a:2e:cb:63:f5:0c:62:35:95:03:7c:18:4d:e7:
                    b1:06:cb:b7:4e:4d:18:b8:02:1a:7c:37:67:a7:87:
                    e3:6e:64:51:a7:21:01:f4:a5:0d:96:75:af:a0:5d:
                    c4:71:fd:46:bc:5b:ab:ea:b1:ef:30:b6:85:52:22:
                    57:17:61:26:fa:5d:ce:cd:a0:f6:08:93:27:df:2a:
                    55:76:55:53:69:ba:87:45:51:af:bb:35:ff:fd:0b:
                    0e:61:9f:49:1a:55:29:bc:cd:ec:5e:7d:07:44:ec:
                    b3:f5:cf:0e:c9:ab:76:13:03:e2:2e:07:92:3c:da:
                    06:64:b1:56:cd:76:16:7b:84:78:58:6d:36:8b:f5:
                    3f:b8:d2:49:79:1d:35:21:1f:6a:e2:40:8f:95:8d:
                    de:0c:51:b2:e3:1e:eb:a7:48:45:bb:c8:7e:37:68:
                    c9:e7:ea:88:a3:00:e6:fc:c5:8e:c9:e6:07:4a:25:
                    f6:a3:4e:6f:d9:f5:62:98:e2:e6:ed:9e:01:1c:c1:
                    61:1d:68:ca:f7:c3:5a:ab:c1:41:10:93:19:e7:52:
                    3c:fd:cc:4f:2f:66:a3:75:86:bb:cb:6f:2d:88:84:
                    1a:67:72:13:eb:5f:ac:67:3b:65:51:d6:e8:6e:bd:
                    bc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CE:6C:1A:0A:4D:CB:99:0F:7C:87:1B:5A:13:66:54:30:C5:D6:37
            X509v3 Authority Key Identifier:
                keyid:84:10:1C:EC:AA:6A:71:46:5D:CF:66:5D:71:62:79:A0:08:34:1E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:f9:9c:13:ef:69:23:ac:b3:52:02:7a:59:4f:32:cf:cf:1f:
         e5:0e:80:e5:55:f0:c3:b7:5b:52:4b:db:b6:04:6c:a8:df:d8:
         9e:53:f8:39:b1:d5:43:6e:ca:bd:99:a8:f2:13:77:0b:a6:34:
         0e:d5:38:e5:24:e4:33:ec:10:08:e4:22:af:be:fd:e7:ec:46:
         07:b5:aa:61:18:ee:39:6b:6e:17:d5:63:6d:1a:ef:d4:d6:99:
         1d:22:44:80:f9:05:39:a7:02:5a:1a:95:25:04:b8:1c:89:e4:
         5a:4b:32:ab:f0:f1:5d:40:7d:32:21:49:64:91:2f:d1:89:3e:
         80:d8:ca:d0:6f:05:26:c0:00:f9:99:d4:aa:33:70:40:3e:b0:
         be:4a:97:b3:48:2a:c0:56:15:f2:95:6f:92:dd:c9:02:3f:fd:
         a9:94:bc:fa:91:a2:e0:e6:55:41:ea:42:71:7a:c8:fb:20:2e:
         b3:22:b9:f7:ff:61:11:e6:74:c9:f9:88:ed:32:74:60:19:46:
         2d:88:f4:20:16:5d:a2:65:58:19:02:65:f5:53:74:ac:08:dc:
         44:15:bf:18:65:3b:a6:39:da:2a:ae:1a:44:f6:4d:4b:3b:1e:
         9a:d8:d6:16:89:c3:7e:a5:6e:83:e2:8f:0a:30:13:b9:54:d3:
         d2:71:9b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:54:41 2025 by rpki-client