Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
File:                     84101CECAA6A71465DCF665D716279A008341EA4.mft (raw, json)
Hash identifier:          prqMBCCU/qUWQVGM2XoE86GzEkb2KmmkT/c/g4wS0tg=
Subject key identifier:   1D:B8:00:DE:0B:75:8C:69:58:62:63:8F:BA:96:91:A5:7D:D1:DA:DD
Authority key identifier: 84:10:1C:EC:AA:6A:71:46:5D:CF:66:5D:71:62:79:A0:08:34:1E:A4
Certificate issuer:       /CN=84101cecaa6a71465dcf665d716279a008341ea4
Certificate serial:       12F9F13DEA368894825269137C9616529BC80B23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
Manifest number:          6D
Signing time:             Sat 28 Jun 2025 08:48:13 +0000
Manifest this update:     Sat 28 Jun 2025 08:43:13 +0000
Manifest next update:     Sun 29 Jun 2025 10:49:13 +0000
Files and hashes:         1: 84101CECAA6A71465DCF665D716279A008341EA4.crl (hash: aHDrXlaEPZiLlWPywDrYiHVT+mCIhKyZFSk6iRzyBSs=)
                          2: AS216311.asa (hash: Dmw7omaWtWOpKd5S/DPOujGFLODAQcprPtQE3Nwf75E=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f9:f1:3d:ea:36:88:94:82:52:69:13:7c:96:16:52:9b:c8:0b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84101cecaa6a71465dcf665d716279a008341ea4
        Validity
            Not Before: Jun 28 08:43:13 2025 GMT
            Not After : Jun 29 10:49:13 2025 GMT
        Subject: CN=1DB800DE0B758C695862638FBA9691A57DD1DADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bf:f1:81:ab:37:b0:73:ae:7c:85:9a:13:4a:
                    bb:ee:95:80:50:ed:f7:69:89:62:eb:3a:be:7d:af:
                    52:31:a0:20:fe:6d:cf:d5:73:b1:03:95:62:aa:5e:
                    75:ad:2f:82:dc:ff:c0:15:ae:98:8e:70:e6:ba:20:
                    de:04:5e:f1:e2:dc:7d:5e:55:62:04:23:54:99:20:
                    1a:e3:d9:c1:9a:1e:89:93:d5:b0:e7:f0:9c:6d:9f:
                    20:3e:5e:85:60:5e:26:2f:77:7f:59:70:f8:a4:48:
                    b5:fe:3e:30:bf:1a:bf:9a:29:f7:89:24:b9:68:79:
                    49:3b:0c:4a:32:07:6f:ae:fd:24:62:56:c8:71:ec:
                    61:44:8f:6b:a1:aa:b2:68:aa:94:14:89:4d:8e:9f:
                    0f:5e:ab:0f:d6:4f:12:23:83:5e:cc:ed:40:c6:81:
                    a6:cd:7e:5d:a6:6c:22:ea:f7:fd:88:90:e2:19:bf:
                    b2:20:ce:97:05:9e:0d:ac:7f:ae:49:78:20:00:16:
                    53:c3:38:6c:90:0d:bf:96:34:2e:4f:81:a6:97:be:
                    13:61:a1:84:dd:74:e8:48:69:15:31:b4:80:c8:36:
                    bd:d6:3a:ad:91:23:58:82:46:78:11:2d:f0:2d:fd:
                    70:f5:6e:09:e7:ad:ee:45:bc:d6:3d:9c:89:bf:a2:
                    15:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B8:00:DE:0B:75:8C:69:58:62:63:8F:BA:96:91:A5:7D:D1:DA:DD
            X509v3 Authority Key Identifier:
                keyid:84:10:1C:EC:AA:6A:71:46:5D:CF:66:5D:71:62:79:A0:08:34:1E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c2:1f:47:a8:0b:83:37:94:a9:d3:f9:f2:e5:62:db:5b:67:
         ce:c1:ec:8f:07:ea:34:51:1f:7b:e1:f3:74:0b:03:ba:09:59:
         dc:0f:c6:9a:f6:f0:60:7d:fc:a9:91:61:f4:35:f2:3f:fb:4c:
         c2:36:b2:0d:32:4d:68:16:9e:aa:22:8d:9d:70:54:d0:a1:ac:
         ad:b6:18:ab:dd:f0:03:01:88:8b:3a:68:de:16:76:44:fd:c6:
         25:31:e1:8d:18:1d:a9:5c:7c:46:b1:b8:b4:f5:f2:10:f3:d4:
         9d:f2:63:46:eb:6d:52:f1:c4:90:04:b6:69:64:9b:25:c3:e2:
         9a:7a:26:5e:c2:06:4a:bc:28:4e:6e:79:13:a4:ea:cd:76:c0:
         bf:82:47:f6:3d:ad:61:37:a7:98:50:2f:60:0b:c1:74:50:7d:
         d1:d7:8d:8b:50:15:aa:0c:e2:e5:cd:78:a8:00:26:f1:74:52:
         32:cf:e0:f9:90:54:70:0d:c4:38:60:10:26:b5:54:92:1a:21:
         6b:12:2e:45:fa:e7:fc:09:78:31:ce:b0:51:31:76:7d:fe:a9:
         17:8e:50:35:8e:72:ae:8c:6e:cf:7a:a5:d5:43:f3:e0:d5:89:
         dc:f6:90:2a:90:63:31:dc:c6:de:e9:09:a3:13:9c:d2:e5:5d:
         84:84:b2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:13 2025 by rpki-client