Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File:                     D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier:          g2vvmvZ6o86guW54SEuTu5bAzYF4FqRvDc/KuFjDtBo=
Subject key identifier:   87:01:3C:0E:49:E0:9F:A2:FA:8A:74:8E:E7:84:F7:1D:C1:92:8C:8A
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer:       /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial:       66DB29AD8EDD5425664C65BD7A28A64F28D38C56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number:          0300
Signing time:             Mon 05 May 2025 03:37:07 +0000
Manifest this update:     Mon 05 May 2025 03:32:07 +0000
Manifest next update:     Tue 06 May 2025 03:55:07 +0000
Files and hashes:         1: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: 51M8ZPi0SIQkULYQkWdVYm1yGcd4p/+DSmZok2PgzD8=)
                          2: AS203843.asa (hash: SjQvRdVSyAmhreUXMnoTzQGOfU82fRyH6H45jAscwqs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:db:29:ad:8e:dd:54:25:66:4c:65:bd:7a:28:a6:4f:28:d3:8c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
        Validity
            Not Before: May  5 03:32:07 2025 GMT
            Not After : May  6 03:55:07 2025 GMT
        Subject: CN=87013C0E49E09FA2FA8A748EE784F71DC1928C8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fe:64:cb:72:86:0a:98:dd:f9:a9:c4:4b:7d:
                    23:6f:e6:14:c2:48:22:4a:2e:1b:96:2b:6a:2a:3b:
                    33:fd:df:dc:fc:08:81:2a:4a:92:8b:2f:01:90:4b:
                    2e:1e:c8:a7:a2:e3:11:48:6f:c6:f8:61:69:6c:84:
                    58:29:32:6e:61:9f:13:2c:8b:ea:2f:ad:8c:59:e7:
                    37:48:af:7c:0c:5e:d1:ce:9e:94:eb:4b:a5:8a:a9:
                    9f:db:e8:ac:60:bc:8e:b9:c0:c1:db:29:2d:4a:ea:
                    93:95:48:5b:ef:7d:f2:57:6e:cf:eb:2c:61:49:97:
                    5f:6b:49:ef:0e:d1:b1:72:85:6a:74:37:9e:49:37:
                    c8:ea:4e:4e:f5:55:19:6e:5c:e5:86:5f:6c:8f:5b:
                    2f:9d:cf:2e:1f:9e:41:04:e3:c0:2c:34:31:1f:1e:
                    e7:46:ba:8f:26:4e:74:c0:8a:5b:0d:68:95:d3:6d:
                    fe:2d:6d:0c:72:58:61:51:c3:9a:c5:f2:9c:84:07:
                    22:f5:58:eb:85:77:5f:0c:57:96:02:6b:74:d6:66:
                    88:ef:48:60:57:ca:50:57:f5:15:2c:1b:1a:ff:ed:
                    bc:89:63:b3:d0:3c:a2:02:fc:58:37:3f:d8:1f:7a:
                    a2:22:33:c4:0f:4e:e2:32:a0:20:5a:cc:20:f1:67:
                    73:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:01:3C:0E:49:E0:9F:A2:FA:8A:74:8E:E7:84:F7:1D:C1:92:8C:8A
            X509v3 Authority Key Identifier:
                keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:fb:33:27:6b:e9:a3:52:c3:84:42:64:b8:b8:cd:2c:9c:f0:
         5c:9f:62:c9:68:18:bb:ce:05:4c:11:3e:5d:26:de:e4:f5:56:
         7f:98:3d:3f:5d:e4:44:c9:92:8e:cb:85:fb:ce:fa:98:23:3e:
         57:d7:8f:9c:aa:20:1c:14:3d:b9:d5:2c:b3:43:7d:4f:32:ad:
         aa:44:dd:91:6e:22:4a:34:e9:98:5d:45:fc:de:19:9c:fd:0d:
         1b:e5:87:2a:c3:be:e5:28:c3:34:e3:be:74:8b:4d:d2:03:d5:
         b9:b3:06:01:02:fd:d2:0c:b7:df:79:ef:9b:95:31:7f:2b:6f:
         a1:21:a2:16:a9:04:34:19:c1:2b:85:22:cb:62:76:f4:27:1c:
         61:04:3b:fc:02:88:50:98:93:61:b7:b2:ab:d5:0e:20:00:12:
         cc:44:2d:23:fd:01:10:de:d2:55:63:54:b6:f7:7b:e4:ac:d1:
         6e:f0:14:46:dc:4f:0f:0a:d5:87:b6:b1:6d:6f:25:f7:06:50:
         19:73:2a:67:8a:0f:67:80:c7:4a:5c:4e:e7:a7:85:55:ca:a8:
         23:7c:d9:3a:24:07:9a:3a:a4:e8:e3:cb:bb:af:13:a1:23:f8:
         04:df:03:59:cb:b0:91:05:3e:c3:7f:97:14:21:27:31:e4:b6:
         d3:9f:f8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:56:18 2025 by rpki-client