Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/6EC74C12BEB63E6D47484ACE255EC241A80F5486.mft
File:                     6EC74C12BEB63E6D47484ACE255EC241A80F5486.mft (raw, json)
Hash identifier:          E7/ie09oPIQMszRtqkXX6s345HqOQ4NtvFcTEsBh2yM=
Subject key identifier:   1A:B9:D0:0F:13:12:89:0B:BC:1E:87:3C:86:78:68:30:D0:4C:FC:5C
Authority key identifier: 6E:C7:4C:12:BE:B6:3E:6D:47:48:4A:CE:25:5E:C2:41:A8:0F:54:86
Certificate issuer:       /CN=6EC74C12BEB63E6D47484ACE255EC241A80F5486
Certificate serial:       493512235EF47881B79C3CEB9E979B1B214A6C29
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/6EC74C12BEB63E6D47484ACE255EC241A80F5486.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/6EC74C12BEB63E6D47484ACE255EC241A80F5486.mft
Manifest number:          7B
Signing time:             Sat 28 Jun 2025 16:39:07 +0000
Manifest this update:     Sat 28 Jun 2025 16:34:07 +0000
Manifest next update:     Sun 29 Jun 2025 18:13:07 +0000
Files and hashes:         1: 6EC74C12BEB63E6D47484ACE255EC241A80F5486.crl (hash: 33cvYdNKwdPtZiW4CzzQhpG3pXg4792g5oYDxfU4ZBk=)
                          2: 326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa (hash: 3qXl5FbKnzkRN6THBxhJGfWR/NW3B6cW7HVh5EatIt4=)
                          3: 326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa (hash: kLshiO0rOW+ggqCV108F0+7nFme7ukmop3yjQDLvDOs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/6EC74C12BEB63E6D47484ACE255EC241A80F5486.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/6EC74C12BEB63E6D47484ACE255EC241A80F5486.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/6EC74C12BEB63E6D47484ACE255EC241A80F5486.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 18:13:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:35:12:23:5e:f4:78:81:b7:9c:3c:eb:9e:97:9b:1b:21:4a:6c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EC74C12BEB63E6D47484ACE255EC241A80F5486
        Validity
            Not Before: Jun 28 16:34:07 2025 GMT
            Not After : Jun 29 18:13:07 2025 GMT
        Subject: CN=1AB9D00F1312890BBC1E873C86786830D04CFC5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:99:0d:e1:04:78:89:76:2f:dc:d3:5e:45:55:
                    df:e9:c6:db:e4:d8:96:42:15:5d:82:7e:27:38:93:
                    12:24:cd:d1:e0:44:e4:3c:ac:ff:e1:23:de:45:f4:
                    cb:bd:00:4e:3e:38:ed:4e:bc:d9:4c:de:a4:d1:75:
                    4a:67:2e:12:b2:f9:b4:c1:87:fd:c5:93:5a:4d:4a:
                    e0:56:1a:11:e1:37:41:55:eb:6c:98:a5:3b:9a:f5:
                    67:d0:a9:a3:e2:0d:73:c1:bc:88:58:69:1b:6e:c0:
                    31:cb:dc:61:9a:ce:29:ac:99:c7:8c:1f:2a:e0:f4:
                    2c:cc:69:a9:3a:fb:13:37:4a:89:15:75:f5:0d:35:
                    68:6b:c8:ce:4a:8e:51:a6:b8:4b:96:1e:72:b0:fc:
                    2a:03:58:ce:5b:ee:50:ca:19:80:ce:1c:75:c4:9c:
                    92:09:31:8b:45:03:8d:25:89:a4:a7:45:17:98:a3:
                    1c:e4:56:be:0f:68:f7:f5:55:af:82:62:67:8e:e9:
                    2a:d7:b9:08:08:61:f2:f8:15:8a:bd:54:8b:cc:f4:
                    2f:a5:26:5f:aa:9f:f6:6c:ee:a2:40:ab:7f:ed:04:
                    8a:51:6a:d6:25:01:4b:d9:6e:d5:0a:f6:6b:98:3b:
                    28:c3:5f:f3:51:42:f1:8d:9a:54:09:22:38:b9:af:
                    ea:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B9:D0:0F:13:12:89:0B:BC:1E:87:3C:86:78:68:30:D0:4C:FC:5C
            X509v3 Authority Key Identifier:
                keyid:6E:C7:4C:12:BE:B6:3E:6D:47:48:4A:CE:25:5E:C2:41:A8:0F:54:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/6EC74C12BEB63E6D47484ACE255EC241A80F5486.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/6EC74C12BEB63E6D47484ACE255EC241A80F5486.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/6EC74C12BEB63E6D47484ACE255EC241A80F5486.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:66:75:f9:5b:43:60:68:39:bf:f1:47:2e:54:19:a6:7b:f5:
         9c:fe:16:10:53:03:62:04:7c:90:21:0f:2f:85:c9:2c:bd:b1:
         01:0f:b2:b1:7c:87:96:c9:1e:f5:54:70:8b:33:f7:41:66:f1:
         27:ad:bb:ce:76:f7:85:bb:d3:1e:a4:63:89:11:ae:3b:f8:44:
         b0:a0:f4:51:ab:57:bc:73:86:8e:0d:b4:82:c9:41:ab:86:1d:
         03:9d:46:26:8f:f3:d2:b8:f8:e3:16:9b:f1:56:12:fe:06:17:
         60:b5:6e:02:32:04:bc:39:1b:92:a2:a3:e9:61:1e:f8:a2:42:
         aa:ff:a6:5b:0a:2e:9f:6f:70:7d:d5:7a:2f:28:66:db:55:5f:
         51:d4:82:82:ba:f7:43:4c:03:02:ea:37:ae:1d:90:2c:e0:41:
         5b:3a:70:f3:bd:8a:7c:79:03:8d:32:1b:f5:60:ad:fa:15:85:
         3e:99:91:70:cd:bc:1a:a7:12:5c:19:86:64:ff:24:d3:63:10:
         ce:96:dc:46:e6:12:a2:b9:0c:2f:5a:ef:07:56:c8:2e:99:e3:
         41:c9:f2:33:6a:92:ca:4e:80:37:15:a7:e9:81:b0:a8:19:cc:
         c4:48:9e:86:36:ef:ef:d1:33:73:76:45:2a:d9:cf:6f:67:45:
         89:ab:1e:13
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUSTUSI170eIG3nDzrnpebGyFKbCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkVDNzRDMTJCRUI2M0U2RDQ3NDg0QUNFMjU1RUMyNDFB
ODBGNTQ4NjAeFw0yNTA2MjgxNjM0MDdaFw0yNTA2MjkxODEzMDdaMDMxMTAvBgNV
BAMTKDFBQjlEMDBGMTMxMjg5MEJCQzFFODczQzg2Nzg2ODMwRDA0Q0ZDNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKmQ3hBHiJdi/c015FVd/pxtvk
2JZCFV2Cfic4kxIkzdHgROQ8rP/hI95F9Mu9AE4+OO1OvNlM3qTRdUpnLhKy+bTB
h/3Fk1pNSuBWGhHhN0FV62yYpTua9WfQqaPiDXPBvIhYaRtuwDHL3GGazimsmceM
Hyrg9CzMaak6+xM3SokVdfUNNWhryM5KjlGmuEuWHnKw/CoDWM5b7lDKGYDOHHXE
nJIJMYtFA40liaSnRReYoxzkVr4PaPf1Va+CYmeO6SrXuQgIYfL4FYq9VIvM9C+l
Jl+qn/Zs7qJAq3/tBIpRatYlAUvZbtUK9muYOyjDX/NRQvGNmlQJIji5r+pJAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUGrnQDxMSiQu8Hoc8hnhoMNBM/FwwHwYDVR0j
BBgwFoAUbsdMEr62Pm1HSErOJV7CQagPVIYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk
OGM0LzUvNkVDNzRDMTJCRUI2M0U2RDQ3NDg0QUNFMjU1RUMyNDFBODBGNTQ4Ni5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNkVDNzRDMTJCRUI2M0U2RDQ3NDg0QUNFMjU1RUMyNDFBODBG
NTQ4Ni5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZiNC1l
NWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvNS82RUM3NEMxMkJFQjYzRTZENDc0
ODRBQ0UyNTVFQzI0MUE4MEY1NDg2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2Z1+VtDYGg5v/FHLlQZ
pnv1nP4WEFMDYgR8kCEPL4XJLL2xAQ+ysXyHlske9VRwizP3QWbxJ627znb3hbvT
HqRjiRGuO/hEsKD0UatXvHOGjg20gslBq4YdA51GJo/z0rj44xab8VYS/gYXYLVu
AjIEvDkbkqKj6WEe+KJCqv+mWwoun29wfdV6Lyhm21VfUdSCgrr3Q0wDAuo3rh2Q
LOBBWzpw872KfHkDjTIb9WCt+hWFPpmRcM28GqcSXBmGZP8k02MQzpbcRuYSorkM
L1rvB1bILpnjQcnyM2qSyk6ANxWn6YGwqBnMxEiehjbv79Ezc3ZFKtnPb2dFiase
Ew==
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:14:08 2025 by rpki-client