Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
File:                     74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft (raw, json)
Hash identifier:          t112ViJm4IXytxn63cXBLqXCkw3aB0Y6bscMX8Xb2Ho=
Subject key identifier:   B8:FC:91:26:86:48:16:38:0A:C0:03:7D:49:B1:41:F7:18:55:2C:54
Authority key identifier: 74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
Certificate issuer:       /CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Certificate serial:       44619417F977F6C2C28849F76AB3C481F26B547D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
Manifest number:          0104
Signing time:             Mon 05 May 2025 00:50:09 +0000
Manifest this update:     Mon 05 May 2025 00:45:09 +0000
Manifest next update:     Tue 06 May 2025 03:30:09 +0000
Files and hashes:         1: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl (hash: dA3DK9HlQPEXANv49vlaOLiqEV4Qt1HXChg7knM7Xz8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:61:94:17:f9:77:f6:c2:c2:88:49:f7:6a:b3:c4:81:f2:6b:54:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
        Validity
            Not Before: May  5 00:45:09 2025 GMT
            Not After : May  6 03:30:09 2025 GMT
        Subject: CN=B8FC9126864816380AC0037D49B141F718552C54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e6:f2:00:c8:d5:51:34:0d:39:13:9b:df:1a:
                    83:62:eb:29:29:25:4c:12:62:6e:81:c1:9b:1b:82:
                    1a:88:06:42:80:24:00:25:9a:94:12:ec:6f:1f:1e:
                    54:68:74:1e:e6:52:ed:53:49:a9:43:ad:a4:a3:b3:
                    74:bf:53:2a:cd:e7:a6:10:f6:ea:f7:33:8f:74:eb:
                    f7:dd:6c:af:d6:ed:ca:85:f3:fd:fd:cb:16:65:ee:
                    ba:6a:9b:d5:c4:81:c8:b2:82:c3:09:81:63:03:0f:
                    b0:a6:be:4f:8b:0b:06:0f:47:93:87:10:ea:ba:cb:
                    b7:e6:21:e0:dc:38:ef:56:2f:41:c9:a0:e8:ab:99:
                    37:2a:31:42:17:73:45:05:72:07:ce:79:23:18:03:
                    80:01:e5:18:75:b9:f4:8e:a0:b6:ee:c4:e5:10:cb:
                    e3:ef:af:ff:ce:0d:26:92:56:0a:4a:67:0a:d5:d5:
                    25:dd:2b:d8:f8:f2:23:eb:a3:52:39:8c:7e:85:a7:
                    c9:e8:1e:b6:6f:8f:da:42:f8:94:01:a5:47:3d:e3:
                    8a:7c:a0:e9:c5:ad:56:8f:f0:65:30:19:8b:a8:a1:
                    11:32:09:fc:91:f9:8c:9b:72:a4:49:6e:54:fc:05:
                    4b:00:e4:80:08:3c:19:6e:38:57:1d:50:4d:b1:6f:
                    2b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FC:91:26:86:48:16:38:0A:C0:03:7D:49:B1:41:F7:18:55:2C:54
            X509v3 Authority Key Identifier:
                keyid:74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:54:e3:da:cf:d0:34:5c:35:3a:90:7c:6a:50:73:d5:7b:9a:
         6b:4d:c1:df:56:2d:95:d6:c3:95:96:c0:f2:47:d8:38:4d:b4:
         23:2d:ff:78:d5:a1:48:25:a4:c0:0f:38:45:4e:f6:9c:4a:2e:
         4a:d6:90:5f:45:18:6d:5e:92:f7:10:ae:55:2a:44:34:4e:71:
         a8:1f:3e:36:2f:38:90:6c:3e:3d:ca:d5:9c:77:29:09:03:53:
         96:ca:d5:79:e5:ad:96:34:f1:fb:a2:aa:1f:a8:ea:49:ea:61:
         7f:2c:6b:d9:a3:5e:96:d4:2a:33:06:20:a1:70:18:0a:a5:13:
         32:1d:71:d8:36:df:79:65:6a:c9:2b:0c:16:5f:8c:3f:bd:68:
         11:04:98:8c:1d:98:5f:8d:34:38:c4:32:d1:67:d6:df:5a:b0:
         d2:17:82:58:7b:8c:65:80:f4:83:da:05:45:ca:25:f1:4d:60:
         0f:3c:ea:e9:5f:96:d1:79:1b:8b:ca:20:63:4c:c8:3f:6d:2a:
         00:f7:32:34:08:ca:d7:d7:b1:1e:91:53:da:43:75:af:af:56:
         39:62:eb:34:dc:26:14:bc:7f:4d:49:91:3f:a8:53:69:49:97:
         0b:2a:8d:6f:6a:07:59:94:79:d0:5e:9d:b0:a9:0c:13:6c:27:
         be:c0:f9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:56:22 2025 by rpki-client