Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft
File:                     AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft (raw, json)
Hash identifier:          XqpCz7Z160T3FnQUCGnBS1LkFKSFLaShrX2ukMXzmbU=
Subject key identifier:   56:52:E1:9B:CC:55:18:50:72:B4:39:3A:43:C4:4D:69:4B:3B:65:2C
Authority key identifier: AD:7B:DA:1D:05:90:7A:5F:B9:FA:4E:7E:3C:FB:4B:9A:E2:12:87:C2
Certificate issuer:       /CN=ad7bda1d05907a5fb9fa4e7e3cfb4b9ae21287c2
Certificate serial:       79AD3F18D603A4D4164A7A0E6B543677A387ADC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rXvaHQWQel-5-k5-PPtLmuISh8I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft
Manifest number:          0145
Signing time:             Sat 10 May 2025 13:17:48 +0000
Manifest this update:     Sat 10 May 2025 13:12:48 +0000
Manifest next update:     Sun 11 May 2025 13:59:48 +0000
Files and hashes:         1: AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.crl (hash: 2pIOfbix+JfiBy/w1TZ1UkUbKWo9CAnOVfjg/ScDCzs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rXvaHQWQel-5-k5-PPtLmuISh8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ad:3f:18:d6:03:a4:d4:16:4a:7a:0e:6b:54:36:77:a3:87:ad:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad7bda1d05907a5fb9fa4e7e3cfb4b9ae21287c2
        Validity
            Not Before: May 10 13:12:48 2025 GMT
            Not After : May 11 13:59:48 2025 GMT
        Subject: CN=5652E19BCC55185072B4393A43C44D694B3B652C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d6:7d:24:71:3a:de:08:b0:94:0d:3b:a1:47:
                    2a:3b:05:4c:d8:76:37:ae:67:54:1c:e0:c5:ed:62:
                    f1:a8:15:46:25:f8:11:87:8b:00:dd:a6:24:7a:4b:
                    f6:ea:41:6d:e7:3d:30:cc:b8:f2:f1:39:7e:6a:0a:
                    a7:0d:56:1c:eb:3b:3a:f0:22:4f:75:aa:5b:d9:60:
                    c0:cf:cc:7d:48:5b:ec:6b:08:b8:55:0e:c5:dc:2c:
                    0e:de:fe:29:ad:5e:79:9a:19:78:57:70:25:a9:b2:
                    79:72:41:c8:56:38:ab:d4:58:8a:1c:95:aa:73:72:
                    e4:a5:5a:78:35:1d:b0:e7:42:d4:90:6f:da:3e:3e:
                    53:fd:8f:1d:1b:05:64:8b:f5:e8:ce:9d:b2:34:5f:
                    db:02:18:75:74:62:7f:25:88:cd:30:c7:2c:2c:0f:
                    85:2b:45:ab:2a:9d:92:f9:bf:42:ae:84:ac:51:06:
                    a6:dc:a9:cb:0a:42:c1:3b:98:bb:90:5a:5d:9a:f2:
                    5b:d0:ce:9b:d5:37:64:74:0b:36:88:40:b5:43:93:
                    22:eb:b6:2c:d7:a5:a0:71:71:a1:7a:f1:58:f2:47:
                    78:f9:fe:aa:48:e5:04:1c:d1:40:6b:d3:88:4f:09:
                    ee:5a:18:29:df:a9:56:b0:26:bd:d0:9d:1b:da:2e:
                    8e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:52:E1:9B:CC:55:18:50:72:B4:39:3A:43:C4:4D:69:4B:3B:65:2C
            X509v3 Authority Key Identifier:
                keyid:AD:7B:DA:1D:05:90:7A:5F:B9:FA:4E:7E:3C:FB:4B:9A:E2:12:87:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXvaHQWQel-5-k5-PPtLmuISh8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:67:92:b6:de:4b:7b:a2:4c:e6:0f:01:e9:66:7f:5a:e8:6c:
         47:15:f4:e5:bc:c6:94:e3:28:5e:02:03:ab:89:21:82:4e:4f:
         aa:6a:c0:6a:4a:5b:b4:2f:dc:96:b9:e7:15:62:83:0b:7d:90:
         6c:11:90:a5:32:ce:ef:91:bc:bc:30:d3:60:7a:fc:1e:3b:6f:
         33:a8:69:df:69:7a:15:b7:ea:8c:b2:96:af:0f:1a:ff:4e:27:
         cf:c1:e8:1d:e5:27:eb:39:34:68:e3:37:e2:e6:16:a4:1d:7c:
         40:9f:c6:5d:9d:98:43:0b:69:a0:3c:03:bc:55:b8:e3:9c:ca:
         a4:f9:f4:cf:49:f5:cb:6e:77:a9:a9:c3:c4:94:94:51:f3:5a:
         78:26:53:41:f1:90:94:d6:a6:b1:dc:b3:23:65:45:cd:e4:8d:
         23:d0:4a:a3:2d:7f:20:7a:91:5b:75:18:92:04:66:62:8b:e8:
         32:57:ba:9f:9f:b2:c5:de:24:df:57:c5:a0:81:a5:c0:d8:89:
         93:5d:80:59:79:9d:10:e7:3a:72:94:5d:6c:42:e1:ab:64:da:
         d9:ac:15:c1:5a:91:86:cc:5c:be:7c:7f:35:da:54:3a:71:d1:
         76:61:47:e0:47:9a:3f:90:37:ed:2b:ec:3a:c7:52:8f:f6:ca:
         77:e3:e4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:22:46 2025 by rpki-client