Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
File:                     6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft (raw, json)
Hash identifier:          PCHRG2mZzc8FdYa4P+0EZiljK5XCr8brX8HQ2MoD7ls=
Subject key identifier:   D4:C9:CE:50:35:7D:C8:68:89:24:BA:CB:5A:E6:83:06:01:56:4C:84
Authority key identifier: 60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA
Certificate issuer:       /CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca
Certificate serial:       7F273F97467EEA006FEC850C2F51A6AC793D93FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
Manifest number:          0158
Signing time:             Tue 06 May 2025 14:59:56 +0000
Manifest this update:     Tue 06 May 2025 14:54:56 +0000
Manifest next update:     Wed 07 May 2025 15:23:56 +0000
Files and hashes:         1: 6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl (hash: xNF6NQFGrua044gFlU9fvvUhYokdrAxokWr8sLrbYEs=)
                          2: 323030313a3766383a3135373a3a2f34382d3438203d3e2030.roa (hash: cAb30fVqTd8++M4lv8QD26BvmJIcWc1fy7zzqGZ9Hbs=)
                          3: 3139332e33342e3139392e3132382f32362d3236203d3e2030.roa (hash: cdfMKTJdIDROnWRX3ePB7aEvma9a4XSp/cOBrzuz6w0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 15:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:27:3f:97:46:7e:ea:00:6f:ec:85:0c:2f:51:a6:ac:79:3d:93:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca
        Validity
            Not Before: May  6 14:54:56 2025 GMT
            Not After : May  7 15:23:56 2025 GMT
        Subject: CN=D4C9CE50357DC8688924BACB5AE6830601564C84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5e:bd:e5:f1:88:8e:e9:dd:37:15:6d:34:3a:
                    82:1a:62:c7:3d:75:41:8c:82:9d:42:aa:50:90:76:
                    8d:54:62:76:05:1f:d3:91:43:2a:1c:09:6e:84:6b:
                    52:69:b5:73:fe:ee:85:fb:4b:83:4e:a9:a4:dd:54:
                    62:c8:20:40:df:cd:0e:85:7e:d2:38:43:d4:38:90:
                    b3:77:13:de:c4:2d:d9:1b:18:ad:21:ab:30:2f:6d:
                    4c:e1:61:32:15:f3:29:f6:51:62:3d:c8:f3:0e:23:
                    6f:ca:7f:35:cf:32:f2:bc:cb:0e:bf:72:22:d1:f6:
                    61:9e:d9:0a:81:bc:16:d1:be:6f:90:48:6e:d3:1e:
                    6e:c8:3e:b7:9e:65:41:68:5c:d3:ac:24:b9:60:46:
                    3b:e0:ce:29:de:8a:45:3f:28:72:88:4f:48:7a:24:
                    95:ba:6e:12:c0:b7:7e:2d:12:a8:db:49:77:e0:19:
                    39:ad:6d:cd:e9:6b:ac:f4:d8:a4:bd:50:73:66:bd:
                    79:6e:80:db:b6:9b:d0:9c:c1:28:d1:b4:95:5d:ad:
                    80:ee:7f:6d:71:de:12:cc:20:53:a6:7a:7c:e9:21:
                    ec:78:76:f5:86:a3:e9:71:2a:4f:ac:6f:f1:52:6b:
                    4f:cd:fe:39:a3:42:9b:f0:1e:73:8b:28:57:05:36:
                    dc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C9:CE:50:35:7D:C8:68:89:24:BA:CB:5A:E6:83:06:01:56:4C:84
            X509v3 Authority Key Identifier:
                keyid:60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:dd:f9:96:43:de:f4:97:0f:53:3f:67:a9:8d:af:ee:1d:58:
         6f:b0:ab:e7:a0:5e:bb:26:bb:28:2d:8f:de:54:07:a3:94:9a:
         56:f2:22:db:d5:0f:fe:4f:73:83:4f:11:15:dc:c0:ae:15:4a:
         08:1a:f8:c4:7d:34:5c:8c:58:86:b0:6a:a1:78:d3:f6:55:01:
         92:41:58:05:a9:3c:91:d1:c7:d8:6d:5a:f1:94:ec:87:7d:2d:
         80:13:94:a1:61:01:81:33:c5:43:32:9e:70:f0:48:15:26:56:
         8b:7b:80:db:bf:ce:8e:c2:68:b2:31:26:75:5c:28:2f:48:c2:
         8c:19:88:bb:06:f5:a4:1c:2f:4e:27:86:9b:1e:5e:37:3b:a8:
         2f:3e:12:4f:b3:de:ab:a4:ea:97:00:56:d5:69:f7:68:14:77:
         03:e1:83:d1:56:d1:03:e8:74:a7:af:04:6f:17:67:9d:24:10:
         96:ab:1f:c6:6f:3c:ea:58:a5:c3:65:8f:ed:1e:38:e7:60:99:
         ab:67:67:cb:fb:76:35:4c:d7:cb:79:d0:29:b6:44:6c:1b:50:
         33:de:fc:af:c0:68:d9:89:bf:48:18:53:87:5b:81:57:a6:f9:
         c1:5a:1b:4a:69:c7:2e:0a:51:73:d1:59:3f:29:90:09:d6:df:
         bf:a7:f6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:40:47 2025 by rpki-client