Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
File:                     6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft (raw, json)
Hash identifier:          7wHlOJbKIwUtId97zjZvR8kS9H3RS4+6EIeWryX+UIc=
Subject key identifier:   F8:A7:7F:4C:29:D9:DD:10:B7:A1:48:D4:0B:96:BA:B1:A0:A4:55:B6
Authority key identifier: 60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA
Certificate issuer:       /CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca
Certificate serial:       7BAA4130AF77CA02DD22DF4C022245482EE0D78A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
Manifest number:          01A9
Signing time:             Sun 29 Jun 2025 02:12:40 +0000
Manifest this update:     Sun 29 Jun 2025 02:07:40 +0000
Manifest next update:     Mon 30 Jun 2025 05:34:40 +0000
Files and hashes:         1: 323030313a3766383a3135373a3a2f34382d3438203d3e2030.roa (hash: cAb30fVqTd8++M4lv8QD26BvmJIcWc1fy7zzqGZ9Hbs=)
                          2: 6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl (hash: lFv0d4YsD5rNS43gzeT1mBFZJD/eUeHWrJ7y28rKESU=)
                          3: 3139332e33342e3139392e3132382f32362d3236203d3e2030.roa (hash: cdfMKTJdIDROnWRX3ePB7aEvma9a4XSp/cOBrzuz6w0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 05:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:aa:41:30:af:77:ca:02:dd:22:df:4c:02:22:45:48:2e:e0:d7:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca
        Validity
            Not Before: Jun 29 02:07:40 2025 GMT
            Not After : Jun 30 05:34:40 2025 GMT
        Subject: CN=F8A77F4C29D9DD10B7A148D40B96BAB1A0A455B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6d:6b:b1:34:56:51:a6:44:f2:da:b3:e7:d4:
                    69:f5:aa:6d:81:ab:24:e9:cb:75:9b:f8:da:3c:41:
                    35:08:76:b3:c3:5f:4d:d7:c7:7b:53:b7:1a:86:d5:
                    09:09:73:79:aa:4b:1e:0d:04:9c:20:f9:45:66:46:
                    5f:e2:72:eb:ef:09:90:72:5f:84:bb:37:56:2e:7b:
                    71:02:9f:6e:dd:c9:76:f8:5d:03:33:0d:51:a8:0c:
                    58:8e:1f:61:a6:97:49:f9:9d:17:e9:b9:80:cf:aa:
                    ff:9a:1e:99:99:bc:e6:af:ac:41:75:db:55:bb:47:
                    e1:5a:0e:3b:5a:99:1a:98:d4:71:da:e0:cc:99:3a:
                    f7:ee:9c:7d:73:e4:e8:4c:36:cc:39:bd:8b:64:e4:
                    ca:a9:ba:10:af:11:28:63:56:d2:6d:41:4b:19:ca:
                    09:8f:e9:a1:55:a4:02:65:9f:4f:d5:ca:9c:e7:03:
                    6e:c9:f9:54:fa:81:82:f6:55:1e:27:33:c7:b0:52:
                    19:a4:8f:b5:6c:e3:36:20:8a:6a:9a:71:18:cf:6a:
                    0d:03:14:67:28:f7:41:34:b8:6b:4e:27:2c:f1:be:
                    9b:8d:5e:8d:a0:7b:71:31:78:3c:f4:3b:9d:ec:52:
                    8d:66:7d:49:ed:6b:ec:d1:d6:34:54:09:2e:5b:2b:
                    3e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A7:7F:4C:29:D9:DD:10:B7:A1:48:D4:0B:96:BA:B1:A0:A4:55:B6
            X509v3 Authority Key Identifier:
                keyid:60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:54:14:2f:55:40:86:2c:da:0c:3d:0e:89:ba:e0:63:2b:0d:
         28:c0:6c:7d:ee:6d:64:60:62:52:c2:3c:7c:d5:37:d6:3b:4a:
         8f:b1:33:6b:3a:20:c0:70:d5:20:c2:11:9c:a7:6e:7a:85:70:
         56:1d:e0:26:ee:db:06:f9:07:b2:1a:ce:42:4b:2c:76:6e:6b:
         ba:2a:e7:46:0d:81:f2:2e:ca:9e:95:5c:56:c4:c8:b7:28:5c:
         78:8f:40:f6:4f:29:46:55:45:f2:8e:9c:66:b3:36:17:81:0e:
         25:66:ff:ac:7d:ed:df:7b:5f:3e:9c:95:83:e8:ef:f0:88:a6:
         70:77:4a:78:c6:e3:db:02:02:26:ab:1d:d6:f6:14:8b:63:7a:
         75:c7:3c:de:26:5f:ca:ed:3b:13:61:f1:fb:97:68:92:c5:15:
         aa:c0:c4:a3:7a:08:61:87:53:61:94:70:e9:7b:ca:8d:79:dd:
         18:59:fe:20:e5:56:d0:86:7f:6c:8a:28:6b:4f:f5:54:46:12:
         68:67:b1:ae:c1:24:60:ae:69:d0:65:3b:62:36:91:83:c1:f8:
         e6:45:1c:da:82:4d:d8:0d:d8:5d:b2:44:9d:24:30:4a:2c:55:
         91:8c:6c:67:1f:7a:44:b1:54:86:24:81:b8:3f:19:68:55:7b:
         c4:36:67:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:11:56 2025 by rpki-client