Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft
File:                     C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft (raw, json)
Hash identifier:          cmdEzkex09hIM8zU/RKO87ztKMO2dTvt4FOgNxRzab0=
Subject key identifier:   E4:3D:C2:51:59:84:F9:77:5F:A5:B5:99:16:D0:2A:D9:7F:5C:F0:A7
Authority key identifier: C9:E7:59:75:E6:6E:7B:C4:34:4F:9C:DE:2C:30:73:B8:E5:4A:2F:0E
Certificate issuer:       /CN=c9e75975e66e7bc4344f9cde2c3073b8e54a2f0e
Certificate serial:       3B6C27DB639DD6A1E2B5DB1E78AF8F8532CA1E15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft
Manifest number:          01DB
Signing time:             Tue 01 Jul 2025 10:50:54 +0000
Manifest this update:     Tue 01 Jul 2025 10:45:54 +0000
Manifest next update:     Wed 02 Jul 2025 14:03:54 +0000
Files and hashes:         1: C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl (hash: rw8jD88XDPmSqxw7EDVDVhCf+KDxjU4mXmcbuvrKfD0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 14:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:6c:27:db:63:9d:d6:a1:e2:b5:db:1e:78:af:8f:85:32:ca:1e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e75975e66e7bc4344f9cde2c3073b8e54a2f0e
        Validity
            Not Before: Jul  1 10:45:54 2025 GMT
            Not After : Jul  2 14:03:54 2025 GMT
        Subject: CN=E43DC2515984F9775FA5B59916D02AD97F5CF0A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:20:c5:f5:62:17:51:55:39:c1:64:a4:ef:cc:
                    07:0a:5b:35:5d:2b:3d:e2:b0:c8:e1:fa:9a:c7:97:
                    6a:0d:02:90:d0:84:e0:22:72:80:54:be:7a:5e:23:
                    65:1d:de:91:d7:11:8a:f8:65:3a:dc:f8:96:6d:50:
                    b5:00:4d:7f:73:f9:0e:99:0b:f9:7e:f3:8c:ec:5c:
                    43:8b:17:59:37:7b:db:55:c6:bb:1f:90:42:5f:e1:
                    25:12:15:29:d3:77:98:99:41:70:c5:69:34:fd:1c:
                    a8:a8:07:96:08:f8:95:3b:92:2a:1c:5a:d0:ab:32:
                    b1:f4:b8:9d:b4:98:38:c3:dd:1a:d7:9c:6a:1e:ac:
                    94:55:c1:b0:70:1e:c8:27:29:d6:7f:c9:83:49:7b:
                    fb:d7:c2:15:ec:96:b8:7a:0d:e5:bf:c8:28:25:79:
                    31:47:09:8f:94:4d:21:d7:0d:f6:1e:64:45:9e:b6:
                    da:2c:79:68:00:3e:5e:fb:2b:af:86:5a:83:5f:ab:
                    17:b4:31:1d:1d:8c:6c:a3:78:08:0c:89:ce:59:34:
                    a0:ed:83:5d:01:43:f0:4c:98:57:52:ea:f5:3e:09:
                    4a:ea:1c:f1:52:43:8e:a4:88:02:d6:a6:fb:57:85:
                    45:6d:cb:61:26:86:29:dd:5b:9f:20:7c:f0:56:82:
                    47:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3D:C2:51:59:84:F9:77:5F:A5:B5:99:16:D0:2A:D9:7F:5C:F0:A7
            X509v3 Authority Key Identifier:
                keyid:C9:E7:59:75:E6:6E:7B:C4:34:4F:9C:DE:2C:30:73:B8:E5:4A:2F:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c8:b1:d2:13:03:2b:c5:f6:35:b6:60:88:49:4f:1f:65:b4:
         11:62:02:ec:34:37:65:cb:68:f2:47:a9:4c:24:d5:da:68:2b:
         b2:fa:40:f7:83:57:86:d9:90:12:57:a3:48:ed:68:48:9c:14:
         76:c7:6d:6d:41:17:35:14:9c:f5:2e:8d:29:bf:a5:15:01:35:
         83:ff:a1:6a:f9:3b:d2:27:d1:1f:5b:fb:c1:bf:ad:f4:3e:d2:
         90:94:e5:6b:7d:33:dc:12:da:5b:4c:43:98:a2:3f:18:a9:7a:
         12:ab:3d:03:0f:e8:1e:86:21:7d:ed:23:23:64:04:a9:6d:c8:
         1c:39:33:b9:0f:9c:19:51:a1:c6:d8:59:ee:52:58:e4:f5:fc:
         a7:8d:f6:3a:e6:9b:8d:bf:a0:95:82:77:45:8c:f6:12:e8:37:
         5a:0a:b8:15:a1:b2:38:80:d4:f3:8d:7b:39:5b:84:26:a8:0a:
         e1:db:1c:c2:f9:62:b2:6e:6c:ab:b4:31:c0:25:6e:ed:d9:1c:
         f2:89:c4:47:51:6f:08:8d:2f:be:e4:3a:82:c6:70:c3:4b:a9:
         01:5f:b2:a4:57:8a:a5:34:b6:30:7e:53:bf:7d:4a:1f:ea:ce:
         b1:c4:5b:af:69:2e:25:ba:8b:bd:9f:a7:40:e2:48:39:99:23:
         3f:d6:77:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:05:32 2025 by rpki-client