Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
File:                     6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft (raw, json)
Hash identifier:          BVI54AHqm9cWp5o7+7aTYdq9UtaW5zulIZ1RH7K+sbU=
Subject key identifier:   D4:69:FC:54:89:54:B7:DE:11:6A:B5:9E:47:AB:7D:04:B6:26:EE:C0
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Certificate issuer:       /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial:       4899A33EF4CD855AD97BD6548803597D98A76CE4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
Manifest number:          0354
Signing time:             Tue 01 Jul 2025 07:54:43 +0000
Manifest this update:     Tue 01 Jul 2025 07:49:43 +0000
Manifest next update:     Wed 02 Jul 2025 09:12:43 +0000
Files and hashes:         1: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl (hash: al1FJ3aqtwORh72tqWhPT+42uTONILosoww7ppzbEnA=)
                          2: EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (hash: HGmIGZLAwtENWMckwsQ8hWTMC9jCNzhQYJENgR6PUlg=)
                          3: 323630323a666136653a3a2f33362d3336203d3e203133363436.roa (hash: VGLKsgogi2I3ngbX4zz98KwF+ce4xUWbXael6VtJ/R8=)
                          4: 3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa (hash: ds98Ml9DDwJOnbFWnKuYftmXTBL5e6vB9e43egQhGMs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 09:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:99:a3:3e:f4:cd:85:5a:d9:7b:d6:54:88:03:59:7d:98:a7:6c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
        Validity
            Not Before: Jul  1 07:49:43 2025 GMT
            Not After : Jul  2 09:12:43 2025 GMT
        Subject: CN=D469FC548954B7DE116AB59E47AB7D04B626EEC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:9e:82:10:c6:64:05:cb:ff:25:ac:9f:00:
                    85:20:df:89:c9:73:53:ce:e7:c3:c3:e4:32:45:51:
                    75:76:8a:5d:b9:67:9f:40:a1:24:ed:84:af:f8:4e:
                    b5:42:d6:18:61:7d:2d:fb:8b:b8:0e:e9:52:e4:bc:
                    08:7f:c2:e9:a6:ef:1d:09:62:10:54:ab:52:db:b7:
                    e6:9f:0b:e4:e6:b3:69:8d:e0:67:7d:eb:f7:35:7f:
                    c0:0d:a2:f2:65:f4:f0:f8:23:3f:66:48:10:10:20:
                    c7:61:62:00:0b:e5:d9:c3:28:c8:45:81:e4:29:eb:
                    8d:9a:12:b0:80:e9:2a:f8:3d:03:4c:ef:cf:bb:fb:
                    1d:a1:d4:4d:0b:23:2a:d7:f2:4c:00:a8:e9:10:da:
                    04:10:de:ca:6f:4c:93:9b:62:22:04:c3:7a:a9:71:
                    06:0d:d3:1c:95:92:98:ac:4a:a9:52:40:65:1d:56:
                    18:bb:0d:7f:d6:2e:00:54:d5:93:ff:11:f8:3a:34:
                    b9:b7:ff:4c:1a:8c:5f:ad:9b:80:36:b3:bd:21:d6:
                    25:d3:31:e8:3e:67:8f:9c:2c:58:46:a1:fd:d0:0a:
                    7d:7d:4f:bf:f0:bc:58:03:0e:73:66:97:79:06:e3:
                    f0:b8:12:05:81:cf:0e:36:30:42:6e:48:df:36:4a:
                    99:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:69:FC:54:89:54:B7:DE:11:6A:B5:9E:47:AB:7D:04:B6:26:EE:C0
            X509v3 Authority Key Identifier:
                keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:35:74:8d:6c:a8:df:1a:ec:1e:c0:b5:ad:a7:98:f3:4c:78:
         c2:b3:f5:12:9f:12:8f:a7:ff:88:90:f6:da:c0:5a:42:8c:b5:
         d1:e6:2d:0d:27:4a:75:1c:6d:88:5f:e7:2e:b4:2b:84:c9:ee:
         23:81:c8:4b:ae:9c:5f:52:db:c9:6c:5d:79:0e:3f:ca:45:32:
         5d:cf:4f:c3:4c:b9:c5:bd:42:ac:df:06:73:4a:51:be:33:63:
         c7:48:ab:26:87:94:98:aa:67:4c:3d:bb:db:90:d8:e8:85:1f:
         54:9f:cd:6f:11:38:d7:41:c8:b5:3a:52:d8:f4:d2:d4:d6:39:
         82:30:e8:e9:47:e3:4f:91:81:02:69:e6:80:42:9e:da:6f:24:
         44:95:e4:1c:13:ae:d4:45:54:0a:05:5e:71:b4:69:7e:e1:21:
         12:28:97:1b:aa:83:a4:ff:90:b5:9d:08:ba:e6:7a:62:ee:8c:
         82:f6:92:93:0a:b7:aa:15:66:22:a0:99:e2:ab:da:22:5c:5e:
         68:df:d5:8a:34:3f:cc:32:10:d4:8f:a8:9e:0a:67:bc:a1:89:
         0a:90:36:e4:a9:4f:b0:30:af:c8:b6:a4:96:8d:8b:16:51:24:
         1a:32:e7:a0:40:76:46:ef:15:2c:37:67:02:19:80:7d:83:6d:
         8f:25:6a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:20:34 2025 by rpki-client