Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
File:                     6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft (raw, json)
Hash identifier:          wxXndmhRbDTKOU4eCyqtgUogoSnIwJ/k5AZGkQnw2b0=
Subject key identifier:   20:B7:AE:AF:50:0F:6F:95:E8:5B:AC:5E:A7:ED:BE:82:F3:67:B6:06
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Certificate issuer:       /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial:       4BF17DA27C2DEB8D3C944A9FD105D7BDC0A06891
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
Manifest number:          030C
Signing time:             Sun 11 May 2025 16:44:03 +0000
Manifest this update:     Sun 11 May 2025 16:39:03 +0000
Manifest next update:     Mon 12 May 2025 18:56:03 +0000
Files and hashes:         1: EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (hash: HGmIGZLAwtENWMckwsQ8hWTMC9jCNzhQYJENgR6PUlg=)
                          2: 3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa (hash: ds98Ml9DDwJOnbFWnKuYftmXTBL5e6vB9e43egQhGMs=)
                          3: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl (hash: 2wlYN+qBub4dp6iWZ0LKMoOfsMSiMMenQCEx5mhqqN0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 18:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f1:7d:a2:7c:2d:eb:8d:3c:94:4a:9f:d1:05:d7:bd:c0:a0:68:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
        Validity
            Not Before: May 11 16:39:03 2025 GMT
            Not After : May 12 18:56:03 2025 GMT
        Subject: CN=20B7AEAF500F6F95E85BAC5EA7EDBE82F367B606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0e:4f:b8:52:38:de:cc:7c:c6:4d:b4:55:a5:
                    95:05:ee:7f:2d:d8:06:fd:a4:5f:da:60:4a:bc:b0:
                    97:30:17:70:06:8b:1c:63:9a:70:3c:0c:ee:cb:1c:
                    70:44:f0:fa:c3:d1:7d:9a:7a:89:b1:5b:9d:5f:cc:
                    a5:ee:4f:1d:2c:78:27:a4:e9:12:a5:4b:b9:e1:3f:
                    f3:b7:06:52:34:41:5d:65:07:d0:87:cb:ca:ae:fc:
                    0e:b5:0a:05:6a:d5:3f:aa:8b:1f:80:1b:a2:4f:4d:
                    e8:3e:51:bc:40:28:aa:0e:c2:f4:b2:de:ff:aa:ab:
                    e6:8c:b2:82:83:3a:b5:16:69:07:71:07:3d:5e:ad:
                    c1:29:78:5f:02:93:38:14:40:25:33:0c:6d:32:21:
                    23:af:4f:24:57:3c:b2:b9:26:b1:99:2b:2f:25:46:
                    58:1b:9f:92:ff:07:3a:21:88:6d:53:5d:fb:81:a3:
                    b7:c0:ac:0d:6c:80:8a:a3:c3:05:16:75:4f:e5:a2:
                    ce:81:74:e4:92:fb:45:94:92:72:57:c2:6e:94:c3:
                    27:eb:a2:dc:59:6e:3c:f6:5b:b4:3d:75:f9:6d:4d:
                    ad:7b:80:71:a4:af:5b:81:97:23:d4:f5:0b:42:94:
                    aa:17:ef:34:16:ab:f8:7a:a8:f4:38:5a:ed:8a:e0:
                    15:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B7:AE:AF:50:0F:6F:95:E8:5B:AC:5E:A7:ED:BE:82:F3:67:B6:06
            X509v3 Authority Key Identifier:
                keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b9:d5:2d:55:6a:77:7a:0a:dd:76:c5:f3:a8:a2:f6:6d:28:
         3a:4e:8a:ba:71:0c:45:c3:94:d1:f0:02:ae:b4:ab:46:b4:3a:
         63:d5:2a:ef:de:8f:13:d6:17:fd:21:94:1b:e9:43:5a:bb:29:
         61:5c:13:95:d8:e6:be:21:e6:76:b8:9c:1b:e0:8f:0a:39:b0:
         70:ec:cc:eb:42:96:34:4d:e6:d9:34:e8:c2:1a:be:97:37:d2:
         6c:dc:cc:c0:4d:b2:36:21:8b:a5:a4:6d:4e:ee:20:e7:9b:59:
         6e:f9:c4:96:00:77:2f:15:20:6f:de:23:5e:4c:23:66:5a:b7:
         09:d5:fb:a0:a3:05:b9:26:a1:9a:81:54:d1:6e:96:2a:8f:14:
         5f:25:92:29:f9:5f:d1:87:e9:74:bb:ff:fa:a5:b8:b5:27:37:
         5a:7a:02:fd:a4:aa:95:ab:4f:78:03:5c:b2:e1:d7:1a:9a:f2:
         8d:1b:b2:bf:64:d3:c9:fa:93:b5:c9:7c:3f:e5:e2:36:79:01:
         1a:e6:cf:85:41:f5:45:ad:92:d6:5a:60:57:e1:fe:29:25:d3:
         8a:6c:05:b4:be:0c:ca:69:3c:b7:1d:d4:51:fc:ca:55:88:2d:
         2d:02:28:d4:2f:da:31:ae:ff:70:90:9a:70:1d:01:7d:b6:77:
         4a:73:47:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:43:21 2025 by rpki-client