Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
File:                     B3C078E149D9741434FD8877AB4CED46DC2720DA.mft (raw, json)
Hash identifier:          6UA1DMI/JA9y+1BRNHItYS4x6/596NXC9Tn9i4YRDDE=
Subject key identifier:   49:C3:FB:8F:72:3F:A4:F8:69:87:2C:33:9A:67:9D:31:92:85:3C:0D
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Certificate issuer:       /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial:       55DA663259AE6FBF6602331071F4FF22DDC1AF1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
Manifest number:          01F6
Signing time:             Wed 07 May 2025 19:05:38 +0000
Manifest this update:     Wed 07 May 2025 19:00:38 +0000
Manifest next update:     Thu 08 May 2025 20:14:38 +0000
Files and hashes:         1: AS215147.asa (hash: Y15WnKTnuqfvxRL2v22hgKSMpUyc+xtqTUbKoWNNWzQ=)
                          2: B3C078E149D9741434FD8877AB4CED46DC2720DA.crl (hash: Rvyg519uWypgPf6QAkoReuGzr0l3cgHHiomZ2ykvg/g=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:da:66:32:59:ae:6f:bf:66:02:33:10:71:f4:ff:22:dd:c1:af:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
        Validity
            Not Before: May  7 19:00:38 2025 GMT
            Not After : May  8 20:14:38 2025 GMT
        Subject: CN=49C3FB8F723FA4F869872C339A679D3192853C0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a4:00:86:99:6d:52:1c:76:7c:e1:d7:ce:6a:
                    78:ec:79:d9:f2:31:f5:3a:7c:69:7f:9d:9e:bf:bb:
                    19:20:55:ee:30:e7:27:6a:51:06:10:76:09:14:7a:
                    5b:b7:e9:0b:a6:3c:1c:d4:58:b6:83:c8:d3:97:d1:
                    a8:70:d2:5f:35:33:d2:72:93:48:6d:c8:03:74:f7:
                    bb:f7:4b:fb:e0:ce:5a:f6:2c:9a:bf:e3:31:13:ab:
                    07:e3:2a:fd:eb:c8:de:d8:e9:0d:5e:b0:67:0e:c4:
                    58:11:ab:45:60:7b:8c:d1:d3:e1:bb:5e:46:ce:fa:
                    bc:03:5b:3d:ce:55:74:8c:13:f1:02:26:b1:b8:7f:
                    10:a7:16:c6:a0:27:3f:75:1f:dd:b0:d3:9d:d3:c2:
                    9b:ea:4e:17:de:e0:a9:eb:9d:a6:43:c3:47:3f:8d:
                    3f:d3:e5:1d:da:f1:c2:aa:cd:34:fa:97:b1:d8:7c:
                    b1:fa:e9:7e:17:fe:e7:16:0d:d0:7a:ae:0a:98:ec:
                    3a:26:5d:15:13:46:e0:fd:2b:5d:f5:43:2e:59:46:
                    1f:c1:fc:c1:7d:f3:ad:54:5b:89:bb:be:18:8a:d4:
                    6a:a4:d2:7c:e8:c4:b5:51:39:60:68:73:d8:1b:30:
                    5d:4a:a2:34:fc:09:1f:79:a7:dc:31:d8:4a:eb:5e:
                    95:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C3:FB:8F:72:3F:A4:F8:69:87:2C:33:9A:67:9D:31:92:85:3C:0D
            X509v3 Authority Key Identifier:
                keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:b5:8b:e6:b4:10:a8:0d:b6:d4:ff:65:e7:78:1d:2f:fd:3c:
         7f:17:7f:52:d8:20:6a:89:59:d6:0a:7f:ca:90:d7:34:b1:6d:
         51:32:dd:e0:fb:21:47:51:10:a8:b7:18:ca:4a:71:d1:f2:5e:
         14:cd:bb:21:ca:eb:b0:b2:4f:d1:b4:59:1d:30:ca:df:be:83:
         27:b8:84:0e:21:ee:e4:aa:7c:fe:15:d1:94:00:f7:f1:c0:0e:
         1e:0d:fe:b9:da:8a:dd:bc:b4:df:25:3c:88:20:32:62:ea:3f:
         2f:f0:72:de:42:96:6e:5b:58:94:b6:37:a8:75:ca:2e:26:6e:
         11:d0:15:fd:7b:c8:b0:59:d2:08:0a:a3:b5:42:fd:75:35:55:
         0f:e4:3d:d1:bd:39:64:62:d6:64:c7:c5:a7:88:f5:5c:54:d3:
         cb:f0:0f:4b:c1:3b:b2:a4:17:2e:4b:ed:4c:07:c0:79:4d:f4:
         80:ef:71:51:6c:51:6a:8d:a7:c4:dc:0e:b8:33:53:ad:69:ce:
         5d:05:4c:18:a3:69:3d:c0:66:17:36:91:74:34:22:21:f7:ef:
         c7:91:43:61:93:c0:c7:d4:a5:66:fb:c7:65:7e:29:aa:a6:6c:
         9f:cc:cc:d6:0d:46:a5:40:10:9b:fa:b0:87:e6:36:3e:a8:b3:
         b0:77:d2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:58:48 2025 by rpki-client