Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft
File:                     B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft (raw, json)
Hash identifier:          cH4lb7c2SkAMB8nyN2LXxSLfdbZJq66har+a7V0jTes=
Subject key identifier:   70:7E:8A:F8:48:4F:D7:50:D1:5F:0E:DF:A3:FC:1E:44:EE:E9:B8:D5
Authority key identifier: B1:D3:04:9A:B9:0B:73:31:4F:2A:DF:CA:D6:39:33:6D:93:20:B3:5E
Certificate issuer:       /CN=b1d3049ab90b73314f2adfcad639336d9320b35e
Certificate serial:       0167B4CB941323A2D7FF25092BEF7D9481D8A93E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sdMEmrkLczFPKt_K1jkzbZMgs14.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft
Manifest number:          9E
Signing time:             Sun 11 May 2025 03:28:44 +0000
Manifest this update:     Sun 11 May 2025 03:23:44 +0000
Manifest next update:     Mon 12 May 2025 06:58:44 +0000
Files and hashes:         1: B1D3049AB90B73314F2ADFCAD639336D9320B35E.crl (hash: mCFEG94qK5NbTdDkyWjLn/RDPBiE8/PcU8MxsNMZ3Qw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sdMEmrkLczFPKt_K1jkzbZMgs14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 06:58:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:67:b4:cb:94:13:23:a2:d7:ff:25:09:2b:ef:7d:94:81:d8:a9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d3049ab90b73314f2adfcad639336d9320b35e
        Validity
            Not Before: May 11 03:23:44 2025 GMT
            Not After : May 12 06:58:44 2025 GMT
        Subject: CN=707E8AF8484FD750D15F0EDFA3FC1E44EEE9B8D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dc:3d:1a:2b:55:d6:9d:bc:c6:17:85:27:1b:
                    5f:52:5d:42:19:87:8a:bf:01:73:a4:44:95:1f:4e:
                    5c:dc:13:5f:10:37:e9:a4:28:8a:49:66:7a:9f:60:
                    e8:57:ee:53:6e:ba:56:bc:60:f1:84:6e:30:4a:65:
                    0f:4a:3c:14:d0:87:56:41:17:42:b3:7b:a8:18:4a:
                    79:12:c2:91:31:af:a7:d4:2b:61:6d:e0:bc:a0:bb:
                    58:7b:55:2c:a8:be:cd:35:9d:16:7f:b0:33:37:c0:
                    41:45:db:46:6c:8c:67:79:6e:ef:d0:cf:74:e6:71:
                    11:81:cf:d6:d3:f3:fc:fe:ee:8c:ac:dc:23:84:d1:
                    e8:1b:94:75:36:5c:9e:58:c7:50:78:aa:37:2f:c5:
                    b8:6a:70:9e:38:0c:4e:a4:1a:e0:8d:a5:fa:f2:c4:
                    4c:7b:a3:08:c5:5e:a4:07:9c:13:8e:46:76:4e:a2:
                    75:22:c5:6e:31:32:ab:2e:12:53:cb:d4:f3:a7:08:
                    2c:ad:13:85:ea:2e:7b:43:7e:49:c3:26:58:1f:0f:
                    d8:04:31:35:47:f3:65:94:d4:53:32:85:8e:e3:f3:
                    66:27:1f:1c:19:b3:d8:7f:dc:3b:2e:6e:9a:41:9b:
                    e6:18:5d:66:da:19:cd:47:12:f8:63:6a:1a:d7:fb:
                    4b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7E:8A:F8:48:4F:D7:50:D1:5F:0E:DF:A3:FC:1E:44:EE:E9:B8:D5
            X509v3 Authority Key Identifier:
                keyid:B1:D3:04:9A:B9:0B:73:31:4F:2A:DF:CA:D6:39:33:6D:93:20:B3:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdMEmrkLczFPKt_K1jkzbZMgs14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:04:71:71:ed:34:9b:48:79:1c:29:f7:62:9f:81:30:43:c2:
         54:9e:25:8a:8b:ee:be:e0:49:f9:47:09:cb:2b:3c:3c:e1:fd:
         82:e2:6b:12:09:11:60:b9:0c:69:58:32:36:e6:b1:0d:c2:45:
         a4:ba:1d:9d:ed:dd:8b:75:c5:e6:ef:a4:2a:e5:03:fb:8a:0e:
         6a:1b:3c:71:85:04:e7:b0:79:db:6b:80:dd:45:62:a2:36:3a:
         42:2a:4b:56:75:b9:50:d0:39:3d:60:97:32:0a:28:dc:24:79:
         5c:3e:d2:4e:53:d5:12:0a:8b:17:f6:ec:4a:19:d9:6e:c6:f3:
         07:af:cc:31:ad:d1:76:d9:84:73:ad:75:87:72:bd:72:84:2c:
         2a:01:7a:3c:d9:be:23:8d:96:a7:30:16:46:ee:29:f4:fe:ad:
         ba:d2:2c:fd:67:f5:09:ce:14:07:61:de:81:de:0d:ad:ef:2c:
         04:ec:ac:61:d3:7b:49:b0:99:06:fc:f0:30:64:f7:85:33:c3:
         f3:e4:9b:d3:6a:ae:ce:04:c0:a9:0b:5c:34:d9:80:d1:69:a3:
         94:e9:35:06:e7:c1:ee:a2:a7:69:79:19:fa:69:2e:2a:c7:ac:
         e0:c5:c9:a2:17:89:45:b4:78:62:a6:e5:9a:24:ee:f6:c4:f5:
         58:c0:b2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:31:15 2025 by rpki-client