Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
File:                     7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft (raw, json)
Hash identifier:          8e0/PgojwQFxxZV3GGIR3/ZnLoCGf1zpRq2J6AfcHHI=
Subject key identifier:   AA:ED:3C:64:E0:D3:DC:3A:B3:08:E9:51:E7:E1:75:65:A2:FE:D5:5A
Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
Certificate issuer:       /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Certificate serial:       1FD60150E1E5CA34AD43B9BC947AE96E3E04AB62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
Manifest number:          7E
Signing time:             Mon 05 May 2025 14:20:17 +0000
Manifest this update:     Mon 05 May 2025 14:15:17 +0000
Manifest next update:     Tue 06 May 2025 17:16:17 +0000
Files and hashes:         1: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl (hash: Vh39nMKM/6/uyNogdJuEDl7INXwpBg7mdUSqwhSq4I4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 17:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d6:01:50:e1:e5:ca:34:ad:43:b9:bc:94:7a:e9:6e:3e:04:ab:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
        Validity
            Not Before: May  5 14:15:17 2025 GMT
            Not After : May  6 17:16:17 2025 GMT
        Subject: CN=AAED3C64E0D3DC3AB308E951E7E17565A2FED55A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:49:ed:84:df:dc:04:9c:7f:26:36:6d:2b:ba:
                    6d:ab:49:e5:5a:58:57:76:f3:ac:8a:10:a4:46:a8:
                    80:09:a4:d3:d1:96:cf:56:11:85:90:a0:5f:e2:5a:
                    02:ff:07:25:95:9c:3a:0f:b4:a0:e6:7f:f8:56:37:
                    5b:34:43:a9:2c:59:36:13:3f:80:59:10:01:26:a2:
                    11:7a:b6:b4:58:e2:10:2a:2e:b0:46:57:a5:34:49:
                    2a:2e:77:42:57:d8:e3:51:9b:60:f1:b4:a8:df:e9:
                    46:99:6f:b6:fb:fc:ce:e0:da:eb:e4:2b:54:6c:cc:
                    09:34:e2:3e:5b:1b:ab:dd:62:65:22:4e:b4:62:c5:
                    fb:cd:16:8c:f0:35:10:90:3e:37:5f:7a:73:8a:22:
                    d4:f0:41:ff:2b:cc:46:3a:56:d2:46:79:f9:9b:9d:
                    f4:e7:4d:0c:ba:04:a8:3c:8d:fd:7c:5b:d8:7d:40:
                    9b:b4:ab:3f:83:b4:a3:35:6c:fb:ef:99:10:9e:53:
                    03:6b:02:2d:cc:76:aa:aa:43:a4:0a:54:e6:d3:9f:
                    bd:92:76:0a:36:3b:7e:90:58:77:4a:22:62:60:b3:
                    d3:57:0b:f0:9d:bc:2f:17:bc:c8:47:c2:51:0d:3a:
                    ec:26:ce:f3:c6:ab:ee:9e:b1:6f:f6:ed:b9:c9:2f:
                    21:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:ED:3C:64:E0:D3:DC:3A:B3:08:E9:51:E7:E1:75:65:A2:FE:D5:5A
            X509v3 Authority Key Identifier:
                keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:01:aa:3c:35:6b:98:a1:82:26:a8:29:a0:92:0d:da:7b:fc:
         dc:7e:1f:12:11:ee:8a:09:46:93:2e:13:3f:b2:9e:49:07:e6:
         b7:cf:7f:f5:01:26:34:4c:bb:28:bf:ce:5a:0b:20:97:c6:76:
         c4:66:80:1d:91:ba:17:7a:d8:78:79:03:ce:b5:93:5d:c0:9b:
         5a:1a:e9:e7:b1:da:dc:56:f9:56:b0:5c:97:7f:b7:81:25:62:
         1c:8e:75:4f:61:d0:fd:6e:7b:fe:eb:64:00:4d:fa:a9:9d:84:
         db:40:c0:79:1c:8b:96:4d:5e:8e:0f:9e:bf:53:6b:8a:be:40:
         1d:e6:23:07:3e:f6:58:6b:f2:ad:80:35:a4:b1:cc:6b:e6:14:
         aa:aa:9f:25:b7:c0:36:41:a5:e3:20:74:44:14:dc:11:f0:a5:
         84:4b:71:9b:51:4c:3b:66:03:00:35:dd:1b:2f:17:72:56:7b:
         35:a8:f2:3a:91:46:2b:37:5e:f1:07:22:14:65:66:3f:6d:55:
         29:62:ae:4d:19:8d:56:6f:1a:8c:11:d0:0c:eb:24:33:75:af:
         ea:e5:36:a8:b1:2e:a5:ca:59:83:4a:e2:39:16:94:7d:5c:36:
         bb:7e:30:49:aa:2b:b3:c5:cb:67:d9:87:0a:6e:e7:19:ae:63:
         00:e6:e4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:37:15 2025 by rpki-client