Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
File:                     05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft (raw, json)
Hash identifier:          LPrZ2xiiJ5EeR31xAybHqKG6mygcRujuZUUg0jZljuI=
Subject key identifier:   FA:A1:7B:87:FC:3C:7D:A2:12:F5:9F:B7:03:D5:E5:6A:4D:85:CE:79
Authority key identifier: 05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD
Certificate issuer:       /CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
Certificate serial:       3423B53E4CAA10A3175AF2CF4E5222372EFA4807
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
Manifest number:          0433
Signing time:             Sat 23 Aug 2025 08:47:33 +0000
Manifest this update:     Sat 23 Aug 2025 08:42:33 +0000
Manifest next update:     Sun 24 Aug 2025 09:50:33 +0000
Files and hashes:         1: 05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl (hash: ojTjHG4NpaPgTXEU8XRtBhHulHyMo/L4SHhXEAYbJ58=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:23:b5:3e:4c:aa:10:a3:17:5a:f2:cf:4e:52:22:37:2e:fa:48:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
        Validity
            Not Before: Aug 23 08:42:33 2025 GMT
            Not After : Aug 24 09:50:33 2025 GMT
        Subject: CN=FAA17B87FC3C7DA212F59FB703D5E56A4D85CE79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:54:5a:18:cc:2a:eb:af:dc:09:7f:3f:7e:9d:
                    5c:68:1b:03:c6:2f:72:41:1f:39:4d:70:42:0f:0c:
                    96:77:1b:95:8b:6b:46:9c:a9:af:e1:06:16:ba:52:
                    a6:75:bf:7f:be:f1:93:f0:9d:38:39:79:ef:72:95:
                    b3:40:13:64:2f:64:4f:97:c8:70:57:97:c7:35:8a:
                    1e:42:99:a0:9b:35:e2:c9:a8:f3:35:aa:44:3d:da:
                    d9:e8:56:ae:07:f6:7a:55:c9:7a:c5:20:ad:e3:a3:
                    06:24:7d:39:1c:a7:63:77:7a:16:3f:90:cc:ed:99:
                    99:be:2a:90:0b:37:74:5d:45:0b:ce:db:1c:32:bc:
                    50:4a:9d:5c:d0:95:eb:ba:c5:a4:0d:9b:06:11:60:
                    3b:ed:f2:a8:ab:b3:87:c1:f4:f5:1e:81:5e:5e:98:
                    28:83:dd:9b:97:0c:32:22:66:b6:ea:18:8d:7e:b0:
                    2d:e1:b1:d2:e9:2f:c2:7d:ff:73:15:a6:5e:45:b2:
                    13:2e:40:9f:04:30:ad:27:50:6c:58:2a:7f:35:cc:
                    e7:fb:02:15:00:0a:cf:82:89:25:90:36:c3:2f:7f:
                    f1:eb:34:22:7b:75:22:0b:dd:48:19:99:fa:31:78:
                    4c:27:8b:48:25:cf:d6:51:c1:1b:cd:ab:ff:95:a3:
                    e8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A1:7B:87:FC:3C:7D:A2:12:F5:9F:B7:03:D5:E5:6A:4D:85:CE:79
            X509v3 Authority Key Identifier:
                keyid:05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:4e:8e:d7:ea:d8:2b:64:0b:f8:fa:ef:98:6f:ee:6a:3b:c3:
         01:91:1c:ac:a6:25:ac:b7:9e:b2:bb:d8:59:6b:f2:6e:d3:f2:
         03:bb:6a:73:50:a9:41:a4:68:53:66:ac:0b:d8:39:82:cf:d5:
         95:9a:21:20:b3:a0:b9:bc:cb:e8:e8:fe:83:26:c1:eb:5a:ba:
         76:be:95:99:11:10:0d:d9:a0:e3:fe:71:cf:e4:d1:fc:fd:02:
         13:9d:61:9a:05:d2:ae:8d:13:cb:c1:90:fd:d4:8c:1c:24:25:
         2b:d8:ee:ec:12:cf:df:b3:f5:d8:68:6c:e4:be:49:dc:4e:fa:
         9a:97:b6:57:93:c7:00:bf:16:a1:77:0e:e3:c8:ab:f0:8e:5f:
         a8:7b:8c:4c:cc:2c:7c:36:c2:c8:74:23:51:70:04:b9:93:a0:
         b0:4f:3a:3d:d9:ce:17:18:41:f5:aa:0d:88:f7:1b:76:28:9e:
         a1:fa:b1:c0:2e:3d:49:f8:39:7e:09:9a:8e:17:8c:eb:c1:45:
         de:45:08:a5:f1:28:b6:00:78:18:40:95:0f:95:a2:d6:7d:c4:
         14:98:40:73:08:1d:76:07:d8:2b:27:d4:63:7c:c7:b8:24:ac:
         4f:f2:19:5c:bd:1c:df:29:ed:12:0b:e5:da:53:14:82:76:8b:
         99:9e:2c:aa
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUNCO1PkyqEKMXWvLPTlIiNy76SAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDViYmRiNjI5ZmRkMGYxYzMzYmZiMWFjN2NmNDQxMjFi
YzVlNmVhZDAeFw0yNTA4MjMwODQyMzNaFw0yNTA4MjQwOTUwMzNaMDMxMTAvBgNV
BAMTKEZBQTE3Qjg3RkMzQzdEQTIxMkY1OUZCNzAzRDVFNTZBNEQ4NUNFNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqVFoYzCrrr9wJfz9+nVxoGwPG
L3JBHzlNcEIPDJZ3G5WLa0acqa/hBha6UqZ1v3++8ZPwnTg5ee9ylbNAE2QvZE+X
yHBXl8c1ih5CmaCbNeLJqPM1qkQ92tnoVq4H9npVyXrFIK3jowYkfTkcp2N3ehY/
kMztmZm+KpALN3RdRQvO2xwyvFBKnVzQleu6xaQNmwYRYDvt8qirs4fB9PUegV5e
mCiD3ZuXDDIiZrbqGI1+sC3hsdLpL8J9/3MVpl5FshMuQJ8EMK0nUGxYKn81zOf7
AhUACs+CiSWQNsMvf/HrNCJ7dSIL3UgZmfoxeEwni0glz9ZRwRvNq/+Vo+jrAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU+qF7h/w8faIS9Z+3A9Xlak2FznkwHwYDVR0j
BBgwFoAUBbvbYp/dDxwzv7GsfPRBIbxebq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTNmMDgzYjctNzgxOC00Y2NmLTg2NjMtOTE5MWY4YTg2
MTZhLzAvMDVCQkRCNjI5RkREMEYxQzMzQkZCMUFDN0NGNDQxMjFCQzVFNkVBRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JidmJZcF9kRHh3enY3R3NmUFJCSWJ4
ZWJxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85M2YwODNiNy03
ODE4LTRjY2YtODY2My05MTkxZjhhODYxNmEvMC8wNUJCREI2MjlGREQwRjFDMzNC
RkIxQUM3Q0Y0NDEyMUJDNUU2RUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfk6O1+rYK2QL+PrvmG/u
ajvDAZEcrKYlrLeesrvYWWvybtPyA7tqc1CpQaRoU2asC9g5gs/VlZohILOgubzL
6Oj+gybB61q6dr6VmREQDdmg4/5xz+TR/P0CE51hmgXSro0Ty8GQ/dSMHCQlK9ju
7BLP37P12Ghs5L5J3E76mpe2V5PHAL8WoXcO48ir8I5fqHuMTMwsfDbCyHQjUXAE
uZOgsE86PdnOFxhB9aoNiPcbdiieofqxwC49Sfg5fgmajheM68FF3kUIpfEotgB4
GECVD5Wi1n3EFJhAcwgddgfYKyfUY3zHuCSsT/IZXL0c3yntEgvl2lMUgnaLmZ4s
qg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:36 2025 by rpki-client