Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
File:                     05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft (raw, json)
Hash identifier:          AlKYHAmaoP+J1JFQgADy+8vxDvjPagZkYyxBN1nN5dg=
Subject key identifier:   19:79:75:4F:1A:6D:9C:BC:A0:62:55:58:9B:8B:A1:E1:B9:11:35:07
Authority key identifier: 05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD
Certificate issuer:       /CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
Certificate serial:       502D8119849193A769358AFE05FD3E39F0FD55FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
Manifest number:          03E7
Signing time:             Sat 28 Jun 2025 04:49:07 +0000
Manifest this update:     Sat 28 Jun 2025 04:44:07 +0000
Manifest next update:     Sun 29 Jun 2025 06:35:07 +0000
Files and hashes:         1: 38342e33382e3235342e302f32342d3234203d3e203634323637.roa (hash: 9kep0y5iWWXIJpO3TiiRho2v0RZ/t5nwkbbRFjNIkHc=)
                          2: 05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl (hash: MRbEN+SCe2vdlhMFx1ysR4FObCxDULxoHjcKIwlvkmc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 06:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2d:81:19:84:91:93:a7:69:35:8a:fe:05:fd:3e:39:f0:fd:55:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
        Validity
            Not Before: Jun 28 04:44:07 2025 GMT
            Not After : Jun 29 06:35:07 2025 GMT
        Subject: CN=1979754F1A6D9CBCA06255589B8BA1E1B9113507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:4d:9f:8a:43:98:91:05:e0:91:25:36:91:
                    9f:f1:ab:60:cd:49:1a:6d:b3:70:a5:39:cc:5f:92:
                    6c:51:33:27:67:d6:60:00:1a:77:83:53:e9:72:7d:
                    0f:6b:8b:6c:cf:56:43:73:69:b8:f5:2a:50:33:f9:
                    c7:8a:8a:2f:89:6d:aa:b5:80:0b:18:13:e7:42:16:
                    d0:b9:5d:47:32:bb:db:7d:f0:80:47:fd:fd:7e:26:
                    11:2a:4e:d9:2f:6b:ae:5e:bb:9f:69:af:5b:f3:1d:
                    ef:cb:df:c1:de:e2:4a:22:23:17:62:61:22:b0:d5:
                    76:6a:cc:76:88:2d:33:d6:0b:53:89:86:b7:83:e6:
                    09:53:cd:a1:c4:ca:50:02:ce:76:b5:22:27:e9:f3:
                    0a:fd:a2:cc:c4:d9:a7:b1:4c:f7:ba:e8:b1:02:a7:
                    e7:ba:af:e1:81:40:da:c9:ef:da:cd:6e:26:fb:59:
                    73:44:c7:c7:3d:f8:a0:a6:d9:89:ae:43:6b:33:55:
                    98:83:3e:43:46:4b:fe:a3:db:c1:19:60:72:56:e0:
                    05:11:1d:da:19:a9:b2:71:5a:ef:98:7c:0c:8e:da:
                    b6:01:61:37:01:11:5b:1e:e3:21:d6:6a:d0:81:8e:
                    cd:ad:10:b4:a8:40:a7:7e:33:32:64:11:01:be:58:
                    6b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:79:75:4F:1A:6D:9C:BC:A0:62:55:58:9B:8B:A1:E1:B9:11:35:07
            X509v3 Authority Key Identifier:
                keyid:05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d1:da:c1:03:fe:f4:0b:6d:4a:84:ef:17:57:f1:ec:7f:07:
         df:2e:5d:0d:f8:cf:37:db:34:e5:af:4e:20:8d:c0:25:57:74:
         d5:e9:c3:09:67:c8:2e:9f:04:5e:86:91:51:cd:34:5b:ce:a3:
         70:91:09:2a:f4:36:96:0a:e5:73:13:e6:7b:3b:cc:7b:86:25:
         ec:a6:94:0a:7d:e8:55:1d:ac:81:27:7d:43:c2:d0:dc:94:43:
         36:31:c9:10:95:f3:0d:0f:24:e5:ba:e3:21:50:0e:f2:aa:41:
         0c:82:48:25:e8:d7:d5:c9:f9:9d:54:fc:e6:e5:80:ad:46:93:
         89:8b:f6:2c:36:17:76:24:cc:3a:03:cc:66:c2:eb:d2:63:93:
         55:8b:89:f2:ec:94:e8:80:56:fc:db:db:b7:ed:ff:1e:c6:9e:
         76:52:66:9e:24:79:49:b4:c6:3c:f6:ca:76:6b:40:10:2d:51:
         d8:80:29:e5:6f:a2:1f:83:8a:5b:62:f3:7f:ec:98:c0:24:48:
         b7:e2:59:2e:b3:9a:b8:95:4f:95:64:59:42:ca:fa:51:2f:ea:
         e1:cc:2a:0e:4d:e9:23:43:c3:f6:68:3e:7a:48:44:8e:2c:a4:
         63:7e:cb:96:32:a8:1c:6c:e0:41:3f:c4:e2:e0:24:b0:7e:e7:
         62:88:3f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:50 2025 by rpki-client