Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
File:                     05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft (raw, json)
Hash identifier:          AO4xp2c5CltZP2+rZP0Y0tga1gepw0YKCPWTuRk291s=
Subject key identifier:   73:00:A8:5B:B9:F5:6C:AD:84:5B:B6:90:F5:16:64:6F:A2:8C:84:D8
Authority key identifier: 05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD
Certificate issuer:       /CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
Certificate serial:       79C6B8B8B84EB41E5B69F36B676A656E4E39B051
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
Manifest number:          03A8
Signing time:             Sun 11 May 2025 15:05:36 +0000
Manifest this update:     Sun 11 May 2025 15:00:36 +0000
Manifest next update:     Mon 12 May 2025 17:54:36 +0000
Files and hashes:         1: 05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl (hash: FAIRMXwGw/lIrF+Fq2AuMmI51FM/RRzMrOD8EIsSzfE=)
                          2: 38342e33382e3235342e302f32342d3234203d3e203634323637.roa (hash: 9kep0y5iWWXIJpO3TiiRho2v0RZ/t5nwkbbRFjNIkHc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 17:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c6:b8:b8:b8:4e:b4:1e:5b:69:f3:6b:67:6a:65:6e:4e:39:b0:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead
        Validity
            Not Before: May 11 15:00:36 2025 GMT
            Not After : May 12 17:54:36 2025 GMT
        Subject: CN=7300A85BB9F56CAD845BB690F516646FA28C84D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:aa:0d:ff:1e:7f:6f:71:ba:7a:bb:81:ec:25:
                    b6:d5:2f:f4:cd:82:23:31:d8:36:a0:96:f5:ba:a8:
                    d9:a6:8f:44:52:34:6c:83:f0:92:ed:10:fb:31:88:
                    28:e4:b2:51:77:51:dd:d2:5f:0a:ef:f6:d7:d2:c1:
                    23:98:d1:41:f8:9a:d9:3a:ea:77:fa:f0:83:14:aa:
                    d8:ae:56:7c:37:cd:e1:8d:f7:ce:2d:9b:e1:41:69:
                    9d:b9:25:e9:0f:d8:7f:00:14:23:89:ed:da:4b:76:
                    2c:b9:dc:e9:fa:2a:c5:ce:6e:a9:a4:1b:bb:7d:1e:
                    47:28:73:95:b9:d4:6f:42:3c:5a:74:84:53:f7:d3:
                    73:e7:f1:b8:90:26:20:bc:56:5f:be:93:52:1f:70:
                    44:74:22:f8:4f:cb:d9:f6:2e:02:db:50:cb:ae:24:
                    b0:d6:ad:d0:e5:a2:43:9d:72:f0:51:2d:76:53:e0:
                    ab:60:f2:32:4e:80:7c:81:5c:09:1c:81:b6:74:de:
                    e3:e8:e0:2b:58:ee:02:1b:eb:4f:b7:90:b8:1f:7e:
                    ea:61:fa:ee:48:f5:5b:f4:2c:9c:6b:55:11:9d:30:
                    50:5c:67:ac:9e:6d:25:0b:ea:e6:07:3d:4e:05:39:
                    17:f6:40:7c:e5:c6:ca:d3:36:70:2b:75:a8:41:45:
                    41:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:00:A8:5B:B9:F5:6C:AD:84:5B:B6:90:F5:16:64:6F:A2:8C:84:D8
            X509v3 Authority Key Identifier:
                keyid:05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:c6:9d:63:fc:29:c5:cf:db:b0:fc:52:f6:b6:88:9f:f2:df:
         67:1b:3d:7f:31:17:02:9c:7f:12:bf:30:4d:95:71:eb:45:39:
         f6:de:94:3a:7e:8a:9c:6d:13:f6:d2:45:7c:b0:f9:a0:fd:80:
         de:ae:eb:02:41:f5:d9:b4:fe:ae:ec:8d:aa:09:37:be:46:9b:
         9e:74:f0:a7:6f:a7:65:6e:7a:14:97:c7:af:b1:ce:29:c6:99:
         38:b0:00:d5:07:83:ab:b3:91:7a:db:61:d5:5c:53:01:e2:6d:
         b8:34:b6:e3:7f:71:17:9f:bc:2b:d7:51:08:de:4c:07:cb:d8:
         57:8c:de:30:de:71:48:4c:86:dc:88:c3:5e:ae:d3:75:a2:37:
         bd:52:3a:70:43:ea:5e:ec:dc:8b:db:c6:13:87:04:e9:1e:fe:
         2f:c4:05:63:8f:f9:1d:06:6b:5f:eb:10:8b:dc:cd:39:6e:a2:
         98:f3:c5:9d:77:4b:f8:31:09:5e:7a:e0:db:59:d3:66:2e:d2:
         35:f5:21:0e:d7:ae:c4:62:87:56:0d:ab:aa:e2:ee:f7:53:9c:
         18:d4:56:6e:50:c6:9e:a9:65:f1:38:53:9a:0e:c7:0b:de:d0:
         79:f9:34:2d:6a:8e:ab:4f:9a:23:5c:ea:59:e2:99:1e:75:a2:
         82:96:1b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:45:25 2025 by rpki-client