Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
File:                     FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft (raw, json)
Hash identifier:          8bQAvHhpkQ05COKERH8ID/sq+UOy6GbgdaRC7w3Kzrg=
Subject key identifier:   48:42:06:19:2A:DC:88:04:8D:C3:AB:7C:EA:FE:6B:BF:F7:09:AB:EB
Authority key identifier: FF:4F:0B:35:8C:BD:6C:54:EC:CB:EB:F2:6F:6D:1A:05:F1:D5:37:E8
Certificate issuer:       /CN=ff4f0b358cbd6c54eccbebf26f6d1a05f1d537e8
Certificate serial:       59ADD6C1E52070360E08AC6E3F77FACE2AB76D72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
Manifest number:          01A5
Signing time:             Sat 28 Jun 2025 15:40:49 +0000
Manifest this update:     Sat 28 Jun 2025 15:35:49 +0000
Manifest next update:     Sun 29 Jun 2025 16:49:49 +0000
Files and hashes:         1: FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.crl (hash: /gHGfpRo8HtYIIta0eiR9WeiTDZQxoNUiGyAbDZ00oo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ad:d6:c1:e5:20:70:36:0e:08:ac:6e:3f:77:fa:ce:2a:b7:6d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff4f0b358cbd6c54eccbebf26f6d1a05f1d537e8
        Validity
            Not Before: Jun 28 15:35:49 2025 GMT
            Not After : Jun 29 16:49:49 2025 GMT
        Subject: CN=484206192ADC88048DC3AB7CEAFE6BBFF709ABEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:57:47:f2:09:72:fd:32:af:0e:37:0c:38:0a:
                    34:67:44:dd:c1:fe:7d:86:74:fc:1d:89:ef:ab:50:
                    62:11:ee:2f:0a:f3:9d:57:f6:d0:c3:c8:f8:2c:86:
                    24:b3:83:69:93:c5:f3:0e:57:0a:8d:82:c2:f7:57:
                    64:0a:00:0e:1e:26:3b:05:57:28:81:76:50:5c:c0:
                    78:ea:96:b2:96:6f:22:2c:04:ba:ea:93:4c:6d:7e:
                    8b:9c:4e:18:06:c0:96:2e:3e:a6:d0:51:9c:01:d7:
                    3b:fd:9d:20:a9:d5:4c:f3:65:8e:24:ad:13:e8:e7:
                    7f:d4:ef:73:e3:e9:33:9b:ca:d7:25:cc:4b:9d:bd:
                    da:5b:a5:ae:be:00:f8:ba:9e:a5:31:39:5b:73:68:
                    dc:69:2d:7d:a8:51:f9:10:f7:e6:cf:0a:ab:75:a4:
                    a5:86:2d:37:8f:e0:9f:82:b5:91:34:50:d5:db:32:
                    07:11:6e:ef:7b:b9:b7:a6:ac:e7:fd:76:e7:e7:d9:
                    9c:5c:ec:d3:e9:7f:df:69:77:60:af:fc:57:d6:ae:
                    98:2e:42:f6:43:50:2a:15:d9:b6:a8:95:d2:72:4d:
                    1e:9c:65:d9:a4:4b:46:6c:7b:f4:fa:65:51:fe:2c:
                    80:a8:db:8f:3c:68:d2:3a:fd:e0:37:d9:ba:ef:4a:
                    d6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:42:06:19:2A:DC:88:04:8D:C3:AB:7C:EA:FE:6B:BF:F7:09:AB:EB
            X509v3 Authority Key Identifier:
                keyid:FF:4F:0B:35:8C:BD:6C:54:EC:CB:EB:F2:6F:6D:1A:05:F1:D5:37:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:29:c8:43:6e:55:68:ed:92:f9:f8:6c:58:e3:ed:48:68:7d:
         9b:99:d5:e6:a1:22:41:5b:ba:5b:1b:cc:b5:76:9b:aa:9f:a3:
         31:20:58:b5:ff:2c:da:45:92:5b:3e:88:2e:b4:14:75:a6:ef:
         d5:36:de:84:37:ca:05:24:60:f1:24:29:09:95:46:de:b4:6c:
         c4:6a:52:74:78:bc:54:2d:72:31:61:3d:92:b4:40:2d:b9:56:
         fc:55:b7:13:63:f5:b0:d7:40:ea:85:0d:0d:7f:d9:87:69:73:
         b1:43:9d:74:46:e9:52:e9:61:09:3a:8f:60:6c:0d:9c:c7:a2:
         a2:e7:21:eb:b0:2f:71:da:2a:38:4f:5c:ee:98:6a:97:f8:81:
         61:2c:00:d1:22:7a:8d:f1:85:ec:e1:74:79:55:83:30:b1:66:
         09:dd:97:05:71:aa:9b:b4:2e:ff:9b:84:73:97:48:47:29:23:
         e6:c2:b7:c6:f9:85:7d:17:71:d2:12:31:b0:b6:1f:36:ab:9c:
         c2:55:8b:95:ab:17:f6:86:ef:49:19:b6:79:76:60:38:de:3a:
         d3:bd:cd:b4:db:95:f4:be:f1:5c:b8:f3:0b:3d:33:5a:0b:2a:
         ee:4b:4f:d6:0b:49:d4:3b:57:a6:95:5e:b2:09:b8:17:48:bf:
         e5:2f:6a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:08:37 2025 by rpki-client