Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
File:                     D74983C1FABA0CC1566F0601AFE11423E11B5171.mft (raw, json)
Hash identifier:          uQyZ+Sd0u44Ryb/zaI31itto8cnGSAYN56E7Tpun2ck=
Subject key identifier:   53:17:D2:14:13:F6:13:3D:60:ED:5B:81:88:B0:58:2D:A4:D1:8C:60
Authority key identifier: D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71
Certificate issuer:       /CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
Certificate serial:       2C9D0939053740ADAFC1CAA5D5542BBAC10673AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
Manifest number:          0363
Signing time:             Tue 06 May 2025 09:10:11 +0000
Manifest this update:     Tue 06 May 2025 09:05:11 +0000
Manifest next update:     Wed 07 May 2025 09:20:11 +0000
Files and hashes:         1: 323630323a666137613a3a2f34302d3438203d3e203537383730.roa (hash: KXZ5ssTmjUClZY+9bglfiLRlAhs+b4BWP1fzlqp7SIY=)
                          2: 323630323a666137613a3a2f34302d3438203d3e203539393933.roa (hash: xlMWcnMOkntkvkwmItiIw9KHDflxZx0Jsc2LELbETrw=)
                          3: 32332e3135332e3233322e302f32342d3234203d3e203539393933.roa (hash: mlyVBtqAxaep1RbpdRUfXUrnFdjKT6MGiKPIjo5bDE0=)
                          4: D74983C1FABA0CC1566F0601AFE11423E11B5171.crl (hash: EVF7YIlCg8BjbmS2GQTREw9rqhODFcxuuJ9JI45O53I=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 09:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9d:09:39:05:37:40:ad:af:c1:ca:a5:d5:54:2b:ba:c1:06:73:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
        Validity
            Not Before: May  6 09:05:11 2025 GMT
            Not After : May  7 09:20:11 2025 GMT
        Subject: CN=5317D21413F6133D60ED5B8188B0582DA4D18C60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:7c:c4:44:26:7c:31:16:fd:d9:52:93:86:
                    61:91:7b:57:2a:f8:6a:6c:3f:4c:7d:62:f5:c2:77:
                    8c:fb:a2:d6:84:b7:be:a4:6f:d0:b8:9e:d7:18:c1:
                    8e:f6:61:d3:07:4d:32:33:ca:d9:6d:e6:73:ca:63:
                    65:da:20:ea:80:bd:07:d1:93:30:ce:f1:00:a9:08:
                    5a:27:48:f0:10:f1:9c:ae:ae:fe:a7:1d:82:7e:a8:
                    cd:59:77:97:88:3a:93:95:f7:3d:35:f9:a5:62:11:
                    5e:fd:2a:96:55:83:f8:8c:38:cf:38:d5:11:26:69:
                    09:2c:36:8f:7d:a6:4d:91:c7:e9:33:f4:ce:9b:cd:
                    ee:27:c4:80:90:07:f5:b9:0f:5f:2f:29:e7:c9:19:
                    37:6b:6f:26:ec:14:db:12:9b:c8:fe:d2:d7:6d:b1:
                    b5:fc:65:e3:e7:47:59:8f:65:29:60:d7:9d:f0:57:
                    c2:db:d5:02:46:40:cf:c9:b9:24:5e:40:52:2b:05:
                    ab:28:42:60:cf:18:97:ad:0f:9e:76:10:0a:eb:0f:
                    da:6c:be:a6:58:6f:bc:6b:15:e3:dd:19:9f:43:89:
                    bd:21:a8:00:98:d0:a1:1c:c1:69:59:23:cd:23:71:
                    d2:88:e4:b9:18:34:e8:d5:17:1b:7b:0e:03:47:ef:
                    80:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:17:D2:14:13:F6:13:3D:60:ED:5B:81:88:B0:58:2D:A4:D1:8C:60
            X509v3 Authority Key Identifier:
                keyid:D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:76:f5:a3:d6:2c:04:08:d4:e2:11:2a:dc:eb:b9:d5:6a:34:
         e2:b0:0c:f8:fa:0f:41:87:6d:70:78:ad:13:ed:7a:94:6c:76:
         e6:41:0e:58:b9:d8:ad:10:2d:a9:12:6f:01:9b:65:4b:ac:a9:
         17:e0:62:af:8b:f1:54:48:09:d4:14:b5:19:d5:60:6e:d3:23:
         96:eb:6b:f8:df:18:b3:c6:f8:59:29:22:04:e6:18:03:0c:99:
         04:86:8a:eb:08:07:76:e2:ae:34:b3:1d:b2:70:94:33:1e:30:
         c8:cf:51:33:9b:d0:40:e1:be:75:45:a8:2d:47:e6:98:0b:1c:
         5d:cb:6e:b0:53:a3:37:40:dd:a7:9b:e1:40:4c:76:65:54:b2:
         bd:34:77:a4:10:c2:5f:6f:4f:9e:22:59:24:ed:83:21:26:5f:
         f2:4b:15:a7:ab:d5:36:c6:03:34:9d:95:7c:89:2a:d4:ea:01:
         81:69:68:57:76:55:5e:98:89:22:8e:46:d4:15:fa:6b:8f:ab:
         c6:54:62:22:ab:d1:15:71:11:60:ad:71:20:0e:17:c1:3b:a7:
         77:96:42:2f:98:a1:e8:ae:46:38:08:be:2b:84:ab:ac:5f:f2:
         43:fb:e1:9f:59:9f:99:4c:5a:dd:93:12:7f:28:a8:31:d8:5e:
         ec:50:76:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 15:09:33 2025 by rpki-client