Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
File:                     94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json)
Hash identifier:          W4T1h2lIyuYZA6M/8Nv0IrJVJzXDAx6RRvTJ5aSZQFQ=
Subject key identifier:   E7:4E:CE:48:8C:62:20:A1:BD:42:62:A9:80:AF:9F:9D:04:15:48:F6
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Certificate issuer:       /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial:       54F95A619A3148BBE20EF89BCF9DAC81E1B3EC9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
Manifest number:          80
Signing time:             Thu 08 May 2025 18:21:34 +0000
Manifest this update:     Thu 08 May 2025 18:16:34 +0000
Manifest next update:     Sat 10 May 2025 09:36:34 +0000
Files and hashes:         1: AS214701.asa (hash: mqjMILltX1cHOmmoc9LZ52WIeChEFlk86IUmH66IejE=)
                          2: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: FtkA3PkjfGgz8XfvPsRiGGjZqdBleFesrtVQGyvg0pg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f9:5a:61:9a:31:48:bb:e2:0e:f8:9b:cf:9d:ac:81:e1:b3:ec:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
        Validity
            Not Before: May  8 18:16:34 2025 GMT
            Not After : May 10 09:36:34 2025 GMT
        Subject: CN=E74ECE488C6220A1BD4262A980AF9F9D041548F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5b:dc:b0:e1:44:10:4a:b0:49:88:37:b8:6e:
                    5f:8c:13:e3:d1:95:cd:49:c2:36:19:e9:c6:19:9c:
                    99:25:0c:1a:4b:ab:a0:06:e4:30:f4:9e:8d:53:a8:
                    db:71:04:86:d5:80:1a:75:b7:5f:05:06:0b:c0:f5:
                    4c:86:2f:c7:c5:b6:b2:d4:85:9f:7c:b9:88:a5:21:
                    42:6e:15:05:db:9f:c0:49:6b:24:2c:d6:df:e3:7a:
                    01:3b:4d:a3:9b:0b:dd:48:43:e5:56:b5:ac:9d:4f:
                    c2:83:15:e2:16:a4:1b:37:12:3b:81:b9:27:d7:27:
                    a5:af:40:71:b4:87:34:97:7f:c6:b3:30:3b:36:3d:
                    48:a2:31:ec:7a:0c:51:11:ee:7f:a1:02:84:cd:3c:
                    df:1a:66:1e:d3:93:a0:d5:34:b1:9a:0e:b3:3a:23:
                    68:2e:09:73:51:f2:3c:a8:54:70:6b:4a:9a:95:0b:
                    cb:41:d3:cb:a4:b3:27:b8:1d:5d:6d:cd:c3:b0:85:
                    f6:e1:26:d7:81:af:76:c2:43:d7:3a:63:65:33:2a:
                    60:f4:35:d4:13:f7:21:07:2c:8c:08:59:dd:23:b0:
                    d8:ce:b7:1a:17:1e:4c:d2:8c:29:6d:1a:63:57:7d:
                    e1:3e:fb:08:d0:1e:c8:d6:80:d9:ff:06:05:b6:0c:
                    01:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4E:CE:48:8C:62:20:A1:BD:42:62:A9:80:AF:9F:9D:04:15:48:F6
            X509v3 Authority Key Identifier:
                keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ce:3f:ad:87:28:d3:c1:ec:31:89:31:87:d9:74:7e:d7:f4:
         2d:20:e7:31:09:86:80:58:8a:23:2c:c5:fa:7f:b2:77:64:1b:
         a3:79:93:dd:c6:b3:2d:0f:4b:c0:6f:82:16:ee:0b:df:26:ed:
         ef:5e:e4:71:76:db:bb:9d:77:83:4c:df:35:92:dc:ea:c9:45:
         9a:7b:e3:cb:db:47:37:c9:82:14:44:f1:af:59:d8:18:d0:0c:
         5b:a1:65:ff:ac:8a:af:b6:61:51:9d:40:c7:24:ae:71:23:07:
         b3:30:95:db:2a:9b:38:9c:a5:86:ca:05:e1:23:eb:0f:33:41:
         19:e2:e5:0e:8b:4e:1e:9c:a2:bf:fd:c4:e8:bd:34:ff:0a:9c:
         37:31:44:9d:5b:cd:4d:d6:5f:0b:bb:9a:a2:5b:ba:ad:fd:d0:
         30:28:d4:a6:d4:8b:a8:bb:7b:c1:ac:a7:d5:7e:33:02:7c:ce:
         4f:7b:82:c3:5a:27:3e:a5:fc:1f:b5:af:2d:4f:56:a9:27:c2:
         03:c7:4d:5b:06:e2:23:29:d3:fd:4e:e0:36:19:05:d9:2f:88:
         d8:81:62:72:6b:e3:95:ac:ed:5e:26:ef:08:29:1e:ac:0c:cd:
         58:06:33:bf:b4:1a:94:37:2b:ef:73:65:86:f6:fb:81:ff:6c:
         eb:7a:b4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:46:16 2025 by rpki-client