Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
File:                     7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft (raw, json)
Hash identifier:          vK+b4VdVH74wBOkNfiSDh3XysFIMydJolP1Z6g5vKGM=
Subject key identifier:   46:AC:16:D7:22:1F:D7:24:E5:AE:2C:57:36:CF:A6:D3:28:C5:00:30
Authority key identifier: 7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
Certificate issuer:       /CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Certificate serial:       5E8177BAA28E3E2926AA21E3B98C1CEDF55EA138
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
Manifest number:          0169
Signing time:             Sat 23 Aug 2025 04:56:05 +0000
Manifest this update:     Sat 23 Aug 2025 04:51:05 +0000
Manifest next update:     Sun 24 Aug 2025 05:59:05 +0000
Files and hashes:         1: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl (hash: vPxoCMQJG3t6GgDZozgUMzRMvQX6+pEeD0hNxmQogow=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:81:77:ba:a2:8e:3e:29:26:aa:21:e3:b9:8c:1c:ed:f5:5e:a1:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
        Validity
            Not Before: Aug 23 04:51:05 2025 GMT
            Not After : Aug 24 05:59:05 2025 GMT
        Subject: CN=46AC16D7221FD724E5AE2C5736CFA6D328C50030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b4:27:05:ed:c0:b6:2f:26:e5:a4:d3:ba:1e:
                    f5:e7:c7:8a:d2:96:63:18:e0:62:eb:aa:bb:55:61:
                    06:ac:09:1c:df:ac:4d:69:5e:0d:66:12:d8:f5:40:
                    11:6f:85:78:54:17:e9:4c:2f:25:61:8f:3c:6d:db:
                    f8:22:ac:b7:0a:31:5f:1f:59:9b:c3:7b:52:67:40:
                    08:08:5f:2a:e2:94:8f:5d:79:aa:92:1e:33:81:94:
                    ab:e3:f7:cd:6d:0b:b3:b1:1d:29:dd:29:52:35:a3:
                    f5:da:f1:cd:f9:9f:ca:7e:80:dd:7c:ec:53:b9:04:
                    14:80:a0:f6:e0:d1:31:e3:0e:1e:1f:f5:aa:42:5b:
                    23:73:38:4a:9f:b6:8f:09:c2:c8:a1:91:fc:0a:c0:
                    c6:87:0f:60:01:8c:9e:65:d8:62:b7:00:1d:48:bd:
                    f4:8c:0c:f4:35:31:5e:91:1b:a7:3e:3b:4b:6a:b4:
                    5c:5c:ab:a3:1b:3f:d1:c2:1a:d2:d1:c0:70:58:70:
                    f2:d8:4c:d4:97:3b:3a:e0:4c:30:fc:c4:6e:70:48:
                    65:da:53:29:0a:6c:0c:37:7a:8c:4a:71:9d:fb:8e:
                    41:15:6e:dc:c3:ff:ba:08:11:02:b4:55:ba:e2:18:
                    4a:52:4c:36:a6:62:7d:4a:70:0f:16:6e:55:23:d0:
                    8f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AC:16:D7:22:1F:D7:24:E5:AE:2C:57:36:CF:A6:D3:28:C5:00:30
            X509v3 Authority Key Identifier:
                keyid:7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:92:8f:bb:62:32:1a:f4:ae:6b:f7:b8:3d:4f:60:8b:a8:d1:
         f0:22:a7:fa:df:a6:0a:3e:d4:75:a1:18:b4:b5:5f:31:b0:4b:
         4c:b4:33:15:f8:53:cd:e0:25:a4:e8:e4:69:0f:04:51:0c:db:
         b6:94:80:7e:7f:cb:d8:b9:06:1c:7b:9a:0a:72:f6:12:5c:ad:
         03:2b:6c:51:ec:d9:86:e5:26:78:cc:ca:09:8c:b9:32:94:f5:
         b1:f7:53:09:b6:02:32:68:df:1f:5c:59:e9:06:ba:dc:d0:2f:
         48:76:9e:13:ca:5a:03:c2:ee:df:5b:8c:92:98:a8:b4:86:5e:
         89:c0:11:0b:67:98:49:ef:3c:12:5c:10:dd:6f:45:37:69:96:
         1c:9b:3c:e3:30:be:a4:53:9a:ee:21:1a:90:e1:33:01:36:5e:
         e0:93:44:a7:eb:3f:d6:d1:d2:33:0b:0c:64:d3:67:34:b2:76:
         95:a1:13:06:95:f1:68:bb:2e:aa:0c:78:d4:0e:d3:d3:d1:b7:
         69:ac:7c:fa:0f:58:26:0d:ee:7b:e7:82:1a:ab:2a:f8:e9:bc:
         2b:02:0e:31:fa:55:bf:3e:94:c3:31:e5:95:38:49:b2:12:50:
         fd:41:6f:4a:f1:f2:10:2f:59:b3:2b:50:25:dd:af:76:57:07:
         10:eb:6f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:36:04 2025 by rpki-client