Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
File:                     926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json)
Hash identifier:          nAbX4Q+9cw+RLExdGYx+pyV9zMaiRNcXAt4gSLHRKlc=
Subject key identifier:   A2:0C:75:4C:41:C7:B4:AA:A9:45:9E:C4:8D:AE:94:B7:96:1E:F3:9F
Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
Certificate issuer:       /CN=926cb33722a3493216283dc80cae0ee9d58874f2
Certificate serial:       06208B3AB3A9780353254106AD5F34191A5E6A2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
Manifest number:          048E
Signing time:             Thu 08 May 2025 22:08:39 +0000
Manifest this update:     Thu 08 May 2025 22:03:39 +0000
Manifest next update:     Sat 10 May 2025 01:17:39 +0000
Files and hashes:         1: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: vwSEUgdFJ5PPtETvmVfTCVmULHvCJLz5jSqlSjdS13k=)
                          2: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: G0pJKexFl5iJSj7RvTDDHGwylbeAPcm6mkIGuJ7MB4g=)
                          3: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: kkkt+CdVzC7OjY449gnOlMwgGCN8KNpK56RTONBzmFY=)
                          4: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: pnJVLssiBW3uBIi89HThxW+sWqzbgv9WZDvu3hNICMQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 01:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:20:8b:3a:b3:a9:78:03:53:25:41:06:ad:5f:34:19:1a:5e:6a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2
        Validity
            Not Before: May  8 22:03:39 2025 GMT
            Not After : May 10 01:17:39 2025 GMT
        Subject: CN=A20C754C41C7B4AAA9459EC48DAE94B7961EF39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2a:4a:80:2b:72:f9:8a:ba:ad:32:14:7a:a3:
                    45:71:19:f7:8f:00:b4:3c:09:95:36:6e:ce:30:ce:
                    cd:76:03:65:9d:ab:9b:3e:f5:65:5a:bf:ff:e3:50:
                    54:72:10:1a:e9:8a:89:8c:32:0c:e3:93:eb:eb:26:
                    87:a1:99:3c:f3:89:b6:a2:22:60:81:7c:b0:8a:9d:
                    96:b4:2c:a4:c6:9d:90:fa:06:d6:be:1d:2c:9a:d5:
                    0d:aa:5e:ee:7d:94:5c:ee:ab:3d:5b:b5:fb:4c:cf:
                    71:da:a0:18:11:81:58:56:96:4b:58:b6:15:c4:aa:
                    91:ad:1d:e0:e9:3d:0a:55:a6:96:bd:e2:91:6a:6e:
                    60:26:80:18:d5:c2:91:ef:68:4b:20:b8:ef:13:33:
                    d0:ca:9f:15:27:a9:6a:b2:fb:94:cb:af:0f:01:82:
                    e8:ad:9b:bf:13:4d:79:7f:19:b0:41:8d:84:51:69:
                    bb:bc:fe:2d:55:6f:ae:18:40:5d:56:13:f2:1f:5b:
                    4d:a6:55:0d:e5:04:bd:29:e4:6d:e4:d3:d9:b7:f9:
                    23:ee:59:8e:d1:6d:01:f3:c3:11:60:b5:77:8c:9e:
                    02:7c:b2:cb:cc:39:45:66:ca:a0:43:6a:c8:38:c0:
                    06:83:25:da:c3:b2:e3:b1:0c:89:cb:87:b5:46:64:
                    ed:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0C:75:4C:41:C7:B4:AA:A9:45:9E:C4:8D:AE:94:B7:96:1E:F3:9F
            X509v3 Authority Key Identifier:
                keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:51:6b:72:58:00:ec:b2:31:25:24:ab:6d:7f:9f:69:e6:bd:
         7c:c2:07:da:6b:49:c3:a5:90:15:d0:fa:01:27:e1:b3:a3:1b:
         ff:b7:c2:01:62:91:e2:0c:8d:a4:1a:e9:46:44:b0:3a:f7:cb:
         16:f2:04:0d:d3:04:fe:92:cd:cd:a4:a5:63:07:01:7e:f0:4d:
         63:94:64:e3:89:b6:3e:21:7b:2c:fb:c5:dc:6e:bc:18:6e:69:
         7c:83:44:ea:80:ba:6a:cc:67:ab:4f:a9:8a:a4:b1:d9:fb:e2:
         88:87:4f:05:db:07:42:fb:e2:b9:3c:9f:e1:31:b7:9e:e2:63:
         cc:52:b4:66:be:32:ed:52:c6:b4:58:53:e4:43:50:13:33:b9:
         e3:72:03:cb:2d:48:e2:9a:45:f2:dc:e7:a5:59:e2:8b:38:c7:
         5e:6c:d0:f1:1f:17:a3:aa:fe:da:a1:09:35:0c:5f:d3:56:30:
         f2:ce:9f:0d:41:03:e0:0f:0b:fb:29:df:5d:73:a3:88:88:23:
         a2:63:80:27:22:d2:90:d6:cb:b1:8c:24:92:d6:df:d9:52:19:
         7b:39:56:04:e8:3a:50:1b:53:65:48:c0:01:f6:17:75:f8:45:
         0d:a6:92:51:bc:48:b4:44:9e:de:b5:2c:8f:7b:c2:91:5e:26:
         15:31:37:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:35:30 2025 by rpki-client