Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
File:                     63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft (raw, json)
Hash identifier:          U49L/fNaB9WnDXCPXT8MFgjXI/QwvYhaVQ0DsX0Yoq4=
Subject key identifier:   ED:3D:22:98:A5:43:22:40:B0:D7:0E:C6:2E:AA:18:40:63:18:56:FF
Authority key identifier: 63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55
Certificate issuer:       /CN=63f7b29371e814336c52d9c43d1af4f9fa33e855
Certificate serial:       68682C9310A52EBDAA401362E4A7A2F436E89F0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
Manifest number:          025E
Signing time:             Sat 28 Jun 2025 03:23:05 +0000
Manifest this update:     Sat 28 Jun 2025 03:18:05 +0000
Manifest next update:     Sun 29 Jun 2025 05:23:05 +0000
Files and hashes:         1: 63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl (hash: s+JO6P/iJMDAlfxWQXIIzm1gnBjkM/yO7fXXbD8/UnI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 05:23:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:68:2c:93:10:a5:2e:bd:aa:40:13:62:e4:a7:a2:f4:36:e8:9f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63f7b29371e814336c52d9c43d1af4f9fa33e855
        Validity
            Not Before: Jun 28 03:18:05 2025 GMT
            Not After : Jun 29 05:23:05 2025 GMT
        Subject: CN=ED3D2298A5432240B0D70EC62EAA1840631856FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1b:ec:bd:1e:60:cd:50:77:28:fb:3c:d3:44:
                    cf:68:2a:25:e5:5e:39:ea:98:26:4b:73:e7:46:f8:
                    b6:a8:40:c8:fd:1e:fc:4d:d9:9f:25:bb:f3:5e:3c:
                    d4:ab:f2:03:e1:eb:71:3b:7a:75:37:fb:22:bd:ce:
                    3c:e0:ee:17:95:77:93:5a:01:19:29:c6:27:9b:e5:
                    84:8c:8d:1f:85:c2:79:5c:17:6d:35:0e:ca:e0:b4:
                    1b:7a:b0:47:30:31:d3:7a:58:a4:0c:7f:9b:83:50:
                    65:bb:bb:c1:bf:89:00:dd:9e:3f:eb:a4:07:c0:b1:
                    a0:9d:35:9c:ba:1a:ad:96:8d:8d:aa:22:a3:d2:bc:
                    93:12:32:80:16:2d:91:61:95:c7:9d:88:d0:7a:a4:
                    ef:a3:10:d6:7e:b4:19:ef:6c:04:db:37:38:d3:8e:
                    fe:9e:2f:ed:11:b4:b4:2b:30:ef:17:e9:bc:3d:cd:
                    13:01:06:b1:b5:c9:26:47:cb:66:1e:23:73:2c:3f:
                    c0:a2:f5:60:f1:f9:b9:c0:3c:18:c3:a7:8e:1d:56:
                    13:bb:13:a6:2e:30:51:e3:b1:16:05:fb:46:b1:d9:
                    19:bd:49:ad:46:e5:35:00:99:1f:22:cc:81:b4:b7:
                    97:8d:aa:a7:54:03:22:e3:77:ba:b8:37:f0:0d:b6:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3D:22:98:A5:43:22:40:B0:D7:0E:C6:2E:AA:18:40:63:18:56:FF
            X509v3 Authority Key Identifier:
                keyid:63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:43:9f:f6:24:37:ba:45:41:6a:df:27:76:9a:54:df:2f:1f:
         7e:6f:39:10:32:9d:a1:ec:30:38:e3:4a:d0:f8:8d:75:47:b7:
         01:1c:4e:6e:0b:a2:8e:1e:86:83:59:39:c6:80:e8:ac:62:c1:
         2f:fa:7e:8a:2a:0e:05:bd:3a:d2:d0:43:7e:f1:84:1f:7d:8a:
         4d:d4:3a:8b:a9:4b:35:bd:fc:49:97:4e:df:b4:62:e0:dc:64:
         69:cb:34:47:2d:03:f8:0c:6d:e5:6f:ca:10:ef:db:2e:63:02:
         38:91:e9:bf:19:77:86:6a:9d:45:66:27:e8:73:7d:5b:64:05:
         7c:05:0d:2d:ce:e2:72:76:b4:8d:66:8f:14:27:3f:c7:86:af:
         c8:97:fd:df:e6:82:91:9a:d6:c7:38:7d:19:9e:1b:00:87:c3:
         a8:84:8b:7d:e3:2e:66:72:b5:fb:8b:57:54:f0:e7:58:96:81:
         38:59:53:bc:87:92:be:76:57:32:c8:95:ca:ee:89:04:8f:58:
         ab:77:b3:7c:82:f7:b5:68:f0:a7:fa:6d:53:06:1b:22:e3:19:
         f4:ed:55:11:a3:82:65:a1:a8:74:6e:b2:d3:de:74:20:ab:43:
         2d:cb:2c:0d:3a:c3:7d:15:3b:8d:a3:df:ca:ba:0b:b3:44:1b:
         31:7c:48:db
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUaGgskxClLr2qQBNi5Kei9DbonwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNmN2IyOTM3MWU4MTQzMzZjNTJkOWM0M2QxYWY0Zjlm
YTMzZTg1NTAeFw0yNTA2MjgwMzE4MDVaFw0yNTA2MjkwNTIzMDVaMDMxMTAvBgNV
BAMTKEVEM0QyMjk4QTU0MzIyNDBCMEQ3MEVDNjJFQUExODQwNjMxODU2RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXG+y9HmDNUHco+zzTRM9oKiXl
XjnqmCZLc+dG+LaoQMj9HvxN2Z8lu/NePNSr8gPh63E7enU3+yK9zjzg7heVd5Na
ARkpxieb5YSMjR+FwnlcF201DsrgtBt6sEcwMdN6WKQMf5uDUGW7u8G/iQDdnj/r
pAfAsaCdNZy6Gq2WjY2qIqPSvJMSMoAWLZFhlcediNB6pO+jENZ+tBnvbATbNzjT
jv6eL+0RtLQrMO8X6bw9zRMBBrG1ySZHy2YeI3MsP8Ci9WDx+bnAPBjDp44dVhO7
E6YuMFHjsRYF+0ax2Rm9Sa1G5TUAmR8izIG0t5eNqqdUAyLjd7q4N/ANtuEbAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU7T0imKVDIkCw1w7GLqoYQGMYVv8wHwYDVR0j
BBgwFoAUY/eyk3HoFDNsUtnEPRr0+foz6FUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0
MmUxLzMvNjNGN0IyOTM3MUU4MTQzMzZDNTJEOUM0M0QxQUY0RjlGQTMzRTg1NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lfZXlrM0hvRkROc1V0bkVQUnIwLWZv
ejZGVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMDYzMzNjNi05
NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMy82M0Y3QjI5MzcxRTgxNDMzNkM1
MkQ5QzQzRDFBRjRGOUZBMzNFODU1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnUOf9iQ3ukVBat8ndppU
3y8ffm85EDKdoewwOONK0PiNdUe3ARxObguijh6Gg1k5xoDorGLBL/p+iioOBb06
0tBDfvGEH32KTdQ6i6lLNb38SZdO37Ri4Nxkacs0Ry0D+Axt5W/KEO/bLmMCOJHp
vxl3hmqdRWYn6HN9W2QFfAUNLc7icna0jWaPFCc/x4avyJf93+aCkZrWxzh9GZ4b
AIfDqISLfeMuZnK1+4tXVPDnWJaBOFlTvIeSvnZXMsiVyu6JBI9Yq3ezfIL3tWjw
p/ptUwYbIuMZ9O1VEaOCZaGodG6y0950IKtDLcssDTrDfRU7jaPfyroLs0QbMXxI
2w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:25:01 2025 by rpki-client