Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
File:                     91A33711A470A1CAF41284B368F40FD2BDF16F01.mft (raw, json)
Hash identifier:          OJS/x14Q1xT2QlU4uyQzJdOTRsxjnjLvwn6JOi/6koY=
Subject key identifier:   62:E8:EA:82:E5:05:4C:00:A1:B9:72:B0:EE:BA:63:6F:D3:E0:D0:C2
Authority key identifier: 91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01
Certificate issuer:       /CN=91a33711a470a1caf41284b368f40fd2bdf16f01
Certificate serial:       1FA3CE19153FDCBC46B4FB90FCC0FA3C8988C710
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
Manifest number:          031A
Signing time:             Sat 28 Jun 2025 10:44:09 +0000
Manifest this update:     Sat 28 Jun 2025 10:39:09 +0000
Manifest next update:     Sun 29 Jun 2025 11:40:09 +0000
Files and hashes:         1: 91A33711A470A1CAF41284B368F40FD2BDF16F01.crl (hash: sFdy/9lFseHKO69JKdnqjNxyimzCDwC0Iu56o40vmIM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 11:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a3:ce:19:15:3f:dc:bc:46:b4:fb:90:fc:c0:fa:3c:89:88:c7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a33711a470a1caf41284b368f40fd2bdf16f01
        Validity
            Not Before: Jun 28 10:39:09 2025 GMT
            Not After : Jun 29 11:40:09 2025 GMT
        Subject: CN=62E8EA82E5054C00A1B972B0EEBA636FD3E0D0C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c7:a5:57:fb:5f:84:b4:0c:67:98:7a:e7:0d:
                    da:1b:ee:15:db:b3:c0:90:d1:15:07:26:71:61:2f:
                    bd:f8:94:64:10:b9:9e:89:d2:9a:ad:2b:3c:36:16:
                    6b:7d:32:86:e1:19:c6:89:22:15:70:11:19:78:ea:
                    38:32:ab:eb:94:aa:25:70:04:79:8e:9a:dd:5b:dc:
                    91:88:24:aa:ea:d8:40:82:48:3f:e0:d5:81:8e:5d:
                    75:f9:86:80:12:39:08:e8:40:0f:37:b1:9c:d3:64:
                    97:39:c8:06:ed:64:cb:f5:d2:fa:eb:34:40:0d:60:
                    5c:26:b9:0f:33:65:19:fb:73:b0:34:43:3f:9f:c9:
                    4b:a0:f9:46:87:f0:1b:19:26:f9:21:b2:d9:f0:a0:
                    87:ca:75:1a:68:8e:10:c7:ca:59:11:f7:8e:c0:e8:
                    a5:90:b1:e9:09:83:00:b8:1e:38:c3:07:d8:1a:e1:
                    ae:0c:f0:d2:b8:f4:ca:99:68:3f:f1:fc:0c:d7:c3:
                    c9:d5:fe:03:7d:87:2c:c1:51:e5:90:cf:01:e4:3d:
                    a9:56:fc:b3:eb:23:88:7c:8b:4b:1e:7d:75:1d:bd:
                    29:7d:bc:8b:d6:af:5d:e3:16:3e:df:8b:56:aa:d8:
                    c5:f9:92:5e:f2:86:80:f4:5e:ed:59:29:f3:76:73:
                    c5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E8:EA:82:E5:05:4C:00:A1:B9:72:B0:EE:BA:63:6F:D3:E0:D0:C2
            X509v3 Authority Key Identifier:
                keyid:91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:7f:d1:46:9e:a9:0a:56:f4:c9:8e:58:25:d7:f2:6d:54:91:
         85:96:1d:db:c5:67:b0:cc:aa:65:05:68:fd:06:de:c6:d1:d3:
         27:b5:b6:44:ca:62:47:38:de:78:ab:16:1a:f6:41:a8:75:cd:
         f9:35:83:95:87:cc:58:33:5d:a2:ca:86:fe:85:1e:7b:2f:c5:
         bf:e9:ca:72:9c:94:f6:58:0b:c7:e1:15:c8:15:e1:7e:00:50:
         bc:2a:98:9b:cf:14:c5:a6:2c:7a:c1:76:bc:3f:2c:00:f3:9f:
         3e:22:a9:ce:65:ef:cf:3c:29:22:14:56:7e:17:85:d3:29:bc:
         10:e9:3c:77:eb:c5:a0:14:b3:87:8d:f3:d9:df:9d:b4:a0:9b:
         79:b7:ad:75:46:1d:37:43:c5:ea:21:13:b5:e3:65:37:5f:5b:
         7b:20:5f:f2:b8:c7:80:a1:f1:63:f0:41:61:3e:62:a5:e2:c0:
         e8:cc:69:1b:4b:c6:32:69:68:a1:45:7f:d6:64:33:26:67:a9:
         92:7f:64:e2:34:ec:e4:7a:2b:8e:96:c0:e6:78:54:e1:ff:ce:
         4f:a0:fe:cd:a4:8c:7a:8c:e9:6f:76:3a:d8:62:90:a3:14:ea:
         de:e9:08:ba:5b:78:22:32:86:69:bd:ee:0f:b8:91:2a:cb:66:
         ab:e5:72:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:18 2025 by rpki-client