Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
File:                     91A33711A470A1CAF41284B368F40FD2BDF16F01.mft (raw, json)
Hash identifier:          teiOkCuifJA47HT4tetLJI50+1coG9/ZQ0ioogQtwVg=
Subject key identifier:   C8:3F:78:8F:07:B4:BB:74:F7:3A:3E:4A:D5:7C:82:53:13:8F:82:8C
Authority key identifier: 91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01
Certificate issuer:       /CN=91a33711a470a1caf41284b368f40fd2bdf16f01
Certificate serial:       1BC49B586EA768C2D50A30F31B9EBCA6D9B10B16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
Manifest number:          0365
Signing time:             Sat 23 Aug 2025 13:27:33 +0000
Manifest this update:     Sat 23 Aug 2025 13:22:33 +0000
Manifest next update:     Sun 24 Aug 2025 15:34:33 +0000
Files and hashes:         1: 91A33711A470A1CAF41284B368F40FD2BDF16F01.crl (hash: OW+fI7/tEEEH1TNmpyuB+jQPa5/rBK9/nQujQqUYxgk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c4:9b:58:6e:a7:68:c2:d5:0a:30:f3:1b:9e:bc:a6:d9:b1:0b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a33711a470a1caf41284b368f40fd2bdf16f01
        Validity
            Not Before: Aug 23 13:22:33 2025 GMT
            Not After : Aug 24 15:34:33 2025 GMT
        Subject: CN=C83F788F07B4BB74F73A3E4AD57C8253138F828C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:fb:85:4f:c3:f8:b9:2d:e4:88:11:5f:8e:
                    45:75:b0:b9:9d:3c:ee:03:98:43:34:8d:85:ba:20:
                    87:5a:b5:dd:ff:64:f3:76:b3:e4:27:93:df:06:7a:
                    da:12:52:a8:9b:28:cb:3c:c5:29:50:72:11:5e:71:
                    cd:bf:b6:34:26:2e:f2:7f:27:32:90:03:10:88:94:
                    d8:2e:b6:17:cb:21:3e:c0:30:79:fa:c5:4b:ba:00:
                    cb:2c:da:4e:3a:84:40:9c:f2:06:38:6d:b7:05:e1:
                    31:8c:72:10:60:80:00:82:9b:ce:43:93:21:49:ea:
                    9d:96:21:a8:37:fc:1d:89:4f:5f:9f:90:e4:db:31:
                    4a:21:c1:59:d4:85:df:55:0f:e2:62:ed:ad:bb:cc:
                    63:a9:6a:0b:28:8d:63:da:09:f8:db:30:3d:a2:41:
                    3a:62:98:43:d5:41:8a:d2:61:fe:fd:74:f0:37:10:
                    7f:05:e6:28:fd:81:89:eb:ef:33:31:d8:ed:0c:bf:
                    15:d5:e3:f9:26:ab:b0:a4:a9:c9:f9:4f:af:9c:32:
                    55:5f:f4:d7:9d:23:67:30:d9:ad:9c:99:e6:ca:99:
                    76:d6:65:54:00:75:e9:e5:1b:0e:3b:2e:1e:ac:a2:
                    48:17:a4:8b:a6:db:2d:d8:58:12:31:03:76:77:b5:
                    4c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3F:78:8F:07:B4:BB:74:F7:3A:3E:4A:D5:7C:82:53:13:8F:82:8C
            X509v3 Authority Key Identifier:
                keyid:91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:08:11:e6:6f:98:5d:1f:69:64:c8:9d:b8:3c:ec:10:bc:24:
         40:64:6a:21:23:ec:fd:b0:92:42:b9:95:88:1f:e3:53:08:c3:
         33:1e:1f:ad:6c:31:e3:ee:66:15:e7:b3:fe:80:a4:0d:fe:7a:
         51:96:36:b6:fa:5a:8d:b9:11:cd:3e:e0:24:dd:06:66:d6:a7:
         18:88:31:81:4e:ec:71:89:26:ac:ff:e3:00:ec:b3:bb:9a:d5:
         68:e5:90:86:ff:80:06:a4:90:86:e5:a4:cc:69:ac:68:8a:eb:
         99:88:1d:de:31:ae:9a:c3:ea:46:d0:1c:3a:13:3d:b7:42:ec:
         c3:04:bb:d8:6b:c7:e6:c6:54:8b:c4:55:0a:3f:e9:64:17:a3:
         29:bb:3b:0d:0f:92:09:74:20:71:7c:05:b7:a6:3a:ef:e9:31:
         d3:96:70:fd:c4:7e:22:ee:bf:d6:59:32:db:fa:01:32:25:b4:
         66:05:ff:3c:19:3c:77:e2:08:9a:e6:38:32:68:35:a0:ae:39:
         44:46:42:b2:9e:46:a9:35:d4:57:3f:f1:9d:96:e3:d1:3e:cc:
         c6:28:38:64:64:70:0a:f6:b4:f0:1d:35:3e:0d:b3:60:16:48:
         9c:68:f2:e9:01:08:d8:12:ce:3c:19:75:1b:9a:ab:45:d9:76:
         9d:39:fb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:53 2025 by rpki-client