Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
File:                     2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft (raw, json)
Hash identifier:          KJJ/jKJjvs6EruuZEUpIjF1gPegQePgGBsNk7+9HJn8=
Subject key identifier:   EF:9A:7B:1D:EB:8F:C7:89:D5:95:DE:FD:5E:A2:A3:7C:B8:F7:7E:50
Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
Certificate issuer:       /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Certificate serial:       406722D3EABE712D888A5048EB3EA0A15443054E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
Manifest number:          0308
Signing time:             Thu 08 May 2025 00:50:17 +0000
Manifest this update:     Thu 08 May 2025 00:45:17 +0000
Manifest next update:     Fri 09 May 2025 03:51:17 +0000
Files and hashes:         1: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl (hash: fBAIQfWY8Go8EA1vgdzjDQzW05QGKXPHbOhg3yOaB20=)
                          2: AS205329.asa (hash: Dd7JzyQ5+gSfY/FnpvRoNBmxG+ibp+5DFVs8PxvskHk=)
                          3: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (hash: kzIiKa78uyzgIwp38B3VckxTAvGVZjyeobfym4ZXmx8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:67:22:d3:ea:be:71:2d:88:8a:50:48:eb:3e:a0:a1:54:43:05:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
        Validity
            Not Before: May  8 00:45:17 2025 GMT
            Not After : May  9 03:51:17 2025 GMT
        Subject: CN=EF9A7B1DEB8FC789D595DEFD5EA2A37CB8F77E50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:fe:75:be:34:fe:da:5a:7e:8f:41:89:1e:75:
                    db:3e:da:0c:03:c0:82:34:b5:5f:a5:d1:56:13:ac:
                    f4:a0:ce:08:ce:a4:2f:80:79:4d:b0:d6:5e:44:6e:
                    36:2b:36:43:98:7a:e2:f5:24:a4:84:75:27:0c:f3:
                    39:d9:d9:6e:4d:9f:37:80:a3:12:e8:46:3b:20:8b:
                    93:1e:eb:84:cb:a8:36:7a:22:80:4b:14:ce:d7:0c:
                    fa:8d:04:16:b3:4e:97:dd:47:06:af:74:bc:90:58:
                    9c:b2:f0:bc:18:b7:03:a0:10:76:ce:e0:b0:eb:f7:
                    c1:f8:25:a2:af:38:76:d6:e2:a4:ea:56:bc:28:3d:
                    45:40:68:38:f6:b6:11:cf:f1:3c:62:2c:ad:fd:34:
                    21:31:2e:db:00:b4:7b:f1:93:ad:30:da:25:c5:17:
                    21:64:82:11:e9:5c:5d:9c:97:f0:71:b4:82:70:59:
                    43:49:65:03:d0:28:a3:62:32:77:ef:0f:e9:0d:f1:
                    6a:3a:e4:a9:86:14:27:80:0d:77:15:9b:ba:2d:1a:
                    0a:22:1c:85:9f:9a:dd:dc:0a:bb:24:b7:71:b0:91:
                    41:e1:5a:1e:b2:6c:b3:55:3a:2e:18:25:0a:31:67:
                    e7:73:de:d5:f2:c7:c1:7d:d0:33:77:e0:89:78:6f:
                    fa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9A:7B:1D:EB:8F:C7:89:D5:95:DE:FD:5E:A2:A3:7C:B8:F7:7E:50
            X509v3 Authority Key Identifier:
                keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:ab:c1:28:1a:97:9e:5c:4d:4c:3d:2b:bb:e4:a2:f8:70:f4:
         a4:bb:5e:5f:55:f3:af:bf:72:85:a3:98:b4:d8:1d:a5:ac:e2:
         19:97:14:a0:67:26:67:73:9f:a4:4b:3d:df:f0:5b:00:57:a8:
         45:96:2b:17:52:12:63:a3:5a:a4:48:56:31:4f:69:14:42:7f:
         43:a5:ea:b2:f7:fa:ef:0e:bb:6b:28:99:0b:3c:a8:62:58:55:
         e4:ad:2d:54:99:1f:57:1a:7a:fd:a3:b1:1e:c4:b5:a2:7f:9b:
         5c:70:26:a7:cd:7d:ab:3e:f4:42:32:4e:f5:51:52:74:3a:98:
         d5:f5:83:ff:da:a6:93:a7:8d:2b:fa:fb:53:5d:53:69:5a:7e:
         ae:4e:79:ed:73:52:a7:c2:30:e6:de:0c:39:ac:56:1d:01:47:
         17:d7:a5:f1:b2:5e:8b:e3:ff:ef:3e:0b:ba:2e:74:c6:15:6a:
         7f:30:46:f3:c6:7e:c1:9e:6a:18:42:94:ef:4b:f3:16:c5:c4:
         05:8f:7a:1a:2f:89:19:56:73:65:a1:04:38:0a:c3:d9:10:5e:
         07:dd:60:0b:bb:57:f6:5a:b7:a1:68:17:7e:46:97:63:1d:d9:
         36:ee:14:8e:5b:37:a2:96:f0:4b:80:7b:4e:49:85:92:0d:87:
         7f:13:5e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:36:22 2025 by rpki-client