Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
File:                     C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft (raw, json)
Hash identifier:          Gj/TD7doqZKVt8NQ6c/Ayp9ZBeSp2TM1LtHpNdIC1/k=
Subject key identifier:   1C:02:FB:28:5C:40:55:CD:8A:F5:35:4B:2A:70:B3:87:5B:94:D9:3B
Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Certificate issuer:       /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Certificate serial:       186E0F048E7CFA4AD65C3922271FB7FED3B9D9F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
Manifest number:          01F7
Signing time:             Sat 28 Jun 2025 20:35:28 +0000
Manifest this update:     Sat 28 Jun 2025 20:30:28 +0000
Manifest next update:     Sun 29 Jun 2025 20:50:28 +0000
Files and hashes:         1: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl (hash: Cs9AWwYPruJsWA2pxPhyHgEjwqviqn6cMyWGyXKiqQ0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6e:0f:04:8e:7c:fa:4a:d6:5c:39:22:27:1f:b7:fe:d3:b9:d9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
        Validity
            Not Before: Jun 28 20:30:28 2025 GMT
            Not After : Jun 29 20:50:28 2025 GMT
        Subject: CN=1C02FB285C4055CD8AF5354B2A70B3875B94D93B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f0:70:ce:29:53:d8:ff:32:d1:13:2b:d1:69:
                    93:a5:81:00:66:be:82:7c:bd:ef:94:58:eb:95:01:
                    e6:32:fa:0f:b0:60:5d:f1:6e:f5:93:32:b8:ef:8f:
                    3c:84:f6:14:27:80:ab:51:71:2c:02:27:a6:62:cd:
                    86:1e:aa:df:b5:9a:08:ac:ab:59:71:75:8a:03:69:
                    e8:66:26:2e:cb:8c:ff:c1:5d:57:fc:18:b3:5c:f3:
                    16:94:05:22:04:26:c6:48:5f:5a:8b:e8:b3:e1:ff:
                    d2:56:60:37:ac:d6:79:89:0a:c4:c4:f8:64:d8:5c:
                    3a:54:e4:bd:68:e8:60:af:20:34:26:8c:55:a4:57:
                    f2:35:ac:75:d4:23:96:d3:f4:5c:ec:f7:b1:29:86:
                    8c:e0:d3:2c:cb:48:e6:19:40:c8:fe:d7:90:63:b3:
                    73:d4:83:d3:bd:44:6d:5f:af:19:ca:c2:87:f1:aa:
                    fb:51:25:61:64:3d:8a:1d:10:30:4d:19:4a:56:79:
                    6d:c9:ff:6a:4d:30:7b:75:8b:f0:7b:e2:9a:26:a9:
                    95:68:8c:4c:b8:1e:01:af:8d:0d:de:21:b0:fb:ac:
                    bc:43:ae:0f:73:78:c2:95:5e:51:c5:c3:8a:06:e9:
                    75:a7:eb:b0:ee:96:f5:69:51:d1:09:f4:5c:b3:8e:
                    62:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:02:FB:28:5C:40:55:CD:8A:F5:35:4B:2A:70:B3:87:5B:94:D9:3B
            X509v3 Authority Key Identifier:
                keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:07:11:2c:78:ae:91:a8:e9:fd:11:22:1f:c0:42:1f:b3:40:
         7b:af:d9:63:d9:b0:9f:d8:e1:3a:ff:08:be:db:9f:89:c1:b7:
         f0:97:0d:ec:4f:9c:ba:d5:0c:d0:b7:33:1b:76:eb:67:8e:dd:
         4d:3a:6b:8e:d2:53:3a:20:b4:f8:99:7b:f9:95:bd:ba:fe:75:
         33:ed:93:f6:f5:54:ab:fc:ba:37:33:90:c2:b7:f1:13:11:e1:
         14:1f:f1:bd:12:c5:09:35:d7:e4:b7:7f:13:3c:9d:17:2e:74:
         66:92:ce:42:88:dc:49:53:5a:c4:a2:e1:5d:22:31:80:f5:1b:
         1b:1d:a1:ed:98:25:1a:7e:e9:61:89:13:64:6f:55:97:5e:46:
         79:a7:43:91:20:ee:30:c0:6c:79:e7:c2:c4:2b:23:87:29:84:
         3b:f4:34:5d:5f:33:4f:a5:1a:bb:65:22:25:c4:36:dd:e3:cd:
         b1:0a:0c:b4:d0:77:ab:3e:b4:06:e6:9a:cb:cb:48:94:b7:93:
         89:f5:03:96:3e:cc:48:dc:44:0d:c6:25:db:f3:d3:4e:72:ea:
         c2:5a:18:56:b3:22:42:48:69:76:2e:c7:78:3e:18:d4:66:96:
         c2:b0:2e:81:23:0c:d2:3c:94:b5:c7:fe:d2:1f:b5:68:bb:67:
         99:f9:df:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:29:33 2025 by rpki-client