Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
File:                     C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft (raw, json)
Hash identifier:          Ktzasj/z3lQsodLjb+bWhIgfLjIZqonVhWewnGsN0jk=
Subject key identifier:   8E:AD:A7:DB:8B:EC:01:67:6E:57:CB:05:7C:4F:9C:8C:E7:86:38:93
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Certificate issuer:       /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial:       056511E56201CCE042640CA59CD0C865E1C7588E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
Manifest number:          04AD
Signing time:             Sat 28 Jun 2025 17:59:11 +0000
Manifest this update:     Sat 28 Jun 2025 17:54:11 +0000
Manifest next update:     Sun 29 Jun 2025 20:22:11 +0000
Files and hashes:         1: 3139332e3234362e342e302f32342d3234203d3e20313335343032.roa (hash: x5G3aikxww4wLRaoWnz2KkIIppe2I2SZAi3PiElvQpI=)
                          2: C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl (hash: S3qlBB3OxKAZ+3eiGNFyTGUikBtk2lyz/ivydm4HpRo=)
                          3: 3139332e3234362e352e302f32342d3234203d3e20313939343135.roa (hash: 3pORVfocHqarnsqwM793nrdIxMZCxCypYkq+seLhAgU=)
                          4: 3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa (hash: hv8+1ab3SlqVr0lUzuXGkIAi200jEC6ydrdZg2cy0KU=)
                          5: 3139332e3234362e3130322e302f32342d3234203d3e203630373831.roa (hash: DsxMlBpnaDBCTZCwZ+4l21L/Mim9agw8EK48LHeXcxw=)
                          6: 3231372e3139382e3138372e302f32342d3234203d3e20323132363039.roa (hash: DHsuIdClDCk2AbtF+6NodfNI3JEU6gbRKvoUSbt4bMQ=)
                          7: 3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa (hash: C9UN/z7rRSIBHXCw3Mn5S1vnSskjCCo5azhWVB5o2V8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:65:11:e5:62:01:cc:e0:42:64:0c:a5:9c:d0:c8:65:e1:c7:58:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
        Validity
            Not Before: Jun 28 17:54:11 2025 GMT
            Not After : Jun 29 20:22:11 2025 GMT
        Subject: CN=8EADA7DB8BEC01676E57CB057C4F9C8CE7863893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:99:3c:6e:d5:b3:cd:65:ef:dd:92:f8:19:8b:
                    af:5d:94:ed:ce:6f:9e:a0:e5:d6:71:eb:56:40:15:
                    4e:5a:2c:94:98:ac:e4:3c:63:17:26:a4:2c:a0:fd:
                    a8:c9:14:40:71:d7:3c:6c:89:11:81:19:80:81:39:
                    bc:ae:8c:cf:dc:da:cc:f9:af:22:0e:81:0e:d8:c7:
                    8e:d6:25:d0:e0:24:12:52:fd:7e:30:d0:db:ba:cf:
                    d4:47:30:5d:ed:a2:2f:45:92:dd:eb:40:79:a4:ec:
                    ce:6e:86:3b:f2:3f:34:4c:83:e1:e7:4b:e7:7c:38:
                    89:3f:fb:99:07:6f:ad:eb:28:7b:ac:93:91:48:71:
                    97:70:50:f7:34:39:42:1f:a5:e5:7e:03:35:c5:68:
                    73:e8:ea:6a:c0:c5:d3:02:14:4d:75:3c:96:39:e8:
                    bc:30:a4:8a:08:2f:11:61:18:47:43:e4:92:53:f6:
                    07:7b:01:a7:9b:13:1f:86:76:28:18:96:99:05:aa:
                    16:f0:c2:82:63:ed:78:74:6d:c3:4c:7f:15:2a:23:
                    b9:c5:2a:6c:71:4f:e6:16:24:1f:cd:10:69:07:3d:
                    ae:e5:20:45:c7:75:a3:e0:49:c8:bd:f9:9d:1e:2a:
                    c0:73:14:f1:f2:d8:1c:f5:44:4f:ba:fa:62:19:b0:
                    7d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AD:A7:DB:8B:EC:01:67:6E:57:CB:05:7C:4F:9C:8C:E7:86:38:93
            X509v3 Authority Key Identifier:
                keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:81:88:60:7b:51:67:67:a2:e7:55:a9:74:3a:35:30:18:ca:
         48:25:68:6a:b1:07:a4:9f:73:73:71:9f:92:11:7c:19:0e:b4:
         e5:31:9b:df:49:12:a5:14:50:22:48:8d:92:70:79:d1:09:f6:
         0f:22:a5:55:ab:34:38:3e:fc:9a:1a:4c:bb:8f:04:52:d8:0d:
         a0:50:59:f0:db:cd:bf:86:23:04:cc:ef:0d:ee:51:ba:9d:6e:
         d8:14:ba:99:ed:ed:92:72:3e:46:17:15:18:4f:3f:e9:47:5d:
         42:d0:df:98:c8:77:18:84:bf:65:0e:1b:23:62:20:23:b2:7e:
         37:0d:dd:f7:67:36:b0:1a:40:d2:95:da:03:6d:7c:5f:ab:13:
         20:c1:69:92:e6:45:46:16:ad:56:6c:3a:36:a5:3d:f8:ef:27:
         a5:21:54:cc:26:63:e6:a5:3a:97:1d:f7:e8:24:ba:34:ce:68:
         7e:51:9f:3f:ba:50:98:02:b6:95:a6:0e:a6:5d:23:f0:92:26:
         fb:59:a7:79:a1:c7:52:4c:83:4e:6a:e6:19:12:53:c1:19:b7:
         66:6f:e1:79:a7:7b:7d:ab:30:ca:12:15:5f:a7:1b:cc:73:e8:
         70:39:83:f7:ee:23:ec:e1:d3:db:92:fa:50:5d:22:3a:8b:0d:
         47:f5:b0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:01:13 2025 by rpki-client