Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
File:                     547BC28C92A229A5AC78C0DE287D89CE37726409.mft (raw, json)
Hash identifier:          SEFeQqhGt9wUOHGP0zYi/i+t0OtB61PzS4VESlHs7ys=
Subject key identifier:   8E:62:77:03:8A:3C:80:54:BD:F7:EC:1B:3F:3A:96:86:54:F6:BF:D0
Authority key identifier: 54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09
Certificate issuer:       /CN=547bc28c92a229a5ac78c0de287d89ce37726409
Certificate serial:       1A42F6539C0A4B8C4CB7C20679A2365E77D22BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
Manifest number:          0164
Signing time:             Thu 08 May 2025 01:14:11 +0000
Manifest this update:     Thu 08 May 2025 01:09:11 +0000
Manifest next update:     Fri 09 May 2025 04:27:11 +0000
Files and hashes:         1: AS204931.asa (hash: VUh2bwan/qhl6vCwU9bDNceRWkwD3FNixDIwjYY8ML8=)
                          2: 323030313a3637383a6362303a3a2f34382d3438203d3e20323034393331.roa (hash: nR48aVSXVSZvCd3jlcODIB7um6yNk/WjtYd9EtNwPFs=)
                          3: 323030313a3637383a6362303a3a2f34382d3438203d3e203630343331.roa (hash: qPQeu/7M50ShpMjQ7Dkik+VbeEdUIQ58WUoPL4CU+wI=)
                          4: AS60431.asa (hash: YU4mmdUSNMR8oSkn1D5qij0INiIudW4VkjQ07YzI6VU=)
                          5: 547BC28C92A229A5AC78C0DE287D89CE37726409.crl (hash: y2TyTYULdYEiN1YWoqEZGESqMeqNo2i5rylOpo2n4YM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 04:27:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:42:f6:53:9c:0a:4b:8c:4c:b7:c2:06:79:a2:36:5e:77:d2:2b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547bc28c92a229a5ac78c0de287d89ce37726409
        Validity
            Not Before: May  8 01:09:11 2025 GMT
            Not After : May  9 04:27:11 2025 GMT
        Subject: CN=8E6277038A3C8054BDF7EC1B3F3A968654F6BFD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b0:9c:30:27:a8:f8:c0:33:f7:ec:f5:d7:f5:
                    92:11:a5:50:7a:1d:6f:22:b6:98:e1:14:35:be:e1:
                    33:be:67:22:6d:59:a3:d5:a1:a3:28:e1:21:b0:ad:
                    fc:08:1f:fe:43:31:a9:e6:02:60:8e:f5:d7:ca:0e:
                    61:07:e0:f2:c3:3d:62:fc:ee:bc:e0:ee:e3:e4:d2:
                    cb:94:69:84:6f:c4:3f:9e:a7:1b:7f:46:75:f4:d4:
                    4c:6c:a8:bf:4d:79:d6:51:7b:b4:c1:b8:2f:ae:6c:
                    27:ec:e0:3f:6f:87:25:c5:72:7c:28:77:dd:33:bf:
                    90:ad:21:49:3d:5b:a1:df:93:75:cd:80:5d:bb:27:
                    f1:45:cf:ea:61:64:c7:17:07:ca:f2:b4:3e:c9:63:
                    40:69:0b:61:e0:1d:7c:eb:03:22:30:0b:99:50:23:
                    bf:89:7a:d8:38:e6:86:e3:73:2c:52:98:b7:8e:0d:
                    e4:22:d1:ea:fd:7c:dd:ca:e0:54:43:ad:f8:99:55:
                    23:72:02:4f:29:41:a9:5a:17:55:73:2f:d1:86:8e:
                    ec:68:1c:06:ca:86:1e:a3:83:87:01:b6:cd:e9:cc:
                    99:7e:9c:ad:a4:29:f0:fd:eb:87:8e:79:5c:63:46:
                    16:d1:60:ec:f0:61:4a:71:c7:dd:ea:3d:91:e3:be:
                    40:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:62:77:03:8A:3C:80:54:BD:F7:EC:1B:3F:3A:96:86:54:F6:BF:D0
            X509v3 Authority Key Identifier:
                keyid:54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:8f:c4:95:4a:94:3d:30:98:00:b3:8b:6b:34:72:d3:31:6d:
         ba:0e:b4:b0:2d:19:e1:3c:89:58:08:7e:52:84:12:25:65:95:
         51:de:b2:16:f1:72:20:da:ec:af:fc:27:b1:2a:86:75:4d:7a:
         50:fd:c2:db:b2:23:78:f6:46:01:da:73:14:06:72:7f:ae:e9:
         95:91:a0:c4:4f:ac:82:50:88:4e:e5:ed:81:3e:ad:f2:48:1b:
         fa:92:e7:af:ae:82:38:20:7a:c1:2b:12:e5:55:41:3d:67:38:
         a1:a4:32:72:b0:72:0f:70:d5:96:a6:b7:b8:7f:e3:44:99:d6:
         17:45:0d:78:ed:03:1d:9e:d9:31:a9:10:a2:12:b5:28:fe:36:
         c2:ee:a0:c2:86:4c:18:ae:a9:a6:1a:00:8f:39:3c:e6:43:56:
         be:76:82:0e:dd:ca:42:58:17:c1:21:ed:57:a5:e4:a8:b6:42:
         70:ea:62:a1:d6:ed:a5:4f:62:9f:90:d0:c7:e7:03:11:5e:46:
         0c:c9:c6:b3:65:23:53:be:d3:2c:ad:72:4e:53:f0:2e:18:0c:
         fd:1e:8a:5d:e9:67:b6:68:e1:2c:5e:d9:c9:df:4c:b4:6b:f5:
         24:23:95:dd:6c:dc:65:ce:a7:41:46:93:80:e2:17:0a:be:5a:
         21:ff:ef:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:10:50 2025 by rpki-client