Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
File:                     547BC28C92A229A5AC78C0DE287D89CE37726409.mft (raw, json)
Hash identifier:          r1/QrZEFdH756+Qo3uQsntQcEuItFJ+JiIUX7/vO/KE=
Subject key identifier:   60:0D:6E:B0:42:E6:F6:AA:26:51:4C:1E:06:04:59:06:7F:A0:C0:BB
Authority key identifier: 54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09
Certificate issuer:       /CN=547bc28c92a229a5ac78c0de287d89ce37726409
Certificate serial:       1D10545B5FDD88CE75DB037A1B0994F8EC3F93FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
Manifest number:          01A9
Signing time:             Sat 28 Jun 2025 02:29:47 +0000
Manifest this update:     Sat 28 Jun 2025 02:24:47 +0000
Manifest next update:     Sun 29 Jun 2025 04:22:47 +0000
Files and hashes:         1: 547BC28C92A229A5AC78C0DE287D89CE37726409.crl (hash: +HOo6H2jAw9W1mFXXWxHuwwaWRBG0n5msyGXjTW3dfM=)
                          2: 323030313a3637383a6362303a3a2f34382d3438203d3e20323034393331.roa (hash: nR48aVSXVSZvCd3jlcODIB7um6yNk/WjtYd9EtNwPFs=)
                          3: AS60431.asa (hash: Q+UX2Vn8tEbLpzUztygmh6mhj7fSSbRkMqnCTNGxI38=)
                          4: AS204931.asa (hash: KGbgkaC4y1nrlSFKpZDYYFIWvKViLM1Ya0LI/FiLO5M=)
                          5: 323030313a3637383a6362303a3a2f34382d3438203d3e203630343331.roa (hash: qPQeu/7M50ShpMjQ7Dkik+VbeEdUIQ58WUoPL4CU+wI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 04:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:10:54:5b:5f:dd:88:ce:75:db:03:7a:1b:09:94:f8:ec:3f:93:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547bc28c92a229a5ac78c0de287d89ce37726409
        Validity
            Not Before: Jun 28 02:24:47 2025 GMT
            Not After : Jun 29 04:22:47 2025 GMT
        Subject: CN=600D6EB042E6F6AA26514C1E060459067FA0C0BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b7:ff:12:ae:f5:3e:ba:c3:91:96:dd:8e:d9:
                    0d:0b:b4:d0:1c:d9:a1:a1:f7:15:3e:c5:39:e8:9f:
                    bd:c9:c0:2b:8c:68:5d:01:77:9a:46:5b:ed:4c:ca:
                    f0:ba:e9:f3:b5:2d:70:3c:ff:8b:2f:fc:55:b7:28:
                    ac:ce:4d:9b:4f:2a:7a:32:d9:53:e8:12:a8:5f:b2:
                    d9:11:5e:22:cd:7e:36:7e:56:4c:f9:a3:8b:08:89:
                    dc:48:f9:c2:1f:3a:2e:ef:fd:cd:2e:b9:47:fd:3e:
                    6c:8a:3a:59:5e:3a:28:7d:3f:bd:11:dd:33:b0:89:
                    be:3c:52:4c:19:fd:a9:b6:04:26:c1:b8:06:b7:19:
                    e7:9a:66:cc:58:c1:f4:26:57:af:48:27:f4:ee:8b:
                    91:92:2b:1a:a0:9f:8d:2c:3d:46:ed:48:d3:4a:d8:
                    ff:fe:ad:c3:b9:8e:92:52:d7:94:19:0d:e0:d7:36:
                    23:18:fa:f8:e7:c4:42:c6:78:95:35:2f:03:f2:b0:
                    13:23:bd:f4:de:d9:da:e9:7e:b0:6c:5a:1e:09:8c:
                    87:93:0e:84:3a:45:96:8a:55:f5:dc:7b:58:48:69:
                    07:d2:52:25:d7:ea:c8:a3:cb:e8:63:9c:27:a2:50:
                    e9:5a:33:5a:ff:b1:be:11:0e:69:e7:8b:1d:d6:cb:
                    d6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0D:6E:B0:42:E6:F6:AA:26:51:4C:1E:06:04:59:06:7F:A0:C0:BB
            X509v3 Authority Key Identifier:
                keyid:54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:da:89:51:75:66:5e:1d:9b:1b:2b:7e:d1:ac:43:ab:b7:03:
         09:7c:2b:ec:c3:e8:4b:e1:f6:db:bd:fe:db:30:a7:60:16:38:
         d7:c0:c9:bd:8b:b4:2f:ee:07:03:90:c7:44:bc:97:ef:97:bb:
         c9:47:39:a2:2a:e1:14:cb:46:bc:bd:e1:a4:54:e6:ef:87:96:
         03:c9:79:51:87:a8:40:89:dd:8d:66:e4:be:b8:5c:0a:a9:41:
         78:f9:49:28:e4:8b:1d:3a:49:0f:df:02:7b:ee:a0:92:80:6f:
         39:9b:e1:ff:6e:34:b4:6d:6c:51:f9:2c:24:99:43:1d:cd:4f:
         e8:fd:85:e5:f9:f1:cb:b3:08:65:65:3c:8d:a9:11:f8:dd:dd:
         6d:fd:5a:f3:6c:48:88:b2:56:da:ad:c3:0f:f0:73:de:9c:7d:
         b7:14:c6:a9:8d:45:e5:f3:3e:30:d8:7b:a3:ff:9c:bd:57:d7:
         67:0e:18:dd:62:bb:64:96:7f:df:70:17:eb:d6:08:05:4d:b6:
         e9:e7:06:54:c1:41:62:84:dd:1b:f1:96:4e:57:85:a9:6f:6e:
         8f:0a:b8:83:1e:2b:0b:6c:0e:32:3c:1a:6d:54:a5:77:03:fe:
         0b:ca:c9:27:44:f5:c1:07:86:ba:fa:c1:21:01:19:bb:14:2a:
         b0:7d:18:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:46:06 2025 by rpki-client