Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft
File:                     01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft (raw, json)
Hash identifier:          JCkYc8lfFZ0qIl8Ygn1sfldwQYUwFyDF0YWVNasZi30=
Subject key identifier:   3A:54:08:4E:80:0B:F8:AC:A9:3F:BE:C3:1C:8A:A3:7C:9D:44:0A:AC
Authority key identifier: 01:CF:F7:E7:41:89:56:3B:0E:C4:5D:0E:9B:B7:C5:62:8B:2E:43:88
Certificate issuer:       /CN=01CFF7E74189563B0EC45D0E9BB7C5628B2E4388
Certificate serial:       1868D9ED4B39157DDB5F356F6DC9C8FA371A4F82
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft
Manifest number:          0161
Signing time:             Sun 29 Jun 2025 03:19:49 +0000
Manifest this update:     Sun 29 Jun 2025 03:14:49 +0000
Manifest next update:     Mon 30 Jun 2025 04:48:49 +0000
Files and hashes:         1: 01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.crl (hash: bjOi7qEWQlH5yf724Vf5oKjDyToJFcgRb1zLovG7yEU=)
                          2: 3139322e36372e33352e302f32342d3332203d3e203236353536.roa (hash: 6b1VpbvMsE50o/1KffApiCFgdzfb7zhZLiCWQ7W3KvI=)
                          3: 3139322e36372e33352e302f32342d3332203d3e203437323732.roa (hash: ksX8z7ZW9gymrqj00x+2X/C8X7o9+JqUVnJjpd/TsDA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Jun 2025 23:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:68:d9:ed:4b:39:15:7d:db:5f:35:6f:6d:c9:c8:fa:37:1a:4f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01CFF7E74189563B0EC45D0E9BB7C5628B2E4388
        Validity
            Not Before: Jun 29 03:14:49 2025 GMT
            Not After : Jun 30 04:48:49 2025 GMT
        Subject: CN=3A54084E800BF8ACA93FBEC31C8AA37C9D440AAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8e:67:9c:0f:c1:b4:ca:4c:4b:64:d9:64:07:
                    c0:69:de:9c:07:e0:d8:d9:6f:f4:94:b1:20:14:11:
                    a1:1f:0e:0e:35:28:30:52:00:4c:0c:af:ae:b8:27:
                    e1:6c:a3:8d:70:17:eb:c6:cb:97:5f:c4:34:be:3a:
                    00:f3:33:d6:bd:98:ae:c3:ad:14:24:98:ff:9b:fa:
                    de:e3:c2:a1:dd:11:98:46:f5:66:c4:fd:9c:3d:a6:
                    d5:42:05:59:b7:33:7c:9e:91:7c:de:f6:0e:74:df:
                    ea:0a:a7:f2:17:d6:35:00:4a:b4:60:4d:7f:3b:aa:
                    da:66:eb:64:76:26:e2:fa:63:9e:f4:a4:d5:b4:18:
                    49:d3:1e:e5:e3:d3:02:5d:ec:9a:db:1c:bf:df:6f:
                    03:32:6b:86:5e:6f:9e:74:f5:fc:fa:65:7b:1c:83:
                    30:bf:7c:9a:21:8f:4a:f9:59:4d:71:dc:2c:d8:ec:
                    2f:98:be:fe:95:40:df:67:c8:d0:a3:6e:a9:9e:e7:
                    73:5f:66:59:35:97:6f:01:5b:43:b7:7c:4a:42:af:
                    16:00:1d:98:35:dd:33:fd:26:33:07:01:d0:e8:4a:
                    db:4c:5c:f3:1e:41:15:48:6c:50:bd:de:fc:8e:29:
                    15:07:57:26:29:1e:01:be:1c:20:41:da:4d:4c:d3:
                    50:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:54:08:4E:80:0B:F8:AC:A9:3F:BE:C3:1C:8A:A3:7C:9D:44:0A:AC
            X509v3 Authority Key Identifier:
                keyid:01:CF:F7:E7:41:89:56:3B:0E:C4:5D:0E:9B:B7:C5:62:8B:2E:43:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:96:a3:ed:3b:79:ec:52:46:bf:dd:8d:26:d3:76:0d:05:ce:
         b1:50:5c:8b:9c:4b:6d:c2:0e:e5:11:9e:6f:2b:3a:94:04:8a:
         3e:ea:95:f1:85:1f:f3:be:60:6e:cc:67:86:35:ad:75:20:39:
         7a:b6:7c:b7:b9:0c:0e:0c:11:ef:07:7b:04:65:87:06:cb:02:
         48:45:b6:fa:3e:2c:1b:98:01:89:aa:b3:a5:80:69:66:a7:81:
         e6:78:ba:c1:5e:27:f8:c3:ca:0a:e8:f9:51:ad:9b:9e:24:56:
         c8:99:6d:c2:64:06:60:15:fd:9b:27:e3:de:e5:35:f0:a1:f4:
         77:df:8a:3e:5d:38:1a:15:9f:df:52:26:c9:bf:78:f9:84:24:
         05:82:69:da:7a:ed:71:e0:f8:4b:dc:7d:8d:3d:9d:37:93:a4:
         af:33:99:1d:60:6f:80:55:ce:99:f6:b3:ca:c2:fa:59:8e:6d:
         fc:67:a0:6a:21:af:dd:6d:2d:4f:0c:04:be:52:07:b2:ac:73:
         b0:ed:d9:2c:07:92:7f:39:61:33:7e:a1:3c:e0:f6:2f:a6:91:
         b7:4e:84:f2:66:e2:98:e2:24:ab:12:9f:32:e9:e0:65:f5:fd:
         c3:dc:dd:0e:38:46:28:d9:76:21:00:db:34:b3:08:cb:7d:5f:
         72:0f:c3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:46:47 2025 by rpki-client