Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.mft
File:                     1A7801A0A45FEE2CAD49A5101071395A4BF046FA.mft (raw, json)
Hash identifier:          7FtvhTr/L7MWVIyWy/R0TzDfyq+QDuOMrQtIyV5GQQc=
Subject key identifier:   6E:5E:E0:35:10:F7:52:97:9D:8E:AF:01:C8:52:DC:17:52:1B:13:73
Authority key identifier: 1A:78:01:A0:A4:5F:EE:2C:AD:49:A5:10:10:71:39:5A:4B:F0:46:FA
Certificate issuer:       /CN=1a7801a0a45fee2cad49a5101071395a4bf046fa
Certificate serial:       387D40E099D5E20B19AFC4E9E50D9513086E7BD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GngBoKRf7iytSaUQEHE5WkvwRvo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.mft
Manifest number:          01CC
Signing time:             Sat 28 Jun 2025 10:31:27 +0000
Manifest this update:     Sat 28 Jun 2025 10:26:27 +0000
Manifest next update:     Sun 29 Jun 2025 12:44:27 +0000
Files and hashes:         1: 1A7801A0A45FEE2CAD49A5101071395A4BF046FA.crl (hash: WjWzfli/h9KR4QsZ7AdDY8sFOSEhWqEPSaYYUhoBWcQ=)
                          2: 323030313a3637633a313830343a3a2f34382d3438203d3e20323134343836.roa (hash: 1nPQzGJag6lw540UIscUM9owVGr1DZNIl1AFUvQr+XA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GngBoKRf7iytSaUQEHE5WkvwRvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 12:44:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7d:40:e0:99:d5:e2:0b:19:af:c4:e9:e5:0d:95:13:08:6e:7b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7801a0a45fee2cad49a5101071395a4bf046fa
        Validity
            Not Before: Jun 28 10:26:27 2025 GMT
            Not After : Jun 29 12:44:27 2025 GMT
        Subject: CN=6E5EE03510F752979D8EAF01C852DC17521B1373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:53:6e:8f:4b:f7:60:4f:f2:c5:2c:96:d9:63:
                    67:74:5f:f7:f2:d0:85:9c:98:5c:f0:31:63:0b:7f:
                    6b:4d:25:2f:b3:3b:e0:4f:a5:14:6e:32:a2:6f:e8:
                    88:94:00:ba:66:a5:26:e6:9a:c1:cb:9e:8f:c9:bb:
                    3e:90:86:7f:12:8c:15:3f:75:6b:b8:8f:c1:a0:41:
                    2c:32:08:8b:58:55:61:e0:3f:b1:10:f3:6e:34:7e:
                    f9:98:ea:8f:e8:14:61:39:4d:2b:5f:aa:e9:9c:02:
                    df:36:d6:75:de:43:43:bf:2f:31:76:f4:de:22:e6:
                    3d:5e:9e:26:99:e4:3f:5e:15:e2:e2:94:e8:18:c8:
                    cd:bd:a4:7a:d1:e2:85:2e:23:42:86:e3:27:c4:1a:
                    ae:30:0b:32:26:ac:18:56:12:3f:ae:f8:e1:9c:8b:
                    d2:3f:39:d4:e5:03:47:eb:36:33:e4:a9:a7:5b:10:
                    36:14:70:f6:23:20:3d:60:9c:40:93:ed:bc:5a:e9:
                    d5:36:54:d7:99:48:9f:4f:bd:3d:17:45:a5:f8:2a:
                    f0:0b:39:ef:9f:ba:ab:a0:99:c8:d9:fa:53:f2:90:
                    30:17:28:e1:34:35:86:0d:58:01:d5:f2:86:12:42:
                    fc:f4:0a:42:ba:f6:10:3d:fc:80:b3:c5:3a:93:f1:
                    51:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5E:E0:35:10:F7:52:97:9D:8E:AF:01:C8:52:DC:17:52:1B:13:73
            X509v3 Authority Key Identifier:
                keyid:1A:78:01:A0:A4:5F:EE:2C:AD:49:A5:10:10:71:39:5A:4B:F0:46:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GngBoKRf7iytSaUQEHE5WkvwRvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:03:e3:5a:b5:c2:f6:3c:c8:76:4c:10:fb:d3:89:3d:fc:75:
         c5:13:91:23:5a:d6:e7:af:04:f9:dc:2a:54:54:86:c6:d3:4b:
         05:69:91:d3:f2:aa:4e:4f:25:b3:0f:dc:7e:1b:64:94:c7:26:
         3c:3d:3b:35:03:5f:ed:97:10:6f:53:29:83:c7:68:09:81:b4:
         45:25:fd:b6:8c:7d:79:5a:75:ad:c7:db:26:87:b5:42:c6:32:
         0d:03:5d:e5:12:23:dc:39:bf:22:ed:b2:43:47:6f:12:57:dc:
         72:df:e2:ce:66:1e:00:bd:c2:10:67:7e:16:04:b0:5f:1b:da:
         8a:ab:79:a3:98:c1:9a:ad:8b:6b:b6:59:ba:2f:60:90:07:88:
         a7:b2:eb:ed:8b:86:46:a9:bd:06:0f:b7:a9:81:a6:33:74:fb:
         f4:ef:15:7b:66:fe:0c:95:ad:c1:81:90:82:6b:fa:06:a0:cc:
         46:06:fb:b4:29:4a:a6:07:84:93:15:91:bb:e5:a1:78:7c:2a:
         d3:5a:cc:3f:a3:75:1a:97:72:74:84:d7:cc:c5:ad:3c:f3:46:
         b2:ee:a5:34:72:49:4d:37:91:e5:0e:ad:40:a3:12:8b:c7:b4:
         26:c2:fa:4c:ae:7e:d4:07:a0:fb:99:a7:6c:1e:c9:c3:58:6c:
         4a:8d:11:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:51 2025 by rpki-client