Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft
File:                     C746AC47360523A8D817C5EA638AE186912619C1.mft (raw, json)
Hash identifier:          fzLBBC01RUqywr12YRNGRCYBFkirOG45XAY1SVgpAvA=
Subject key identifier:   F4:F9:93:80:EF:6D:0E:E3:A4:20:06:30:EA:F7:67:91:A1:96:58:B7
Authority key identifier: C7:46:AC:47:36:05:23:A8:D8:17:C5:EA:63:8A:E1:86:91:26:19:C1
Certificate issuer:       /CN=c746ac47360523a8d817c5ea638ae186912619c1
Certificate serial:       1B4DE8C1CA04310B09F669A511A782C54D91D852
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0asRzYFI6jYF8XqY4rhhpEmGcE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft
Manifest number:          DF
Signing time:             Sat 28 Jun 2025 15:04:47 +0000
Manifest this update:     Sat 28 Jun 2025 14:59:47 +0000
Manifest next update:     Sun 29 Jun 2025 17:30:47 +0000
Files and hashes:         1: AS199310.asa (hash: cefIs+OWFBgxlVMFSoZ+1f31eAn2hUQNDkSjlwF++nc=)
                          2: C746AC47360523A8D817C5EA638AE186912619C1.crl (hash: fTcbgoGEdHqzjrB/HPma4wwABVAhuEvvUxRAp2Gp1ks=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x0asRzYFI6jYF8XqY4rhhpEmGcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 17:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:4d:e8:c1:ca:04:31:0b:09:f6:69:a5:11:a7:82:c5:4d:91:d8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c746ac47360523a8d817c5ea638ae186912619c1
        Validity
            Not Before: Jun 28 14:59:47 2025 GMT
            Not After : Jun 29 17:30:47 2025 GMT
        Subject: CN=F4F99380EF6D0EE3A4200630EAF76791A19658B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:47:fb:75:ec:d7:4a:47:be:b8:dc:94:28:b3:
                    4e:60:3f:45:96:5f:77:a5:b2:08:17:22:17:bc:70:
                    3b:08:45:64:c2:46:c3:f8:fc:13:3e:51:6d:89:aa:
                    4a:c7:65:ff:37:88:18:ae:52:ef:47:45:7a:1c:db:
                    6e:4d:b4:09:0e:93:1b:73:03:61:e0:5d:e5:bc:2b:
                    01:77:3a:26:de:9c:c5:b1:5c:d8:ea:23:e0:67:54:
                    c3:f6:b0:55:50:f2:57:75:f5:4d:e9:9f:9a:df:34:
                    9c:4d:0d:f8:17:64:f4:fc:a4:25:64:f6:0d:33:f8:
                    0f:ba:94:40:42:2e:76:94:fd:b1:f8:64:8b:e3:1d:
                    e7:5f:d3:68:8c:45:da:fe:69:a1:08:7c:49:54:c7:
                    1e:18:6e:84:fa:a0:61:10:b6:dc:9b:13:4e:fe:7d:
                    6e:1c:b2:42:46:4b:da:d2:e8:b1:bc:81:c6:1f:bc:
                    85:33:98:00:2a:af:e4:97:c6:69:17:31:c9:23:20:
                    80:73:81:35:01:16:1b:7a:a5:0f:37:ba:bd:88:8a:
                    ea:f9:69:bf:4a:27:c3:a2:a6:89:a6:39:00:dd:0b:
                    f8:65:d0:80:bc:84:09:0c:6c:bf:18:89:34:c9:17:
                    09:22:75:c2:2c:f1:54:60:2c:16:e1:98:3b:76:88:
                    1c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F9:93:80:EF:6D:0E:E3:A4:20:06:30:EA:F7:67:91:A1:96:58:B7
            X509v3 Authority Key Identifier:
                keyid:C7:46:AC:47:36:05:23:A8:D8:17:C5:EA:63:8A:E1:86:91:26:19:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0asRzYFI6jYF8XqY4rhhpEmGcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:31:4e:4e:84:dd:0f:d5:e5:4a:27:73:17:4a:91:b6:a0:a5:
         72:79:d8:d0:22:04:50:80:b6:42:ed:7a:18:28:8b:67:30:2d:
         7c:b1:1d:5d:6f:b9:dc:79:51:f6:90:01:61:7e:42:a9:34:30:
         19:96:da:bc:9e:a1:10:3f:9a:ab:46:4a:d2:a1:d2:fd:0f:a6:
         e3:28:4d:1b:cc:71:f6:32:d9:03:2d:5d:3f:67:d1:ad:14:93:
         b1:cc:84:ce:24:a8:24:84:1e:ac:0f:05:b2:63:c1:99:f9:c5:
         23:8d:50:24:84:ee:12:d1:f2:a6:b1:50:6b:ad:96:2d:c0:95:
         87:62:d7:a2:42:64:5e:ed:fa:bf:c1:f4:40:71:55:8e:be:1e:
         51:5b:db:83:72:8d:ec:23:e2:da:c9:3e:bd:41:92:a9:80:f6:
         20:e5:5f:67:f9:46:28:64:4b:d6:64:2f:8f:8f:34:d1:01:13:
         60:df:ba:b0:74:6f:92:66:98:73:e4:25:90:d6:ac:5e:73:3b:
         3a:89:fa:aa:2b:f8:20:28:72:55:d2:0e:e8:16:f8:55:75:76:
         88:78:a8:1b:a1:76:9a:c4:b9:20:cd:3f:d3:48:eb:b6:a9:03:
         d4:d5:62:8b:7c:56:b4:f8:25:06:53:7b:30:e2:31:02:68:b7:
         03:0c:32:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:15:50 2025 by rpki-client