Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File:                     D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier:          FewcHUEPWw8aU9uZYRyJaZKwdh/miYas2ebyaLk9FWU=
Subject key identifier:   FA:17:C3:E1:41:13:64:1F:D8:93:B5:48:06:8B:42:6B:37:8F:0A:E6
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer:       /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial:       71A65C4CF13B34493A0F8188C2A94A827BD9822E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number:          03E4
Signing time:             Sun 19 Oct 2025 04:05:16 +0000
Manifest this update:     Sun 19 Oct 2025 04:00:16 +0000
Manifest next update:     Mon 20 Oct 2025 05:47:16 +0000
Files and hashes:         1: AS203843.asa (hash: GVjcEElWVcaHaV2bppgVpXszuN2GI++jaQIYET3p6Tg=)
                          2: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: y625GcMvaYfPuCSc2SxCKPbTadTbyxqcQu/apI8oJig=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a6:5c:4c:f1:3b:34:49:3a:0f:81:88:c2:a9:4a:82:7b:d9:82:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
        Validity
            Not Before: Oct 19 04:00:16 2025 GMT
            Not After : Oct 20 05:47:16 2025 GMT
        Subject: CN=FA17C3E14113641FD893B548068B426B378F0AE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3f:ee:20:9c:76:9f:e4:e5:d0:fb:8c:c9:1f:
                    99:c8:1e:05:a1:4a:57:46:c2:6c:65:95:39:f5:63:
                    7e:d9:1a:26:fb:1b:94:df:84:5f:ac:2d:fe:d7:67:
                    f6:81:1e:bd:9b:1e:87:1c:79:4a:0d:33:55:a6:d6:
                    37:dc:28:ef:33:3a:f9:61:77:8e:58:85:6f:b9:50:
                    a3:0b:25:20:c5:df:30:f0:0a:83:1d:65:d5:b9:da:
                    1f:58:93:71:f0:71:22:c7:1b:50:00:e6:05:9e:20:
                    2a:15:c7:a4:52:8f:be:be:47:79:e7:0b:d5:ca:fe:
                    5f:a1:12:90:38:64:1e:d9:b7:d5:57:47:2e:bf:69:
                    a5:33:52:79:a1:4e:c2:e6:89:4b:e4:0c:c1:f4:16:
                    b8:c7:4b:54:cd:84:c8:db:30:fb:c8:fc:95:79:ec:
                    d2:5e:ec:d0:31:8b:98:1b:f2:c6:78:5b:70:1c:e2:
                    fe:5d:3b:dc:c1:70:b6:ce:f0:b2:54:3a:b3:db:e8:
                    06:97:06:96:aa:d9:20:c3:4b:29:e5:ad:58:dc:80:
                    40:31:44:d9:31:17:65:36:0c:cf:70:68:0d:af:2f:
                    60:a6:eb:1b:c9:49:81:7e:7d:58:ce:13:c9:1f:39:
                    ec:b7:0e:56:c1:28:d2:5f:d4:3f:36:a3:ae:68:4c:
                    8a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:17:C3:E1:41:13:64:1F:D8:93:B5:48:06:8B:42:6B:37:8F:0A:E6
            X509v3 Authority Key Identifier:
                keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:59:bd:08:43:8f:6a:67:b9:f8:fd:b9:9c:ad:4f:ef:ef:ad:
         90:9d:ba:22:72:d8:a0:f9:04:76:48:7a:6c:6e:58:e0:a2:95:
         5d:12:4b:81:8a:0b:93:be:0a:5f:ab:9f:66:3d:c1:16:24:9f:
         3a:f5:04:84:d9:a6:87:24:25:db:89:25:65:30:77:24:78:d8:
         e1:2d:f9:83:e9:e9:e2:ef:1a:28:ab:d9:c1:95:83:14:37:76:
         db:7e:16:97:60:66:a8:02:93:c0:7f:36:2b:cc:3b:39:01:31:
         b3:d0:e8:47:8d:32:24:de:cc:92:b2:5d:39:91:26:e3:50:03:
         5b:ab:c5:be:d2:5a:99:d6:d7:b4:8a:03:36:ac:d8:e0:6d:df:
         c8:91:cb:e6:0e:56:6c:79:a8:16:a7:27:4b:a8:b2:9c:0d:cf:
         b3:95:b5:9e:a0:3e:a4:8f:7b:52:08:7d:b8:fe:ba:24:ba:c8:
         77:40:fa:1c:c9:61:38:ab:df:d5:3a:53:3e:66:ce:f5:26:98:
         8c:7d:06:32:7f:7d:6a:fd:e7:28:8f:70:6f:6d:78:af:f9:ec:
         b9:89:62:63:88:af:7c:04:54:4c:c8:bb:b9:b3:82:86:60:b9:
         97:53:8b:a0:40:6e:0c:8e:4e:be:5d:be:13:8b:11:4a:7b:6a:
         ff:b6:28:b8
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUcaZcTPE7NEk6D4GIwqlKgnvZgi4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDAyYmJiNDQwYjlkZDQ0MDg4ZGI2ODRlZTgyZmEyYTdk
YTA2ZmNmNjAeFw0yNTEwMTkwNDAwMTZaFw0yNTEwMjAwNTQ3MTZaMDMxMTAvBgNV
BAMTKEZBMTdDM0UxNDExMzY0MUZEODkzQjU0ODA2OEI0MjZCMzc4RjBBRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIP+4gnHaf5OXQ+4zJH5nIHgWh
SldGwmxllTn1Y37ZGib7G5TfhF+sLf7XZ/aBHr2bHocceUoNM1Wm1jfcKO8zOvlh
d45YhW+5UKMLJSDF3zDwCoMdZdW52h9Yk3HwcSLHG1AA5gWeICoVx6RSj76+R3nn
C9XK/l+hEpA4ZB7Zt9VXRy6/aaUzUnmhTsLmiUvkDMH0FrjHS1TNhMjbMPvI/JV5
7NJe7NAxi5gb8sZ4W3Ac4v5dO9zBcLbO8LJUOrPb6AaXBpaq2SDDSynlrVjcgEAx
RNkxF2U2DM9waA2vL2Cm6xvJSYF+fVjOE8kfOey3DlbBKNJf1D82o65oTIqFAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU+hfD4UETZB/Yk7VIBotCazePCuYwHwYDVR0j
BBgwFoAU0Cu7RAud1ECI22hO6C+ip9oG/PYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4
ZWI4LzEvRDAyQkJCNDQwQjlERDQ0MDg4REI2ODRFRTgyRkEyQTdEQTA2RkNGNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBDdTdSQXVkMUVDSTIyaE82Qy1pcDlv
R19QWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2Y2ODU2MS0w
YTc0LTRjY2EtYmY4Zi0xMmZhYWFmYzhlYjgvMS9EMDJCQkI0NDBCOURENDQwODhE
QjY4NEVFODJGQTJBN0RBMDZGQ0Y2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVm9CEOPame5+P25nK1P
7++tkJ26InLYoPkEdkh6bG5Y4KKVXRJLgYoLk74KX6ufZj3BFiSfOvUEhNmmhyQl
24klZTB3JHjY4S35g+np4u8aKKvZwZWDFDd2234Wl2BmqAKTwH82K8w7OQExs9Do
R40yJN7MkrJdOZEm41ADW6vFvtJamdbXtIoDNqzY4G3fyJHL5g5WbHmoFqcnS6iy
nA3Ps5W1nqA+pI97Ugh9uP66JLrId0D6HMlhOKvf1TpTPmbO9SaYjH0GMn99av3n
KI9wb214r/nsuYliY4ivfARUTMi7ubOChmC5l1OLoEBuDI5Ovl2+E4sRSntq/7Yo
uA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:58 2025 by rpki-client