Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
File:                     A715A7C4243DFD5608AC7C5962055125B94D1763.mft (raw, json)
Hash identifier:          KzVTolqzwhunX5fiWtWWShd2rzRNVnUiSz0WH+M2ur8=
Subject key identifier:   C7:C7:A8:9C:6E:08:1C:41:5D:A0:D0:54:12:BB:F8:9F:60:97:B0:9A
Authority key identifier: A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
Certificate issuer:       /CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Certificate serial:       72F032BC27FE56655681507543DCA71DA46B4BC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
Manifest number:          05D3
Signing time:             Sun 19 Oct 2025 04:20:30 +0000
Manifest this update:     Sun 19 Oct 2025 04:15:30 +0000
Manifest next update:     Mon 20 Oct 2025 04:53:30 +0000
Files and hashes:         1: 698CBB9E641A60FE66E1B58C92ACD281637ED767.cer (hash: tNwFc0wxK30edc2dJgBKjPLV9///2mnITAEpNIZ0d8k=)
                          2: A715A7C4243DFD5608AC7C5962055125B94D1763.crl (hash: N+sTCWnP0heBeYePI+ZKkYmIQI865H4r2JLYfl61lrI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f0:32:bc:27:fe:56:65:56:81:50:75:43:dc:a7:1d:a4:6b:4b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a715a7c4243dfd5608ac7c5962055125b94d1763
        Validity
            Not Before: Oct 19 04:15:30 2025 GMT
            Not After : Oct 20 04:53:30 2025 GMT
        Subject: CN=C7C7A89C6E081C415DA0D05412BBF89F6097B09A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:81:fa:d0:db:ea:12:99:83:16:4d:e4:2a:73:
                    89:be:ed:52:1f:80:3e:12:65:89:c4:77:ca:25:63:
                    88:cb:3d:ca:74:c1:5d:90:e3:5e:c6:04:6b:e8:1e:
                    9b:eb:a9:bb:55:27:2d:c0:7e:44:9f:b1:65:05:38:
                    25:ae:22:80:0c:cb:24:f4:ef:78:5e:12:aa:1c:d3:
                    1b:3a:3e:0f:02:05:24:d8:62:c2:9e:20:b5:bd:bd:
                    6b:bb:e5:3b:79:ab:41:e6:f2:a8:ea:24:2a:0a:b2:
                    9c:d6:aa:75:e9:10:95:ec:44:92:be:67:d3:fb:12:
                    d4:0f:c7:da:52:da:fc:d3:fa:93:80:ba:a8:14:84:
                    d1:65:9f:62:70:06:fa:65:0e:86:58:ff:10:d0:dc:
                    1f:20:99:dc:b7:e4:af:da:d2:4c:68:b9:60:f1:fe:
                    20:44:97:5d:f9:0b:d9:4d:1a:ba:9b:5e:44:3d:94:
                    28:4c:bd:fb:1b:d6:43:28:07:40:81:3b:b8:7f:bc:
                    aa:2f:15:82:37:a5:28:93:9e:c0:90:0d:44:c0:66:
                    ab:5a:ea:06:8c:96:0f:5f:b2:6d:1f:a6:d2:a8:9e:
                    ae:ff:3c:43:a0:29:06:b1:24:b5:c4:14:f4:6b:cb:
                    1a:5b:f8:7c:31:05:8a:db:2d:ce:bc:76:75:3f:76:
                    ae:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C7:A8:9C:6E:08:1C:41:5D:A0:D0:54:12:BB:F8:9F:60:97:B0:9A
            X509v3 Authority Key Identifier:
                keyid:A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:dd:85:82:49:2f:05:97:3b:85:f6:bc:b9:f3:3d:55:29:61:
         2f:3b:6d:eb:5c:8e:08:bd:01:33:61:4d:9e:41:b9:b4:b4:1e:
         b3:65:3f:6a:f4:14:f5:37:09:fd:de:7b:65:c4:14:d1:11:a6:
         60:48:8b:1e:53:b9:cb:f2:f0:b6:8e:44:63:50:c0:28:24:74:
         74:fc:ca:14:bc:03:28:f3:1c:ce:46:f2:a4:43:39:07:6c:b2:
         2c:80:8e:32:1c:6e:09:be:4d:8d:ce:45:ec:05:f6:4c:a7:6f:
         44:89:86:91:17:68:32:ba:7b:bb:6e:6b:7b:ba:68:04:af:18:
         d5:4f:02:80:c5:cb:d7:fa:41:35:14:1f:fa:3e:de:a0:49:e0:
         6d:f1:6d:de:2d:a7:b1:17:9a:35:57:7a:18:14:d3:15:bd:9b:
         cf:12:6c:72:7a:e8:e4:2c:4c:39:e4:68:95:3e:79:ce:ce:20:
         04:9d:ab:b7:5a:88:05:44:bc:b0:df:4d:ad:dd:84:75:a9:37:
         f7:8c:43:51:28:30:f8:bb:87:0e:26:bc:10:b9:39:da:2b:16:
         74:ec:21:11:2b:89:44:05:c3:dd:67:ad:d4:ef:14:80:89:81:
         a3:b9:a4:60:e8:c7:30:e1:e1:8e:30:16:f5:68:f5:19:58:c0:
         03:60:a8:e2
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUcvAyvCf+VmVWgVB1Q9ynHaRrS8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTcxNWE3YzQyNDNkZmQ1NjA4YWM3YzU5NjIwNTUxMjVi
OTRkMTc2MzAeFw0yNTEwMTkwNDE1MzBaFw0yNTEwMjAwNDUzMzBaMDMxMTAvBgNV
BAMTKEM3QzdBODlDNkUwODFDNDE1REEwRDA1NDEyQkJGODlGNjA5N0IwOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWgfrQ2+oSmYMWTeQqc4m+7VIf
gD4SZYnEd8olY4jLPcp0wV2Q417GBGvoHpvrqbtVJy3AfkSfsWUFOCWuIoAMyyT0
73heEqoc0xs6Pg8CBSTYYsKeILW9vWu75Tt5q0Hm8qjqJCoKspzWqnXpEJXsRJK+
Z9P7EtQPx9pS2vzT+pOAuqgUhNFln2JwBvplDoZY/xDQ3B8gmdy35K/a0kxouWDx
/iBEl135C9lNGrqbXkQ9lChMvfsb1kMoB0CBO7h/vKovFYI3pSiTnsCQDUTAZqta
6gaMlg9fsm0fptKonq7/PEOgKQaxJLXEFPRryxpb+HwxBYrbLc68dnU/dq4PAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUx8eonG4IHEFdoNBUErv4n2CXsJowHwYDVR0j
BBgwFoAUpxWnxCQ9/VYIrHxZYgVRJblNF2MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzEvQTcxNUE3QzQyNDNERkQ1NjA4QUM3QzU5NjIwNTUxMjVCOTREMTc2My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3B4V254Q1E5X1ZZSXJIeFpZZ1ZSSmJs
TkYyTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03
Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvMS9BNzE1QTdDNDI0M0RGRDU2MDhB
QzdDNTk2MjA1NTEyNUI5NEQxNzYzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOd2FgkkvBZc7hfa8ufM9
VSlhLztt61yOCL0BM2FNnkG5tLQes2U/avQU9TcJ/d57ZcQU0RGmYEiLHlO5y/Lw
to5EY1DAKCR0dPzKFLwDKPMczkbypEM5B2yyLICOMhxuCb5Njc5F7AX2TKdvRImG
kRdoMrp7u25re7poBK8Y1U8CgMXL1/pBNRQf+j7eoEngbfFt3i2nsReaNVd6GBTT
Fb2bzxJscnro5CxMOeRolT55zs4gBJ2rt1qIBUS8sN9Nrd2Edak394xDUSgw+LuH
Dia8ELk52isWdOwhESuJRAXD3Wet1O8UgImBo7mkYOjHMOHhjjAW9Wj1GVjAA2Co
4g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:17:51 2025 by rpki-client