Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft
File:                     6E57E27AC23C8932C53853BF557B28CD590488AC.mft (raw, json)
Hash identifier:          +cI9EAF4apAJX6E2yeYXoW8EmnNSXIM8pC5dNORAtKk=
Subject key identifier:   AC:7C:0B:9C:CC:A6:10:19:9E:F8:09:5C:A8:35:BB:46:00:AA:FA:8E
Authority key identifier: 6E:57:E2:7A:C2:3C:89:32:C5:38:53:BF:55:7B:28:CD:59:04:88:AC
Certificate issuer:       /CN=6E57E27AC23C8932C53853BF557B28CD590488AC
Certificate serial:       0FA478E9AE791FB1AA143B1A1771A6FE97F55AB5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6E57E27AC23C8932C53853BF557B28CD590488AC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft
Manifest number:          4D
Signing time:             Sun 19 Oct 2025 13:36:03 +0000
Manifest this update:     Sun 19 Oct 2025 13:31:03 +0000
Manifest next update:     Mon 20 Oct 2025 15:37:03 +0000
Files and hashes:         1: 6E57E27AC23C8932C53853BF557B28CD590488AC.crl (hash: YF440l9/2bSMNGroBdUyMpjhjODJgNxct+dKYlsyBlw=)
                          2: 326131343a373538333a663330303a3a2f34302d3438203d3e20323035303038.roa (hash: Pw4yBx8L2Vx0/YJcoRiVJ2ZHCDI/+/xVhxU2P0lxb8w=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6E57E27AC23C8932C53853BF557B28CD590488AC.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:37:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a4:78:e9:ae:79:1f:b1:aa:14:3b:1a:17:71:a6:fe:97:f5:5a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E57E27AC23C8932C53853BF557B28CD590488AC
        Validity
            Not Before: Oct 19 13:31:03 2025 GMT
            Not After : Oct 20 15:37:03 2025 GMT
        Subject: CN=AC7C0B9CCCA610199EF8095CA835BB4600AAFA8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:28:ca:8d:05:3e:93:dd:ba:23:02:69:d3:eb:
                    f2:e5:4a:99:e2:76:67:26:81:e0:45:e7:fe:5d:93:
                    c5:86:96:bf:ec:a4:23:68:4c:5a:94:a8:f7:ba:b8:
                    2a:e5:6a:34:ce:41:93:4b:ca:06:93:4b:4c:bc:77:
                    8e:3a:dc:eb:5f:43:5f:f3:cf:12:89:58:a9:d3:8e:
                    45:6c:f8:f0:21:bb:8f:16:84:70:12:17:71:67:9e:
                    b4:d7:71:1a:2f:81:7b:0f:09:d7:9f:fc:85:47:51:
                    83:b1:03:90:49:bb:82:df:68:e1:99:4d:fa:ff:a1:
                    3a:73:01:59:93:f0:79:6b:a7:fc:f0:35:af:42:4e:
                    80:aa:f8:1a:6c:09:94:b8:cd:cb:af:c7:d8:af:50:
                    db:3b:ad:f1:b9:fc:84:5b:ec:a1:14:f8:60:ed:a6:
                    51:08:3b:37:5a:e2:6e:76:62:4e:f6:f6:a0:cb:98:
                    9b:bc:40:d6:97:ff:d5:30:11:57:64:45:70:1b:9c:
                    d5:20:eb:06:99:6d:b8:73:3c:95:bd:e8:bd:1a:e4:
                    04:f1:7d:e6:8d:2d:ac:bb:2d:7b:cc:0c:68:24:25:
                    78:05:b3:24:e0:5c:f5:a4:f0:f2:8e:27:b5:10:7b:
                    94:64:ee:15:c8:3c:5b:09:89:66:35:ba:4e:21:36:
                    cd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7C:0B:9C:CC:A6:10:19:9E:F8:09:5C:A8:35:BB:46:00:AA:FA:8E
            X509v3 Authority Key Identifier:
                keyid:6E:57:E2:7A:C2:3C:89:32:C5:38:53:BF:55:7B:28:CD:59:04:88:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6E57E27AC23C8932C53853BF557B28CD590488AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:85:c0:52:eb:4f:89:d0:67:91:68:19:fd:c7:87:ae:2d:e8:
         18:45:f9:64:0c:6a:ad:e6:39:0d:0c:06:24:d4:07:f8:80:f6:
         ad:a6:d2:cd:e1:57:37:2f:47:9b:a0:ae:75:ad:aa:f4:3d:40:
         11:cc:54:48:87:c5:ce:e8:3e:c8:69:4a:e6:a6:8f:61:20:c0:
         e7:08:65:ab:00:b3:99:1d:70:0e:ba:1b:e2:34:e2:cc:b7:e6:
         b8:b5:df:8f:3e:d4:f8:3e:23:b2:5d:d1:bd:33:31:a0:28:14:
         65:b3:cc:ac:b3:ad:09:49:c0:07:10:fb:64:8e:f8:e0:1d:dc:
         4e:7c:5b:58:fb:9d:bd:f2:78:e1:95:ef:97:5c:de:e6:71:0a:
         1c:05:de:54:96:8d:30:f8:60:4c:7a:36:96:29:33:54:0e:f8:
         6c:ce:07:9f:7b:4b:eb:b7:66:63:2a:ee:59:81:9c:7f:25:58:
         84:87:48:b4:43:90:75:d2:2d:a8:58:1e:05:7c:3b:b1:0d:57:
         11:46:6f:78:6b:07:98:ee:14:07:82:26:c1:b5:03:be:15:33:
         da:3f:20:f7:4b:6e:f4:ee:9b:1e:f8:8c:d0:70:ad:1d:2c:6c:
         cf:47:b5:29:67:a0:89:82:43:8b:24:f0:a5:2d:d4:5e:ff:2a:
         9b:84:02:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:55:31 2025 by rpki-client