Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/1/6C90A63CC34B7F1A714701D516835B9DE29FD0E8.mft
File:                     6C90A63CC34B7F1A714701D516835B9DE29FD0E8.mft (raw, json)
Hash identifier:          i4dAIX1nGB0eLV/sQ1IGoh9FNjajp9CT2vq5UetUKak=
Subject key identifier:   37:F9:38:27:D6:9A:6F:61:FB:5F:E0:4C:A7:33:F0:ED:E7:70:1A:39
Authority key identifier: 6C:90:A6:3C:C3:4B:7F:1A:71:47:01:D5:16:83:5B:9D:E2:9F:D0:E8
Certificate issuer:       /CN=6c90a63cc34b7f1a714701d516835b9de29fd0e8
Certificate serial:       3C460F9C4CED911BAF0FC702E0A4C88E2D5958C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bJCmPMNLfxpxRwHVFoNbneKf0Og.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/1/6C90A63CC34B7F1A714701D516835B9DE29FD0E8.mft
Manifest number:          13
Signing time:             Fri 22 Aug 2025 23:02:09 +0000
Manifest this update:     Fri 22 Aug 2025 22:57:09 +0000
Manifest next update:     Sat 23 Aug 2025 23:43:09 +0000
Files and hashes:         1: 6C90A63CC34B7F1A714701D516835B9DE29FD0E8.crl (hash: Fd9JTcnKmZZbPR8ubFXiJMvDtuIypgT6ZdbyoLeK7ts=)
                          2: AS205941.asa (hash: 2GLfa5M1InkF89JBdYAJ5xlaNhi6m4F9Cahdk1f/j/k=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/1/6C90A63CC34B7F1A714701D516835B9DE29FD0E8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/1/6C90A63CC34B7F1A714701D516835B9DE29FD0E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bJCmPMNLfxpxRwHVFoNbneKf0Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 23:43:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:46:0f:9c:4c:ed:91:1b:af:0f:c7:02:e0:a4:c8:8e:2d:59:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c90a63cc34b7f1a714701d516835b9de29fd0e8
        Validity
            Not Before: Aug 22 22:57:09 2025 GMT
            Not After : Aug 23 23:43:09 2025 GMT
        Subject: CN=37F93827D69A6F61FB5FE04CA733F0EDE7701A39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9c:4e:db:d6:a1:64:a3:43:b2:27:1b:89:1f:
                    86:c7:8c:62:13:f5:5d:a6:81:e9:96:19:01:ad:ed:
                    68:e4:8d:00:02:9a:92:71:ff:40:9c:0a:91:f4:31:
                    4e:73:b7:db:05:d8:87:f8:7a:7e:6e:c0:fc:da:c3:
                    55:7d:64:a4:33:d0:ba:07:6a:7f:b6:d8:9a:0d:f5:
                    e3:23:3d:5b:2a:ad:56:36:80:c7:b5:8f:df:0e:bd:
                    0a:b3:84:79:f6:2c:a3:1c:58:06:87:00:34:a2:96:
                    36:bf:17:80:f0:78:0e:71:f1:30:05:82:24:db:f9:
                    2e:bb:d6:53:e2:4e:a6:71:6e:17:f5:71:c2:ce:09:
                    da:f9:8a:a2:b7:97:eb:e3:e5:65:07:9e:bf:28:56:
                    90:35:43:29:00:b1:b6:1f:17:d9:7e:0b:6d:fa:0a:
                    3b:bf:3e:29:1d:42:55:32:2f:a7:b5:ff:e9:11:e7:
                    4f:3d:c3:06:96:69:d3:dd:43:33:cd:d5:9c:92:4c:
                    5a:7a:3c:81:f9:e5:0e:d5:a1:46:c7:3a:b5:09:fa:
                    68:f5:6f:23:8c:6b:2e:e7:cd:84:60:e4:88:d0:12:
                    f8:9a:9d:36:ba:24:43:cc:00:db:03:76:90:5f:29:
                    a4:90:44:66:23:34:c4:26:15:7e:4e:b6:89:ba:8a:
                    02:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F9:38:27:D6:9A:6F:61:FB:5F:E0:4C:A7:33:F0:ED:E7:70:1A:39
            X509v3 Authority Key Identifier:
                keyid:6C:90:A6:3C:C3:4B:7F:1A:71:47:01:D5:16:83:5B:9D:E2:9F:D0:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/1/6C90A63CC34B7F1A714701D516835B9DE29FD0E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJCmPMNLfxpxRwHVFoNbneKf0Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/1/6C90A63CC34B7F1A714701D516835B9DE29FD0E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:38:e3:b1:97:0e:ef:a4:4d:ec:26:7c:04:62:42:ed:27:85:
         0e:83:50:14:09:34:05:02:e3:23:1e:88:ab:dd:28:e8:83:6f:
         af:41:5f:50:5b:41:1b:08:c2:fc:dc:2c:a5:38:c3:00:69:d1:
         89:e4:b5:d8:da:41:01:07:94:98:1b:0f:9d:66:f2:57:83:0c:
         6b:11:6b:03:e9:97:1b:52:02:89:ec:14:37:58:ce:32:1b:2b:
         7d:07:cb:85:e2:74:a8:9b:0e:09:b7:38:e2:9e:22:d3:59:28:
         d0:4f:3b:76:1e:eb:15:04:a1:05:3b:0a:05:f7:7b:fe:89:66:
         08:93:45:43:0a:26:c1:01:dd:75:85:aa:4b:ff:0c:01:18:64:
         7b:80:30:77:44:55:26:14:ca:e6:55:42:bd:6c:0e:91:1a:f8:
         2e:c3:e3:7b:1f:e9:b5:db:d6:b5:11:4d:7d:d6:89:cf:ac:ca:
         bb:38:f1:7d:fa:ce:3b:ed:3b:9a:f4:96:14:bd:49:56:4e:3b:
         39:44:99:1a:d9:86:c8:d3:ef:8c:4d:c6:09:39:44:ff:e7:94:
         69:ee:84:09:96:88:9e:ed:59:49:eb:9d:55:49:91:4c:72:a9:
         33:5d:63:87:73:b6:d7:b6:b4:29:68:2b:50:60:74:1f:8e:45:
         4a:25:e5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:35 2025 by rpki-client