Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
File:                     608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft (raw, json)
Hash identifier:          TMF70l6CXyFL3IOl24/YzVW9xkbmRuyB0ln7vk/vskY=
Subject key identifier:   FE:FD:04:93:EA:ED:E5:47:3A:83:F7:91:FC:96:2C:38:F5:BE:F6:5C
Authority key identifier: 60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
Certificate issuer:       /CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Certificate serial:       7EB6ECC08802FEFE6F6E2574E8B11ED13D27C932
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
Manifest number:          B9
Signing time:             Sun 19 Oct 2025 23:24:05 +0000
Manifest this update:     Sun 19 Oct 2025 23:19:05 +0000
Manifest next update:     Tue 21 Oct 2025 02:35:05 +0000
Files and hashes:         1: AS215375.asa (hash: LpUFum+e3/JZSud1FMmC87+zcGX6+jjYOpf3QCDbjko=)
                          2: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl (hash: /g5Jcc/lgzPuF4bEofuz5WBSfkKas/SzRFXCFd3hTGc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 02:35:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b6:ec:c0:88:02:fe:fe:6f:6e:25:74:e8:b1:1e:d1:3d:27:c9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
        Validity
            Not Before: Oct 19 23:19:05 2025 GMT
            Not After : Oct 21 02:35:05 2025 GMT
        Subject: CN=FEFD0493EAEDE5473A83F791FC962C38F5BEF65C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:87:bb:79:5d:41:6a:3d:fb:dd:dd:d8:5e:c7:
                    d1:e5:b0:9f:39:40:b2:6b:ec:18:a0:5d:fb:f3:e1:
                    71:6a:89:26:e8:ff:ba:de:b1:33:bc:ce:b5:69:b5:
                    bd:d2:de:c5:87:80:55:24:3c:c0:84:3b:91:b8:a4:
                    24:8c:03:a6:d9:e5:1a:4a:21:39:3f:4a:97:97:91:
                    6b:ee:0b:a1:4d:fa:8a:ee:9d:7e:9d:f9:76:fb:14:
                    d0:dc:25:39:05:50:19:8f:59:b8:5b:03:97:ec:94:
                    22:1a:0f:f3:2d:c3:5e:51:93:f1:76:c3:14:86:97:
                    f9:ca:b1:a9:88:93:a0:a9:02:1c:c0:31:6a:14:28:
                    09:80:30:66:c9:28:b3:d6:db:e9:42:2e:af:cb:81:
                    c7:71:d0:c9:a8:6e:d5:5b:00:e4:9e:2f:9a:ca:45:
                    a1:21:86:b2:84:fc:2e:c7:e0:d5:f1:f0:11:f6:48:
                    b3:60:bb:bc:da:a0:80:48:c4:de:04:e0:17:62:5f:
                    16:b4:79:ef:b1:89:77:79:fd:33:8b:df:5e:ab:e7:
                    80:f9:18:01:a5:90:90:63:6f:03:10:04:f5:c6:c7:
                    73:7f:c7:20:c3:a1:89:3b:12:1d:1f:e0:9f:2a:3e:
                    1c:cf:64:36:df:c5:9c:9e:56:a9:da:e8:08:c8:cd:
                    42:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FD:04:93:EA:ED:E5:47:3A:83:F7:91:FC:96:2C:38:F5:BE:F6:5C
            X509v3 Authority Key Identifier:
                keyid:60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a2:19:4d:6b:60:60:b1:d7:1c:00:b2:3e:80:3e:6a:48:d6:
         b1:25:db:1f:61:e7:5c:0d:a9:22:c4:82:71:62:01:f6:e8:c4:
         f6:bc:e5:67:8d:97:32:00:73:3b:4e:20:99:2a:b4:f2:58:87:
         43:99:f6:30:f9:f6:4e:ff:93:92:25:de:52:b5:23:a2:d5:fe:
         90:2a:90:ca:c7:60:52:0e:b5:c0:3a:02:e0:fe:81:28:86:b8:
         68:b2:5b:1f:8b:dc:be:a9:fd:af:53:5f:1e:74:63:fd:49:17:
         21:19:2c:53:96:ac:c2:ac:05:4f:76:2b:d1:2f:6e:00:b9:0a:
         2a:7d:2b:4d:47:c5:ba:d3:cc:65:3f:75:c6:7c:18:95:91:d4:
         6b:41:96:a7:94:f8:a6:79:1c:3b:6b:12:54:3c:c3:5e:04:5a:
         73:ed:a7:e7:e0:82:19:f3:6b:6d:99:9b:02:5f:cc:11:b6:65:
         71:61:07:c8:43:b5:7e:f9:32:cd:f6:54:e0:05:18:dc:51:cd:
         ee:ea:dc:23:cd:62:b2:a8:39:50:61:4c:3b:97:1c:5c:ad:d2:
         b5:e9:20:9a:1a:8b:9f:d5:de:43:b5:7d:2a:96:c8:69:a3:79:
         21:c6:3a:00:a2:c6:43:41:b5:2e:be:9f:7a:5c:cd:ea:77:e9:
         cc:4a:0b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:31:17 2025 by rpki-client