Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
File:                     DC6B06B855BF97C397BDB8516944B4DB18663F92.mft (raw, json)
Hash identifier:          KIOEX++QlBOIJQl0RYJF9tiGDypL3eubRaVqG96YOlA=
Subject key identifier:   69:F1:C3:9C:EC:D3:28:E4:1A:BA:A6:52:68:F3:F7:91:FD:29:A3:12
Authority key identifier: DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92
Certificate issuer:       /CN=dc6b06b855bf97c397bdb8516944b4db18663f92
Certificate serial:       2C398DA23BF32A0BA581331AF8F663202B9607D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
Manifest number:          03A0
Signing time:             Sun 19 Oct 2025 02:19:53 +0000
Manifest this update:     Sun 19 Oct 2025 02:14:53 +0000
Manifest next update:     Mon 20 Oct 2025 04:15:53 +0000
Files and hashes:         1: DC6B06B855BF97C397BDB8516944B4DB18663F92.crl (hash: B4VqkaX1peQ6KSlqEmoMMBjXwreNS3xoUQE28NEJMAI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:39:8d:a2:3b:f3:2a:0b:a5:81:33:1a:f8:f6:63:20:2b:96:07:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc6b06b855bf97c397bdb8516944b4db18663f92
        Validity
            Not Before: Oct 19 02:14:53 2025 GMT
            Not After : Oct 20 04:15:53 2025 GMT
        Subject: CN=69F1C39CECD328E41ABAA65268F3F791FD29A312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3f:d5:f8:22:4f:23:76:17:61:48:78:91:04:
                    f1:20:48:08:47:ed:53:d0:63:51:ab:76:e4:d7:f6:
                    e5:74:a3:36:0d:bc:80:54:e2:a4:0f:f0:98:1c:f1:
                    40:18:c5:3d:ca:53:b3:7a:22:c6:bc:35:e5:d3:f6:
                    85:06:ce:41:a5:8e:d1:7a:5c:92:ae:1a:12:14:4a:
                    08:09:37:00:4d:99:da:08:9c:dc:5d:01:32:41:cf:
                    e8:39:c3:bb:5c:e4:fe:ef:e6:ab:f9:ae:03:03:a4:
                    dd:e9:92:89:95:6d:63:f7:df:5f:8b:b6:2b:6a:dd:
                    16:4e:cd:ec:3b:da:92:45:ce:c7:bb:de:14:cb:04:
                    55:db:c1:d3:b5:9b:69:c1:2d:f8:b1:48:8c:8f:e9:
                    a1:9c:da:49:d1:67:bd:c3:fd:03:81:d6:25:8f:be:
                    73:b9:41:85:44:8b:30:c8:41:23:10:7e:d9:26:c2:
                    f8:ee:a9:c1:39:a4:5c:b4:74:8d:e6:67:8a:5e:2f:
                    1c:87:9e:2f:b2:b3:c7:5b:e1:a5:3e:9f:78:ad:36:
                    f9:29:a3:97:e8:4f:18:45:c1:1f:ba:3d:c3:2b:ab:
                    75:b2:ad:12:64:f2:a9:9b:7d:89:26:94:ec:7c:6f:
                    77:c4:7f:d7:9d:bd:2c:7e:52:f1:ee:ed:cf:54:9b:
                    e1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F1:C3:9C:EC:D3:28:E4:1A:BA:A6:52:68:F3:F7:91:FD:29:A3:12
            X509v3 Authority Key Identifier:
                keyid:DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:6b:db:97:9c:6b:ac:3e:32:41:7c:0d:d8:7b:c9:da:b6:45:
         e7:6e:3f:10:cc:7a:b6:13:75:20:6c:ed:32:66:09:e3:e4:99:
         3f:2e:f0:01:da:59:5e:e2:a7:71:51:75:11:d6:0e:cc:86:45:
         8c:d5:a6:45:84:81:76:35:09:7a:10:5d:65:8f:37:61:0a:26:
         90:a3:da:94:35:11:d2:f9:8a:ee:7c:23:81:74:db:21:8a:ec:
         ac:7f:d7:fd:4f:d1:00:a6:14:72:d6:6f:59:25:b7:cf:7b:aa:
         25:44:04:9a:17:2a:1d:7a:c4:cd:f8:2b:dd:df:75:8a:6d:c0:
         02:dc:a8:f3:eb:15:db:cb:7f:13:72:31:80:23:5f:a1:1c:c0:
         cd:9d:64:c6:14:cb:32:0f:65:07:be:a8:b9:a8:d4:1d:e1:32:
         74:97:d8:f9:ca:9b:72:b9:4a:e6:07:ef:c6:0e:0b:b2:76:61:
         f6:99:47:8b:99:8e:cd:af:20:d8:01:ae:ff:72:30:dd:74:06:
         b1:bb:64:ec:1b:ac:31:b6:83:63:10:fe:22:1a:9f:8f:75:93:
         70:53:2e:96:71:61:a4:6b:6a:95:e9:fe:71:52:f3:50:5c:f4:
         94:c1:05:51:7f:ba:c4:52:7f:67:50:77:1c:c3:4d:42:2c:fa:
         0c:1b:29:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:06 2025 by rpki-client