Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
File:                     21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft (raw, json)
Hash identifier:          SiUkQO2pAg81+OTJiSztR2khuIfz2yuQp06dUVcBJTA=
Subject key identifier:   E7:F9:60:AE:25:B3:61:AF:98:E7:17:39:1D:70:08:94:9E:0C:5F:60
Authority key identifier: 21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48
Certificate issuer:       /CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48
Certificate serial:       683C47601300D35037078B0F6729B6D86B0B783D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
Manifest number:          67
Signing time:             Sun 19 Oct 2025 12:25:41 +0000
Manifest this update:     Sun 19 Oct 2025 12:20:41 +0000
Manifest next update:     Mon 20 Oct 2025 14:30:41 +0000
Files and hashes:         1: 326131343a373538303a6130313a3a2f34382d3438203d3e20323135353433.roa (hash: 9e2yjigX5+cNnGpC5dYpYp4x5beQHVuns4hEprR01WE=)
                          2: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl (hash: +6o0wTXxCb4eyKRN3ArCDR8SZhoZqyJSPydjjqbjaP0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3c:47:60:13:00:d3:50:37:07:8b:0f:67:29:b6:d8:6b:0b:78:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48
        Validity
            Not Before: Oct 19 12:20:41 2025 GMT
            Not After : Oct 20 14:30:41 2025 GMT
        Subject: CN=E7F960AE25B361AF98E717391D7008949E0C5F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ab:23:20:ee:a2:15:ad:d3:0d:4d:42:93:cc:
                    c1:30:af:a7:1b:ae:37:7c:43:c4:9b:96:5d:65:0c:
                    d1:6c:ee:34:2e:fc:5f:e3:55:a4:d9:46:60:5f:22:
                    4e:de:1a:87:f3:dd:92:f6:2d:1a:b0:77:c8:fa:88:
                    5f:e2:a4:ca:8c:1f:09:46:11:13:52:47:2d:fe:15:
                    4b:0b:2b:76:31:88:c3:b6:19:f4:6a:a1:41:81:c3:
                    b2:92:57:fc:da:08:da:68:dc:91:32:21:fa:57:eb:
                    a8:1b:cc:18:c2:4b:49:63:7a:43:e8:93:ca:ba:27:
                    2b:f6:78:d4:14:5e:00:2b:78:38:7d:3a:90:b0:10:
                    a4:a3:0d:c6:24:87:69:93:8a:92:fe:bb:e3:cd:a6:
                    95:63:85:4b:f0:dd:c1:b8:a6:15:79:96:cd:25:be:
                    4a:3d:1b:a6:c6:76:52:bb:92:3b:0e:b7:18:9d:b3:
                    e8:09:c5:11:18:c2:46:57:e6:08:46:fc:95:69:82:
                    cb:e2:4f:9e:05:6c:75:36:8a:e3:56:bf:be:73:90:
                    5e:1c:8f:7b:a0:9e:d0:e1:c1:09:39:8a:90:f7:4f:
                    c9:1e:01:06:b0:93:6f:ff:37:07:c0:fb:c5:de:b6:
                    ba:7e:43:db:d2:42:6b:55:30:85:4d:b9:a6:2d:2d:
                    7c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F9:60:AE:25:B3:61:AF:98:E7:17:39:1D:70:08:94:9E:0C:5F:60
            X509v3 Authority Key Identifier:
                keyid:21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:e4:0d:96:a6:49:de:b6:89:42:a4:5d:63:c9:2a:d7:55:0f:
         38:95:b5:d8:21:63:fc:91:8b:87:07:9c:bf:f4:dd:f7:b0:03:
         28:b7:c1:6a:95:d3:45:cf:14:97:35:a8:c1:06:62:5b:96:61:
         87:09:41:0f:0d:5e:24:df:cf:58:1b:66:47:e7:33:e1:3d:14:
         36:67:93:e4:39:c0:5f:03:8d:1c:ee:53:a0:ab:25:13:06:c9:
         d4:7c:b6:07:9c:33:2e:0d:40:91:24:06:b3:01:4a:c2:b4:79:
         11:19:51:66:ba:57:75:e4:31:c0:bd:68:40:e0:d7:70:ae:e4:
         0c:da:68:97:43:5c:cb:21:68:28:af:ee:95:4a:30:15:66:1b:
         85:ba:cb:6d:c1:8b:8c:e8:f5:5f:f2:48:51:d2:92:c9:ff:fd:
         33:09:27:3e:a6:a5:b1:dc:35:21:4e:42:f0:2f:e1:e1:3a:b7:
         b3:d9:af:2f:9b:ad:d6:a0:62:33:1e:a9:b3:61:37:41:4b:bb:
         ed:bb:3b:d6:ac:ad:90:42:d3:e9:c3:fd:ed:ee:00:de:9e:7f:
         ea:78:b7:1a:71:2b:2f:4a:86:d1:57:aa:dd:1b:56:24:e4:b5:
         56:71:a5:1f:8e:20:66:da:11:7d:0b:ad:f0:5a:eb:3a:f3:3d:
         58:c0:cb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:42:29 2025 by rpki-client