Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft
File:                     0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json)
Hash identifier:          yWy+NZU27Hbm36FTs6IyrVZSM7OWanJYPQPFZtgMiak=
Subject key identifier:   BF:87:28:E6:24:97:B6:48:0F:E6:E3:46:F9:26:5F:33:5E:C0:9E:3C
Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6
Certificate issuer:       /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6
Certificate serial:       2B9025093221E851BAFFC8D66C758A7518462B3F
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft
Manifest number:          60
Signing time:             Mon 20 Oct 2025 01:44:27 +0000
Manifest this update:     Mon 20 Oct 2025 01:39:27 +0000
Manifest next update:     Tue 21 Oct 2025 05:31:27 +0000
Files and hashes:         1: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: BAbdU+avBSGBhvFec+/Mg8L4tYY4HEO8kENYedJj6+U=)
                          2: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: VQpA5o0Pq6sWKS236BEYQWIKLgBdNGi2BEIwMERcePY=)
                          3: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: GbSyn/a7s2Tct/cl+IXObaOaKJfLlKE/P5lfI5qam+k=)
                          4: 326130623a346530373a316330323a3a2f34382d3438203d3e20323133383632.roa (hash: /X68JagauxWyaFcSb3BbJbw5DWqXyP6Pe5X7avcQNQs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:32:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:90:25:09:32:21:e8:51:ba:ff:c8:d6:6c:75:8a:75:18:46:2b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6
        Validity
            Not Before: Oct 20 01:39:27 2025 GMT
            Not After : Oct 21 05:31:27 2025 GMT
        Subject: CN=BF8728E62497B6480FE6E346F9265F335EC09E3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1b:49:f4:ac:e9:86:f9:2c:13:16:47:09:e9:
                    49:b9:26:43:0a:5d:c6:1f:d9:1f:03:a7:2b:5e:4c:
                    54:58:1d:d5:7c:1c:43:13:a8:41:52:65:a1:96:06:
                    1f:ee:b3:ca:ce:a2:1c:eb:5d:e4:50:75:b3:55:c6:
                    e9:37:b8:cb:b0:7f:3e:99:c1:48:c2:c1:1c:50:78:
                    d3:5d:bf:e7:6e:67:ca:af:d9:89:bf:39:d2:13:14:
                    03:96:2d:37:a4:91:f0:80:b9:fa:79:e4:a3:4d:de:
                    a8:b6:95:cb:65:e5:f5:03:1f:6e:eb:16:c8:82:d8:
                    a0:f6:35:6e:39:5b:89:5c:50:eb:e1:a0:a2:1f:aa:
                    a5:82:6b:b0:44:e4:31:f2:60:8e:0b:73:e3:af:ba:
                    ea:ad:93:4c:6e:1e:66:30:e7:ef:6f:ab:69:6d:f7:
                    e3:96:53:e1:d2:f0:91:eb:76:5e:80:e0:0c:42:88:
                    a0:23:1c:c1:fe:f4:a0:75:b9:d9:f7:9d:8c:9b:4d:
                    82:84:71:09:17:be:1d:62:10:e5:73:de:09:c8:d2:
                    65:2b:ce:2e:07:23:f0:52:e4:d9:6e:b7:c4:86:cf:
                    92:23:dd:be:ed:5d:e5:f6:19:64:44:89:6f:b9:04:
                    eb:d0:0d:99:d0:1f:0f:0d:b8:8f:4e:51:b7:5c:79:
                    5a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:87:28:E6:24:97:B6:48:0F:E6:E3:46:F9:26:5F:33:5E:C0:9E:3C
            X509v3 Authority Key Identifier:
                keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:9b:8b:c1:5b:43:cf:96:f8:a9:ff:14:4c:0d:ba:f2:1f:01:
         79:14:16:11:79:a9:a1:a4:b7:d8:f4:ee:34:cf:18:35:54:2e:
         d4:66:8e:b5:6f:ba:3e:f7:89:1c:45:35:e5:69:e2:2b:6c:bd:
         78:58:5c:e4:21:f7:5d:94:87:de:ee:d8:80:31:8a:a1:dd:65:
         91:f6:c4:d3:09:e4:90:6e:5b:f3:91:a2:f9:f7:ca:a2:44:60:
         82:22:5e:f7:39:11:31:94:4b:2b:0f:2c:40:1a:f4:eb:70:15:
         c5:f7:ed:8a:e9:b4:e8:6c:ee:ab:28:1a:71:fb:a4:34:7b:d9:
         26:20:c4:06:00:f1:3b:f7:b1:74:d0:05:ec:60:5e:00:2e:f2:
         b6:fd:1d:b2:80:3d:5a:c6:b1:2a:10:f5:61:da:64:42:65:b2:
         ee:e0:b5:6e:89:a7:b9:84:bf:05:32:ca:7d:0e:f1:f7:26:fb:
         97:51:c0:b6:5b:80:01:d6:bb:06:d6:b8:ee:0a:83:b1:3a:cf:
         30:ce:80:30:30:39:4b:05:91:f6:75:90:35:59:71:9f:c0:3f:
         5d:6c:60:32:47:00:70:eb:6f:76:e3:40:06:fe:6a:69:34:de:
         20:af:bf:a7:a3:3a:6b:31:d3:df:74:1c:29:91:5d:4e:86:0f:
         be:99:c7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:55:10 2025 by rpki-client