Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5799be86-8eae-482c-b6b5-355f7590942b/0/C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.mft
File:                     C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.mft (raw, json)
Hash identifier:          sxjinU/GpbewTpmMQRoAQt7p0Y1RV1QE8Wt9ot4nkrs=
Subject key identifier:   66:02:06:CE:8C:92:F4:47:47:C7:8D:93:DC:F6:A3:25:50:99:7E:A1
Authority key identifier: C1:37:EF:1A:67:75:16:04:3A:AA:F7:50:75:BB:8E:5F:8B:FF:1A:CF
Certificate issuer:       /CN=c137ef1a677516043aaaf75075bb8e5f8bff1acf
Certificate serial:       5996DE2A1E7E932557F4E4EAF07149213C62E715
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTfvGmd1FgQ6qvdQdbuOX4v_Gs8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5799be86-8eae-482c-b6b5-355f7590942b/0/C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.mft
Manifest number:          A2
Signing time:             Sun 19 Oct 2025 12:10:15 +0000
Manifest this update:     Sun 19 Oct 2025 12:05:15 +0000
Manifest next update:     Mon 20 Oct 2025 14:23:15 +0000
Files and hashes:         1: C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.crl (hash: 6Igned2wz9oMb8ikuM8sA/Q7Nl89HPJH3SizcxCui5w=)
                          2: AS213915.asa (hash: 54kMALFIAqByOWGYmGDi03BmYHzQmO0Cq7B4na5nOtA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/5799be86-8eae-482c-b6b5-355f7590942b/0/C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/5799be86-8eae-482c-b6b5-355f7590942b/0/C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTfvGmd1FgQ6qvdQdbuOX4v_Gs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:96:de:2a:1e:7e:93:25:57:f4:e4:ea:f0:71:49:21:3c:62:e7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c137ef1a677516043aaaf75075bb8e5f8bff1acf
        Validity
            Not Before: Oct 19 12:05:15 2025 GMT
            Not After : Oct 20 14:23:15 2025 GMT
        Subject: CN=660206CE8C92F44747C78D93DCF6A32550997EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:71:e6:0f:10:e2:35:30:6c:bf:56:2e:4a:
                    b9:33:38:36:b0:42:a7:4a:11:b7:94:16:53:06:62:
                    78:62:64:72:fe:0a:d8:b1:8e:f5:97:86:17:fe:17:
                    18:e3:97:a8:19:45:b0:8b:c6:55:85:b5:98:45:01:
                    90:6c:93:57:64:ac:49:6d:05:93:aa:52:e6:72:09:
                    34:4e:ce:a2:19:f9:7c:aa:11:b5:13:c4:ed:26:e5:
                    93:d3:a1:61:b7:ff:cf:e1:72:68:6f:a1:e9:f5:97:
                    11:52:ea:87:f1:9e:dc:14:f1:13:b6:f7:87:df:0d:
                    ab:11:4b:8d:9e:6d:6b:6a:0f:e4:fc:4e:fd:1b:ba:
                    dd:5c:ee:cd:83:a9:b0:36:68:f1:69:4a:64:f1:a6:
                    4a:10:fc:c1:56:60:cc:ba:d3:17:8b:90:f3:79:53:
                    26:4d:5b:75:33:44:82:c6:8b:db:a7:dd:32:ae:57:
                    3e:33:37:d8:70:75:2b:e2:a0:7b:26:02:61:3b:e1:
                    31:60:d7:ec:d7:e5:13:53:53:5a:cc:60:3f:5e:ce:
                    77:fd:25:13:3f:3b:5b:15:21:ef:38:c3:c1:52:a0:
                    1f:0a:cc:f7:07:fa:54:66:8f:c5:71:06:d0:7b:ba:
                    bc:34:1c:41:58:03:2e:3f:06:1c:65:e4:b9:a5:8f:
                    54:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:02:06:CE:8C:92:F4:47:47:C7:8D:93:DC:F6:A3:25:50:99:7E:A1
            X509v3 Authority Key Identifier:
                keyid:C1:37:EF:1A:67:75:16:04:3A:AA:F7:50:75:BB:8E:5F:8B:FF:1A:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5799be86-8eae-482c-b6b5-355f7590942b/0/C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTfvGmd1FgQ6qvdQdbuOX4v_Gs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5799be86-8eae-482c-b6b5-355f7590942b/0/C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:16:52:ed:c4:e8:b5:0f:88:b4:a1:37:8b:f3:9c:ee:46:1f:
         b5:82:a9:9a:24:12:1a:72:48:ad:92:99:2d:21:09:6a:86:de:
         cf:e9:40:30:fa:bb:28:93:81:f0:2f:fa:92:80:aa:3c:3a:54:
         ce:48:f7:15:81:bd:3d:71:80:9e:26:e9:35:df:b7:1d:e6:17:
         60:47:45:5c:35:44:a5:be:57:66:53:45:a1:65:50:04:dc:66:
         4c:c2:33:ad:32:da:b1:24:cf:96:53:e3:85:d5:9e:b4:cf:fd:
         af:23:81:3b:ed:5e:92:d7:37:d1:ec:f2:92:3c:55:07:4d:df:
         da:e1:ef:d8:44:e6:99:6b:b1:8c:d7:f5:17:15:0d:9b:0f:06:
         76:bb:18:ec:14:ea:b5:83:a6:b8:e0:83:fb:d7:1a:ef:cf:12:
         ed:e6:1d:bb:c4:2f:eb:5a:eb:41:dd:a2:b7:28:f1:94:56:5b:
         aa:29:5d:9f:52:ce:39:dc:59:98:20:0d:5d:00:40:db:e5:83:
         91:c5:16:a3:3a:8c:43:61:dd:0b:20:91:8e:f4:09:3b:1d:37:
         76:b5:31:e7:a1:2c:80:c1:a1:2b:30:cb:c5:56:f2:5e:19:f1:
         11:01:67:27:79:09:f3:6e:ac:c4:25:bb:3a:43:79:46:0b:4e:
         75:20:88:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:32 2025 by rpki-client