Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5799be86-8eae-482c-b6b5-355f7590942b/0/C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.mft
File:                     C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.mft (raw, json)
Hash identifier:          E0galL1G8zpu3nFT4yWXymavztfqHdg95pq5jJ3A33s=
Subject key identifier:   5F:FA:5D:D2:8D:26:18:70:D0:61:77:A0:C7:4D:50:57:2B:A1:BC:33
Authority key identifier: C1:37:EF:1A:67:75:16:04:3A:AA:F7:50:75:BB:8E:5F:8B:FF:1A:CF
Certificate issuer:       /CN=c137ef1a677516043aaaf75075bb8e5f8bff1acf
Certificate serial:       756BE086725F173F342B62A562A9E370352D5156
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTfvGmd1FgQ6qvdQdbuOX4v_Gs8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5799be86-8eae-482c-b6b5-355f7590942b/0/C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.mft
Manifest number:          56
Signing time:             Sat 23 Aug 2025 00:47:43 +0000
Manifest this update:     Sat 23 Aug 2025 00:42:43 +0000
Manifest next update:     Sun 24 Aug 2025 03:46:43 +0000
Files and hashes:         1: C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.crl (hash: EXcDsr6Su1d9yGHK7Dsuu5+aZp3xVXzbzIAGRFR4UWw=)
                          2: AS213915.asa (hash: 54kMALFIAqByOWGYmGDi03BmYHzQmO0Cq7B4na5nOtA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/5799be86-8eae-482c-b6b5-355f7590942b/0/C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/5799be86-8eae-482c-b6b5-355f7590942b/0/C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTfvGmd1FgQ6qvdQdbuOX4v_Gs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6b:e0:86:72:5f:17:3f:34:2b:62:a5:62:a9:e3:70:35:2d:51:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c137ef1a677516043aaaf75075bb8e5f8bff1acf
        Validity
            Not Before: Aug 23 00:42:43 2025 GMT
            Not After : Aug 24 03:46:43 2025 GMT
        Subject: CN=5FFA5DD28D261870D06177A0C74D50572BA1BC33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0c:bc:ef:06:c3:41:be:4f:9c:c9:d7:32:25:
                    d6:db:31:2c:4f:26:65:88:0b:5f:2b:4a:ed:29:73:
                    3f:18:f3:ac:9e:27:c5:e2:bd:5e:e4:72:6b:c2:f8:
                    4c:2c:38:13:4e:ad:3c:42:42:66:35:d2:c2:56:8e:
                    47:af:16:94:b2:73:c9:19:17:d6:21:c3:2e:f6:4a:
                    d8:0c:95:3b:32:b1:c3:c8:b5:d2:97:d3:32:30:5b:
                    28:d2:ad:23:d6:fd:76:e0:17:2c:b5:ba:e8:d9:1b:
                    be:a4:80:7d:6c:e2:f3:3d:77:30:53:9d:16:2a:03:
                    24:fd:54:fe:ef:b1:c1:6e:06:d0:18:7f:ee:c1:78:
                    67:8f:f6:03:e5:37:8d:16:4f:08:ac:cf:e6:62:f3:
                    05:b3:35:f7:f8:3e:09:e9:c6:93:c6:57:f6:5b:a5:
                    5d:a0:99:ed:4d:94:b0:19:81:e0:31:ee:77:65:91:
                    14:02:5d:b9:15:5e:31:4f:24:0a:7b:ff:48:44:b4:
                    cb:3c:e1:c6:a8:6d:4a:c5:cf:6c:53:9f:70:b6:45:
                    eb:56:c4:8b:1c:fa:55:5e:f6:0a:63:2c:4e:0c:68:
                    b3:93:2d:7d:95:ca:87:1a:5f:5e:48:d7:6b:9b:f5:
                    82:15:fe:b7:ad:97:52:05:db:8b:23:74:cb:f6:b8:
                    81:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FA:5D:D2:8D:26:18:70:D0:61:77:A0:C7:4D:50:57:2B:A1:BC:33
            X509v3 Authority Key Identifier:
                keyid:C1:37:EF:1A:67:75:16:04:3A:AA:F7:50:75:BB:8E:5F:8B:FF:1A:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5799be86-8eae-482c-b6b5-355f7590942b/0/C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTfvGmd1FgQ6qvdQdbuOX4v_Gs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5799be86-8eae-482c-b6b5-355f7590942b/0/C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:08:b7:22:ac:87:c9:aa:2f:33:d3:b9:03:22:31:07:fb:5f:
         51:fa:d8:fc:45:17:2b:47:66:d0:d9:83:78:a8:97:ad:9c:e8:
         3d:62:ad:8b:06:fd:ef:f2:7a:ed:2c:71:b1:76:8f:7e:71:cb:
         d3:d2:7f:38:39:12:55:c4:6f:27:be:be:a1:da:e0:cb:48:58:
         2f:ac:81:7f:66:e5:71:b0:98:b3:ae:4b:de:9c:7e:d7:50:1e:
         3a:fd:4d:f5:4f:c6:3b:61:d7:43:3b:ba:cb:5b:28:43:1e:06:
         67:b5:73:b3:e8:38:bf:8a:56:6a:cc:ca:86:d4:84:0e:de:03:
         6f:c6:75:94:16:cf:39:90:1f:c2:9b:56:3d:e6:b4:6d:81:ce:
         d9:0a:21:f6:6c:7e:0d:8e:6d:d6:02:af:8b:7b:bc:79:0e:4e:
         1a:ec:75:a4:67:3d:9c:2e:b5:a6:72:d9:81:43:de:d6:a1:fb:
         de:a4:0d:8d:53:a0:54:77:04:2f:6c:e5:66:82:ac:0a:59:97:
         eb:f3:0f:34:03:1f:20:c3:c6:e6:13:42:8d:80:f9:7f:3d:b5:
         dd:0e:54:b6:38:50:11:1d:75:f5:5b:2c:e7:06:b2:82:1e:8f:
         71:b2:f3:67:df:f5:a6:c3:f2:ba:4f:00:3e:39:38:7a:50:77:
         02:7e:0c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:44:32 2025 by rpki-client