Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
File:                     B3C078E149D9741434FD8877AB4CED46DC2720DA.mft (raw, json)
Hash identifier:          lKoH07IruLadTbOvXVHkiZ88CcxseS3JMcIkfemVC30=
Subject key identifier:   35:AB:3B:EC:72:C2:CE:5C:C2:DF:40:16:B2:03:1E:C6:A0:65:C4:29
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Certificate issuer:       /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial:       7B844D1AFEDBF18550CA9DCF1674CFA392CB442A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
Manifest number:          030D
Signing time:             Sun 19 Oct 2025 03:26:56 +0000
Manifest this update:     Sun 19 Oct 2025 03:21:56 +0000
Manifest next update:     Mon 20 Oct 2025 07:16:56 +0000
Files and hashes:         1: AS215147.asa (hash: J2x/D/dp4X7UL/t56blYMubeUgQMJur/XGZvebo5ANU=)
                          2: B3C078E149D9741434FD8877AB4CED46DC2720DA.crl (hash: m6NfyEIM8rI6Y8/AO9LZ+FScQvpnErZXvP37+o3Pod4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:84:4d:1a:fe:db:f1:85:50:ca:9d:cf:16:74:cf:a3:92:cb:44:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
        Validity
            Not Before: Oct 19 03:21:56 2025 GMT
            Not After : Oct 20 07:16:56 2025 GMT
        Subject: CN=35AB3BEC72C2CE5CC2DF4016B2031EC6A065C429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ae:40:99:d0:1e:4b:3c:53:90:ed:0c:d9:c3:
                    0f:9c:84:1a:f3:41:c1:a1:02:40:e6:ae:f7:3d:52:
                    6d:f5:6a:08:2d:e1:af:65:ca:54:1c:93:c5:ee:69:
                    ef:fe:96:a2:73:74:5d:5c:5b:dd:1f:c4:50:d6:0d:
                    e5:3c:b7:6d:d5:cd:b1:52:c3:59:be:d3:a4:b9:e8:
                    89:4f:f7:b2:83:38:42:0a:63:fd:3e:a8:37:ba:ab:
                    74:9c:a6:de:db:4d:10:d1:2e:f5:2d:26:cd:00:71:
                    d4:2a:b9:48:1a:ed:dc:fa:b2:fa:9c:fb:d8:b6:65:
                    e4:dc:ad:16:a4:de:03:3d:80:62:a7:4e:4a:ad:c2:
                    32:8a:7a:6e:a7:35:1d:ed:12:05:f3:c2:1c:3a:34:
                    4a:66:bd:d4:cd:0e:49:4d:a5:67:44:e5:f5:a6:7a:
                    db:76:33:1f:7d:ce:ab:d7:a4:5a:fa:7b:17:37:aa:
                    fe:6c:8d:06:36:bd:4a:c9:71:0d:14:89:92:f6:c9:
                    96:76:9f:c5:fa:fe:1f:5d:6d:34:61:03:a4:35:10:
                    0c:8b:e7:52:7d:4f:6e:cc:2e:61:48:06:a5:b9:f2:
                    dc:b7:f8:21:ec:2e:dd:c4:19:b5:83:0e:5d:ad:87:
                    b0:5d:a4:13:6e:2c:56:b4:9f:d9:cf:fc:6c:ac:0f:
                    97:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AB:3B:EC:72:C2:CE:5C:C2:DF:40:16:B2:03:1E:C6:A0:65:C4:29
            X509v3 Authority Key Identifier:
                keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:71:d2:78:53:eb:29:fd:41:ff:aa:45:08:9c:d6:5e:5e:bb:
         56:bc:97:e1:c6:5b:11:a7:2e:8b:c2:60:7d:25:12:f6:62:3f:
         dc:d8:08:f1:93:24:9b:15:56:c9:03:ad:e3:b4:26:a5:ce:d9:
         e4:d9:2e:6b:3e:07:b4:ca:d6:cd:57:5f:5b:77:0f:da:c6:db:
         d7:21:c6:6a:f5:04:e8:f1:06:3f:8a:0e:8a:3d:13:44:85:e6:
         8e:37:d8:30:95:fc:1a:68:4e:78:e6:14:1a:91:cf:39:d9:02:
         42:bb:06:34:f7:30:29:0a:23:ad:df:c9:17:49:cd:df:db:b1:
         a8:98:d5:ef:46:19:4d:fa:00:cb:a7:57:12:f1:98:bb:3c:46:
         eb:d5:a9:5f:03:9f:6d:db:59:b2:e8:ec:38:d4:3c:5e:1e:eb:
         85:b0:11:0a:89:22:e6:39:2d:93:9c:38:0e:92:4c:7c:32:4b:
         38:42:e6:56:05:49:7c:ef:5f:df:56:57:cb:b2:83:83:65:8b:
         8f:7f:39:12:53:69:c1:49:6f:42:f9:1e:cf:de:cb:51:7f:a3:
         92:2f:99:20:3e:83:61:77:dd:9d:42:81:fb:80:89:87:45:46:
         97:36:34:5f:6a:32:37:62:3c:76:32:44:62:92:d6:db:6c:0c:
         74:a4:eb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:17 2025 by rpki-client