Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/9/B4E7A6EDB9E7287B9AC79624F573F448DB88015D.mft
File:                     B4E7A6EDB9E7287B9AC79624F573F448DB88015D.mft (raw, json)
Hash identifier:          GvyjoPwOX3Gov3jaEQBCUeZpc8ZiewdqUrW8FM4t71U=
Subject key identifier:   3C:E1:6C:C0:ED:0F:D2:0A:4C:51:31:7E:B6:4F:C6:14:8F:6F:19:46
Authority key identifier: B4:E7:A6:ED:B9:E7:28:7B:9A:C7:96:24:F5:73:F4:48:DB:88:01:5D
Certificate issuer:       /CN=b4e7a6edb9e7287b9ac79624f573f448db88015d
Certificate serial:       03C7A2BE8348CBDFE043744FBAE2817F0F5D5EF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOem7bnnKHuax5Yk9XP0SNuIAV0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/9/B4E7A6EDB9E7287B9AC79624F573F448DB88015D.mft
Manifest number:          22
Signing time:             Sun 19 Oct 2025 00:15:39 +0000
Manifest this update:     Sun 19 Oct 2025 00:10:39 +0000
Manifest next update:     Mon 20 Oct 2025 03:19:39 +0000
Files and hashes:         1: AS210796.asa (hash: DX1AoDPK1cM489HWvmZexK7UjV2p14LhFQl4Gowg9ew=)
                          2: B4E7A6EDB9E7287B9AC79624F573F448DB88015D.crl (hash: DEFueoluNu9S9lDqGMmz7aCwaf5kCCki2jHno/YfQx8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/9/B4E7A6EDB9E7287B9AC79624F573F448DB88015D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/9/B4E7A6EDB9E7287B9AC79624F573F448DB88015D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tOem7bnnKHuax5Yk9XP0SNuIAV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:19:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c7:a2:be:83:48:cb:df:e0:43:74:4f:ba:e2:81:7f:0f:5d:5e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e7a6edb9e7287b9ac79624f573f448db88015d
        Validity
            Not Before: Oct 19 00:10:39 2025 GMT
            Not After : Oct 20 03:19:39 2025 GMT
        Subject: CN=3CE16CC0ED0FD20A4C51317EB64FC6148F6F1946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:05:e6:67:56:c7:4a:aa:91:27:4b:7f:ab:7b:
                    fd:83:2d:d7:05:a3:21:5e:d3:8e:b9:ae:0d:76:d0:
                    19:b9:10:7b:9e:48:7a:f3:59:ac:e5:df:2e:84:89:
                    4a:d4:79:97:12:15:00:af:fa:6e:a8:07:b8:0f:34:
                    1e:38:e5:44:51:3a:2f:6f:7d:2e:c7:1c:ee:16:82:
                    de:54:ab:b8:34:66:35:f1:5b:42:44:bb:00:0e:d6:
                    f8:72:a9:d4:f6:99:24:4f:6a:de:39:69:8b:b7:71:
                    f3:02:29:4a:db:95:30:4b:1a:70:0e:27:49:1e:d4:
                    06:2f:9a:7f:b5:cb:08:b2:77:e1:06:9c:e0:f3:09:
                    69:ca:36:33:15:68:ed:ac:01:e4:d7:6b:db:a5:0b:
                    59:49:3e:6a:22:ed:d8:4f:ca:57:6a:dc:76:b6:56:
                    32:7c:09:e9:b9:d5:d3:b3:83:af:a7:15:0e:84:aa:
                    4a:f1:80:62:08:ad:db:3c:9f:f8:79:1b:9b:4c:40:
                    42:03:26:e5:a4:89:dc:81:ae:29:a9:d7:f5:72:c2:
                    85:de:e6:8c:f0:0a:cc:2c:a6:cc:f4:4a:f5:50:e8:
                    ac:ce:7c:b0:21:49:d2:e3:59:59:95:d7:9e:fa:1f:
                    f6:39:28:2f:b8:61:13:03:b3:72:48:66:55:27:61:
                    2b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E1:6C:C0:ED:0F:D2:0A:4C:51:31:7E:B6:4F:C6:14:8F:6F:19:46
            X509v3 Authority Key Identifier:
                keyid:B4:E7:A6:ED:B9:E7:28:7B:9A:C7:96:24:F5:73:F4:48:DB:88:01:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/9/B4E7A6EDB9E7287B9AC79624F573F448DB88015D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOem7bnnKHuax5Yk9XP0SNuIAV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/9/B4E7A6EDB9E7287B9AC79624F573F448DB88015D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ce:bc:2c:06:90:ab:91:2f:bd:18:93:86:df:e0:54:96:fe:
         e4:f6:3e:b0:31:28:01:95:f4:f1:bb:f2:6b:52:73:52:1c:54:
         cd:90:26:0a:74:f4:96:11:89:7c:e5:c8:54:89:d2:96:00:af:
         8c:57:3a:2c:11:e3:d0:9f:b5:51:7f:d1:bd:21:db:d4:17:de:
         9b:38:ec:cd:f0:f3:63:1e:45:32:10:84:fe:7d:e6:1a:c5:7d:
         30:18:4b:d6:56:94:aa:d8:7a:d2:40:99:4b:b4:a5:c1:cd:e4:
         d8:5b:b7:8e:21:c5:37:1e:ce:cf:68:7c:c0:7c:06:df:bb:c7:
         45:a0:ec:e4:4f:74:2e:90:91:91:19:e0:bf:d8:2f:57:89:fc:
         9f:67:e9:78:67:4d:e7:21:be:e4:6d:d1:ad:9e:63:5c:77:b3:
         2a:93:45:c2:e3:ee:34:a4:ec:cf:7e:e7:aa:24:17:68:de:b7:
         47:53:74:0a:59:ed:c9:b8:5a:73:50:df:70:4a:df:13:6c:40:
         e2:d1:a9:8e:6a:d9:a7:d9:d8:ef:c1:2e:bb:b8:c9:09:01:76:
         53:05:c2:a3:f0:c9:98:42:a3:e1:93:ea:22:ad:e5:2b:40:f7:
         21:bc:15:8d:a3:a9:06:6f:19:15:06:e1:6f:3e:58:1b:43:9a:
         12:b0:a3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:14 2025 by rpki-client