Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft
File:                     307456E03A11DBB48443E93538958B15B4E9E0F0.mft (raw, json)
Hash identifier:          VGzvDdlWCCg5c3pjxISbrxFp00SQ7JjnehaVX19i8qM=
Subject key identifier:   F1:CD:78:F5:5B:7D:44:99:C0:68:F6:D2:5A:31:0F:3E:D4:D9:42:22
Authority key identifier: 30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0
Certificate issuer:       /CN=307456E03A11DBB48443E93538958B15B4E9E0F0
Certificate serial:       57504C1723D915B0068C013F89FE5A4497A485B2
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft
Manifest number:          7B
Signing time:             Sun 19 Oct 2025 19:28:18 +0000
Manifest this update:     Sun 19 Oct 2025 19:23:18 +0000
Manifest next update:     Mon 20 Oct 2025 20:32:18 +0000
Files and hashes:         1: 307456E03A11DBB48443E93538958B15B4E9E0F0.crl (hash: aJ+6QjENAIN6NSxiUNYbfZFGvhPcT49qVXqcG3t6SCw=)
                          2: 3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa (hash: aBp6U2aVMH3hSM5eeFVi+p63pJd0WYDoQYC72uEJ/w8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:50:4c:17:23:d9:15:b0:06:8c:01:3f:89:fe:5a:44:97:a4:85:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307456E03A11DBB48443E93538958B15B4E9E0F0
        Validity
            Not Before: Oct 19 19:23:18 2025 GMT
            Not After : Oct 20 20:32:18 2025 GMT
        Subject: CN=F1CD78F55B7D4499C068F6D25A310F3ED4D94222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:34:b0:df:7e:ce:65:18:7e:1d:0b:f1:85:7e:
                    3e:f1:ff:87:7c:8c:6d:ce:1d:3a:66:4e:62:12:55:
                    e2:49:bc:54:0e:c4:c4:f2:84:55:f1:f1:c2:aa:ee:
                    59:3f:84:83:61:7e:53:c0:b4:5f:93:99:b5:6c:aa:
                    29:30:b2:68:b1:b4:5b:f2:cf:0a:5d:34:7f:cb:5f:
                    a1:4b:01:34:07:76:ac:69:cd:08:f2:32:70:b5:a3:
                    6b:99:dd:9e:54:24:d4:09:7b:23:21:b7:20:f9:22:
                    01:67:f4:e5:52:44:35:64:1f:1a:4a:f2:fd:fe:19:
                    a0:1e:3f:48:09:02:60:ec:fb:09:c1:f3:b3:cd:53:
                    3c:1e:0e:dc:5e:f8:ee:4b:c1:a3:8d:82:e8:5a:49:
                    c5:fc:21:d6:9a:c4:21:48:a8:f5:50:ff:4b:85:23:
                    43:d7:9e:6a:d1:be:84:44:cd:1f:25:58:28:3d:6c:
                    87:3d:d0:86:ac:11:56:24:f3:ee:86:7d:e6:84:14:
                    cd:62:ce:8b:d3:e2:b3:fd:3f:4c:2e:eb:69:2a:0e:
                    19:8a:15:d7:3e:26:61:b5:36:18:f4:3e:a6:9e:99:
                    f3:31:b9:f8:41:71:bf:e6:e3:42:fd:0b:c7:4f:e1:
                    2f:76:58:22:e2:40:e2:53:82:1d:5b:eb:b2:bf:c8:
                    a2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CD:78:F5:5B:7D:44:99:C0:68:F6:D2:5A:31:0F:3E:D4:D9:42:22
            X509v3 Authority Key Identifier:
                keyid:30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:5e:c0:46:c0:db:ba:a7:a1:46:ba:37:58:97:7b:66:9f:68:
         69:3c:f6:a8:5c:16:5f:72:3e:5d:25:f2:cf:10:10:82:34:73:
         68:3d:6e:e0:51:16:95:cd:16:37:89:c0:50:56:23:a2:be:ac:
         36:a7:69:1a:78:50:10:00:fe:37:6f:05:5f:d3:39:6b:23:72:
         20:42:37:18:ed:f4:18:4b:01:84:14:07:f0:93:8c:83:74:29:
         9a:ae:30:1f:fd:ec:c1:84:64:f2:b8:26:07:22:86:d7:aa:b0:
         c4:83:14:f6:49:71:a4:93:c3:a5:b9:c2:37:41:37:28:ba:d2:
         e9:02:9f:d2:30:6e:3d:f6:60:57:a4:7a:c7:3e:35:88:22:d5:
         e5:e5:47:04:00:5e:5e:fe:0b:cf:3a:e5:cc:ce:d2:b6:56:96:
         24:5c:7e:04:0f:ed:8f:c6:1c:cd:32:9c:b7:cf:c1:0c:aa:b3:
         91:ff:ee:ed:1f:b7:29:0a:b4:c0:00:72:2c:00:c5:87:a7:4b:
         a2:d3:a6:e9:90:fb:57:fd:67:16:68:24:59:ac:e5:20:67:93:
         7a:91:51:c3:25:1e:86:78:b3:38:d8:c6:32:fd:0c:f0:4b:f7:
         98:28:79:da:09:ef:67:a6:c2:eb:8b:9d:49:87:1f:ad:a8:82:
         96:17:2a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:42:30 2025 by rpki-client