Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
File:                     C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft (raw, json)
Hash identifier:          Yx2bDY1cKUDyY3WFDHC7xDufUxcym5h+uZBtMAb72Wc=
Subject key identifier:   76:8F:23:EB:FB:86:AC:E0:27:89:7A:6E:51:35:A1:8E:C0:04:F2:4A
Authority key identifier: C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC
Certificate issuer:       /CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
Certificate serial:       39BB454F2394E6CF4DB237A47FC6E2BF61884A93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
Manifest number:          02CE
Signing time:             Sun 19 Oct 2025 03:25:47 +0000
Manifest this update:     Sun 19 Oct 2025 03:20:47 +0000
Manifest next update:     Tue 21 Oct 2025 05:01:47 +0000
Files and hashes:         1: AS214498.asa (hash: zpKZ3xz417Eo2EM0m+2UqZcFmQBYd5gW7ig2wKkC7zE=)
                          2: C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl (hash: k3DhRXi/CBIM+oiZumXaGvvhBnKpD7KXid9Ovk/eUe4=)
                          3: AS213525.asa (hash: seEk90bRp86U4w9lX1c0usnGxJgino5umQZtHO6fll4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:bb:45:4f:23:94:e6:cf:4d:b2:37:a4:7f:c6:e2:bf:61:88:4a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
        Validity
            Not Before: Oct 19 03:20:47 2025 GMT
            Not After : Oct 21 05:01:47 2025 GMT
        Subject: CN=768F23EBFB86ACE027897A6E5135A18EC004F24A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a2:67:34:2e:79:db:12:19:ed:56:d6:c4:18:
                    a6:ed:f4:65:d6:e5:de:59:08:f0:51:a5:77:6c:07:
                    49:fd:62:cd:58:2a:ad:a9:9c:fa:57:9c:69:32:45:
                    76:fe:8f:91:75:6c:d3:02:dc:45:e9:ab:d7:41:43:
                    66:fc:c7:9e:84:dc:67:aa:5e:e4:5f:4a:70:88:f9:
                    83:44:5e:ec:d3:0a:81:db:bb:1b:16:ae:36:4d:df:
                    e8:ec:57:13:ad:71:b1:f7:8f:72:81:60:8d:5b:ec:
                    36:02:ee:15:29:5b:10:57:24:0d:aa:84:a7:b2:62:
                    3a:4f:af:da:9f:d6:6d:ba:3c:f5:3e:1c:ed:e4:6e:
                    a1:35:40:5f:c0:a5:6c:28:a8:dd:0c:e4:76:9c:c8:
                    84:3a:e9:a5:0b:bf:50:1a:8a:07:84:d5:d1:a4:1d:
                    9a:3a:c3:37:b7:e0:05:96:76:26:9f:ca:c8:55:cd:
                    fe:82:50:82:a3:23:20:25:af:7e:8a:17:c2:8b:4f:
                    aa:bf:fb:b9:bf:62:3e:e7:14:ea:59:9c:e0:1c:4c:
                    fc:08:d1:03:cc:cb:ae:73:95:67:02:a7:d1:ec:57:
                    4a:dd:d4:4a:f0:46:d6:7a:13:2d:64:9b:5f:2a:6b:
                    fe:e8:48:e4:67:40:07:1f:13:08:ff:78:e2:22:86:
                    b8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8F:23:EB:FB:86:AC:E0:27:89:7A:6E:51:35:A1:8E:C0:04:F2:4A
            X509v3 Authority Key Identifier:
                keyid:C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:b0:f6:b8:93:de:ac:cb:98:bf:6f:07:cb:f5:35:73:10:d7:
         84:04:86:ca:43:06:00:78:b4:66:05:c5:a5:8b:52:0f:74:54:
         62:85:37:d4:1d:87:64:90:88:3d:f1:a1:88:ba:f3:43:f5:fb:
         e1:59:94:a1:61:3b:78:c4:2c:d4:c3:df:04:e4:39:73:84:58:
         9a:00:62:b4:ab:a0:ea:63:0f:ec:78:b6:32:01:d4:77:eb:bb:
         33:98:8e:cf:81:62:8a:42:ab:1f:f1:3c:af:2e:88:80:ee:9d:
         93:02:51:c3:57:73:ae:9d:1c:29:4e:bb:58:c3:37:1d:0b:58:
         74:07:a6:b7:44:d2:78:97:89:82:b9:06:62:94:d6:b7:59:79:
         01:ab:c4:b3:13:7d:1b:72:19:53:87:ec:1c:95:81:13:a0:33:
         16:b8:db:e8:b8:0b:3a:3e:10:9b:fc:50:9f:04:9e:68:44:ab:
         de:61:f2:6e:47:98:aa:0e:93:48:94:21:c3:af:52:ef:f1:f2:
         d1:35:5c:c2:3c:69:89:37:15:f1:b5:27:88:74:e4:2f:d1:ce:
         c1:53:6d:71:8e:33:c2:a1:0f:7a:03:96:dd:7b:c7:c6:55:cd:
         10:84:f3:84:26:ca:82:70:b2:13:ce:61:ae:a9:55:44:25:4d:
         b1:40:66:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:20 2025 by rpki-client