Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
File:                     C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft (raw, json)
Hash identifier:          6kjWvTeXPDQa5u6jOALPrdzP7IviqCPnRmuwLKmdS3I=
Subject key identifier:   0D:D9:2F:E4:4A:C0:CE:45:05:71:01:8B:38:EA:66:B7:83:62:9D:75
Authority key identifier: C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC
Certificate issuer:       /CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
Certificate serial:       22BC3DF964A08791B288CCCEEB40871D7252DA0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
Manifest number:          01FA
Signing time:             Sat 28 Jun 2025 14:30:06 +0000
Manifest this update:     Sat 28 Jun 2025 14:25:06 +0000
Manifest next update:     Mon 30 Jun 2025 15:57:06 +0000
Files and hashes:         1: C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl (hash: sFg30h9a4EzQfIrvToKpKfBIS3qQz04qeEECf5IC4Ho=)
                          2: AS214498.asa (hash: zpKZ3xz417Eo2EM0m+2UqZcFmQBYd5gW7ig2wKkC7zE=)
                          3: AS213525.asa (hash: seEk90bRp86U4w9lX1c0usnGxJgino5umQZtHO6fll4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:bc:3d:f9:64:a0:87:91:b2:88:cc:ce:eb:40:87:1d:72:52:da:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
        Validity
            Not Before: Jun 28 14:25:06 2025 GMT
            Not After : Jun 30 15:57:06 2025 GMT
        Subject: CN=0DD92FE44AC0CE450571018B38EA66B783629D75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:6a:d6:8c:7a:3c:43:b2:97:ad:37:aa:31:
                    0d:6b:e3:14:b0:43:dd:11:ef:dd:75:77:13:c3:7c:
                    6e:f4:71:75:a4:4d:d7:cf:82:22:1b:d3:c1:55:e5:
                    da:bb:73:0c:a2:32:e1:99:77:43:8f:f6:3f:95:51:
                    ff:b3:7b:3f:24:19:8a:4c:91:b0:11:ce:eb:52:0d:
                    13:ff:9b:57:00:dc:8d:c6:e8:54:de:3d:da:3f:13:
                    70:c5:6d:a2:2b:d2:c5:8c:54:9b:1d:01:fd:8c:f4:
                    32:af:ad:52:c2:02:d6:08:27:b4:91:10:ed:3d:f6:
                    e6:c2:a3:97:d8:e6:7f:9e:7e:f7:aa:a1:85:ac:65:
                    59:78:4b:67:8b:19:0f:f9:38:fa:c1:38:6d:ef:e9:
                    a6:d0:7a:2f:d7:e0:56:fa:a0:de:59:e6:79:22:c5:
                    bd:b3:c5:2b:b7:53:80:4f:ea:c0:31:99:6b:c3:aa:
                    69:d6:38:4f:44:89:0b:63:f3:97:ae:64:28:ad:ed:
                    19:1a:9a:98:14:e9:ea:49:65:6f:94:de:bb:5f:1c:
                    00:3c:a7:b0:b2:9c:77:e7:8b:4f:08:50:d6:0b:85:
                    1f:5d:00:04:27:8c:5f:d1:87:a3:e4:7d:01:23:b9:
                    11:ef:35:23:90:ad:8a:49:f4:0a:fb:53:a8:47:a2:
                    fa:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D9:2F:E4:4A:C0:CE:45:05:71:01:8B:38:EA:66:B7:83:62:9D:75
            X509v3 Authority Key Identifier:
                keyid:C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c1:6f:65:ce:2f:a2:02:59:09:3b:88:40:ec:e2:3b:9d:5d:
         28:a3:23:1c:d6:08:d8:42:11:ac:a3:ad:23:0f:8c:69:98:cc:
         7b:9c:55:b5:7b:cf:86:2f:b3:f8:78:a5:08:0e:9d:09:ca:27:
         b3:b6:8f:48:c4:1f:63:e0:d4:56:fd:48:ea:2c:68:d6:0b:8e:
         0c:12:d4:6c:af:e2:86:e4:0d:94:73:a2:de:97:f8:64:8a:46:
         03:b3:4e:82:b2:dd:40:dd:68:67:23:9f:ab:fc:5b:b3:af:04:
         e6:58:3d:ec:3e:ee:c9:a8:4c:7d:d0:f1:93:12:92:13:51:1a:
         66:d7:70:b9:45:b1:6f:76:24:c9:d0:de:c6:e2:65:79:2b:1b:
         74:0f:5e:e7:3d:35:3c:28:88:34:a5:34:9b:88:93:ec:fe:28:
         5e:4b:c4:32:55:e6:a8:3e:67:fd:02:20:a2:2e:63:70:81:8a:
         8e:ca:2e:d9:91:31:e6:b2:f8:5f:d5:69:d2:49:57:a9:46:f5:
         48:19:ce:5c:b4:8c:f5:19:31:0e:98:fa:c7:9a:93:a1:df:a4:
         7f:f5:50:26:73:94:ce:ab:26:ed:6b:48:62:58:39:62:87:fb:
         bd:67:af:25:30:a0:bf:66:0b:7d:21:d2:08:08:a1:9e:6e:63:
         e5:22:d4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:37 2025 by rpki-client