Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
File:                     7D7059638411E3231E759E74A813BF9376209E77.mft (raw, json)
Hash identifier:          NquiGNGKs+uI5rIQ3aGTBxjvo6hMpqar2/YHK/iXU0Q=
Subject key identifier:   38:12:36:8B:E7:82:72:6E:B5:E3:9E:62:08:65:3A:C4:89:4C:EA:13
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Certificate issuer:       /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial:       0A31F2746DD1BDF41B2C202D6384DDF9DE93CD51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
Manifest number:          01EF
Signing time:             Sat 23 Aug 2025 01:04:17 +0000
Manifest this update:     Sat 23 Aug 2025 00:59:17 +0000
Manifest next update:     Sun 24 Aug 2025 01:32:17 +0000
Files and hashes:         1: AS215849.asa (hash: WRilh/6hJb7kAkUd7i3j3vQPKdOIGwVbb9ZLfAC7rKQ=)
                          2: 7D7059638411E3231E759E74A813BF9376209E77.crl (hash: YZ15tZ/sIKYicjY7NX6aAsDpNKtkLDsh4HDrvUEsZ3M=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:31:f2:74:6d:d1:bd:f4:1b:2c:20:2d:63:84:dd:f9:de:93:cd:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
        Validity
            Not Before: Aug 23 00:59:17 2025 GMT
            Not After : Aug 24 01:32:17 2025 GMT
        Subject: CN=3812368BE782726EB5E39E6208653AC4894CEA13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:61:bb:6b:70:3e:9f:fa:26:f2:7e:cc:24:08:
                    b0:4c:12:8f:c3:a6:f4:28:c0:c2:d4:0f:5a:26:5b:
                    0e:b5:63:b5:f9:f1:97:49:c0:6b:1f:f1:64:4b:55:
                    2b:43:fe:c1:9c:41:9f:0e:b5:27:39:19:17:e5:5e:
                    7d:6b:30:a0:70:30:68:d9:21:83:b4:46:6f:03:80:
                    dd:b3:f1:1f:c9:e1:5a:a8:7c:4d:22:c6:26:0a:87:
                    3c:1c:32:55:60:ba:f8:6c:9a:bc:cb:50:8d:20:47:
                    db:11:ca:85:5a:e5:9a:aa:11:3f:6e:61:b0:6d:78:
                    ab:e4:ac:bc:f3:24:c4:0a:40:97:fa:41:71:41:22:
                    78:0e:2c:e8:63:63:31:56:7c:b0:d2:c6:d2:e3:c6:
                    78:b4:7b:43:33:15:6a:95:40:d8:3c:af:5d:3f:79:
                    e0:0a:6a:53:0f:68:85:d7:87:9e:9b:ab:9e:f6:2f:
                    35:1a:c5:9b:db:c4:a1:09:64:e1:9c:ee:9b:20:23:
                    f5:b3:b2:43:99:f8:f6:76:09:78:9b:e1:d1:0f:d4:
                    67:f5:eb:2b:1d:cc:4a:8f:b5:5c:d0:ec:f1:ce:e6:
                    12:58:eb:b4:84:41:54:ea:5f:70:0a:ab:1d:6b:e8:
                    f1:6f:2a:03:65:45:2f:8a:d3:94:55:ef:2e:3c:45:
                    75:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:12:36:8B:E7:82:72:6E:B5:E3:9E:62:08:65:3A:C4:89:4C:EA:13
            X509v3 Authority Key Identifier:
                keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b8:8b:75:5c:cc:eb:a7:20:b1:b8:09:59:45:64:0d:bb:db:
         d0:fe:aa:f8:0b:71:35:e0:6e:ed:dd:4c:05:f7:dd:a2:f4:a4:
         19:ae:5f:02:d9:95:01:7e:35:be:24:d8:33:49:dd:03:b2:68:
         00:d3:6b:76:0b:8e:50:f4:60:4a:27:13:ba:2e:29:d9:41:64:
         aa:32:89:99:58:73:9a:f6:e4:0c:1a:88:24:3a:95:e1:c8:a6:
         36:31:dc:34:45:e2:bc:bb:9d:3a:36:91:85:37:cd:fe:87:88:
         b1:10:a8:3f:66:88:67:81:5b:a0:74:24:f7:70:2b:4b:74:2b:
         cb:c9:76:b7:a5:72:43:f1:68:94:e0:2d:be:6a:ef:15:1d:cb:
         15:52:38:78:f5:55:e1:c6:05:80:04:9b:4d:37:91:3b:73:97:
         97:44:47:31:68:e2:9b:27:5b:f2:c9:df:95:73:b6:cf:cb:65:
         80:85:28:c7:f2:d8:92:59:fb:df:e1:2e:a3:e0:73:9d:c0:39:
         d3:ce:9a:ac:c0:d4:58:7b:3d:a7:72:12:cc:dd:d5:7d:bd:56:
         a3:e7:17:66:c9:17:46:d1:2b:ae:86:b9:11:91:5a:3c:2f:68:
         cf:12:07:6b:e1:c7:e0:ef:a2:8d:6c:16:b4:cf:3d:7f:1c:3c:
         03:3f:c1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:39 2025 by rpki-client