Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
File:                     2615B626807D30988381C32656617AE6FD6638B6.mft (raw, json)
Hash identifier:          jl5PQ0I8mXcgBF853kNSKCs5RPr1PSAJ0Z0Ne0sZo/E=
Subject key identifier:   27:4B:4C:5A:93:62:57:2E:40:B4:B7:F5:E6:FF:35:66:64:B9:99:96
Authority key identifier: 26:15:B6:26:80:7D:30:98:83:81:C3:26:56:61:7A:E6:FD:66:38:B6
Certificate issuer:       /CN=2615b626807d30988381c32656617ae6fd6638b6
Certificate serial:       59C6A314494BB3B58969A7ED8B9C84FE5D225570
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
Manifest number:          39
Signing time:             Sun 19 Oct 2025 08:58:12 +0000
Manifest this update:     Sun 19 Oct 2025 08:53:12 +0000
Manifest next update:     Mon 20 Oct 2025 10:27:12 +0000
Files and hashes:         1: 2615B626807D30988381C32656617AE6FD6638B6.crl (hash: 1ePOeaTpa3/lLkuOmjs0f0M8eyA5+ZkYevG+0S7hk98=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c6:a3:14:49:4b:b3:b5:89:69:a7:ed:8b:9c:84:fe:5d:22:55:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2615b626807d30988381c32656617ae6fd6638b6
        Validity
            Not Before: Oct 19 08:53:12 2025 GMT
            Not After : Oct 20 10:27:12 2025 GMT
        Subject: CN=274B4C5A9362572E40B4B7F5E6FF356664B99996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7b:ad:fb:08:2b:66:a8:bc:b5:be:56:32:8d:
                    6f:13:0c:b4:de:0d:dd:52:3d:82:b0:8b:9d:0e:3e:
                    7e:65:88:39:76:3e:ed:e4:22:50:75:70:43:2d:20:
                    2b:cf:05:6d:3f:e4:49:92:23:d0:bb:b9:cf:c8:f6:
                    6a:53:f3:e1:10:38:58:7c:75:66:c8:ee:9f:7d:c1:
                    b4:18:8d:71:b6:b4:02:b1:38:44:5f:fc:3f:3d:8b:
                    3c:72:a7:d6:62:ff:49:40:6c:3a:a7:d6:10:7a:b7:
                    72:a9:63:67:c8:fa:97:a7:07:f7:d8:71:ff:a1:21:
                    49:c6:04:a9:32:5b:58:a5:32:ad:54:73:6d:bb:6c:
                    a8:f1:3e:c8:1a:e8:3d:27:92:83:b3:c1:77:e8:92:
                    1a:91:a7:4f:07:3f:ef:e0:b4:66:35:dc:61:58:1c:
                    6f:10:46:d2:94:4a:1e:b4:6f:70:92:cb:f7:ed:9d:
                    fb:07:9f:d3:52:81:74:33:eb:bf:08:8d:b6:1f:c7:
                    29:6f:7b:7e:17:8f:ca:64:88:90:77:f2:10:3f:ce:
                    a4:98:1e:fa:96:dc:1d:78:75:0f:3e:4d:38:da:69:
                    16:0f:74:b9:19:4e:ef:c9:89:93:15:67:01:c2:41:
                    31:6b:46:94:52:41:02:ed:a9:0f:5e:c6:de:63:21:
                    06:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4B:4C:5A:93:62:57:2E:40:B4:B7:F5:E6:FF:35:66:64:B9:99:96
            X509v3 Authority Key Identifier:
                keyid:26:15:B6:26:80:7D:30:98:83:81:C3:26:56:61:7A:E6:FD:66:38:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:b0:f1:f3:2a:22:0b:24:2f:21:81:36:1b:d2:82:d1:cb:74:
         f4:ca:cd:e0:0a:ad:7c:fa:be:4c:63:84:a5:72:c0:61:fe:6b:
         31:bf:cd:3c:8a:24:45:1b:8b:68:ec:96:f9:06:94:d0:d7:a3:
         be:da:1a:06:68:cf:dc:96:b3:ef:bd:42:91:e7:6e:72:6a:52:
         fe:e5:7b:2a:31:40:ac:d1:49:27:89:10:87:1f:e2:ac:c4:7f:
         f4:f9:d0:e8:ef:fe:91:6d:13:bb:21:a0:f0:0e:d0:a5:b6:a2:
         3a:87:e5:e3:93:3d:ca:3f:0b:7a:dd:62:e0:48:d6:83:fc:e7:
         09:89:86:29:b3:88:9c:4e:b4:60:5e:1a:ae:c4:77:9e:b0:50:
         37:70:e5:6e:79:27:23:dc:6c:b7:21:8d:11:3c:2c:12:c3:fe:
         97:ec:29:53:27:4e:de:0b:70:af:28:3f:d2:f2:97:8c:fb:59:
         0f:53:22:ba:5d:14:13:6e:9a:3b:ae:cd:37:af:9d:6c:78:45:
         cd:ef:9a:a0:2d:b8:d8:66:bc:9f:ae:e6:3c:47:15:ae:4f:84:
         b6:ad:d3:31:c5:af:0a:0d:2f:6c:58:f6:75:52:5e:24:3b:c4:
         db:d5:6c:7c:2c:e3:41:b8:6e:4f:d9:f0:ad:75:99:3b:aa:86:
         b2:37:32:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:49 2025 by rpki-client