Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
File:                     7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft (raw, json)
Hash identifier:          pE1KQ0gIUjWVGIKNOB92KVkZnw5Jl3s0sYCZ3gJzv8k=
Subject key identifier:   12:5F:E4:1A:7B:55:F9:84:92:6A:E1:7C:F8:39:FB:4F:69:E3:F8:B0
Authority key identifier: 7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
Certificate issuer:       /CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Certificate serial:       57C95DD06B83C51C81945746930548DF27A37D14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
Manifest number:          01B5
Signing time:             Sun 19 Oct 2025 02:06:25 +0000
Manifest this update:     Sun 19 Oct 2025 02:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 04:12:25 +0000
Files and hashes:         1: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl (hash: sIkNV6wLaO8BH60yw4hr97Jf+GsUOtg82D7zuoCs2tw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c9:5d:d0:6b:83:c5:1c:81:94:57:46:93:05:48:df:27:a3:7d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
        Validity
            Not Before: Oct 19 02:01:25 2025 GMT
            Not After : Oct 20 04:12:25 2025 GMT
        Subject: CN=125FE41A7B55F984926AE17CF839FB4F69E3F8B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:39:9f:76:0d:63:cd:52:98:ec:10:7d:2d:07:
                    f6:f8:c9:46:9a:61:a4:40:1e:55:f3:7d:2a:65:ba:
                    a6:53:ec:45:33:4c:3a:f0:a2:2b:00:e9:e3:31:fc:
                    62:c3:ec:c7:ab:27:17:48:06:ab:a7:21:28:76:4f:
                    f5:cc:16:4b:53:fc:e0:59:77:be:d4:7c:d5:92:96:
                    60:90:3d:88:4e:d1:3d:a4:75:57:c1:b3:36:14:a8:
                    7f:81:5e:73:50:89:a1:ba:1e:0f:e4:83:be:6b:26:
                    75:8a:0e:26:38:8e:09:a7:58:5b:3f:ea:ea:f7:92:
                    5d:44:ac:dd:80:57:48:6c:0c:eb:8b:74:90:58:14:
                    9d:4a:31:51:20:61:12:c3:9d:00:ae:77:15:73:ff:
                    0b:83:5d:39:dd:e6:a4:d9:d0:08:fa:b1:a9:45:58:
                    f1:6a:6b:11:19:4c:c9:6f:44:f1:02:6d:a5:60:84:
                    a3:a5:0c:3c:e5:19:8f:8a:0a:4f:11:0a:3e:26:fd:
                    ef:3a:d2:2b:cc:7e:3d:53:09:17:ab:e0:af:8b:a1:
                    8b:b5:e0:f6:25:f6:fd:51:06:02:55:6b:5b:8b:9e:
                    3d:dc:4c:f9:7d:23:85:24:de:e6:c7:29:30:27:bd:
                    69:bb:2e:0a:a6:9e:9e:cd:70:3e:28:fc:5d:ad:17:
                    73:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5F:E4:1A:7B:55:F9:84:92:6A:E1:7C:F8:39:FB:4F:69:E3:F8:B0
            X509v3 Authority Key Identifier:
                keyid:7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:09:2b:71:0c:5f:07:74:9f:8e:a7:1a:33:a2:c1:2c:ad:e9:
         73:df:74:2f:4d:39:73:43:3f:0b:94:0b:7f:3b:87:ae:be:ef:
         08:58:c8:54:38:f4:2e:88:d8:d3:45:c4:eb:75:41:a8:6d:f9:
         8e:0c:aa:bb:ab:61:35:9c:69:9e:03:1a:c0:29:f2:95:b2:9c:
         2e:fa:5f:51:27:1c:a8:8c:f0:78:b0:d2:f2:c4:a8:de:ed:3b:
         10:00:67:fe:ed:7b:08:ab:67:b3:c1:46:5d:73:12:7c:3e:db:
         84:90:04:a7:d0:72:8c:87:f1:98:46:11:55:3d:96:eb:be:9d:
         bd:f9:26:0b:50:bb:de:51:b0:98:54:cd:ca:a4:f1:c3:7b:3f:
         f8:b6:8e:48:07:e7:15:85:14:4d:9f:11:b6:42:70:dd:43:68:
         57:a4:ea:f5:09:47:01:cc:1c:96:18:1d:6b:ec:52:82:7c:72:
         e1:ef:ad:26:39:e0:c6:73:59:04:08:c8:a6:dc:18:64:b4:01:
         f8:32:4e:9f:a5:20:b5:26:b7:1f:04:48:5a:b7:c7:7c:79:a6:
         1d:26:42:49:bc:38:7a:d3:bf:15:24:a1:02:97:11:0a:f1:09:
         20:2c:d7:16:ae:66:42:13:f2:c0:b9:71:fb:c6:c5:0a:fd:5d:
         bc:e5:52:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:41 2025 by rpki-client