Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
File:                     C678CC0A7BAA95891441AD80954491DFED87D33A.mft (raw, json)
Hash identifier:          RLlxJlZxJJNxl8pje2+n6Tf4GkLhN2dk+mYkqqlaEGE=
Subject key identifier:   2C:37:79:E9:71:CF:0F:72:81:F1:C9:24:EE:35:75:5D:74:1D:BF:99
Authority key identifier: C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
Certificate issuer:       /CN=c678cc0a7baa95891441ad80954491dfed87d33a
Certificate serial:       1CB8B7BAEF008711BBBCFDA55494D2CEB2B4830F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
Manifest number:          02D7
Signing time:             Sun 19 Oct 2025 15:23:16 +0000
Manifest this update:     Sun 19 Oct 2025 15:18:16 +0000
Manifest next update:     Mon 20 Oct 2025 17:44:16 +0000
Files and hashes:         1: C678CC0A7BAA95891441AD80954491DFED87D33A.crl (hash: 8+7Y1Xx6dH9rf5ACu6ZrXQsyJALvcR/bA8bA/KKH2Yc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b8:b7:ba:ef:00:87:11:bb:bc:fd:a5:54:94:d2:ce:b2:b4:83:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c678cc0a7baa95891441ad80954491dfed87d33a
        Validity
            Not Before: Oct 19 15:18:16 2025 GMT
            Not After : Oct 20 17:44:16 2025 GMT
        Subject: CN=2C3779E971CF0F7281F1C924EE35755D741DBF99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2f:3e:5c:ea:ab:32:13:49:92:b2:ba:38:ae:
                    37:bc:40:26:d8:b4:35:e4:38:19:3e:3f:a3:5f:9a:
                    75:96:5e:40:ad:a8:91:dd:89:8f:a1:43:f3:6a:30:
                    d0:ad:a8:37:52:f6:50:58:7c:52:19:24:41:7a:97:
                    fd:ef:f2:79:06:aa:85:78:33:8e:6e:eb:fa:97:46:
                    30:80:e4:2b:09:ad:0d:a2:d6:7b:28:ee:17:7b:d8:
                    b2:f1:41:3f:0a:4f:86:ee:54:29:c9:f6:61:4e:a2:
                    6e:a1:85:54:87:88:4c:72:e1:16:d0:f9:93:28:0c:
                    40:27:1f:83:90:04:06:ce:4c:86:a4:2d:12:5b:b7:
                    65:a7:15:f8:38:09:e7:ac:56:58:28:2f:6d:e4:1e:
                    11:8f:30:4e:2c:52:5f:cb:13:1a:ef:f7:fa:1d:fe:
                    e2:4e:48:c7:4c:81:28:cf:4e:f4:fd:e2:9e:7e:82:
                    4d:7a:65:02:0f:53:29:a0:cd:48:96:99:24:11:ab:
                    95:83:96:bf:c2:5f:37:0e:88:93:c6:23:e0:3d:92:
                    ac:47:cb:b0:a5:20:94:d0:6e:22:d5:ad:ca:db:a9:
                    a5:37:dd:c7:9d:96:41:0f:5e:f3:32:1e:62:2b:58:
                    3c:f0:d4:a2:11:16:aa:44:11:81:47:a5:fb:1f:94:
                    6f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:37:79:E9:71:CF:0F:72:81:F1:C9:24:EE:35:75:5D:74:1D:BF:99
            X509v3 Authority Key Identifier:
                keyid:C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:f7:2c:73:66:58:5a:fc:c6:26:9e:d8:d3:3f:07:58:e0:10:
         09:5a:0b:14:a9:c8:af:73:f0:12:dc:54:d3:7c:be:bb:7c:26:
         4d:c5:e9:23:cf:9e:e1:49:35:67:0e:d0:3b:28:31:f7:3a:37:
         c8:90:7d:82:11:a4:fa:50:e7:78:41:26:de:ca:11:58:15:70:
         6f:66:89:f5:ad:bc:b3:1e:fd:d1:19:bd:c7:94:f3:22:9c:70:
         6a:a6:f8:e8:a7:1a:93:38:8a:9b:dc:c8:87:ce:09:cb:8f:62:
         0b:70:8a:f5:84:c1:5c:5c:d5:18:14:2d:f9:d0:9d:d8:46:fe:
         ff:b7:da:99:9d:40:b1:50:9a:68:ce:14:a2:53:f1:9b:0b:88:
         ba:d3:5a:8e:a2:09:55:fd:9d:64:d9:cb:57:ef:4d:f5:ad:d9:
         e1:32:e9:c9:03:c2:ff:29:63:1f:eb:ce:02:b0:e4:21:5e:e2:
         b9:b9:4e:69:df:c8:6d:5b:8c:c4:81:b9:07:41:ed:33:3d:91:
         24:19:5b:dc:a6:97:ac:78:76:4f:ad:4b:97:22:1c:d2:b3:5a:
         b8:80:5f:70:8a:9e:67:54:31:ab:2a:83:d9:cd:a8:db:b9:42:
         8f:69:64:9f:9f:00:b9:58:dc:39:6b:fb:76:b0:c2:c7:23:80:
         31:39:db:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:44 2025 by rpki-client