Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
File:                     2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft (raw, json)
Hash identifier:          x64m4obTNnOfbmWS2x1ftw36i2qhZNv/UvlOHysq4UA=
Subject key identifier:   82:86:F2:A7:DE:46:D6:16:3F:B8:3F:08:64:19:5C:EB:90:F1:D2:0B
Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
Certificate issuer:       /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Certificate serial:       3385993008F57285ED9FE14176B2CC95FE3F2E2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
Manifest number:          03DF
Signing time:             Mon 20 Oct 2025 02:55:25 +0000
Manifest this update:     Mon 20 Oct 2025 02:50:25 +0000
Manifest next update:     Tue 21 Oct 2025 03:23:25 +0000
Files and hashes:         1: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (hash: FrtXdPIEsvn1iYUedtjAO8L9S5GjDxa5ywOB8CuN7A0=)
                          2: AS205329.asa (hash: VGL8fNaLY3qFu9mP5r7NvYdgKqN6s2IJxTCOZNeTahk=)
                          3: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl (hash: 0sGFM37cDCc5RLjAW3rnwcwI7IF/cuzsuD/N+qTe+es=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 03:23:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:85:99:30:08:f5:72:85:ed:9f:e1:41:76:b2:cc:95:fe:3f:2e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
        Validity
            Not Before: Oct 20 02:50:25 2025 GMT
            Not After : Oct 21 03:23:25 2025 GMT
        Subject: CN=8286F2A7DE46D6163FB83F0864195CEB90F1D20B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4d:d6:be:88:df:65:ba:89:a7:de:0d:47:e3:
                    40:54:82:bd:8b:84:f7:a2:d4:1a:02:2e:c2:0e:6a:
                    83:9e:5c:22:d5:2e:0c:cf:fb:56:c0:3d:5e:86:f4:
                    58:45:f2:0f:53:f6:cc:56:1e:16:3f:10:64:d5:4f:
                    d8:57:c6:6a:94:e2:ac:c2:39:15:ee:95:f3:a3:b6:
                    1a:5e:1c:26:e8:b0:96:eb:fe:ea:18:fe:09:a0:af:
                    25:af:ad:5f:39:e8:7d:df:64:99:9e:16:e4:80:38:
                    6a:79:16:a7:15:ac:73:28:37:bc:4a:31:b0:15:96:
                    38:c2:d0:2d:aa:db:59:76:ab:99:f7:72:63:88:27:
                    9b:df:23:a3:ad:2e:bd:be:c2:24:a8:40:31:af:ec:
                    39:6c:6c:dd:11:d9:54:16:11:cc:0a:2a:18:fc:16:
                    3f:3c:cb:03:59:ef:85:24:a4:41:ea:c5:05:9c:e0:
                    53:d9:58:8e:a2:c1:96:f2:73:ea:6a:a9:c2:69:11:
                    6b:92:76:6a:09:d1:30:63:5a:95:25:e7:2e:ba:34:
                    3b:c7:48:41:ea:49:d9:b4:94:9b:d5:3a:32:d5:dc:
                    17:e0:56:d2:6d:6f:8b:dc:2e:54:4d:14:e6:97:55:
                    ad:d3:30:8c:78:b3:fe:cd:25:2d:47:68:a6:a4:4f:
                    7c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:86:F2:A7:DE:46:D6:16:3F:B8:3F:08:64:19:5C:EB:90:F1:D2:0B
            X509v3 Authority Key Identifier:
                keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a6:f8:92:b5:16:3c:02:9a:8a:be:34:92:c3:c1:49:e2:0a:
         8a:f0:24:10:28:c6:80:0c:be:39:a4:a8:de:b0:f4:16:6a:75:
         2a:93:33:db:89:95:48:f9:fb:52:ea:60:0b:0f:56:ae:a1:63:
         38:50:f6:83:b5:03:d0:a4:80:84:1e:3d:24:51:70:07:f9:5c:
         4d:87:4b:e1:30:c1:02:33:44:40:47:f4:c7:77:fb:72:5f:80:
         d7:53:3c:f5:bc:b0:d5:c9:3f:98:ff:32:49:67:22:9d:0e:6b:
         84:36:74:14:3b:6c:6f:28:af:4c:f6:5f:2c:d9:3a:20:27:4c:
         14:36:7e:9b:c8:59:9c:f1:77:3b:99:53:25:6d:64:25:30:6b:
         33:ca:18:cf:1f:2a:5b:e8:3c:5e:49:90:8f:29:28:03:31:d5:
         51:1f:39:02:18:59:f1:9a:72:b9:50:42:db:00:ee:52:97:78:
         8d:a9:e6:da:bd:49:36:af:4e:a5:fd:6f:07:14:f1:a7:13:e6:
         18:7d:72:18:ee:8f:11:dd:a8:b6:9c:b0:ef:b3:7d:91:cb:56:
         f2:0b:a8:c5:02:03:d9:32:fd:22:d8:7c:aa:38:b7:bf:2c:67:
         85:57:a9:8d:0c:85:72:1d:00:b3:5c:2b:d3:dd:45:d2:19:11:
         ce:34:f4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:16:16 2025 by rpki-client