Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
File:                     2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft (raw, json)
Hash identifier:          6KOSkTJGWLWEzOC2iwz3N2A4SRs8WFsZ6MnSjKNuEks=
Subject key identifier:   59:8F:76:23:B3:9C:E4:7C:3E:2B:A1:82:E6:79:9A:DF:4D:B2:A5:68
Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
Certificate issuer:       /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Certificate serial:       247E9FFE4B2185425D2CC9AA55F80CE1AF035497
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
Manifest number:          0392
Signing time:             Sat 23 Aug 2025 05:42:36 +0000
Manifest this update:     Sat 23 Aug 2025 05:37:36 +0000
Manifest next update:     Sun 24 Aug 2025 07:34:36 +0000
Files and hashes:         1: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl (hash: baMDiR+JOZMNgEHM2MBJdmI6n+1lRl+2vxkkL58ZJaw=)
                          2: AS205329.asa (hash: rnFSy2Ogy9jYcDdCxOTMzK4fFu0RDkr/z+mdyUtSm/w=)
                          3: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (hash: FrtXdPIEsvn1iYUedtjAO8L9S5GjDxa5ywOB8CuN7A0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:7e:9f:fe:4b:21:85:42:5d:2c:c9:aa:55:f8:0c:e1:af:03:54:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
        Validity
            Not Before: Aug 23 05:37:36 2025 GMT
            Not After : Aug 24 07:34:36 2025 GMT
        Subject: CN=598F7623B39CE47C3E2BA182E6799ADF4DB2A568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:28:b0:0e:99:b7:24:48:37:61:af:7f:42:69:
                    a9:5b:d1:40:8e:8e:e6:c5:c3:e0:24:72:0c:e2:62:
                    24:91:61:74:36:87:ce:b6:00:55:92:d0:fb:97:34:
                    cc:d7:61:f5:6c:6c:49:3c:76:f8:0d:bd:3c:01:4e:
                    d3:5a:07:d1:8f:8f:52:05:9b:7e:84:4d:91:ae:78:
                    71:aa:d3:5f:46:87:8f:11:3d:9d:14:eb:7b:6c:af:
                    5a:f3:e5:0d:b2:90:96:92:6d:c9:5d:8c:73:06:d9:
                    58:fb:92:2b:f5:99:dc:89:36:08:76:a9:fa:6e:4e:
                    63:0a:30:71:db:98:73:6f:b6:4f:e6:5f:69:e2:0f:
                    bb:dd:f3:8c:41:52:58:6c:b1:d2:fb:6d:06:49:0f:
                    55:90:51:07:a7:4f:93:ae:70:a9:5f:bb:21:f1:66:
                    51:67:26:6c:0f:7b:b6:cb:01:44:64:fe:f2:c1:78:
                    fc:e0:29:a9:80:09:f1:a1:46:97:14:1f:6d:0d:35:
                    dd:b2:10:e1:3c:83:38:71:f6:91:62:5f:d9:9a:a2:
                    15:5e:53:77:ba:a9:b1:fa:3f:30:99:9f:b2:e0:db:
                    67:d1:22:4f:ff:c4:b4:12:3e:62:a2:d3:36:81:df:
                    37:e0:6b:de:50:59:94:2f:8d:8d:5f:72:d0:21:c7:
                    5b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8F:76:23:B3:9C:E4:7C:3E:2B:A1:82:E6:79:9A:DF:4D:B2:A5:68
            X509v3 Authority Key Identifier:
                keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f1:e3:f1:92:c8:d2:ca:a3:c4:a5:ca:3c:c9:7c:4e:6f:8a:
         ac:c9:1e:72:f2:56:cb:aa:26:63:54:56:90:a1:d4:59:f4:31:
         ed:fb:da:75:fb:15:d1:ad:18:bc:29:62:ac:9b:9a:e4:69:9e:
         cb:7f:39:05:78:52:44:e1:07:cd:10:3e:22:16:1e:55:18:c2:
         6c:6f:9f:e4:15:7d:c0:c0:a1:7e:aa:f5:5a:48:11:8d:da:1d:
         80:c0:73:de:96:77:e5:7b:27:d2:5e:06:7a:d2:a2:a0:f4:8a:
         81:0a:6d:39:cc:c4:9b:7b:f6:3f:2f:19:c1:22:62:ae:e8:77:
         23:03:b0:06:d8:f4:d6:fc:ea:05:c3:40:39:f6:6e:f8:2b:6b:
         98:ea:d8:c4:92:d1:bd:1c:26:be:b4:5e:41:e8:33:f0:01:eb:
         d5:89:d4:41:57:16:e1:b1:93:e9:7f:10:52:dd:02:f5:8d:4b:
         22:fc:a4:f6:8f:b3:48:bd:f8:30:a2:3c:a2:99:e4:c1:99:ba:
         8d:b7:71:f5:9a:22:49:e1:9d:8e:f2:4c:6c:a2:bf:14:29:42:
         42:d6:cc:ce:07:ed:ff:37:84:78:82:35:71:6c:1b:ba:b6:96:
         44:6a:84:42:e5:72:2b:3c:5b:ab:9b:7b:a9:36:24:a1:9e:79:
         7f:d8:22:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:04:25 2025 by rpki-client