Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
File:                     578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft (raw, json)
Hash identifier:          jhL76Z+oNNbqqTr0QMBr5rFEU9eGu0SjKmJhS1bOVfo=
Subject key identifier:   4E:69:1B:7E:BB:4B:34:05:AD:C7:A5:70:81:4F:39:F1:49:D2:BB:CD
Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3
Certificate issuer:       /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
Certificate serial:       77AEA71D34431F2F95C9A7649D40A23450101DAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
Manifest number:          014F
Signing time:             Sun 19 Oct 2025 10:38:17 +0000
Manifest this update:     Sun 19 Oct 2025 10:33:17 +0000
Manifest next update:     Mon 20 Oct 2025 14:32:17 +0000
Files and hashes:         1: 323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa (hash: 9+L5QD9C8ye40Ikj2zBEBBChEOO2tsV/W1In9gyAruM=)
                          2: AS215296.asa (hash: ZUhznpJKsAa9LaDOPMe8wN6G79cK71SOYf6WHfqiJOY=)
                          3: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl (hash: ej4VXEvxg12dnW8+9bUtDujafa6EWeKtwaALzDQh7rs=)
                          4: 3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa (hash: 54w2F3M9c9ZMYqej/uVTYoc9lVaBw0QpLSZEW7mlB7o=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ae:a7:1d:34:43:1f:2f:95:c9:a7:64:9d:40:a2:34:50:10:1d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
        Validity
            Not Before: Oct 19 10:33:17 2025 GMT
            Not After : Oct 20 14:32:17 2025 GMT
        Subject: CN=4E691B7EBB4B3405ADC7A570814F39F149D2BBCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f3:1f:6d:7e:fa:57:1e:89:37:6a:c8:3a:04:
                    4e:d2:d4:b0:d2:bc:55:b1:f7:f3:8e:a8:24:e7:04:
                    ff:aa:8f:2d:1a:4d:d8:4a:28:ac:30:89:e8:ff:5e:
                    2e:19:53:8b:4d:dd:82:61:f0:54:68:e5:02:19:5d:
                    37:cd:fc:54:f6:84:3a:b6:10:e6:1d:4d:ae:f7:34:
                    bb:6d:12:b2:75:51:6b:49:77:4a:5f:ab:61:7e:38:
                    6a:08:56:17:85:78:2a:a7:e5:a5:38:6e:e7:6a:68:
                    97:14:67:65:13:6b:cb:10:d0:0a:35:2e:a1:48:05:
                    90:da:29:ee:0e:44:93:f4:fa:07:62:4c:88:33:d5:
                    43:b2:3f:8f:f1:e0:85:48:68:f2:ce:de:5a:59:67:
                    ca:dc:46:85:54:47:87:e3:a3:55:9f:23:e0:ca:d4:
                    b6:90:49:d2:9c:b0:52:4e:b7:83:df:35:51:a7:c3:
                    1d:24:4c:37:02:5b:2e:30:b2:56:b9:97:1f:05:16:
                    88:a8:8c:03:6d:69:bc:ed:b3:5f:52:62:6e:ee:4c:
                    5b:0f:8e:1d:66:e3:85:bc:22:0e:7d:16:75:a5:2d:
                    1a:59:33:5a:ca:7d:5b:66:ca:ff:58:f4:12:1e:56:
                    aa:cc:c1:a5:dd:49:a4:70:cc:7d:c0:82:95:8c:fa:
                    6c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:69:1B:7E:BB:4B:34:05:AD:C7:A5:70:81:4F:39:F1:49:D2:BB:CD
            X509v3 Authority Key Identifier:
                keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:24:b5:3c:35:4e:01:ed:82:cc:fc:68:a5:fa:34:8b:a5:6a:
         b3:3c:41:5e:70:94:6a:80:14:48:ac:69:8d:b2:ce:09:72:ec:
         7a:3a:87:26:62:ea:e2:af:54:d6:7d:b8:5e:f4:90:de:73:c8:
         6b:a3:fb:48:08:24:c8:cc:f5:7b:a6:00:3a:b1:4d:cd:7c:2c:
         fd:d2:ed:84:1e:d2:1b:06:ad:6b:6e:ff:ca:74:92:e3:a1:a8:
         56:6e:c5:ab:5e:fd:e1:e1:37:b8:c1:3b:ec:a5:ae:4e:a8:e5:
         9b:5f:c8:14:5d:34:51:d4:b3:ac:0b:a6:30:5c:3c:5a:31:44:
         86:7b:24:e3:6d:d2:3a:da:c6:87:fe:bc:0e:74:80:7a:2b:f7:
         54:ca:59:30:eb:df:56:93:7f:45:db:0a:20:56:50:9b:97:6c:
         f5:5f:db:29:5a:b6:0a:23:f4:27:4b:99:38:14:f0:f1:66:3d:
         d3:06:aa:4c:87:ae:40:af:b8:74:26:da:ec:9e:70:16:7b:d3:
         1c:0b:e8:b7:9b:ff:62:cf:c3:73:61:e1:f9:5b:8d:e8:d6:82:
         1e:c1:b1:cb:00:a7:16:12:68:88:bd:30:04:68:db:10:be:56:
         d4:d2:47:1d:bd:9f:b6:64:82:83:47:ed:54:b8:88:44:d5:c3:
         24:0b:71:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:47 2025 by rpki-client