Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
File:                     A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json)
Hash identifier:          kUPzODv0j7cxYGxE104aagnuZqTCFfcyQbN0ofiPlNw=
Subject key identifier:   FC:12:58:CF:93:A1:7B:FD:4A:C8:79:85:EA:3D:FD:BC:EE:CD:D1:C1
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Certificate issuer:       /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial:       9BA3415CFA1B75050C99FD1677F2C8E51E48C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
Manifest number:          04D1
Signing time:             Fri 25 Jul 2025 13:47:06 +0000
Manifest this update:     Fri 25 Jul 2025 13:42:06 +0000
Manifest next update:     Sat 26 Jul 2025 16:27:06 +0000
Files and hashes:         1: 3134362e3234372e35312e302f32342d3234203d3e203234383531.roa (hash: zRn95fZoa98Dxgk18rTQZPg3Vz861tTnSVUdcy0yTb0=)
                          2: 3134362e3234372e35392e302f32342d3234203d3e203234383531.roa (hash: cISB3c/lX6ECxkwGaCM313qUlrkmfGXNHg9Sn5Duu/E=)
                          3: 3134362e3234372e36322e302f32342d3234203d3e203234383531.roa (hash: 3irJhAGcE48vEZNOxKTwKsy4d69RVyIL6ZEClAmlLA0=)
                          4: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: QsAQIZgWetrr6dfX2bI5lOTRaHr1QtXHhX9P+3Fu5x0=)
                          5: 3134362e3234372e34382e302f32332d3234203d3e203234383531.roa (hash: CYrx2Q8+pBHAyk1lGd5Mg9MkvR7v5zfpX8Vn/ABu+6Q=)
                          6: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: y4OGbSGooI8V9euRtHx6jpjRwWGZstdSARXhTQ70Yxg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 16:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9b:a3:41:5c:fa:1b:75:05:0c:99:fd:16:77:f2:c8:e5:1e:48:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
        Validity
            Not Before: Jul 25 13:42:06 2025 GMT
            Not After : Jul 26 16:27:06 2025 GMT
        Subject: CN=FC1258CF93A17BFD4AC87985EA3DFDBCEECDD1C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4f:b3:7c:87:b6:7b:4b:a4:5e:e5:af:77:cf:
                    3e:d8:b2:38:b1:23:a5:15:a2:a2:60:26:7e:c2:e0:
                    62:3a:df:84:49:94:84:c3:23:76:16:be:9f:4d:10:
                    5a:a9:6e:b9:e6:81:7d:10:df:e5:c6:c6:47:44:ab:
                    5d:64:b3:0b:ea:b2:43:14:65:8b:8e:50:c4:cd:d2:
                    5e:ac:45:b8:b0:41:a0:ea:a3:1c:77:18:c8:3b:79:
                    6d:15:99:57:07:a6:a8:99:01:30:6a:6b:4c:ad:62:
                    c1:9f:b3:32:ee:9d:97:64:5a:1a:d9:c4:43:43:2d:
                    22:d0:0b:a2:03:b5:9b:a8:97:b3:c6:2c:dc:18:8f:
                    0e:1d:1c:14:5a:7a:51:ac:75:94:f3:12:a5:b1:e7:
                    8d:3d:3c:37:21:e0:88:5e:79:9e:10:c2:46:16:e4:
                    09:ec:9e:7c:ea:5f:bd:da:85:c9:ae:ab:8e:ce:1d:
                    44:4a:d3:55:6e:eb:04:ad:67:e5:dd:52:3c:81:10:
                    75:fd:2a:f2:0f:cc:e3:7c:89:7b:72:1b:c4:09:e3:
                    72:e5:73:9f:9b:49:0c:ec:5c:71:bf:85:94:41:5e:
                    3f:71:f1:62:3f:b4:10:a9:5c:8f:7a:9f:ca:0c:0a:
                    08:8a:5e:eb:d5:a4:a5:a7:3e:cd:d8:11:d7:77:b4:
                    34:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:12:58:CF:93:A1:7B:FD:4A:C8:79:85:EA:3D:FD:BC:EE:CD:D1:C1
            X509v3 Authority Key Identifier:
                keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:53:2a:e4:ee:ca:cf:fa:e0:21:bb:20:1b:e8:7e:b4:70:d6:
         bc:a4:d6:f0:36:80:cf:52:62:ec:94:ef:61:29:ee:62:9b:1b:
         84:74:de:39:6a:ef:d2:5b:9e:ac:cc:80:43:5a:9e:06:a7:f5:
         5b:dd:f3:db:40:55:73:1a:d6:5d:83:04:19:14:93:4a:c7:73:
         52:f3:28:d7:f6:ad:20:e4:f3:79:f3:08:e5:31:f9:cd:92:46:
         9c:bf:97:41:6c:83:00:4b:87:0e:7d:3b:29:38:e5:f9:b4:f6:
         2f:1c:5f:ff:65:d7:75:31:6d:c8:dd:e3:16:a0:32:30:38:59:
         5a:1a:41:2e:6f:18:dd:5b:55:6c:5b:10:30:b6:2d:13:7e:9d:
         8e:a0:8b:65:19:61:71:0a:42:bf:cc:75:c3:49:98:50:ce:d3:
         e8:c9:7c:8f:d5:af:1c:1b:49:b9:93:99:78:09:80:45:28:53:
         cf:f7:c9:e0:d7:aa:b7:7e:78:9e:f3:55:75:ae:25:ec:0e:15:
         6a:00:92:02:94:b0:84:63:b0:20:fe:76:cb:73:ae:9d:3a:36:
         03:90:12:6b:98:c4:ad:ac:77:8a:9e:64:5f:27:2a:96:4d:3b:
         f8:f8:a2:9f:15:8b:31:04:01:bf:03:06:9b:e7:b0:80:f9:1d:
         95:c1:bf:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:51:32 2025 by rpki-client