Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
File:                     6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft (raw, json)
Hash identifier:          2xXQIdG8W8WjhIHADIN+M1NOS8fdtcJ5EuWBjdAFuNE=
Subject key identifier:   D8:D0:8B:55:C6:98:49:10:86:8B:C7:58:DC:76:8A:6A:EF:75:B1:75
Authority key identifier: 60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA
Certificate issuer:       /CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca
Certificate serial:       04D1DF5F34168B38750961CDFD372082109F46FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
Manifest number:          0277
Signing time:             Tue 11 Nov 2025 05:48:42 +0000
Manifest this update:     Tue 11 Nov 2025 05:43:42 +0000
Manifest next update:     Wed 12 Nov 2025 08:48:42 +0000
Files and hashes:         1: 6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl (hash: 1pqe/yMjSgjHtpQeNYkx0hkdRoNN9CYSJgQo+npiET4=)
                          2: 3139332e33342e3139392e3132382f32362d3236203d3e2030.roa (hash: 0pbfDMGs5sDe83nTkX1rzBo038yLBduSn3GMgeEi8+E=)
                          3: 323030313a3766383a3135373a3a2f34382d3438203d3e2030.roa (hash: 0e+W4I6S4YHzwIEKPSVHpa7X+PeCXjdmuYr+EKDU8hY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 08:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d1:df:5f:34:16:8b:38:75:09:61:cd:fd:37:20:82:10:9f:46:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca
        Validity
            Not Before: Nov 11 05:43:42 2025 GMT
            Not After : Nov 12 08:48:42 2025 GMT
        Subject: CN=D8D08B55C6984910868BC758DC768A6AEF75B175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:58:2f:56:99:58:d1:1c:bb:c6:59:75:f6:54:
                    32:ef:39:66:a6:bc:23:4a:96:3a:1d:c4:e9:76:9e:
                    09:c9:a9:09:3f:45:85:94:2b:38:4b:e0:ed:1b:04:
                    25:80:66:9e:15:66:69:85:16:74:ee:9c:cc:a8:f7:
                    67:a6:c5:9b:03:35:65:1f:8b:e7:1e:4f:fe:a5:19:
                    c9:ea:e2:2c:41:0f:89:84:e6:8e:79:84:c2:44:89:
                    01:fe:8d:2f:59:37:47:19:f5:18:56:22:8e:70:c7:
                    aa:23:86:3e:30:4d:ef:56:91:55:8e:41:4c:2d:07:
                    f5:00:c6:a2:ce:58:75:2e:4f:72:b4:04:30:29:88:
                    80:0d:f2:85:0e:fe:fc:57:18:41:9e:45:3b:d2:23:
                    04:26:fd:b2:bf:62:46:55:6c:89:10:f8:c6:8b:3b:
                    b0:35:cb:e7:db:36:8b:63:3c:6c:83:4b:54:bb:32:
                    25:d2:20:5c:8c:12:5e:a1:a5:15:3c:77:d0:db:19:
                    54:b1:f5:41:39:99:60:4f:fa:1a:f2:a1:6e:32:25:
                    cf:1d:ef:3c:06:14:dc:88:c3:47:b7:72:93:99:ce:
                    33:59:ea:aa:c0:e3:2d:32:fd:68:1e:5a:ff:13:89:
                    2e:12:3f:f5:5e:17:eb:68:0f:48:ec:41:09:04:cf:
                    fa:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D0:8B:55:C6:98:49:10:86:8B:C7:58:DC:76:8A:6A:EF:75:B1:75
            X509v3 Authority Key Identifier:
                keyid:60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:29:1f:4f:b5:be:fb:65:94:f3:ff:a9:66:d1:ba:e5:00:d3:
         25:10:9b:f0:68:cd:40:5c:1e:92:65:27:1c:b4:2a:a7:97:97:
         9a:78:ea:06:21:74:4b:8d:f5:b3:dd:2e:8b:8f:d3:43:ba:25:
         97:a8:85:4e:ad:a1:c6:2d:7f:32:7d:e2:a7:5a:0a:c2:10:53:
         2b:ca:23:75:ec:61:95:44:d5:9e:72:cf:d5:54:2c:cd:8c:af:
         12:d7:ec:09:bd:59:5b:01:ca:c2:b3:87:8f:02:6b:b4:7a:c7:
         05:0d:72:55:80:db:8f:7d:87:86:70:65:fb:a5:39:79:fb:1f:
         b2:17:ad:6f:94:0a:ce:b1:9c:fe:a4:93:11:cd:ff:0a:4f:9f:
         84:5a:ba:fb:9f:cb:48:50:cb:75:4c:bc:e4:d6:7f:25:ab:4a:
         c2:e6:5c:c3:08:52:4c:d9:9d:48:af:3e:4e:30:33:4f:44:32:
         4e:d5:fa:d8:06:3b:a9:49:51:04:15:4f:8b:b1:5a:8c:31:31:
         28:f1:3e:ec:b4:2b:44:80:4a:74:e3:57:a5:e0:53:9a:22:52:
         03:a1:d1:6e:54:ac:8f:29:d8:d6:5f:fb:44:e0:2b:e5:f2:83:
         53:31:1a:59:12:72:84:cc:77:a5:31:60:12:50:cc:7e:18:2e:
         d6:b4:cb:1c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUBNHfXzQWizh1CWHN/TcgghCfRvowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAxOWMxMTZjOGFlMzE4YWZkNGI4MjJlOWY0ZWVlYTBj
MzRiYWFjYTAeFw0yNTExMTEwNTQzNDJaFw0yNTExMTIwODQ4NDJaMDMxMTAvBgNV
BAMTKEQ4RDA4QjU1QzY5ODQ5MTA4NjhCQzc1OERDNzY4QTZBRUY3NUIxNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJWC9WmVjRHLvGWXX2VDLvOWam
vCNKljodxOl2ngnJqQk/RYWUKzhL4O0bBCWAZp4VZmmFFnTunMyo92emxZsDNWUf
i+ceT/6lGcnq4ixBD4mE5o55hMJEiQH+jS9ZN0cZ9RhWIo5wx6ojhj4wTe9WkVWO
QUwtB/UAxqLOWHUuT3K0BDApiIAN8oUO/vxXGEGeRTvSIwQm/bK/YkZVbIkQ+MaL
O7A1y+fbNotjPGyDS1S7MiXSIFyMEl6hpRU8d9DbGVSx9UE5mWBP+hryoW4yJc8d
7zwGFNyIw0e3cpOZzjNZ6qrA4y0y/WgeWv8TiS4SP/VeF+toD0jsQQkEz/o/AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU2NCLVcaYSRCGi8dY3HaKau91sXUwHwYDVR0j
BBgwFoAUYBnBFsiuMYr9S4Iun07uoMNLqsowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm
NDA5LzMvNjAxOUMxMTZDOEFFMzE4QUZENEI4MjJFOUY0RUVFQTBDMzRCQUFDQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lCbkJGc2l1TVlyOVM0SXVuMDd1b01O
THFzby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0y
MDU4LTQzYmItOWFjNi01YWI0MmRmYmY0MDkvMy82MDE5QzExNkM4QUUzMThBRkQ0
QjgyMkU5RjRFRUVBMEMzNEJBQUNBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqykfT7W++2WU8/+pZtG6
5QDTJRCb8GjNQFwekmUnHLQqp5eXmnjqBiF0S431s90ui4/TQ7oll6iFTq2hxi1/
Mn3ip1oKwhBTK8ojdexhlUTVnnLP1VQszYyvEtfsCb1ZWwHKwrOHjwJrtHrHBQ1y
VYDbj32HhnBl+6U5efsfshetb5QKzrGc/qSTEc3/Ck+fhFq6+5/LSFDLdUy85NZ/
JatKwuZcwwhSTNmdSK8+TjAzT0QyTtX62AY7qUlRBBVPi7FajDExKPE+7LQrRIBK
dONXpeBTmiJSA6HRblSsjynY1l/7ROAr5fKDUzEaWRJyhMx3pTFgElDMfhgu1rTL
HA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:25 2025 by rpki-client