Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
File:                     608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft (raw, json)
Hash identifier:          fgB8JL0jcIo9XeyG2V2fXiqadLTTvWnI9vDDp4YRq9I=
Subject key identifier:   9F:70:98:2F:FD:53:B1:3D:DB:BF:1A:C9:E6:AF:CC:3A:19:68:DF:02
Authority key identifier: 60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
Certificate issuer:       /CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Certificate serial:       416C063451EEF84718E234A167E4F773FB9CF37B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
Manifest number:          0E
Signing time:             Thu 12 Jun 2025 05:56:18 +0000
Manifest this update:     Thu 12 Jun 2025 05:51:18 +0000
Manifest next update:     Fri 13 Jun 2025 06:35:18 +0000
Files and hashes:         1: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl (hash: iUFR1WQQAD+eZ/Zn0Uhy5RaKo8uO7EQ8vTJj3pT7Mxs=)
                          2: AS215375.asa (hash: LpUFum+e3/JZSud1FMmC87+zcGX6+jjYOpf3QCDbjko=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 06:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6c:06:34:51:ee:f8:47:18:e2:34:a1:67:e4:f7:73:fb:9c:f3:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
        Validity
            Not Before: Jun 12 05:51:18 2025 GMT
            Not After : Jun 13 06:35:18 2025 GMT
        Subject: CN=9F70982FFD53B13DDBBF1AC9E6AFCC3A1968DF02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c2:c8:6e:b5:0e:cf:6f:b7:dd:80:72:7e:16:
                    ba:4f:76:ac:80:8b:04:e9:35:8a:d8:c4:cd:4c:96:
                    ee:01:27:7e:83:51:0a:db:6f:9b:cb:65:bc:b8:54:
                    72:e5:3c:fd:0b:30:08:af:b3:54:36:19:ad:65:7a:
                    14:9c:3d:40:03:86:05:22:39:9d:d5:a5:19:00:16:
                    f9:33:47:42:b8:3e:3d:a3:2f:83:7f:60:c5:4e:85:
                    71:c6:fc:2d:83:84:75:52:98:dd:93:d7:99:bc:8d:
                    be:3e:b4:d3:68:91:73:fe:d0:1b:fe:85:6a:a9:f8:
                    e9:91:b2:99:14:75:b8:69:6e:75:a6:f1:e8:f3:91:
                    54:7d:cd:47:35:a0:c6:e4:70:c9:18:8a:f8:7b:99:
                    5d:63:f3:4c:1b:c8:0b:83:d9:aa:9c:29:1e:cb:9d:
                    13:22:f3:f1:74:61:9c:7f:ee:c5:77:ff:81:42:cc:
                    2e:a0:3b:b1:60:4c:a8:41:0d:4d:9b:70:83:ab:17:
                    ec:aa:98:d0:06:3a:6b:71:84:96:32:35:22:f3:99:
                    02:de:74:3a:1b:63:90:78:30:24:e2:61:6f:7b:f7:
                    2a:1a:d8:ba:b1:52:ce:d1:0d:a5:55:e7:16:5b:3d:
                    0d:77:cd:f7:78:33:eb:e8:9b:9d:83:a8:cf:af:b0:
                    29:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:70:98:2F:FD:53:B1:3D:DB:BF:1A:C9:E6:AF:CC:3A:19:68:DF:02
            X509v3 Authority Key Identifier:
                keyid:60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:1d:d7:9d:d7:57:2b:4f:e1:f5:27:a9:32:d1:0b:10:13:5e:
         80:f1:4b:74:7c:83:c8:7d:f5:51:58:81:21:55:11:4f:c6:f0:
         e1:3b:c3:94:a6:01:18:cb:a0:70:ab:98:4c:6e:bc:8c:00:eb:
         ea:66:cb:9f:95:8f:9d:81:7a:fb:af:6b:7a:81:c6:53:3c:68:
         fa:ca:42:23:8d:83:b1:04:73:c5:f1:15:88:ca:17:29:a0:20:
         85:10:15:d2:99:a3:f8:e6:46:5d:64:2c:b9:a9:e5:64:63:f4:
         95:d5:b0:15:aa:77:cd:23:57:56:e6:bd:c3:f5:77:8d:45:18:
         ba:57:49:3d:80:9b:81:82:f0:39:40:bd:20:49:50:5f:7e:79:
         2e:23:04:59:c5:5b:c1:6c:8b:4a:62:7d:1b:b8:69:71:85:2e:
         2d:7d:14:2c:67:de:14:74:9d:2f:42:be:58:c9:60:05:b0:60:
         fd:3c:4f:55:de:16:94:c0:fc:db:ca:d0:18:4c:5b:a2:49:5b:
         c4:01:4f:4f:ec:9b:6f:71:5e:8a:72:fa:a5:3c:83:33:1d:47:
         e5:5b:2c:82:ff:47:03:e2:c5:27:6e:dd:96:1f:57:ca:7d:a7:
         21:b4:05:7d:95:67:a2:0a:b5:d2:2c:37:cd:73:9f:b1:2a:f4:
         99:ee:f6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:57:11 2025 by rpki-client