Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
File:                     608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft (raw, json)
Hash identifier:          SiejYfzaXNM+shZ2xSJ7cQJSOkiVuQzA3ET2QCyqeqU=
Subject key identifier:   CE:88:51:6E:E7:F6:56:1C:2C:1B:B4:96:64:1D:D4:00:E0:C9:D9:EB
Authority key identifier: 60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
Certificate issuer:       /CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Certificate serial:       3E55FB9B45F3B63AD63033346E30ACEB760DE018
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
Manifest number:          0D
Signing time:             Wed 11 Jun 2025 12:31:11 +0000
Manifest this update:     Wed 11 Jun 2025 12:26:11 +0000
Manifest next update:     Thu 12 Jun 2025 13:56:11 +0000
Files and hashes:         1: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl (hash: gXI0XKzumMmiEsnwaEvV/HAuDkK8uBLQdr2MdioZL5g=)
                          2: AS215375.asa (hash: LpUFum+e3/JZSud1FMmC87+zcGX6+jjYOpf3QCDbjko=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 13:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:55:fb:9b:45:f3:b6:3a:d6:30:33:34:6e:30:ac:eb:76:0d:e0:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
        Validity
            Not Before: Jun 11 12:26:11 2025 GMT
            Not After : Jun 12 13:56:11 2025 GMT
        Subject: CN=CE88516EE7F6561C2C1BB496641DD400E0C9D9EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a8:d9:f4:91:d9:bb:7a:df:3f:03:c6:59:ed:
                    51:f3:ce:71:ad:e5:41:13:2f:17:86:be:52:e6:a7:
                    8a:29:60:ef:2e:dc:b9:99:1a:fe:90:75:fe:29:c5:
                    5c:b4:c3:54:9f:e5:57:07:12:f1:3f:ef:3a:b2:74:
                    cb:06:46:8c:b6:eb:5c:78:9a:31:76:63:57:25:bd:
                    27:bb:c3:ba:1c:4c:65:57:5e:37:d1:ec:72:4f:de:
                    aa:02:56:ed:f2:a7:59:1f:6c:22:a6:44:86:c9:86:
                    ad:b0:06:5b:c5:40:98:e9:81:22:51:e8:00:f3:09:
                    1b:16:7c:e6:0b:3e:14:0a:3a:a7:d4:a0:dc:86:f8:
                    3c:69:8c:79:78:81:2f:cc:31:e3:8d:49:fb:b4:c3:
                    a9:be:7a:14:07:82:06:1d:fa:52:b7:49:a3:05:3c:
                    3f:de:da:ab:34:3f:16:42:f6:5f:9b:cd:c8:8a:df:
                    77:63:8e:39:91:d4:0c:0f:1a:8f:db:e6:1c:31:af:
                    02:da:4d:0a:5b:b5:14:9a:a2:27:f2:60:e0:87:2f:
                    b2:64:e9:cd:06:c5:cc:67:4c:f2:b5:05:b7:2d:bf:
                    9f:3a:a7:23:5a:7c:0b:c9:2e:f5:50:89:7d:d1:05:
                    d6:29:83:48:a5:f3:d2:3b:4e:ae:ea:c8:d0:97:19:
                    ed:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:88:51:6E:E7:F6:56:1C:2C:1B:B4:96:64:1D:D4:00:E0:C9:D9:EB
            X509v3 Authority Key Identifier:
                keyid:60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:84:e4:48:02:13:23:b9:9f:23:2e:41:2a:3d:06:50:8d:8f:
         5b:36:6f:c2:e2:8e:dc:ba:98:75:d3:be:c7:7b:16:31:2e:d8:
         56:64:00:56:0b:0f:ad:24:77:45:bd:04:4e:d7:86:5e:7e:32:
         d3:f4:0d:24:97:da:d2:b7:d8:4c:05:78:ce:d7:7c:a1:31:87:
         90:ca:6b:4c:6a:2c:dc:fe:a3:bb:23:06:79:20:27:85:16:ba:
         34:ba:ee:60:71:8c:2e:d0:80:18:8b:a0:9f:af:f3:22:cb:c7:
         b5:0e:cd:27:cd:4f:c6:63:c2:94:82:fa:85:3b:e0:1e:f9:37:
         ab:c4:fa:a0:e1:1e:4f:7a:11:56:8d:85:e9:56:ec:7d:d5:92:
         9e:5d:cf:a6:79:79:81:ff:49:8b:4a:73:44:f0:81:a0:06:88:
         f7:e5:51:61:eb:8c:38:bb:82:4a:4f:7d:b8:3f:f7:b7:d4:76:
         ce:3e:5a:55:83:9f:13:19:14:74:ec:72:2a:e1:3c:93:47:ec:
         a6:5c:c6:3c:8a:0d:5b:d5:57:4d:22:64:af:bc:4f:97:de:c2:
         b1:09:3d:97:ff:5c:b4:f1:21:ee:cb:c3:0d:5d:d0:df:d7:5a:
         22:03:87:a1:39:8c:2b:b2:0e:ec:2d:3d:c3:51:4b:4d:9b:20:
         15:7a:26:0e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUPlX7m0XztjrWMDM0bjCs63YN4BgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA4YzQ4YjlhNjQwYzE0YzYxYWFkNDM5YWIxZmM0NGZh
MmE0MTRlYTAeFw0yNTA2MTExMjI2MTFaFw0yNTA2MTIxMzU2MTFaMDMxMTAvBgNV
BAMTKENFODg1MTZFRTdGNjU2MUMyQzFCQjQ5NjY0MURENDAwRTBDOUQ5RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIqNn0kdm7et8/A8ZZ7VHzznGt
5UETLxeGvlLmp4opYO8u3LmZGv6Qdf4pxVy0w1Sf5VcHEvE/7zqydMsGRoy261x4
mjF2Y1clvSe7w7ocTGVXXjfR7HJP3qoCVu3yp1kfbCKmRIbJhq2wBlvFQJjpgSJR
6ADzCRsWfOYLPhQKOqfUoNyG+DxpjHl4gS/MMeONSfu0w6m+ehQHggYd+lK3SaMF
PD/e2qs0PxZC9l+bzciK33djjjmR1AwPGo/b5hwxrwLaTQpbtRSaoifyYOCHL7Jk
6c0GxcxnTPK1Bbctv586pyNafAvJLvVQiX3RBdYpg0il89I7Tq7qyNCXGe2hAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUzohRbuf2VhwsG7SWZB3UAODJ2eswHwYDVR0j
BBgwFoAUYIxIuaZAwUxhqtQ5qx/ET6KkFOowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzc0NjA1MjktNjk5Mi00ZmM1LThhMTctNTI1YjZiMjc1
NTU2LzAvNjA4QzQ4QjlBNjQwQzE0QzYxQUFENDM5QUIxRkM0NEZBMkE0MTRFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lJeEl1YVpBd1V4aHF0UTVxeF9FVDZL
a0ZPby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zNzQ2MDUyOS02
OTkyLTRmYzUtOGExNy01MjViNmIyNzU1NTYvMC82MDhDNDhCOUE2NDBDMTRDNjFB
QUQ0MzlBQjFGQzQ0RkEyQTQxNEVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4TkSAITI7mfIy5BKj0G
UI2PWzZvwuKO3LqYddO+x3sWMS7YVmQAVgsPrSR3Rb0ETteGXn4y0/QNJJfa0rfY
TAV4ztd8oTGHkMprTGos3P6juyMGeSAnhRa6NLruYHGMLtCAGIugn6/zIsvHtQ7N
J81PxmPClIL6hTvgHvk3q8T6oOEeT3oRVo2F6VbsfdWSnl3Ppnl5gf9Ji0pzRPCB
oAaI9+VRYeuMOLuCSk99uD/3t9R2zj5aVYOfExkUdOxyKuE8k0fsplzGPIoNW9VX
TSJkr7xPl97CsQk9l/9ctPEh7svDDV3Q39daIgOHoTmMK7IO7C09w1FLTZsgFXom
Dg==
-----END CERTIFICATE-----
Generated at Wed Jun 11 22:22:28 2025 by rpki-client