Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
File:                     608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft (raw, json)
Hash identifier:          kpJ0k9864otThIf/Ha/AdCUVJ3gpN2pny0PtxZV7Ggs=
Subject key identifier:   E9:A6:B4:FE:8F:2E:25:F0:23:DE:E1:95:CE:13:99:0D:B1:8C:21:E3
Authority key identifier: 60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
Certificate issuer:       /CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Certificate serial:       36E2DC3AA84AE776AC2221140480A9261704BF63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
Manifest number:          0B
Signing time:             Mon 09 Jun 2025 23:56:11 +0000
Manifest this update:     Mon 09 Jun 2025 23:51:11 +0000
Manifest next update:     Wed 11 Jun 2025 03:37:11 +0000
Files and hashes:         1: AS215375.asa (hash: LpUFum+e3/JZSud1FMmC87+zcGX6+jjYOpf3QCDbjko=)
                          2: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl (hash: YAQ3/GHYvn9tRJI8+kGPZsBG7q9qSVN414PVAoJqy4I=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e2:dc:3a:a8:4a:e7:76:ac:22:21:14:04:80:a9:26:17:04:bf:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
        Validity
            Not Before: Jun  9 23:51:11 2025 GMT
            Not After : Jun 11 03:37:11 2025 GMT
        Subject: CN=E9A6B4FE8F2E25F023DEE195CE13990DB18C21E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8d:19:5b:6b:04:53:0b:cd:98:67:a5:e6:c0:
                    7a:6e:9b:83:a5:5b:d2:14:c0:52:d7:82:00:c7:45:
                    17:b3:3f:07:94:d6:c0:35:70:0a:f7:e3:63:64:70:
                    ea:82:c6:ee:1f:26:da:24:82:17:60:f5:d9:9a:e0:
                    f3:fc:db:df:4f:47:52:12:7e:50:b7:cf:cc:9e:38:
                    e0:5d:17:37:a6:da:a8:94:59:92:51:72:56:6c:83:
                    d3:5d:1d:67:2f:6b:98:54:64:10:b8:43:b0:57:9c:
                    f3:d4:2c:08:37:18:24:05:49:52:e2:03:6a:e0:7f:
                    e1:65:b2:8a:cc:fa:d6:65:9b:45:81:4e:ba:71:b1:
                    d2:db:6e:17:71:36:f7:8d:47:4f:e9:c9:5b:0f:93:
                    8a:e6:71:32:87:1c:52:2d:f5:0c:88:1a:58:7f:36:
                    76:af:cd:15:e8:d0:fd:31:b7:e4:dd:13:44:fc:19:
                    47:97:33:49:86:11:78:ad:ff:2f:5c:ad:c0:c1:c2:
                    07:0a:40:15:f5:d5:2a:12:a9:e4:61:b3:6e:9c:fc:
                    85:77:7e:a5:df:7b:05:5e:fb:0b:bc:9b:a9:bf:fb:
                    8a:bb:d1:fc:ce:eb:67:7a:bf:8c:12:f3:e7:ce:c6:
                    21:0e:91:e8:9a:3f:c5:00:2f:b0:3a:d4:bc:40:bc:
                    7c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A6:B4:FE:8F:2E:25:F0:23:DE:E1:95:CE:13:99:0D:B1:8C:21:E3
            X509v3 Authority Key Identifier:
                keyid:60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a6:86:d4:fc:87:3d:b7:05:51:a1:8f:26:2d:af:c4:52:ad:
         10:2d:6e:7b:fa:97:2f:4d:47:b6:7d:75:51:dc:2e:6b:8f:4d:
         59:84:a9:32:44:ef:2d:a9:71:32:1e:2a:49:b7:6d:cd:62:e7:
         50:3f:a2:15:48:01:8f:8f:33:f8:f1:3e:90:a2:18:80:bc:3c:
         9f:c1:2c:d7:34:c1:b5:bc:4d:57:9f:a5:6b:7d:81:e5:d7:b7:
         d3:56:7c:e4:8f:34:01:ee:19:fa:55:b2:7c:62:95:c5:fd:a1:
         ea:f3:02:f2:e6:a9:ca:00:4b:4a:2b:c8:52:fb:8b:11:98:6e:
         4c:99:61:a6:45:58:f0:02:e5:8f:42:8f:2d:c1:d7:46:f5:63:
         64:c5:c0:d2:64:c0:10:be:b7:14:d5:a7:1f:40:f1:e5:de:4a:
         90:c0:b6:cc:a4:5c:59:c6:3f:41:ac:b2:63:3b:be:35:a2:56:
         f2:b6:25:5e:7c:23:1e:41:c3:ec:85:f7:e7:55:b8:91:fd:0f:
         6d:d9:3e:c2:f1:46:a0:7e:e2:85:72:c3:24:70:64:a2:d8:09:
         7e:3e:b8:1f:a9:d9:f4:85:f5:e4:bd:a8:0b:de:75:4e:ba:bc:
         bb:f7:56:ac:ce:98:d7:44:ac:d9:66:06:fd:0c:fa:79:67:c5:
         2b:2b:b2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:45:49 2025 by rpki-client