Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
File:                     608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft (raw, json)
Hash identifier:          AmtRD71E1f9vW830ZtsxuHYAEgKbiEPIrzYFgPQpeuc=
Subject key identifier:   4D:34:41:31:F2:B9:02:F1:D9:7F:96:E8:76:42:7F:40:7B:30:28:F4
Authority key identifier: 60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
Certificate issuer:       /CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Certificate serial:       79834F22CAAC3CFD1BA3614243CA414DB76C0D6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
Manifest number:          10
Signing time:             Fri 13 Jun 2025 15:01:18 +0000
Manifest this update:     Fri 13 Jun 2025 14:56:18 +0000
Manifest next update:     Sat 14 Jun 2025 15:48:18 +0000
Files and hashes:         1: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl (hash: GQ+JH02v+ndBQO6hVsjQfeZ8FEk6CPkQVdqe0HYF7OA=)
                          2: AS215375.asa (hash: LpUFum+e3/JZSud1FMmC87+zcGX6+jjYOpf3QCDbjko=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 15:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:83:4f:22:ca:ac:3c:fd:1b:a3:61:42:43:ca:41:4d:b7:6c:0d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
        Validity
            Not Before: Jun 13 14:56:18 2025 GMT
            Not After : Jun 14 15:48:18 2025 GMT
        Subject: CN=4D344131F2B902F1D97F96E876427F407B3028F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f0:39:73:27:9a:bf:9d:43:4d:a8:9c:dd:68:
                    37:d8:84:ad:d8:ae:fb:b9:ed:17:43:a5:45:bb:fb:
                    67:77:9c:09:9c:4f:8e:bd:54:82:54:44:93:fd:7f:
                    d7:c0:c1:c3:89:72:c3:d7:6c:3a:ca:c3:b6:99:c8:
                    67:21:35:76:65:b6:c8:b3:03:84:03:7d:5a:25:b3:
                    95:49:a1:b9:99:dd:93:4b:8b:69:20:c7:15:da:d6:
                    99:be:19:98:63:4e:8d:d7:2e:2b:3d:3d:58:9e:34:
                    d9:bd:c1:34:68:14:1e:2e:7b:ba:7d:7e:16:5c:6b:
                    2b:41:4a:75:33:a8:fa:d8:9b:18:56:ef:4e:5f:a9:
                    d9:6c:1d:e4:93:c2:33:64:9b:1a:74:d6:b5:d6:8e:
                    a7:80:e0:d0:de:49:08:ea:e5:a4:2c:e7:b9:37:96:
                    23:39:ad:12:fa:43:a3:09:5c:3b:d4:11:d6:88:b4:
                    0d:07:52:40:fd:aa:46:a5:5a:d0:e1:b4:a0:ea:f9:
                    01:0b:6f:ae:04:c1:84:cd:14:1d:a0:63:23:f6:8a:
                    f2:c4:a7:5b:0c:db:3a:ae:b6:43:c3:89:70:2d:e8:
                    25:16:f8:04:d4:05:28:b4:85:19:16:25:1a:e7:2d:
                    12:94:1d:c9:90:40:18:89:31:b0:41:3e:63:f9:3d:
                    74:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:34:41:31:F2:B9:02:F1:D9:7F:96:E8:76:42:7F:40:7B:30:28:F4
            X509v3 Authority Key Identifier:
                keyid:60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:48:d5:ed:c0:1a:cd:ef:de:b6:6c:5a:1c:50:6a:dc:3f:93:
         18:22:b4:36:93:8d:38:de:74:66:0f:bf:05:c2:86:7e:65:94:
         7f:f1:31:31:55:8e:83:4b:4f:d9:d0:ad:1e:34:d6:fc:00:54:
         24:fe:48:de:d7:00:2b:a3:98:c7:22:6b:e9:ae:4d:12:04:26:
         66:9c:17:02:77:65:c0:32:55:31:26:ae:02:78:24:8e:2c:9e:
         60:b0:ab:5a:4f:7c:89:13:57:d4:ae:54:12:cd:af:ca:2d:3e:
         08:58:df:fd:b4:1a:18:d2:0a:a5:19:86:4b:6e:7a:b8:7e:b0:
         25:4c:2d:a6:dc:9e:bd:f2:7b:7f:ee:69:39:c7:5c:ec:74:24:
         37:49:05:ca:33:a8:57:31:8f:af:de:05:61:a2:e5:7e:e2:c1:
         78:3c:36:8a:bd:93:5c:15:07:a0:19:16:85:39:4b:b7:57:99:
         e7:53:0e:a6:78:c3:13:ff:0e:7f:b4:4b:6f:dc:74:21:c7:91:
         7c:a6:e5:2b:49:7c:d3:5a:1f:f3:79:cd:e8:81:6b:dd:08:75:
         9c:28:0e:c7:bd:27:8f:be:d4:cd:e4:71:78:5d:20:87:91:ea:
         4a:41:68:3d:f3:01:fb:7c:ea:3e:59:8f:ae:9d:1c:69:0a:d4:
         e2:17:ee:9f
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUeYNPIsqsPP0bo2FCQ8pBTbdsDW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA4YzQ4YjlhNjQwYzE0YzYxYWFkNDM5YWIxZmM0NGZh
MmE0MTRlYTAeFw0yNTA2MTMxNDU2MThaFw0yNTA2MTQxNTQ4MThaMDMxMTAvBgNV
BAMTKDREMzQ0MTMxRjJCOTAyRjFEOTdGOTZFODc2NDI3RjQwN0IzMDI4RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY8DlzJ5q/nUNNqJzdaDfYhK3Y
rvu57RdDpUW7+2d3nAmcT469VIJURJP9f9fAwcOJcsPXbDrKw7aZyGchNXZltsiz
A4QDfVols5VJobmZ3ZNLi2kgxxXa1pm+GZhjTo3XLis9PVieNNm9wTRoFB4ue7p9
fhZcaytBSnUzqPrYmxhW705fqdlsHeSTwjNkmxp01rXWjqeA4NDeSQjq5aQs57k3
liM5rRL6Q6MJXDvUEdaItA0HUkD9qkalWtDhtKDq+QELb64EwYTNFB2gYyP2ivLE
p1sM2zqutkPDiXAt6CUW+ATUBSi0hRkWJRrnLRKUHcmQQBiJMbBBPmP5PXQxAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUTTRBMfK5AvHZf5bodkJ/QHswKPQwHwYDVR0j
BBgwFoAUYIxIuaZAwUxhqtQ5qx/ET6KkFOowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzc0NjA1MjktNjk5Mi00ZmM1LThhMTctNTI1YjZiMjc1
NTU2LzAvNjA4QzQ4QjlBNjQwQzE0QzYxQUFENDM5QUIxRkM0NEZBMkE0MTRFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lJeEl1YVpBd1V4aHF0UTVxeF9FVDZL
a0ZPby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zNzQ2MDUyOS02
OTkyLTRmYzUtOGExNy01MjViNmIyNzU1NTYvMC82MDhDNDhCOUE2NDBDMTRDNjFB
QUQ0MzlBQjFGQzQ0RkEyQTQxNEVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0jV7cAaze/etmxaHFBq
3D+TGCK0NpONON50Zg+/BcKGfmWUf/ExMVWOg0tP2dCtHjTW/ABUJP5I3tcAK6OY
xyJr6a5NEgQmZpwXAndlwDJVMSauAngkjiyeYLCrWk98iRNX1K5UEs2vyi0+CFjf
/bQaGNIKpRmGS256uH6wJUwtptyevfJ7f+5pOcdc7HQkN0kFyjOoVzGPr94FYaLl
fuLBeDw2ir2TXBUHoBkWhTlLt1eZ51MOpnjDE/8Of7RLb9x0IceRfKblK0l801of
83nN6IFr3Qh1nCgOx70nj77UzeRxeF0gh5HqSkFoPfMB+3zqPlmPrp0caQrU4hfu
nw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:05:32 2025 by rpki-client