Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5799be86-8eae-482c-b6b5-355f7590942b/0/C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.mft
File:                     C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.mft (raw, json)
Hash identifier:          C6rLR1H2ospMvBxwWfSG38u1lu+nE3+MlzURpY0StsE=
Subject key identifier:   F6:8F:65:02:18:F1:32:44:6F:22:F7:29:97:F4:11:2B:07:41:69:81
Authority key identifier: C1:37:EF:1A:67:75:16:04:3A:AA:F7:50:75:BB:8E:5F:8B:FF:1A:CF
Certificate issuer:       /CN=c137ef1a677516043aaaf75075bb8e5f8bff1acf
Certificate serial:       60C25654B521A6713636C0F7A39699045E985576
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTfvGmd1FgQ6qvdQdbuOX4v_Gs8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5799be86-8eae-482c-b6b5-355f7590942b/0/C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.mft
Manifest number:          11
Signing time:             Tue 01 Jul 2025 13:33:42 +0000
Manifest this update:     Tue 01 Jul 2025 13:28:42 +0000
Manifest next update:     Wed 02 Jul 2025 15:35:42 +0000
Files and hashes:         1: AS213915.asa (hash: 54kMALFIAqByOWGYmGDi03BmYHzQmO0Cq7B4na5nOtA=)
                          2: C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.crl (hash: Rn3F7aGg4Z0zR3Pt+XQlmqoCNP31+mNAcNw2tyqyRp4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/5799be86-8eae-482c-b6b5-355f7590942b/0/C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/5799be86-8eae-482c-b6b5-355f7590942b/0/C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTfvGmd1FgQ6qvdQdbuOX4v_Gs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c2:56:54:b5:21:a6:71:36:36:c0:f7:a3:96:99:04:5e:98:55:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c137ef1a677516043aaaf75075bb8e5f8bff1acf
        Validity
            Not Before: Jul  1 13:28:42 2025 GMT
            Not After : Jul  2 15:35:42 2025 GMT
        Subject: CN=F68F650218F132446F22F72997F4112B07416981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e8:1e:97:9d:17:3b:67:37:b2:20:96:87:15:
                    b0:c6:e4:e2:03:c6:29:86:0d:7d:98:2e:4f:f2:37:
                    b6:70:f9:f9:a9:6f:0f:cf:10:2a:79:d6:1d:c4:40:
                    49:42:7e:ef:62:8f:61:7e:94:ec:47:89:0a:2b:62:
                    78:6a:f7:0e:49:96:9f:95:4a:f6:97:3e:2d:2e:b0:
                    7f:22:f8:3f:43:2d:8e:c5:51:3c:b1:39:8c:1c:60:
                    9e:c7:8d:14:d8:d4:40:6d:d4:5a:50:b2:b2:2d:6f:
                    27:0c:b8:7a:03:b5:06:ce:49:f1:a0:75:fd:8a:9a:
                    26:2d:37:45:18:bd:b3:e8:5c:3c:a9:32:d2:ab:5a:
                    da:7a:6c:84:22:61:ba:bd:e0:17:54:7f:85:a8:33:
                    d5:59:08:cd:80:04:10:ee:3a:6a:dc:49:50:9e:59:
                    76:f6:3a:52:6c:a3:7e:b5:7d:17:0b:de:34:0b:d7:
                    3b:d9:f3:59:d0:d0:7e:bf:0e:78:41:5e:7d:f1:fb:
                    b7:43:ea:53:d2:bf:8f:37:93:46:9f:ca:09:70:6f:
                    3b:7e:60:7f:b0:3f:e7:04:7a:a1:ef:92:40:94:d4:
                    27:39:0b:49:22:93:ad:a7:14:96:69:d6:86:2e:80:
                    c8:7f:73:83:2f:cf:6c:2f:ef:2a:06:9e:c3:55:b3:
                    a3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8F:65:02:18:F1:32:44:6F:22:F7:29:97:F4:11:2B:07:41:69:81
            X509v3 Authority Key Identifier:
                keyid:C1:37:EF:1A:67:75:16:04:3A:AA:F7:50:75:BB:8E:5F:8B:FF:1A:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5799be86-8eae-482c-b6b5-355f7590942b/0/C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTfvGmd1FgQ6qvdQdbuOX4v_Gs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5799be86-8eae-482c-b6b5-355f7590942b/0/C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:99:96:96:b2:41:24:60:d4:f0:b1:91:55:d2:3d:84:64:c8:
         d4:9f:70:55:98:3d:90:37:fe:87:53:ee:b9:34:8c:20:33:da:
         54:00:ec:0c:95:2e:08:84:99:88:2c:f1:0b:31:07:5d:30:84:
         88:01:bf:34:26:c0:5e:f5:fd:7a:b3:3f:9d:d0:22:aa:3a:9a:
         33:a2:ce:8e:76:ee:97:30:fb:06:d8:36:f1:4d:d1:ec:e4:30:
         78:dd:81:fc:9e:bc:05:cb:5c:00:2f:46:40:8e:4b:ea:2c:3f:
         16:29:c5:c8:02:f8:55:db:09:5e:63:68:3d:f1:75:18:8e:9e:
         bd:4c:e0:c9:3f:27:cc:f6:2a:06:62:df:c9:73:34:86:2c:7f:
         40:c8:eb:58:f5:54:a3:fe:86:2b:b9:b8:9b:0e:47:60:45:cd:
         8d:5f:26:45:98:08:ae:78:b7:0b:2a:f1:98:28:8c:25:94:84:
         42:eb:27:df:96:26:e8:e2:aa:58:7b:96:83:35:dd:62:b5:dc:
         d5:11:21:57:2b:07:c5:4d:95:b9:62:8c:4a:f9:e6:e6:2a:c5:
         bc:3b:66:14:72:b8:d9:a2:2a:88:37:7a:c4:c1:f7:28:cf:68:
         0d:d5:e6:b4:4c:cc:24:c7:83:61:48:3b:7b:7c:32:72:93:ea:
         17:ac:6e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:17:19 2025 by rpki-client