Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
File:                     25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json)
Hash identifier:          fw0br/nWaF2AAlP+rJ6R1rWwCGfk8ZW+xfnKq/v9ges=
Subject key identifier:   8E:C1:8D:88:FA:46:5D:F9:C1:28:E2:9E:3E:00:91:A9:65:95:FF:FC
Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
Certificate issuer:       /CN=25827d84056b8444cc2a7842759035354b8416bc
Certificate serial:       0D1192552ED0877EA8B3FDB10164D42ECBF87A70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
Manifest number:          021D
Signing time:             Thu 17 Jul 2025 06:41:46 +0000
Manifest this update:     Thu 17 Jul 2025 06:36:46 +0000
Manifest next update:     Fri 18 Jul 2025 07:39:46 +0000
Files and hashes:         1: AS207487.asa (hash: Ha+forEe+xS82UGSV4B7j+UWBj+/I05XFS+Ojajx3y4=)
                          2: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=)
                          3: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: lVUTv9ePxFs76NYMpRch/wm8DFit0p7cLkwe+1lgWxI=)
                          4: AS18607.asa (hash: UmRU72jnrIjcrDo/h9XDTnV/XRM8dz+BcjyGexjXWqI=)
                          5: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: Pf0WXVKsadiaiJtusSEXuFj/o/oP56mVyLEI27IiyE8=)
                          6: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: MAksePoJ+rnc08XyHZPcbQHx/BhF1iv7lCiKD0GFWxw=)
                          7: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: nCuZ5ADJB2e8lGpTQQDYT3/JtyMvU82Myd2okt8I23s=)
                          8: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: psJviK7xva3OcR8ZgUd5Vp2/XSznqO+94Ycj+VI5i7A=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Jul 2025 07:39:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:11:92:55:2e:d0:87:7e:a8:b3:fd:b1:01:64:d4:2e:cb:f8:7a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc
        Validity
            Not Before: Jul 17 06:36:46 2025 GMT
            Not After : Jul 18 07:39:46 2025 GMT
        Subject: CN=8EC18D88FA465DF9C128E29E3E0091A96595FFFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:e9:76:d5:04:36:2c:0d:2f:38:6d:af:4c:
                    01:11:dd:43:01:57:73:41:5e:b6:6f:31:fc:10:ef:
                    f2:03:fb:e4:ce:99:35:05:ae:5f:9d:8b:43:d2:44:
                    04:67:94:0c:93:a9:cd:d2:07:ee:b1:96:1a:14:8c:
                    f4:f1:2a:6f:f0:25:e3:37:83:49:e5:35:33:9d:b2:
                    4b:14:c4:7e:42:01:c6:23:00:b8:4c:4b:87:e6:61:
                    1f:76:f3:c1:55:d7:a2:d1:7d:27:b8:a6:01:a6:fa:
                    be:ea:d1:71:c9:ab:f9:0d:4d:e8:03:0d:cf:69:11:
                    33:dd:c6:fe:63:b8:40:e1:60:fa:b7:cd:fa:a6:41:
                    6b:fd:87:25:96:dd:32:4c:ad:28:7c:72:b9:86:86:
                    00:20:eb:04:24:d2:0a:27:f0:e5:c7:65:ba:9e:bd:
                    86:70:8a:56:2f:35:ef:6f:85:0d:1a:8e:07:94:72:
                    82:6b:b0:15:a0:4d:27:31:c5:9e:20:16:94:51:b4:
                    4f:e2:b7:6e:35:fa:8b:e6:5e:0a:95:d4:4c:a7:1f:
                    53:9d:98:00:dd:3d:a8:79:b7:96:60:60:69:e7:1d:
                    5c:8e:06:c9:23:7c:66:18:58:0f:11:c6:b2:e3:98:
                    42:71:12:de:60:0a:4a:2a:38:46:13:13:7c:2d:8d:
                    a3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C1:8D:88:FA:46:5D:F9:C1:28:E2:9E:3E:00:91:A9:65:95:FF:FC
            X509v3 Authority Key Identifier:
                keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:99:3a:2d:1d:6a:66:32:b7:1e:0f:a8:91:10:19:75:de:8f:
         0e:78:b3:4a:51:9c:54:99:6d:a3:18:2d:90:7c:13:a3:e6:fa:
         03:da:b5:bb:2c:b4:e2:cb:2f:4a:93:72:0c:3d:45:97:bb:9a:
         cd:8b:b3:2e:75:86:a4:3a:59:4c:5e:96:1b:f7:5b:5a:9b:fa:
         f8:a1:64:7b:5c:d5:62:3f:f7:fc:a1:df:4a:06:04:49:f6:fb:
         04:9e:65:51:cd:9a:8f:d7:45:e8:3d:8d:55:c4:23:b3:02:61:
         ab:ce:10:72:e1:48:07:47:87:7f:89:40:45:65:32:2a:b4:ca:
         3c:97:eb:1c:d7:2e:f4:cd:32:78:e2:3b:d4:98:c0:7d:ad:97:
         eb:04:b1:f2:04:d0:ab:25:7b:84:75:e3:71:37:eb:8a:14:86:
         f8:ce:06:18:a8:52:80:ac:16:e0:06:10:e0:5d:84:bb:29:09:
         66:2c:89:0d:7d:68:ab:98:53:95:16:68:dd:33:32:ae:5c:68:
         3a:23:87:97:7d:ac:a6:2b:7f:61:d5:29:46:67:55:dd:4c:93:
         1b:7f:ce:cc:34:14:60:b2:9d:54:e0:f3:bb:fa:64:1c:02:c2:
         2d:e4:80:e6:95:40:0d:32:f5:a5:74:0a:18:a7:f7:2f:39:ae:
         91:c9:fe:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 17 21:37:03 2025 by rpki-client