Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft
File:                     2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft (raw, json)
Hash identifier:          M4XMpFOzYlWpNNPwoT2UPpSwpztwpvlAsmVdgsGpBjY=
Subject key identifier:   81:53:11:5A:6F:33:E7:58:66:59:31:23:13:4A:7A:76:B2:19:20:8A
Authority key identifier: 2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E
Certificate issuer:       /CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e
Certificate serial:       6E2CEB716EE42977652B839EA6EAF2E4CE0663FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft
Manifest number:          C8
Signing time:             Mon 30 Jun 2025 21:39:41 +0000
Manifest this update:     Mon 30 Jun 2025 21:34:41 +0000
Manifest next update:     Tue 01 Jul 2025 22:27:41 +0000
Files and hashes:         1: AS213279.asa (hash: nJRzaMfqdZ5AI+sMn9wPdQBE/Wcrkghpk4PHewl3Wz8=)
                          2: 323030313a3637383a6434343a3a2f34382d3438203d3e20323133323739.roa (hash: a2d6hAclWrhx6h6+ACHw0iSYteM3AlSblaeDKRH8jzc=)
                          3: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl (hash: xALgVgJSfMLe29Q3tB6vlBgeIBCCmbm708E3KWcuDAY=)
                          4: 326131343a623430303a3a2f32392d3438203d3e2030.roa (hash: NhcbptlixcA3mbsPTqMiibAOrNSU1BYwO66fMNiKSfA=)
                          5: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: 5hhgwEfLD9bumu2w7kC2KzlKzBKITTTKNPZHvvEg0u8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2c:eb:71:6e:e4:29:77:65:2b:83:9e:a6:ea:f2:e4:ce:06:63:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e
        Validity
            Not Before: Jun 30 21:34:41 2025 GMT
            Not After : Jul  1 22:27:41 2025 GMT
        Subject: CN=8153115A6F33E75866593123134A7A76B219208A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:63:19:a0:37:c0:72:32:fe:b0:2f:aa:a4:b2:
                    45:06:ed:20:26:0d:b5:c2:37:b1:ae:53:31:df:da:
                    a0:56:26:ab:3f:8f:b1:05:f6:4e:6c:79:4c:dd:c1:
                    6e:44:c3:ed:14:90:53:40:33:14:2f:5f:38:80:f6:
                    56:ff:2d:8b:25:dd:d4:fc:09:cf:82:a4:89:3f:9c:
                    c0:48:ee:e1:1c:bb:9f:7b:30:0e:f5:f5:88:4b:80:
                    d6:69:ec:23:42:31:3d:ca:d8:7d:aa:78:13:8d:a8:
                    1e:d4:5c:84:f7:4b:8d:30:9b:70:44:85:a8:97:85:
                    9a:92:42:49:20:22:83:0e:ed:65:e2:34:53:71:b7:
                    aa:84:9c:f7:13:8f:84:41:b5:20:df:dc:a4:b9:0d:
                    55:ff:54:04:e2:5d:87:4f:a1:1c:98:5e:34:62:a9:
                    ee:29:c7:1e:6e:29:bc:f0:22:01:95:69:00:7e:65:
                    3b:fb:fb:8f:17:e4:3a:32:23:32:aa:d3:e4:36:9b:
                    35:ac:56:1b:75:29:ab:f6:52:5c:ca:87:7e:e6:a8:
                    bf:7f:82:9f:f3:da:fc:d0:a1:03:fb:31:79:1f:06:
                    92:77:0d:f4:8d:5b:f7:68:f0:8d:6a:91:d4:06:e0:
                    18:42:3b:92:5f:ee:28:59:ee:fb:f9:69:9b:5e:9b:
                    2f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:53:11:5A:6F:33:E7:58:66:59:31:23:13:4A:7A:76:B2:19:20:8A
            X509v3 Authority Key Identifier:
                keyid:2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:e8:4b:47:94:7e:b2:9e:d5:d8:73:6b:cf:4a:9b:80:e6:91:
         5d:b9:69:fa:7f:2f:5b:3a:46:02:b5:4a:a7:5e:fe:14:8b:15:
         cb:fa:ac:cc:00:4c:0a:51:bc:ef:e5:21:6c:2d:dd:1a:94:c4:
         f1:0a:5b:1a:b4:ca:25:1b:5b:69:5f:87:88:43:04:65:2a:0e:
         59:84:bd:c5:47:e1:fc:1e:f6:62:9c:df:44:30:56:e3:53:c8:
         70:61:8c:39:1f:a1:c4:ca:02:75:73:a9:87:17:59:5c:36:66:
         57:30:d2:55:fb:75:3c:e4:0c:e2:6e:ab:16:65:37:88:c6:f5:
         56:6a:ee:5d:b9:84:c7:61:23:db:43:39:86:ca:06:e2:70:42:
         15:1b:42:10:a4:64:89:1b:87:aa:ff:7a:75:3c:fa:80:24:18:
         b2:1a:b4:89:a2:9d:6f:cf:3c:11:c9:fd:63:b4:dd:a5:db:ba:
         eb:b2:3c:5c:7a:29:3b:53:b4:f7:c1:1a:f8:6e:a2:43:3f:52:
         70:e8:c9:84:09:31:52:a9:4c:90:a8:0f:7b:cf:1b:82:b5:79:
         95:fc:05:c9:f5:8e:f9:d3:25:7f:8e:da:c0:3f:8b:0c:3b:ff:
         df:64:47:62:28:71:76:fd:f4:92:44:52:41:e0:a7:e5:ab:2e:
         59:05:e1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:24:18 2025 by rpki-client