Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
File:                     C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft (raw, json)
Hash identifier:          cNKeLHtMHfJAnDvhGdoNkiuqa/wXxXymG1APjxWUe2U=
Subject key identifier:   75:33:B9:CC:E3:A2:B5:85:13:9F:D4:1B:7F:B9:51:8A:5C:C0:36:D8
Authority key identifier: C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC
Certificate issuer:       /CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
Certificate serial:       79E63ECEB5FF44FE0F120637F0E58293BFEE5528
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
Manifest number:          02F2
Signing time:             Sun 09 Nov 2025 22:25:47 +0000
Manifest this update:     Sun 09 Nov 2025 22:20:47 +0000
Manifest next update:     Wed 12 Nov 2025 01:08:47 +0000
Files and hashes:         1: AS214498.asa (hash: zpKZ3xz417Eo2EM0m+2UqZcFmQBYd5gW7ig2wKkC7zE=)
                          2: AS213525.asa (hash: seEk90bRp86U4w9lX1c0usnGxJgino5umQZtHO6fll4=)
                          3: C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl (hash: tfQb4ixbgphixT1DFdfkKeEkjTI/7BbH2l7kdvok+zc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 11 Nov 2025 08:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e6:3e:ce:b5:ff:44:fe:0f:12:06:37:f0:e5:82:93:bf:ee:55:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
        Validity
            Not Before: Nov  9 22:20:47 2025 GMT
            Not After : Nov 12 01:08:47 2025 GMT
        Subject: CN=7533B9CCE3A2B585139FD41B7FB9518A5CC036D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3a:c7:c0:8a:3f:0b:47:ad:8d:44:48:08:0a:
                    c4:6a:c6:2b:b2:39:e9:cf:36:55:67:05:a9:8a:3e:
                    db:ed:0a:02:48:94:99:c6:cc:3d:e7:92:bf:a6:4d:
                    54:be:51:c9:b0:06:a1:2a:31:32:3b:c8:73:d9:5c:
                    02:ba:78:69:9d:53:12:94:91:a5:ad:d5:01:19:82:
                    5f:1b:c8:ec:e9:c7:a9:e4:0b:56:14:20:89:9b:51:
                    1b:cb:6d:10:d0:4c:4e:89:2d:3d:e5:84:c5:e6:1c:
                    05:ae:8b:0b:19:38:57:d7:a6:c4:99:da:5c:b3:95:
                    2f:0a:65:02:38:81:97:be:28:f6:ea:66:ad:36:26:
                    1e:64:de:cd:20:cb:c8:e8:60:00:0c:64:b7:9f:ba:
                    c7:40:4b:40:ce:df:c1:c0:e6:3f:68:1f:d2:82:8b:
                    5a:07:50:46:28:89:94:05:84:62:94:f3:f1:fa:5d:
                    f1:8a:9d:a0:af:f2:77:f1:41:52:c0:c4:89:01:42:
                    9c:25:e2:58:b0:1f:2b:9f:d2:e4:e5:d0:9b:b1:40:
                    e5:3a:67:eb:4e:3d:71:9f:ac:58:73:c9:9b:af:eb:
                    39:b4:f6:75:24:0b:dd:6b:95:b0:72:3b:4a:30:9c:
                    67:ea:a9:56:4f:da:f7:fd:dd:ef:5d:7d:c1:e7:3a:
                    56:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:33:B9:CC:E3:A2:B5:85:13:9F:D4:1B:7F:B9:51:8A:5C:C0:36:D8
            X509v3 Authority Key Identifier:
                keyid:C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:c3:c0:9e:54:14:9f:11:5a:fb:25:eb:35:f6:ff:6c:44:f1:
         45:41:4c:51:52:0a:d6:c6:c6:b2:85:e5:ce:9a:f4:36:49:f2:
         b9:62:1f:ed:8f:c6:94:b2:97:ab:4b:76:44:8b:bd:fd:82:89:
         c9:4c:a7:84:20:2e:ac:f7:d5:d3:65:20:c5:b2:b8:1e:7f:18:
         59:30:6b:44:b2:49:6b:ae:e3:e9:6e:85:8e:15:77:14:f6:5e:
         c2:22:c7:69:bd:a4:ca:16:c5:ba:ff:a1:dc:dc:c2:c6:cf:1b:
         85:d1:5f:28:8b:3a:9a:33:26:c2:31:ca:7d:90:16:9f:e8:39:
         0c:83:ab:8a:f8:4b:64:1b:7a:9d:e6:78:a4:78:43:11:bc:83:
         71:8f:b4:cd:91:2a:1f:99:3d:aa:c1:6c:36:a3:18:8e:11:c6:
         da:d4:c5:be:b6:22:95:f6:01:44:f4:6c:ae:e0:6f:d5:8b:09:
         96:15:6f:2a:f3:49:18:7b:c5:9c:04:45:8e:28:2f:55:c2:db:
         9c:c3:9f:3c:6e:8b:33:e3:5e:b7:d3:53:e6:99:31:10:72:67:
         c2:b1:26:14:49:76:b0:d2:9d:37:ce:c8:bf:1c:d7:5b:7b:2a:
         e4:b3:82:48:22:cf:9f:55:2d:ef:3c:fe:3e:e3:1d:67:82:a9:
         37:d9:c4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 10 16:12:20 2025 by rpki-client