
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
File:                     C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft (raw, json)
Hash identifier:          ncTMVNmtXFTtnx0yEyA8IKvr1jX3E8Hn3DP7hNmnv28=
Subject key identifier:   21:F4:E2:E2:61:46:A1:11:51:ED:6F:FA:E6:0A:6E:DF:23:CA:BB:10
Authority key identifier: C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC
Certificate issuer:       /CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
Certificate serial:       7A7A484C1D6685C1B91D6727CCE98F3DD5A54E80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
Manifest number:          02E3
Signing time:             Fri 31 Oct 2025 08:50:47 +0000
Manifest this update:     Fri 31 Oct 2025 08:45:47 +0000
Manifest next update:     Sun 02 Nov 2025 12:29:47 +0000
Files and hashes:         1: AS213525.asa (hash: seEk90bRp86U4w9lX1c0usnGxJgino5umQZtHO6fll4=)
                          2: AS214498.asa (hash: zpKZ3xz417Eo2EM0m+2UqZcFmQBYd5gW7ig2wKkC7zE=)
                          3: C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl (hash: AidHTiz3rLRQgjeNMbOK8Dr25PDzbHCl70VLRKVSM9k=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7a:48:4c:1d:66:85:c1:b9:1d:67:27:cc:e9:8f:3d:d5:a5:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
        Validity
            Not Before: Oct 31 08:45:47 2025 GMT
            Not After : Nov  2 12:29:47 2025 GMT
        Subject: CN=21F4E2E26146A11151ED6FFAE60A6EDF23CABB10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:91:fb:17:ce:b1:95:58:bd:38:9a:56:d5:d0:
                    23:01:05:c7:0f:00:4a:4b:8e:98:f3:48:38:a2:4a:
                    cc:86:b4:f3:1f:74:c9:ee:b0:03:82:a4:f5:d4:e2:
                    05:05:3f:ae:51:98:53:8b:60:01:d8:53:e7:d5:0c:
                    3f:11:b8:2d:8e:72:70:f5:4e:b6:0f:56:23:80:b5:
                    c3:8f:d9:4f:88:93:51:f3:c4:19:7c:71:ab:75:0a:
                    3f:02:5b:00:9e:b7:f8:7e:0e:8e:07:26:37:41:ad:
                    94:1c:42:0f:16:5f:ab:48:d0:71:88:13:af:84:1f:
                    72:e8:0e:6a:d9:b1:95:93:21:a0:08:95:4f:c2:92:
                    5a:6a:9d:f0:eb:38:be:e7:42:e9:3c:96:08:fa:fc:
                    20:d9:4d:cf:45:02:f5:98:2d:8e:8f:40:b1:d5:44:
                    f8:d4:92:6f:3e:60:30:f7:f6:74:91:8f:fb:2b:6a:
                    82:83:a4:32:3e:c7:a9:23:ac:87:45:5f:fd:73:d4:
                    7e:f7:a5:10:47:29:01:b1:de:a3:28:d4:0b:1c:2b:
                    3a:c3:14:a0:6e:27:78:e2:c4:8b:f5:4d:21:32:9f:
                    a2:01:d6:ad:4b:40:19:7c:79:d7:fe:8d:c6:d4:a5:
                    44:4d:44:9e:18:66:36:db:6e:b0:ce:5d:b0:a0:8b:
                    b9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F4:E2:E2:61:46:A1:11:51:ED:6F:FA:E6:0A:6E:DF:23:CA:BB:10
            X509v3 Authority Key Identifier:
                keyid:C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         35:bf:e5:07:03:e5:22:47:67:e1:2e:4a:d0:9a:86:1d:67:b9:
         9b:d8:6f:e5:27:3d:59:44:d6:0b:d8:82:36:35:0c:68:db:f9:
         1e:6f:54:03:87:0a:90:f6:8e:d1:c3:19:11:bb:91:1b:4c:20:
         ff:fb:64:72:72:d3:59:90:cd:96:05:c4:05:0f:69:b2:d6:49:
         ac:7f:b4:8e:02:fc:c8:b8:f1:6c:b2:23:1f:28:50:90:5a:94:
         f6:1b:06:11:fe:d4:fd:3c:32:7a:c5:55:e3:23:11:df:f3:72:
         70:13:18:3c:50:22:99:93:af:57:50:dd:d3:fa:e1:68:19:91:
         c2:14:90:cd:13:f7:34:ed:4d:14:f3:20:62:b9:1a:51:18:25:
         0f:33:46:86:66:81:8b:94:5d:0d:cc:58:37:2f:51:34:80:d7:
         c0:26:8a:59:0d:a4:4a:bb:c6:9c:09:90:a5:05:49:8d:9f:9b:
         e6:73:ce:bc:11:e5:27:d2:30:03:c1:3d:e4:c7:5a:31:7c:eb:
         54:d8:80:f7:d9:a5:0c:5a:24:64:a9:56:2a:fc:ed:4f:2f:67:
         9e:16:00:3d:c5:0c:b5:79:35:90:68:21:af:a6:54:c7:07:a3:
         92:2a:3d:3c:fd:16:b7:09:a9:07:66:46:67:84:85:5a:b9:7a:
         19:05:85:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 13:52:29 2025 by rpki-client