Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
File:                     C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft (raw, json)
Hash identifier:          tjRmRDoApojk61A5dk+JJRW+UtV95M3CMNNPNzBFkhk=
Subject key identifier:   5D:6A:35:00:CE:2C:54:F2:B7:F4:1F:05:54:21:2E:72:0F:5F:AE:B9
Authority key identifier: C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC
Certificate issuer:       /CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
Certificate serial:       2CBA4F09040594B82D22FF3F0FE0258C5E50F03A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
Manifest number:          029A
Signing time:             Mon 15 Sep 2025 16:54:55 +0000
Manifest this update:     Mon 15 Sep 2025 16:49:55 +0000
Manifest next update:     Wed 17 Sep 2025 19:29:55 +0000
Files and hashes:         1: C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl (hash: tzNm5hc+7nFXCfsA1t46VGZ2OeXH6Pi39lj4DLQ1H2Q=)
                          2: AS213525.asa (hash: seEk90bRp86U4w9lX1c0usnGxJgino5umQZtHO6fll4=)
                          3: AS214498.asa (hash: zpKZ3xz417Eo2EM0m+2UqZcFmQBYd5gW7ig2wKkC7zE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 13:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ba:4f:09:04:05:94:b8:2d:22:ff:3f:0f:e0:25:8c:5e:50:f0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
        Validity
            Not Before: Sep 15 16:49:55 2025 GMT
            Not After : Sep 17 19:29:55 2025 GMT
        Subject: CN=5D6A3500CE2C54F2B7F41F0554212E720F5FAEB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:68:89:c0:93:0d:39:b7:5f:e4:4a:28:d6:10:
                    e2:8f:7f:c2:77:10:15:50:12:b7:de:a0:3f:b0:90:
                    10:c4:a1:fd:24:f5:bf:5a:de:d3:9b:a9:d9:3b:1f:
                    83:f8:e6:9a:4c:be:5a:f7:01:24:fc:e1:fa:6c:a3:
                    f4:5c:5c:06:5a:9b:73:ba:ac:dc:45:44:00:fd:bf:
                    12:49:c9:f7:02:2e:31:98:f1:b2:66:6d:5e:01:00:
                    9c:ea:b7:5c:d5:82:51:6d:1b:84:1e:3a:3e:1a:b9:
                    4c:f1:76:35:f1:51:22:32:29:2b:59:6d:20:ed:03:
                    ef:59:fe:15:b3:6a:e6:70:ea:e0:2b:4e:8a:70:fb:
                    45:04:bd:51:ae:bf:b3:5a:f8:8b:aa:8f:b6:a3:92:
                    56:d1:3b:e9:fd:ef:13:a9:b2:89:fc:c2:91:5e:e1:
                    ff:a2:f3:01:01:55:84:69:97:91:e5:5a:77:83:b4:
                    00:7a:31:fe:48:72:95:a9:5d:04:e1:0c:5d:e0:e2:
                    fa:d4:11:3b:c9:b4:1d:9d:78:d9:27:f2:ea:7d:23:
                    d6:e0:9e:84:8f:62:ad:7a:ba:54:6a:f5:56:8f:f1:
                    65:1c:e5:d2:ca:19:3c:b1:bf:90:73:70:a5:b9:56:
                    a2:d3:d0:ce:4c:21:c9:f0:0b:40:04:43:9a:29:aa:
                    a9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6A:35:00:CE:2C:54:F2:B7:F4:1F:05:54:21:2E:72:0F:5F:AE:B9
            X509v3 Authority Key Identifier:
                keyid:C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:31:63:d9:83:dc:b2:19:39:9e:ff:57:bc:80:57:45:29:f6:
         c9:b1:97:73:e8:55:a3:79:0b:3c:c8:ca:a3:c3:22:5b:03:f3:
         c9:cc:3f:8a:59:ab:25:08:48:1c:31:06:bc:a9:09:29:4d:6b:
         ce:d9:38:22:71:ca:b1:19:38:b9:5e:fd:72:71:42:da:ad:3a:
         aa:e3:d1:f4:ce:1a:f0:44:4f:48:88:c2:9f:e5:27:27:8e:40:
         7a:97:5f:98:e0:06:26:4e:37:47:8b:5b:7d:4b:1c:75:43:bb:
         73:15:00:f9:a6:db:01:47:16:de:19:29:1d:54:88:c0:60:30:
         a8:af:af:33:04:cd:1c:48:8e:21:14:44:fe:af:42:5b:6d:85:
         d4:94:27:fa:71:54:85:ba:33:d3:82:68:57:ed:23:55:c0:8e:
         8d:58:8e:34:16:55:9c:91:04:6a:71:fa:a8:42:8a:e7:65:f9:
         50:cf:f4:c9:35:b0:bf:14:eb:30:bb:33:2f:48:97:a8:cc:4a:
         d2:54:2e:37:95:42:6a:b8:2b:b1:47:42:69:e8:94:32:71:21:
         a9:61:bf:75:99:52:4f:56:e0:c7:15:8e:f3:4e:15:b4:c3:a2:
         38:86:1d:9c:97:27:69:ec:01:f2:8d:06:9c:d0:55:e2:ec:9a:
         61:a7:79:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 19:44:25 2025 by rpki-client