Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
File:                     7D7059638411E3231E759E74A813BF9376209E77.mft (raw, json)
Hash identifier:          HmZJt6ca++YdAqV13UDJjAvtwDvM/gO257/H2yP1VSM=
Subject key identifier:   90:1C:E3:60:0E:8A:F4:E4:48:4A:82:06:D5:1B:A7:05:00:FC:DB:A0
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Certificate issuer:       /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial:       4C310E49E3ECD907E30F19EB974474715F41B7D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
Manifest number:          025A
Signing time:             Tue 11 Nov 2025 07:47:24 +0000
Manifest this update:     Tue 11 Nov 2025 07:42:24 +0000
Manifest next update:     Wed 12 Nov 2025 07:54:24 +0000
Files and hashes:         1: AS215849.asa (hash: WRilh/6hJb7kAkUd7i3j3vQPKdOIGwVbb9ZLfAC7rKQ=)
                          2: 7D7059638411E3231E759E74A813BF9376209E77.crl (hash: 2+trebBhhMKgMMV7otRrhv4+QTFhkq0QZFa9cZmgCmA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:31:0e:49:e3:ec:d9:07:e3:0f:19:eb:97:44:74:71:5f:41:b7:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
        Validity
            Not Before: Nov 11 07:42:24 2025 GMT
            Not After : Nov 12 07:54:24 2025 GMT
        Subject: CN=901CE3600E8AF4E4484A8206D51BA70500FCDBA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:13:d7:e7:26:42:6e:2f:a8:88:d1:08:99:1e:
                    b1:72:e2:54:65:0a:85:04:80:b6:e5:0d:09:48:d9:
                    03:f8:cb:a1:08:60:81:a4:41:9f:b9:bd:67:7c:ae:
                    7d:c2:e6:1d:e3:a0:90:89:e0:11:e9:f9:e2:c7:08:
                    ea:d8:b5:a0:30:50:3a:e5:f2:4c:de:f6:ab:65:09:
                    ef:fa:9a:a3:3b:d5:83:cc:70:51:44:ec:58:6c:74:
                    f7:f0:43:45:47:b1:b9:2f:e9:92:17:c2:d0:5e:10:
                    ed:61:c4:c7:ed:a7:14:25:28:bc:bf:46:23:93:e7:
                    f4:ec:bd:9f:ef:8f:0f:fd:74:95:f0:29:bf:4a:d1:
                    20:51:9d:3e:23:28:4a:c9:9d:8c:79:14:01:d8:5a:
                    33:53:e8:37:6a:9f:53:34:0a:e5:c8:db:77:89:1d:
                    f1:a8:1f:4c:73:38:d4:1b:43:bc:46:09:9a:8e:e9:
                    57:84:94:d6:34:0d:b2:9e:ab:48:6e:2a:22:03:be:
                    79:28:5e:4b:53:be:8a:84:de:67:18:45:7c:e5:30:
                    dd:3e:31:51:0e:8b:18:30:bf:ed:85:5e:b2:c4:f0:
                    93:94:7b:cf:d0:63:d0:01:66:fd:c5:aa:3c:59:77:
                    bc:71:06:9a:16:4c:40:93:db:3a:64:3b:6f:d2:d6:
                    4a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1C:E3:60:0E:8A:F4:E4:48:4A:82:06:D5:1B:A7:05:00:FC:DB:A0
            X509v3 Authority Key Identifier:
                keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:72:32:3b:29:9d:33:ad:fe:5f:da:c7:df:55:b8:ad:4c:de:
         2a:f6:b3:ff:3f:59:4d:c6:c1:ad:9d:aa:15:67:78:67:c0:be:
         f2:e2:f3:2d:22:0f:d0:1c:16:14:88:5e:cf:21:01:e6:d6:23:
         54:05:c7:50:8a:3a:34:b0:67:12:55:1c:bc:eb:0e:c5:8d:37:
         49:0e:d0:04:af:34:e9:55:0a:d2:2f:38:7e:70:4c:6c:1c:03:
         e1:f0:32:93:72:25:82:5d:be:82:a2:37:c3:27:54:5b:7f:40:
         b5:bd:9e:06:b9:3d:da:aa:f1:b3:88:95:3a:ca:a4:64:2a:b0:
         6c:65:f0:f8:ac:8e:ee:42:8a:5c:84:21:3c:d3:0a:aa:56:68:
         58:13:c0:8e:b9:2a:ec:97:73:60:86:6e:8d:30:e5:73:db:4d:
         46:08:f1:91:cf:66:1e:44:a1:14:e2:4c:2d:7e:56:ec:72:4d:
         a7:50:d9:2f:e7:e4:de:27:44:97:93:ca:f1:a3:af:28:65:89:
         5b:f8:6c:1b:49:d7:b2:44:29:c5:58:6b:cb:df:e2:44:41:02:
         7c:42:4b:1c:1d:c7:4e:8a:d1:91:a7:ce:0b:59:01:2a:2d:73:
         99:d0:d8:21:59:bc:f0:5a:c6:aa:96:77:31:59:9d:18:f0:15:
         d3:dd:31:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:27 2025 by rpki-client