Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft
File:                     637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json)
Hash identifier:          LiAJjIM4HJhDq6v9UNF3RxHg3kkZpz0QrHXND+eUmyc=
Subject key identifier:   94:78:1A:8C:F2:BD:17:7C:56:C8:79:5C:27:7D:15:28:37:AE:84:BF
Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A
Certificate issuer:       /CN=637fd1ba3fed44454d6d7030247709d28db3491a
Certificate serial:       77025C41D75FAD6E4F995DCE3F38610CECCA0B8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft
Manifest number:          03CA
Signing time:             Tue 21 Oct 2025 08:47:22 +0000
Manifest this update:     Tue 21 Oct 2025 08:42:22 +0000
Manifest next update:     Wed 22 Oct 2025 11:01:22 +0000
Files and hashes:         1: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: lmQNsCJqCrCo8Z8BJjmOK6pIdGEgkq/M5B+tL5iEq+g=)
                          2: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: spk6NtqPTGXoBo4XJMsULHBo1PCje3tyvN9b3jHB/pA=)
                          3: 3133392e32382e32352e302f32342d3234203d3e20323030303137.roa (hash: KTt7IBC5OKuP6muE0/6zCxuIwEkqcnypdMUhBFAyx18=)
                          4: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: kj5wXeF4AQFWN9fpmE1MKtBmtMRLs1TA1rGuGr1+5eA=)
                          5: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (hash: Zbml066pXi3G2h7cDhaY/zBOXtPP1DXZek0hCHsXFhc=)
                          6: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: 4dsufrRZZT3ng/M0mUxRioQsmJP0ZwUerMNQTCdj11A=)
                          7: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: eR+xyo+zY+fM9l50cFs0swlGeIX2NljYGKvE5SQX83U=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 11:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:02:5c:41:d7:5f:ad:6e:4f:99:5d:ce:3f:38:61:0c:ec:ca:0b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a
        Validity
            Not Before: Oct 21 08:42:22 2025 GMT
            Not After : Oct 22 11:01:22 2025 GMT
        Subject: CN=94781A8CF2BD177C56C8795C277D152837AE84BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b4:73:cf:41:b3:b9:d1:9e:20:9f:34:cf:65:
                    f7:92:86:63:db:47:1e:e7:a8:6d:32:43:36:c3:df:
                    52:e3:96:e8:81:df:ef:df:8a:a2:3e:52:6f:c0:0c:
                    44:9e:da:d2:0b:d7:ca:88:bd:03:95:80:e5:32:30:
                    3c:00:25:ee:ae:b4:46:c3:a9:37:68:b0:6f:79:a4:
                    99:cb:86:af:82:7d:d2:c5:d4:fb:50:0b:19:7d:f1:
                    bd:4e:29:36:9a:31:aa:b2:03:6b:22:45:67:c7:e9:
                    ee:95:6c:f1:ad:de:c9:01:b5:e4:c9:21:d9:ac:ad:
                    b3:7a:88:7e:be:e8:5a:25:a6:92:5f:3a:9a:ab:73:
                    2c:f4:3c:31:0c:5a:2c:c9:4d:5e:a8:19:bb:73:51:
                    c4:ed:a7:aa:91:52:1c:ce:49:a9:80:7d:09:38:1f:
                    4e:8d:a8:e7:16:9e:36:ac:e8:d9:5e:3e:99:7e:43:
                    ea:b1:47:83:72:95:cd:b0:f1:9d:c8:09:c8:4a:36:
                    6c:11:de:a2:f6:70:ea:f4:90:e5:33:0a:3a:98:67:
                    fd:65:87:1a:fc:b8:01:aa:d6:c2:4d:8b:ea:aa:ec:
                    f2:d2:76:12:c8:fe:ee:98:47:9b:a0:63:d5:b0:38:
                    92:b5:02:47:7f:24:91:5b:14:70:47:f6:2d:7d:03:
                    04:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:78:1A:8C:F2:BD:17:7C:56:C8:79:5C:27:7D:15:28:37:AE:84:BF
            X509v3 Authority Key Identifier:
                keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:94:fb:f4:af:64:20:7b:db:94:0b:e2:98:4c:5a:f7:d9:fc:
         88:7e:8f:2c:b4:41:65:6b:a0:1d:b3:3b:04:52:52:ba:fd:aa:
         b0:40:31:24:49:bb:35:68:c7:1f:0b:14:f9:cd:56:62:6d:86:
         df:9b:70:d0:e0:e4:38:52:62:5d:c7:15:c5:a8:d6:ef:41:3e:
         1b:0a:9d:09:dd:79:b0:39:7c:6f:ea:8d:ec:1f:c8:84:6a:06:
         12:6a:ea:c6:42:a7:5d:93:bd:7a:2e:d3:8c:64:45:02:c9:40:
         5f:73:93:91:84:63:0f:51:6f:78:54:f7:15:1d:74:81:d7:95:
         0a:bd:b3:f5:38:13:0f:76:d9:73:7d:49:c6:81:6f:1b:11:be:
         3b:13:7b:15:c9:3e:c1:e0:c6:cb:06:ea:81:d5:b1:c1:10:67:
         4f:d2:a4:c8:6a:76:86:0d:d1:88:19:42:97:77:69:b0:c0:f5:
         2c:08:ae:ca:ef:74:54:2b:15:f3:2f:ae:1e:f5:4c:2f:b7:8f:
         e8:7d:95:6c:91:46:83:20:9e:4e:9c:84:66:af:ef:fc:2e:6d:
         3e:a3:ec:81:c1:94:c7:61:d1:62:ff:fb:9e:d9:d9:2d:64:e7:
         ee:cc:13:f1:0c:22:6b:c4:a8:ec:81:3e:eb:32:fe:a2:92:eb:
         c3:87:84:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 20:09:40 2025 by rpki-client