Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/E1456D788FE94866C9FE0B87758A8AB1E221E8DB.mft
File:                     E1456D788FE94866C9FE0B87758A8AB1E221E8DB.mft (raw, json)
Hash identifier:          oUZ7MJeQJO6MC6w8uYN3vSZWs93gCl7cYjRi6f2A4Cw=
Subject key identifier:   3E:72:73:6E:BD:44:D0:51:71:E3:21:D4:2C:D8:1A:49:C2:2C:11:6F
Authority key identifier: E1:45:6D:78:8F:E9:48:66:C9:FE:0B:87:75:8A:8A:B1:E2:21:E8:DB
Certificate issuer:       /CN=e1456d788fe94866c9fe0b87758a8ab1e221e8db
Certificate serial:       1C11C10C63FDCC983C2181954FE21A92527A2E00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UVteI_pSGbJ_guHdYqKseIh6Ns.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/E1456D788FE94866C9FE0B87758A8AB1E221E8DB.mft
Manifest number:          06
Signing time:             Tue 11 Nov 2025 00:38:14 +0000
Manifest this update:     Tue 11 Nov 2025 00:33:14 +0000
Manifest next update:     Wed 12 Nov 2025 03:17:14 +0000
Files and hashes:         1: AS210796.asa (hash: UUIMqt8ZmaK9oM2cGglTc+0B5+iNW+0belJbJzZMcCg=)
                          2: E1456D788FE94866C9FE0B87758A8AB1E221E8DB.crl (hash: UDjDvHqo6stEdKEzrz84QodhVuGa8l2/wyKPV9RZ59w=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/E1456D788FE94866C9FE0B87758A8AB1E221E8DB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/E1456D788FE94866C9FE0B87758A8AB1E221E8DB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4UVteI_pSGbJ_guHdYqKseIh6Ns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 03:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:11:c1:0c:63:fd:cc:98:3c:21:81:95:4f:e2:1a:92:52:7a:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1456d788fe94866c9fe0b87758a8ab1e221e8db
        Validity
            Not Before: Nov 11 00:33:14 2025 GMT
            Not After : Nov 12 03:17:14 2025 GMT
        Subject: CN=3E72736EBD44D05171E321D42CD81A49C22C116F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:cf:ea:68:6e:ee:55:54:f9:f4:fd:d5:c0:7b:
                    8e:f7:49:4f:d2:ef:ad:cc:37:a5:9e:bf:e9:cc:66:
                    9f:7d:ce:a9:7b:26:10:e8:21:ca:af:7c:91:e8:0e:
                    36:b6:e6:2d:0c:81:6f:c5:41:31:4d:74:db:1a:c3:
                    1c:03:83:88:eb:b2:dd:9e:cb:61:f8:5a:62:12:fe:
                    f8:0c:48:de:f1:da:cb:ad:51:7a:40:e4:b3:ef:71:
                    73:99:9c:38:8d:98:4b:d1:98:08:3f:c9:60:f9:98:
                    52:e1:38:bd:aa:9f:48:fb:cb:95:a6:39:76:8e:f9:
                    e1:0a:46:3a:46:cb:92:e2:92:e8:91:14:8a:05:41:
                    e3:32:3c:70:66:5a:4e:d7:e9:99:70:59:2f:74:e1:
                    d4:77:d8:d4:53:62:fb:aa:41:f2:b5:83:cb:57:b8:
                    01:4a:60:52:8b:ee:ff:33:1e:66:de:dd:03:36:0d:
                    67:3c:ad:32:c2:92:0b:6a:ab:3b:7d:a2:26:1f:d3:
                    9f:91:43:ff:7b:20:f9:0e:b2:87:4d:36:8f:67:e2:
                    84:d6:1f:24:4b:01:f8:0f:20:53:f7:1a:bc:2c:33:
                    d5:8f:cf:dc:2c:53:99:e7:40:7a:fe:e2:33:cf:e3:
                    6f:2c:0d:1c:fd:6b:86:c3:9f:d5:aa:dd:fe:25:b4:
                    72:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:72:73:6E:BD:44:D0:51:71:E3:21:D4:2C:D8:1A:49:C2:2C:11:6F
            X509v3 Authority Key Identifier:
                keyid:E1:45:6D:78:8F:E9:48:66:C9:FE:0B:87:75:8A:8A:B1:E2:21:E8:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/E1456D788FE94866C9FE0B87758A8AB1E221E8DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UVteI_pSGbJ_guHdYqKseIh6Ns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/E1456D788FE94866C9FE0B87758A8AB1E221E8DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:90:9d:89:cf:f7:25:45:bd:e3:58:60:37:7a:7d:d1:ce:a4:
         53:70:22:58:f5:de:cf:a8:56:d0:28:d6:e0:29:71:b0:8a:79:
         92:2d:0f:83:84:93:bf:de:16:cf:26:76:59:6f:b7:41:1c:84:
         7d:31:85:51:c4:18:fc:16:37:31:2c:7a:57:b7:86:f4:a7:86:
         83:9c:a5:6d:60:04:65:90:2e:5e:6c:aa:96:07:7e:15:36:24:
         9a:17:0d:aa:33:c9:df:4d:2e:28:5e:6a:c1:95:9c:6d:d6:a8:
         00:2b:60:b0:95:23:c5:8f:6a:5e:50:b5:6b:a6:2c:b0:87:76:
         dd:9c:5e:56:0e:89:2f:02:df:c6:53:83:cb:81:3e:6c:16:66:
         c3:66:bb:8a:80:98:11:ba:26:b8:e0:4c:a3:4c:c2:23:d0:40:
         81:2a:42:3e:be:09:9d:f9:ff:28:ed:0d:cf:eb:72:44:29:3e:
         6b:6a:d5:47:da:d8:7f:37:b5:80:27:8f:38:66:fc:5d:9b:2d:
         dd:22:72:53:8f:67:10:03:ac:06:ec:72:30:a8:aa:70:c3:a3:
         1b:18:b3:9b:e5:b3:14:6e:ba:fd:24:4f:ad:cd:3e:26:ff:17:
         6a:f9:6b:47:62:50:fe:58:66:d8:0c:2e:38:ab:72:c6:6c:d0:
         38:72:de:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:25 2025 by rpki-client