Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
File:                     7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft (raw, json)
Hash identifier:          5VGTcXyOyjSOJFjKtNrjj+hJAXpAqwZgdkc/ucSTUPM=
Subject key identifier:   69:FA:D8:72:F5:71:62:4B:B6:60:45:C1:36:DC:88:68:41:F7:DB:0A
Authority key identifier: 7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
Certificate issuer:       /CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Certificate serial:       6D63E5E53602FC8D4523D0FFF63C48E76D7EA8FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
Manifest number:          017D
Signing time:             Sun 07 Sep 2025 07:41:05 +0000
Manifest this update:     Sun 07 Sep 2025 07:36:05 +0000
Manifest next update:     Mon 08 Sep 2025 08:23:05 +0000
Files and hashes:         1: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl (hash: m9D1wWZDqEKd0+WojHIPvBk8lezkeu19/N5lbjI5Nvk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:63:e5:e5:36:02:fc:8d:45:23:d0:ff:f6:3c:48:e7:6d:7e:a8:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
        Validity
            Not Before: Sep  7 07:36:05 2025 GMT
            Not After : Sep  8 08:23:05 2025 GMT
        Subject: CN=69FAD872F571624BB66045C136DC886841F7DB0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:49:95:50:be:d9:17:de:56:48:72:bb:99:
                    fc:75:d1:54:1d:d5:a0:b3:96:ca:20:97:ef:dc:8b:
                    14:f5:0a:1f:34:cb:c4:12:07:6e:63:bf:78:3b:c7:
                    88:5d:4b:37:ee:6b:04:bb:1d:f8:9e:47:4f:d5:dc:
                    81:f8:ea:95:d0:ca:42:ba:60:45:73:d3:49:c5:e7:
                    b0:08:ff:dd:a4:05:52:43:26:59:94:41:5c:f8:b1:
                    80:22:40:a4:51:81:96:96:87:cf:9c:74:88:03:21:
                    c2:0a:e8:50:de:b6:5b:94:f1:7c:4a:e1:23:88:7b:
                    25:04:8d:05:ae:f9:c0:95:5d:b9:df:be:18:49:62:
                    56:58:9f:4a:16:d3:e7:26:5f:41:74:d1:98:d0:da:
                    59:fc:1b:d4:a3:01:5e:cc:71:d8:e1:30:29:07:fb:
                    82:9f:8a:b0:bd:d7:99:02:84:cb:aa:44:29:f7:4a:
                    41:cd:e7:e0:fc:f0:52:35:42:dc:fe:ee:d3:82:ba:
                    a0:82:b2:0a:b9:d6:e8:90:dd:64:17:28:31:a3:84:
                    7b:37:44:be:63:cf:e6:3a:bc:a7:cc:17:47:e8:e9:
                    79:42:e1:fa:ea:70:10:d3:b6:3f:11:0f:d4:9d:ba:
                    c8:f7:2d:fa:ce:4a:01:f0:ad:e5:ce:4c:44:ea:e3:
                    7b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FA:D8:72:F5:71:62:4B:B6:60:45:C1:36:DC:88:68:41:F7:DB:0A
            X509v3 Authority Key Identifier:
                keyid:7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:82:2b:8f:c8:fa:07:a1:88:db:be:e6:64:44:e5:a8:b4:7f:
         01:c0:28:52:8a:ff:71:3c:bc:6c:5d:96:b7:07:d4:94:5c:60:
         bd:20:5a:5a:7e:7c:fb:b8:cb:54:b8:21:28:34:3c:23:f0:8d:
         e0:30:71:c8:57:c9:a6:83:6f:8b:18:f4:32:6a:0a:63:e2:40:
         69:5f:61:c0:09:98:3d:fd:9d:20:64:5e:d3:0e:4b:58:7c:33:
         0c:4b:6b:e9:94:04:be:2e:01:05:88:c0:d8:e4:9a:93:62:fe:
         2e:2a:4c:7f:1d:7e:6c:ec:c2:b1:26:8e:7b:55:7e:c1:77:12:
         3a:1a:07:ae:c7:b4:2d:3e:a6:d0:20:de:69:85:58:88:13:ae:
         fa:05:3b:c7:44:b5:40:9b:2b:8c:2e:91:f1:7b:a9:08:37:2d:
         ef:dd:ad:3e:a5:58:07:9b:bd:79:4b:8f:4d:be:48:fc:6a:b7:
         14:1d:05:13:e4:8e:04:2d:b0:33:70:af:b9:de:14:52:e9:f4:
         b8:a3:5f:36:25:a5:6a:63:c1:eb:b0:d7:31:35:0d:9d:34:d2:
         2c:a9:69:25:ff:bc:78:77:18:59:3a:62:55:e4:b7:26:5b:35:
         bc:71:ed:a2:27:ad:d9:c0:fb:55:be:60:a2:e3:2b:63:50:74:
         43:73:b0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:36 2025 by rpki-client