Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
File:                     D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft (raw, json)
Hash identifier:          1EPfmH5K/41MReAL7n8FN/Hb6xSapAWIZ3wtWMhx6wE=
Subject key identifier:   C3:6D:75:7A:26:7B:4B:F5:26:93:46:75:65:8A:34:65:B3:13:90:11
Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8
Certificate issuer:       /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
Certificate serial:       208D33728DFC989AA5B7FDC616FC6F4B641EAD96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
Manifest number:          03B0
Signing time:             Mon 15 Sep 2025 18:08:03 +0000
Manifest this update:     Mon 15 Sep 2025 18:03:03 +0000
Manifest next update:     Tue 16 Sep 2025 21:07:03 +0000
Files and hashes:         1: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl (hash: v+eSHRTyPZqudqYVPMZCDWWH103wZligdrCCACtRsCU=)
                          2: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (hash: SVc+06+kSTZLFSZYHt+18ILRTqVegdlc2kojDgxmDjY=)
                          3: AS202881.asa (hash: n7g3r7+FlCCQyP417H6Uudw0ZEIUQH6oYUZ2fSNBDRU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 13:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:8d:33:72:8d:fc:98:9a:a5:b7:fd:c6:16:fc:6f:4b:64:1e:ad:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
        Validity
            Not Before: Sep 15 18:03:03 2025 GMT
            Not After : Sep 16 21:07:03 2025 GMT
        Subject: CN=C36D757A267B4BF526934675658A3465B3139011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5b:b3:da:70:f6:7e:47:bc:9d:ac:1b:a5:8b:
                    4b:24:5b:9f:f0:21:2f:d8:32:9b:ff:ef:21:6e:2e:
                    bc:51:42:dd:be:08:9c:31:97:44:75:bc:4b:31:d7:
                    c4:64:a4:b6:5a:f4:08:6f:92:49:a3:07:d5:15:2f:
                    85:86:7a:37:cc:0a:04:e2:e8:03:a7:4a:9f:7f:0d:
                    02:62:e8:b0:01:bc:cc:22:32:b0:0b:03:15:f0:0d:
                    96:6e:f3:c0:b3:fa:53:93:45:8c:54:29:20:b8:64:
                    cf:4d:5f:89:e8:b7:ad:68:8d:99:83:6a:e0:66:e0:
                    55:b8:02:fb:2e:ed:0d:a3:05:5b:74:cc:09:a2:bd:
                    0b:f7:ff:7a:06:28:5a:0a:29:15:78:bb:51:bb:0c:
                    4a:bc:9a:58:7a:33:b4:ec:72:d1:ff:90:2e:cd:78:
                    91:9c:d3:05:aa:c2:8c:aa:0d:9c:0e:6a:94:57:71:
                    2b:75:93:a5:d3:00:08:47:1a:65:44:6e:47:af:83:
                    14:a6:31:0f:e8:91:1e:a0:55:62:f7:9d:1d:35:ff:
                    5f:eb:c4:ca:d0:0e:46:e9:4d:92:c4:50:f2:56:7a:
                    78:df:88:d9:1f:68:c0:b0:13:d2:30:ce:cb:2a:ad:
                    c3:7e:ff:d4:ee:1a:0c:e5:52:7a:66:93:42:01:7c:
                    bc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6D:75:7A:26:7B:4B:F5:26:93:46:75:65:8A:34:65:B3:13:90:11
            X509v3 Authority Key Identifier:
                keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:c7:b5:50:39:db:03:40:63:b2:8c:a9:df:91:88:fb:f1:31:
         fb:af:d7:97:05:95:34:d1:41:d4:7e:8c:2d:5b:2d:5e:6e:39:
         f7:d9:cd:81:fe:48:8a:4a:7e:12:12:e8:fc:65:f0:d0:8e:c1:
         e6:a8:a9:e8:fa:8b:9d:b4:bc:f0:38:d2:ec:f6:7b:1d:e1:4f:
         e4:92:9a:23:ad:22:40:a9:38:8c:52:59:b5:0a:2f:b0:e7:00:
         e3:5e:13:4b:28:3c:1f:c6:8a:09:b8:9a:6e:46:29:fd:54:81:
         1d:b3:9b:2d:51:65:98:cd:7e:64:d9:c0:ba:32:84:eb:d9:04:
         f8:fa:30:5f:09:09:c6:77:83:5c:4c:af:18:0e:59:e4:53:1c:
         48:a9:b3:73:a6:c9:d6:40:cd:50:b1:f9:ff:5b:af:77:f1:ce:
         8f:55:61:7b:7e:7f:0c:ee:a3:84:1f:30:f2:8a:17:d2:f7:15:
         12:ec:3d:1b:2b:3a:04:e4:19:c6:1a:d9:54:e6:fc:b0:ad:d0:
         66:85:b7:35:3c:a4:c5:81:d5:52:18:d2:87:45:95:5c:5e:23:
         78:ef:e1:6f:a4:5b:45:fd:3e:ba:19:f5:5f:3b:d2:b0:03:26:
         ff:00:fe:95:85:af:f4:0b:fe:83:61:e6:7a:f3:78:0c:cf:33:
         25:1f:46:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 19:15:43 2025 by rpki-client