Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
File:                     25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft (raw, json)
Hash identifier:          VG/O14Nc1fJwJodyKEKAK4lGfKgk25Eh9waomRS8bic=
Subject key identifier:   92:18:9F:D0:A3:BD:D7:96:BE:82:82:69:2B:A6:CB:D4:DA:9E:B6:BC
Authority key identifier: 25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
Certificate issuer:       /CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Certificate serial:       625B8E355E01FC1B5DA04E1237B57E1EC2DDF314
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
Manifest number:          03B6
Signing time:             Fri 06 Jun 2025 06:54:22 +0000
Manifest this update:     Fri 06 Jun 2025 06:49:22 +0000
Manifest next update:     Sat 07 Jun 2025 08:38:22 +0000
Files and hashes:         1: AS205603.asa (hash: cBPBrIrKQApvXReq5l0HPs0LV31Ya31Pj6v8h6b+N+0=)
                          2: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl (hash: GvX+fM6x/mfw07nujKt+xo+ocXKOlB5tbczw7tP3oOY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 08:38:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:5b:8e:35:5e:01:fc:1b:5d:a0:4e:12:37:b5:7e:1e:c2:dd:f3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25c73dfc868c3f62cb7ff971af477671caf380aa
        Validity
            Not Before: Jun  6 06:49:22 2025 GMT
            Not After : Jun  7 08:38:22 2025 GMT
        Subject: CN=92189FD0A3BDD796BE8282692BA6CBD4DA9EB6BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:57:1e:2d:99:c4:a8:48:34:00:67:0a:49:
                    5d:c7:1b:55:05:cf:8b:76:1b:39:3b:b8:d9:be:14:
                    68:a8:fd:cd:67:85:90:b3:09:57:2f:83:16:d8:1d:
                    bf:4e:71:ee:9e:09:f6:74:99:71:e9:6f:bc:fd:67:
                    7b:95:82:f0:87:cd:72:10:7f:bf:6a:a5:0a:71:22:
                    0f:c0:cb:b9:1c:22:8c:ce:39:16:b9:b5:a4:95:45:
                    c4:aa:1b:67:81:9c:af:0e:dc:46:cd:9d:0d:92:f0:
                    71:69:05:b2:6a:61:3e:4d:a4:80:55:3e:4d:f3:78:
                    f8:07:60:ce:a6:68:79:f4:2b:ae:69:39:2b:63:00:
                    b4:1a:d4:3f:77:ee:6c:33:67:4b:dc:71:a8:22:55:
                    1e:a3:fb:7b:28:43:43:3a:b3:1c:db:36:47:42:0b:
                    9d:65:f7:26:d9:f1:16:7f:4b:15:d1:57:e9:db:c3:
                    27:bb:2e:b0:1f:75:a0:55:56:63:07:31:53:a1:90:
                    67:2a:27:c9:d6:13:0c:4e:9a:57:e2:af:0d:ab:40:
                    65:49:c6:2f:d3:24:09:f5:eb:2c:e1:97:5e:d6:f7:
                    7e:d7:ad:21:86:58:c3:f9:0b:28:5b:10:92:8f:f4:
                    86:27:df:92:31:4c:af:ba:bb:56:45:e3:c2:ac:8f:
                    6a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:18:9F:D0:A3:BD:D7:96:BE:82:82:69:2B:A6:CB:D4:DA:9E:B6:BC
            X509v3 Authority Key Identifier:
                keyid:25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:bc:48:19:73:45:65:fc:e2:1f:96:f7:c7:75:82:28:81:c1:
         dd:64:79:7a:c0:fa:74:b7:dc:e5:e8:23:1b:bf:a8:04:5b:11:
         38:1d:5a:e6:44:db:2a:b4:b5:7e:00:94:cf:41:d0:8a:3e:58:
         ba:0f:74:bb:fd:fa:5c:b5:55:8f:38:05:a6:b5:01:1c:f1:ab:
         79:9a:76:04:d2:a5:a8:9b:6c:f8:86:3a:f0:e0:ca:bc:53:50:
         25:70:c1:51:be:4e:61:38:85:18:7c:be:ed:c5:29:ff:4b:74:
         3b:26:25:53:06:f1:59:cc:ee:5d:34:3a:96:e8:78:15:44:c5:
         d9:e1:a5:cd:96:90:53:1e:57:61:0d:cb:e7:7f:8d:ea:6e:81:
         c2:86:1d:ec:c7:c9:b9:cb:fd:26:72:82:ea:3f:71:5e:a3:6b:
         98:a5:02:68:38:37:4f:95:b2:03:ea:cd:23:22:18:13:66:2b:
         61:83:3c:89:c8:c7:e3:0e:03:73:37:c8:16:b3:78:43:12:66:
         6f:6e:d5:7a:59:cf:df:a1:01:45:2a:7f:06:f5:7c:e9:e6:cd:
         82:8d:20:b8:6e:8e:aa:14:b4:52:7b:83:7a:68:f0:aa:a1:5c:
         23:28:76:54:81:9d:e0:78:c3:99:e5:59:70:6b:f1:d0:65:68:
         36:af:d9:d0
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUYluONV4B/BtdoE4SN7V+HsLd8xQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVjNzNkZmM4NjhjM2Y2MmNiN2ZmOTcxYWY0Nzc2NzFj
YWYzODBhYTAeFw0yNTA2MDYwNjQ5MjJaFw0yNTA2MDcwODM4MjJaMDMxMTAvBgNV
BAMTKDkyMTg5RkQwQTNCREQ3OTZCRTgyODI2OTJCQTZDQkQ0REE5RUI2QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB51ceLZnEqEg0AGcKSV3HG1UF
z4t2Gzk7uNm+FGio/c1nhZCzCVcvgxbYHb9Oce6eCfZ0mXHpb7z9Z3uVgvCHzXIQ
f79qpQpxIg/Ay7kcIozOORa5taSVRcSqG2eBnK8O3EbNnQ2S8HFpBbJqYT5NpIBV
Pk3zePgHYM6maHn0K65pOStjALQa1D937mwzZ0vccagiVR6j+3soQ0M6sxzbNkdC
C51l9ybZ8RZ/SxXRV+nbwye7LrAfdaBVVmMHMVOhkGcqJ8nWEwxOmlfirw2rQGVJ
xi/TJAn16yzhl17W937XrSGGWMP5CyhbEJKP9IYn35IxTK+6u1ZF48Ksj2qDAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUkhif0KO915a+goJpK6bL1NqetrwwHwYDVR0j
BBgwFoAUJcc9/IaMP2LLf/lxr0d2ccrzgKowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGVjMzYyMTAtZjZjZi00YzRmLWExNTUtNzhhOGViNWJm
MGJmLzAvMjVDNzNERkM4NjhDM0Y2MkNCN0ZGOTcxQUY0Nzc2NzFDQUYzODBBQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pjYzlfSWFNUDJMTGZfbHhyMGQyY2Ny
emdLby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZWMzNjIxMC1m
NmNmLTRjNGYtYTE1NS03OGE4ZWI1YmYwYmYvMC8yNUM3M0RGQzg2OEMzRjYyQ0I3
RkY5NzFBRjQ3NzY3MUNBRjM4MEFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7xIGXNFZfziH5b3x3WC
KIHB3WR5esD6dLfc5egjG7+oBFsROB1a5kTbKrS1fgCUz0HQij5Yug90u/36XLVV
jzgFprUBHPGreZp2BNKlqJts+IY68ODKvFNQJXDBUb5OYTiFGHy+7cUp/0t0OyYl
UwbxWczuXTQ6luh4FUTF2eGlzZaQUx5XYQ3L53+N6m6BwoYd7MfJucv9JnKC6j9x
XqNrmKUCaDg3T5WyA+rNIyIYE2YrYYM8icjH4w4DczfIFrN4QxJmb27VelnP36EB
RSp/BvV86ebNgo0guG6OqhS0UnuDemjwqqFcIyh2VIGd4HjDmeVZcGvx0GVoNq/Z
0A==
-----END CERTIFICATE-----
Generated at Fri Jun 6 22:34:45 2025 by rpki-client