Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
File:                     578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft (raw, json)
Hash identifier:          R/XY8pKfhhAeiqNcqk2HN0oR0RO1IixR7xOmwTsTzDw=
Subject key identifier:   6A:AE:68:12:90:03:52:B5:8C:DA:D9:5A:C4:38:F3:1C:E9:E7:E7:93
Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3
Certificate issuer:       /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
Certificate serial:       15CECA43A1E9F2913BAF1C9DBAC4678BF1F6A13B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
Manifest number:          9A
Signing time:             Fri 06 Jun 2025 07:04:25 +0000
Manifest this update:     Fri 06 Jun 2025 06:59:25 +0000
Manifest next update:     Sat 07 Jun 2025 07:58:25 +0000
Files and hashes:         1: 3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa (hash: 54w2F3M9c9ZMYqej/uVTYoc9lVaBw0QpLSZEW7mlB7o=)
                          2: 323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa (hash: 9+L5QD9C8ye40Ikj2zBEBBChEOO2tsV/W1In9gyAruM=)
                          3: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl (hash: Ib1Oi65GaX5oSAniGHYu/mU6lREvNVhSoclFcGCiyAw=)
                          4: AS215296.asa (hash: ZUhznpJKsAa9LaDOPMe8wN6G79cK71SOYf6WHfqiJOY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 07:58:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ce:ca:43:a1:e9:f2:91:3b:af:1c:9d:ba:c4:67:8b:f1:f6:a1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
        Validity
            Not Before: Jun  6 06:59:25 2025 GMT
            Not After : Jun  7 07:58:25 2025 GMT
        Subject: CN=6AAE6812900352B58CDAD95AC438F31CE9E7E793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:35:93:10:f7:41:46:f4:62:01:11:3f:28:77:
                    5f:18:e8:1d:92:1f:b5:98:b3:c0:8f:9c:8e:34:17:
                    b7:c9:ff:6b:40:b5:a3:45:ec:81:5c:be:31:3a:da:
                    6e:a1:21:d1:3b:19:20:e3:40:2b:fb:03:51:5a:68:
                    b5:74:e5:33:7a:28:cb:77:96:0c:82:51:04:9b:cf:
                    3a:c2:f8:cf:46:05:40:34:db:44:11:0b:67:53:55:
                    2a:ee:90:92:3f:e2:5e:b7:5c:1e:24:38:dd:56:8d:
                    30:42:e9:f8:b2:37:1d:9a:c6:4a:df:48:ac:9f:20:
                    48:5b:a2:ab:64:fd:dc:e3:b6:cf:83:c6:fe:c2:31:
                    26:e6:a9:c3:d0:17:5c:af:96:cf:a5:54:47:68:e2:
                    3c:2b:c6:c8:c2:07:db:32:4d:49:a0:39:5e:b1:db:
                    0b:b0:cc:a0:12:51:38:f0:e7:29:dc:37:78:ae:dd:
                    5b:64:3d:0f:c3:73:68:d2:90:df:54:4c:a3:52:1c:
                    74:ba:3c:59:b6:a1:0f:08:c7:01:ba:84:b5:ee:28:
                    a4:a8:2e:b3:e8:3b:3d:f7:7c:58:4a:91:a9:a0:b5:
                    91:3c:37:15:bd:c0:f7:de:f6:39:dd:99:3d:b7:d4:
                    6e:80:2c:01:d2:b1:4b:85:bf:06:e1:44:b2:72:b8:
                    04:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AE:68:12:90:03:52:B5:8C:DA:D9:5A:C4:38:F3:1C:E9:E7:E7:93
            X509v3 Authority Key Identifier:
                keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:41:55:94:91:3e:0b:27:11:b4:d3:bc:dc:46:ce:b0:17:45:
         50:b2:0b:02:55:bc:82:39:85:41:8a:cd:27:71:4d:42:50:47:
         e9:a4:d7:10:62:eb:4d:f4:70:57:c9:cc:59:18:06:2b:64:7f:
         d0:a5:8b:12:43:f7:2d:1a:20:3b:d6:f2:9e:7d:7c:d5:95:7b:
         74:9b:ac:06:dc:33:50:6a:f9:e2:4d:ab:d2:52:44:eb:9c:8b:
         9e:d7:f5:55:47:14:c1:3a:35:ba:dd:87:a3:51:9e:8e:81:33:
         9c:45:d9:0d:d8:20:e8:ef:8e:6e:d8:92:c6:a0:41:68:a0:09:
         88:94:69:02:ee:7b:66:ca:20:95:da:d1:0f:ed:a6:d2:3a:4b:
         96:38:17:e1:be:10:a4:33:fa:d5:82:fb:80:e1:3d:3a:ab:a8:
         54:c1:c0:01:f4:c6:99:ba:ea:2f:c6:49:97:d6:40:2b:2b:75:
         aa:9c:a6:b7:bf:d0:4e:31:5d:5a:18:31:68:22:42:b6:a3:6a:
         e2:a9:67:e7:9a:88:8b:e5:37:a2:da:09:f1:09:8d:3f:f9:86:
         53:df:fb:0a:ed:1b:37:37:dd:15:4c:b2:71:ae:2e:c5:82:f4:
         fc:58:3a:68:13:68:af:3b:8c:98:10:b5:ca:bb:0c:52:aa:d9:
         0f:70:a2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:16:03 2025 by rpki-client