
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft
File:                     C746AC47360523A8D817C5EA638AE186912619C1.mft (raw, json)
Hash identifier:          tFOh79AXsH1B1cSCX4ep//kvWqpGfyb1yB9jOhNYH0s=
Subject key identifier:   24:B2:DC:F7:BE:F4:42:A9:A0:81:09:EA:4E:F5:EC:D1:2C:B8:62:32
Authority key identifier: C7:46:AC:47:36:05:23:A8:D8:17:C5:EA:63:8A:E1:86:91:26:19:C1
Certificate issuer:       /CN=c746ac47360523a8d817c5ea638ae186912619c1
Certificate serial:       297D6CEC4B0C9422935137E8DCCF6B90D3DC2EBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0asRzYFI6jYF8XqY4rhhpEmGcE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft
Manifest number:          0188
Signing time:             Tue 04 Nov 2025 05:34:21 +0000
Manifest this update:     Tue 04 Nov 2025 05:29:21 +0000
Manifest next update:     Wed 05 Nov 2025 07:54:21 +0000
Files and hashes:         1: C746AC47360523A8D817C5EA638AE186912619C1.crl (hash: HGr1zI96k3NaXHbLFy2sBXkhv5Xd8C5iA+nhqKznj/4=)
                          2: AS199310.asa (hash: C/emU/AajFjoT80749Qfw0iJvwuFsQXd/379BNVbLGg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x0asRzYFI6jYF8XqY4rhhpEmGcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 07:54:21 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7d:6c:ec:4b:0c:94:22:93:51:37:e8:dc:cf:6b:90:d3:dc:2e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c746ac47360523a8d817c5ea638ae186912619c1
        Validity
            Not Before: Nov  4 05:29:21 2025 GMT
            Not After : Nov  5 07:54:21 2025 GMT
        Subject: CN=24B2DCF7BEF442A9A08109EA4EF5ECD12CB86232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b6:c1:95:f9:c8:4b:eb:50:83:01:04:c6:f5:
                    7d:99:a8:3e:a4:f8:a5:b4:0d:b2:62:3a:d5:4f:5a:
                    15:66:c0:91:8d:d4:69:75:d7:09:52:33:f5:15:61:
                    6f:db:c7:ea:53:d6:34:84:7a:45:86:d6:ea:94:c3:
                    50:a3:7e:53:c6:da:38:d2:3f:1a:9e:90:4f:96:97:
                    98:9b:07:9c:83:97:d0:60:7d:18:5a:c1:14:f1:13:
                    b7:3b:16:8d:ff:bf:04:52:f8:a5:3c:cd:c6:24:67:
                    22:fe:58:80:b8:9b:20:6d:0c:81:9d:00:eb:fb:7c:
                    55:a2:71:f3:80:ee:8a:2a:a1:5b:58:08:df:da:9b:
                    98:51:15:53:c8:e2:61:bc:7d:a5:10:3f:a0:fd:f4:
                    06:fc:2b:2d:be:52:19:85:86:f9:8a:0c:97:2e:db:
                    b7:ba:d6:27:ab:dd:d6:5a:c5:34:d3:f5:65:d3:ec:
                    0e:75:2e:69:5c:78:33:19:22:84:a6:0c:16:55:08:
                    65:a2:d9:d3:ed:4c:8a:c8:7d:3b:d7:58:2d:07:02:
                    22:fd:cb:3e:9a:28:f0:c6:98:c4:c2:f0:32:a3:76:
                    54:d6:0e:35:3f:aa:2a:38:93:2c:b3:56:b1:d6:b7:
                    6c:af:7f:41:c0:1f:5e:73:1b:1e:d9:f2:3c:47:af:
                    5e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B2:DC:F7:BE:F4:42:A9:A0:81:09:EA:4E:F5:EC:D1:2C:B8:62:32
            X509v3 Authority Key Identifier:
                keyid:C7:46:AC:47:36:05:23:A8:D8:17:C5:EA:63:8A:E1:86:91:26:19:C1
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0asRzYFI6jYF8XqY4rhhpEmGcE.cer
            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         56:4f:70:ee:11:98:ee:35:2e:8c:24:cd:10:40:3d:0f:5c:96:
         1b:b0:c9:d0:93:1c:62:11:26:3b:17:cc:ec:8b:c6:82:71:12:
         bc:6d:a6:c8:44:ac:be:2e:85:72:04:c3:77:fd:32:c3:bc:c0:
         82:ba:30:35:7c:74:67:bb:7e:88:3e:53:fd:ed:7d:72:be:91:
         0a:cf:91:97:6d:99:4f:1e:10:cf:41:ce:11:b0:38:76:6a:9c:
         65:28:b0:f9:be:32:f4:9f:a2:cb:ce:ad:3a:a5:67:6b:21:5a:
         be:d3:5d:71:1d:aa:5e:5a:87:d5:c4:d4:21:6b:87:ae:19:f6:
         09:27:57:ee:c4:d2:ce:a1:fb:ad:84:b7:d2:cc:9a:6c:06:a9:
         71:66:bd:4a:24:9f:57:ed:ff:f4:69:da:65:47:30:d3:75:3c:
         cf:79:30:e0:5b:97:23:e9:84:65:e6:75:93:79:d4:35:18:d3:
         53:39:3c:8d:8d:d4:a9:e7:e0:71:bc:e6:62:c1:5f:d6:41:73:
         46:c2:b6:4d:cf:c5:d6:82:69:27:c9:4f:61:f0:b4:16:5b:8c:
         7a:93:21:27:8a:59:97:1c:48:0a:01:5a:78:78:cd:eb:97:b1:
         3b:ff:f9:71:d0:db:c1:56:63:e4:73:c6:7a:fa:d4:10:7d:e9:
         5f:9a:4d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 11:17:59 2025 by rpki-client