Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft
File:                     C746AC47360523A8D817C5EA638AE186912619C1.mft (raw, json)
Hash identifier:          zw/Zn5CYCJ/DyB/lPY0hTC6lX0zAQ8+Lrcj0Ptbkym4=
Subject key identifier:   A0:F7:3C:54:B9:46:FF:81:7A:B9:8D:9D:B8:60:2E:D1:62:3C:AF:8E
Authority key identifier: C7:46:AC:47:36:05:23:A8:D8:17:C5:EA:63:8A:E1:86:91:26:19:C1
Certificate issuer:       /CN=c746ac47360523a8d817c5ea638ae186912619c1
Certificate serial:       3FF5973AF01BBA65CA30B93AC0848CAD9EACD6B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0asRzYFI6jYF8XqY4rhhpEmGcE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft
Manifest number:          0110
Signing time:             Sun 03 Aug 2025 23:19:09 +0000
Manifest this update:     Sun 03 Aug 2025 23:14:09 +0000
Manifest next update:     Tue 05 Aug 2025 01:22:09 +0000
Files and hashes:         1: AS199310.asa (hash: ENs7nJ4sgnByNkr4V7qUaF8ZIzq3zXB0TNcysff3KAY=)
                          2: C746AC47360523A8D817C5EA638AE186912619C1.crl (hash: L0tuXy8rqAQtImAb2U9Q3l2PLP7w3tMO49BlATJ4nVU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x0asRzYFI6jYF8XqY4rhhpEmGcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:22:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f5:97:3a:f0:1b:ba:65:ca:30:b9:3a:c0:84:8c:ad:9e:ac:d6:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c746ac47360523a8d817c5ea638ae186912619c1
        Validity
            Not Before: Aug  3 23:14:09 2025 GMT
            Not After : Aug  5 01:22:09 2025 GMT
        Subject: CN=A0F73C54B946FF817AB98D9DB8602ED1623CAF8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:90:4e:cf:a7:60:27:13:6e:6f:c7:68:62:eb:
                    00:05:d5:e4:e8:71:b4:f1:19:f8:a9:a6:20:63:35:
                    69:9b:c9:50:f4:2f:6e:a0:99:ee:d2:e6:61:d9:cf:
                    6b:b4:b3:a9:0e:ce:f1:0c:2d:6e:cd:20:6c:c6:bc:
                    ed:9d:d4:c9:40:89:9a:38:ee:a0:27:94:fa:73:73:
                    70:96:46:dc:ae:1b:f0:4c:26:ee:88:3b:08:c0:5e:
                    b7:95:ef:fc:14:6c:a0:08:17:f2:20:77:bc:10:02:
                    1c:75:44:28:73:55:75:d5:ae:59:41:29:50:b3:fd:
                    26:67:80:c5:99:03:ce:cf:81:2a:6d:45:08:9c:b5:
                    f2:96:23:71:1d:47:03:33:9b:c5:7a:fa:d3:99:0b:
                    86:75:b3:c7:90:6d:8f:77:fd:ed:42:35:b3:d4:48:
                    ad:77:17:fe:2d:d1:85:95:5b:51:46:0c:9d:69:25:
                    2a:d4:a1:75:61:cf:c8:21:04:7b:1e:ef:24:21:0e:
                    7a:b5:a6:82:5f:76:54:8b:04:01:4e:bd:82:06:8e:
                    f1:6d:25:1e:b3:44:11:7f:92:1f:ce:3f:d7:5d:1c:
                    7e:78:3b:f0:8c:d7:1c:7e:a6:fe:65:6b:50:c0:a4:
                    c6:1e:5d:55:41:3e:6e:3a:a3:45:f3:93:f4:a6:72:
                    30:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F7:3C:54:B9:46:FF:81:7A:B9:8D:9D:B8:60:2E:D1:62:3C:AF:8E
            X509v3 Authority Key Identifier:
                keyid:C7:46:AC:47:36:05:23:A8:D8:17:C5:EA:63:8A:E1:86:91:26:19:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0asRzYFI6jYF8XqY4rhhpEmGcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:59:b8:9f:6c:e7:35:56:d9:21:8c:46:22:06:03:e4:e7:b0:
         9f:c6:92:af:82:d2:a5:3d:f5:c8:cb:ee:9d:0c:e7:3f:e9:41:
         52:6c:67:db:7f:ff:18:b8:cd:95:97:96:0d:9c:7f:af:ee:4e:
         e1:48:0b:fb:4a:83:21:99:87:0e:92:28:13:d5:f8:e4:8f:95:
         27:61:12:ec:0f:ac:f2:f0:36:b3:33:75:a9:37:08:21:37:57:
         09:30:f8:05:c4:58:d9:ef:2f:00:3e:2c:4c:c5:27:6a:aa:80:
         57:2c:e4:e4:29:77:16:86:7d:0c:43:9b:c9:40:d7:c7:66:94:
         16:99:2c:50:ec:26:98:02:e6:db:26:92:25:d6:d0:ec:d9:8b:
         b9:d7:69:1b:f4:1a:6d:25:ac:cc:4d:94:1d:8c:85:b9:65:e3:
         a5:76:5d:28:03:ae:57:3b:88:91:05:39:52:b8:0b:f9:61:c2:
         b3:00:25:ac:f0:97:62:79:ac:79:52:37:da:4c:3f:3c:8a:0c:
         0c:c1:50:34:84:11:1e:02:3b:82:d8:53:d9:a5:39:d9:68:71:
         be:c5:00:27:5e:c3:5f:90:cb:c9:9e:60:5f:97:7c:ac:1c:49:
         76:26:44:1e:57:dd:32:46:86:04:4c:72:96:f3:75:e6:b1:61:
         ce:87:9b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:05 2025 by rpki-client