Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
File:                     B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft (raw, json)
Hash identifier:          Q3DQpDEAzReogtYvyVH7FQatkMhlGSKeaqBFDS/aodg=
Subject key identifier:   B0:43:BE:EC:BB:23:68:91:D6:E6:AC:26:6E:8E:5D:7A:9E:71:A9:BF
Authority key identifier: B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C
Certificate issuer:       /CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C
Certificate serial:       589735328C1DF93C7B9063461157511FB7932391
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
Manifest number:          7A
Signing time:             Wed 05 Nov 2025 10:45:58 +0000
Manifest this update:     Wed 05 Nov 2025 10:40:58 +0000
Manifest next update:     Thu 06 Nov 2025 14:03:58 +0000
Files and hashes:         1: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl (hash: 43PancjLzAV+dyOZMrBloSCXVmwOhA0ap+D0xpfvLHI=)
                          2: 326130623a396534373a666666663a3a2f34382d3438203d3e20323132333936.roa (hash: 75MQYcrJ2fBMIggMxPD0oPJNZ5TBWMJfZ5gCQQu+izk=)
                          3: 326130623a396534303a3a2f33322d3332203d3e20323134343531.roa (hash: GwXhJxTPfppTl2To2mF3GpvFgaV+3IGFSczXonJ1+q0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 11:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:97:35:32:8c:1d:f9:3c:7b:90:63:46:11:57:51:1f:b7:93:23:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C
        Validity
            Not Before: Nov  5 10:40:58 2025 GMT
            Not After : Nov  6 14:03:58 2025 GMT
        Subject: CN=B043BEECBB236891D6E6AC266E8E5D7A9E71A9BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f6:ea:0d:d3:09:0f:b6:7a:fe:9d:33:fc:7f:
                    86:b8:14:2a:9b:3d:b0:06:2e:24:e3:fa:ed:fb:e0:
                    d0:56:69:e6:0b:28:90:d2:5e:44:ff:a1:e2:04:43:
                    cb:97:e3:55:3e:00:97:2e:ca:03:97:c7:68:da:af:
                    b8:32:d2:24:a7:cf:f5:c6:85:71:90:2c:3c:30:e3:
                    a2:f8:00:ed:d0:c7:71:3d:0e:fe:fe:92:c7:b3:51:
                    4f:ff:0c:2e:07:6d:a6:5a:8c:03:b7:78:66:1f:0e:
                    8b:3d:ca:25:02:71:37:a2:b4:13:be:a3:f9:84:0a:
                    1a:4a:b2:87:7a:e7:48:ff:77:75:04:fa:8f:51:c5:
                    90:9d:6b:26:09:34:8e:37:c6:8f:7e:6d:bd:6a:f7:
                    e5:35:16:fa:13:24:71:dc:e4:2b:64:4f:22:c0:d2:
                    d5:e3:ef:bf:6b:2a:4f:b7:04:84:be:4e:d1:77:f2:
                    14:bc:74:49:d6:f4:f0:64:5e:4e:3c:01:ca:d0:da:
                    73:91:9f:83:be:74:5b:e1:b6:c5:bc:00:60:7c:df:
                    65:a6:b4:29:2e:e4:44:33:4a:39:2d:8c:1d:71:cc:
                    88:9a:aa:0d:76:6f:77:1b:c0:09:bd:45:bf:2d:14:
                    82:30:d5:2f:48:b5:83:2d:83:55:ae:d2:5d:9e:ad:
                    e0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:43:BE:EC:BB:23:68:91:D6:E6:AC:26:6E:8E:5D:7A:9E:71:A9:BF
            X509v3 Authority Key Identifier:
                keyid:B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:2c:ea:76:71:55:c2:23:7d:5f:71:9a:aa:88:c0:1f:da:25:
         12:db:b5:c9:cc:e7:59:78:b7:21:29:4a:d2:d7:de:55:41:10:
         9e:50:52:23:53:81:4c:f5:ea:88:25:24:9a:ab:33:ff:7b:b8:
         7f:58:93:3a:d7:9c:63:b4:69:c3:a6:14:39:47:f4:3a:35:f0:
         b3:3f:ad:b3:f1:d9:34:0d:50:0d:5e:52:18:dd:73:7d:60:eb:
         7e:cd:17:ab:d1:7c:35:7c:f3:0e:3a:c3:d0:1b:f9:91:cd:b5:
         04:af:04:d4:04:ce:36:92:5b:41:97:83:90:08:b4:28:83:2c:
         70:70:43:f2:99:06:47:80:cf:2e:2f:3e:7d:29:5b:9d:23:82:
         43:ff:96:3f:89:9e:60:78:ed:78:84:9e:c3:3b:77:b3:bb:4b:
         50:63:0a:5a:d3:54:94:85:cf:89:15:1a:5c:33:7c:01:3a:5a:
         44:68:b1:ee:7d:42:a3:18:42:36:09:9f:34:bf:e9:1c:e6:2a:
         4c:36:e8:16:90:62:e8:4d:b0:ff:d6:5b:a9:1e:49:d8:a0:4b:
         b7:23:4b:d4:30:a5:d7:30:9e:40:6b:b3:50:0b:8d:3a:7f:67:
         3a:5a:5e:97:71:a1:a6:69:02:04:5b:1d:ff:62:c4:6c:da:59:
         66:72:78:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:19:16 2025 by rpki-client