Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
File:                     6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft (raw, json)
Hash identifier:          nKAQRWujZRoPDa6LcaPXAty6lU48b8CsCuXU6VJpRr0=
Subject key identifier:   4D:65:1C:4C:60:52:0E:0C:4C:BD:C9:01:89:AA:CD:F0:8E:A3:DE:FE
Authority key identifier: 60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA
Certificate issuer:       /CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca
Certificate serial:       5CDF0D3605A1C86278B2B5AE26761417FB094357
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
Manifest number:          0266
Signing time:             Tue 04 Nov 2025 05:24:19 +0000
Manifest this update:     Tue 04 Nov 2025 05:19:19 +0000
Manifest next update:     Wed 05 Nov 2025 05:42:19 +0000
Files and hashes:         1: 6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl (hash: hukoGrh/nb/Qo2AdHzWjgqoYZJ+RaIpuP/G+Yc6ud18=)
                          2: 323030313a3766383a3135373a3a2f34382d3438203d3e2030.roa (hash: 0e+W4I6S4YHzwIEKPSVHpa7X+PeCXjdmuYr+EKDU8hY=)
                          3: 3139332e33342e3139392e3132382f32362d3236203d3e2030.roa (hash: 0pbfDMGs5sDe83nTkX1rzBo038yLBduSn3GMgeEi8+E=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:42:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:df:0d:36:05:a1:c8:62:78:b2:b5:ae:26:76:14:17:fb:09:43:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca
        Validity
            Not Before: Nov  4 05:19:19 2025 GMT
            Not After : Nov  5 05:42:19 2025 GMT
        Subject: CN=4D651C4C60520E0C4CBDC90189AACDF08EA3DEFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:66:25:11:ab:0f:33:02:e5:dd:3b:5e:ca:62:
                    c4:7a:c4:ca:dd:47:a9:52:83:66:00:f3:49:f4:d9:
                    ba:f3:47:10:7b:eb:1a:22:d2:0e:e3:95:44:47:b5:
                    c1:fc:bd:aa:fb:c3:bc:7d:7e:62:45:1f:02:c4:ec:
                    98:27:81:6c:7b:79:0b:b9:08:6b:05:b6:fb:55:5a:
                    7f:a8:ab:5a:e3:7d:90:65:06:b1:c1:91:04:1b:d9:
                    f0:da:99:dd:ae:0f:e5:89:e0:f9:0f:e0:a0:36:de:
                    59:e1:d0:3f:e4:85:42:68:4c:26:34:67:b2:b2:f4:
                    e1:2b:b6:da:fc:c4:16:86:4b:60:e3:75:02:c7:d4:
                    19:03:9d:e3:c4:1a:a5:bb:82:c1:0e:12:56:3d:e4:
                    cf:e9:c0:4d:3d:98:ca:a0:a1:e4:3c:83:ad:d4:6b:
                    8e:da:6a:3b:62:2d:8b:46:d9:a6:38:19:7c:38:a4:
                    be:36:3f:37:63:13:bb:5b:2a:ca:46:83:41:8e:b4:
                    60:89:7b:a6:a1:fe:ab:8d:8f:6c:44:7c:f2:77:a5:
                    1a:d8:d0:e4:42:8a:df:18:8a:dc:47:e9:7a:fc:b9:
                    c7:79:b1:f6:4d:99:48:4c:43:73:65:8f:74:b6:60:
                    12:a2:42:8a:ce:71:52:93:0a:0c:85:c4:e5:0e:e7:
                    34:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:65:1C:4C:60:52:0E:0C:4C:BD:C9:01:89:AA:CD:F0:8E:A3:DE:FE
            X509v3 Authority Key Identifier:
                keyid:60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:e2:e9:13:49:4c:3e:97:38:98:e1:38:cb:79:d4:6c:3d:d6:
         58:a5:d3:e3:29:e0:8e:c6:31:1b:89:d1:6d:0d:f8:77:16:3e:
         9d:e9:7c:6e:4d:72:66:8e:3a:64:80:7c:2b:2c:39:2a:b8:03:
         15:a0:00:4a:ac:77:a7:a1:64:fc:61:fe:fe:c7:a2:b7:7d:d7:
         b5:15:fa:41:74:61:b8:60:26:4b:22:6c:50:51:51:7c:72:80:
         61:6a:11:87:c8:27:3d:4a:bb:23:04:f7:20:15:9b:2a:a2:45:
         cc:e2:0a:aa:e2:35:0d:ef:80:5d:2f:8b:a7:50:49:78:ec:22:
         7c:7f:02:48:e3:51:63:87:d8:68:95:b5:8a:72:e0:fd:2c:b5:
         c9:bc:9a:a0:b3:14:c5:fb:18:99:d4:70:3a:8e:66:06:2c:71:
         e6:f3:ab:3b:ec:cc:55:ea:2d:92:ec:dd:0c:76:f2:ab:17:8c:
         5c:5c:06:b9:b4:53:5c:96:b7:3b:20:ab:95:ab:d2:43:ec:50:
         cc:34:e2:3a:19:a3:a2:7c:72:d5:dc:ec:9e:8f:47:62:5a:f0:
         9a:06:13:1a:7c:dc:6c:11:b1:30:ae:85:09:85:dc:b5:f7:75:
         90:77:11:88:7e:e8:97:bd:7b:57:63:82:5e:bc:56:77:24:10:
         ba:73:27:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:12 2025 by rpki-client