Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
File:                     735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft (raw, json)
Hash identifier:          xL6Iad//oH59Nvtu+/XSRdBE1b+TJYaZlr1rQYVCpR8=
Subject key identifier:   CB:A1:E9:59:DE:3D:AB:BB:60:04:8E:D2:6D:1E:6B:55:FD:AB:E3:0C
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Certificate issuer:       /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial:       3474DC43547FC9C9CD2FB93DAA0F756A9F304C39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
Manifest number:          041A
Signing time:             Tue 04 Nov 2025 15:37:37 +0000
Manifest this update:     Tue 04 Nov 2025 15:32:37 +0000
Manifest next update:     Wed 05 Nov 2025 16:57:37 +0000
Files and hashes:         1: AS6079.roa (hash: cwt2kgma2qYi3LhLoT0eQ8hzydzk6ECH01Cp7+lYh5Q=)
                          2: 735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl (hash: D1xd9ZTl0Eb4rpeViMfRImz34+489n0uIOE+gQ6FvLA=)
                          3: AS48961.roa (hash: 3cIbAXwf9Yl1EVegsCq9QH9D9FfXgLy3FkzfZ43rjN4=)
                          4: AS42689.roa (hash: kSaZusMPzDqtAJvsMwdFPAH8sWbR6PUnLIXK1LcKg/8=)
                          5: AS7029.roa (hash: UzVyQzDNxEH1f7EW/fpjqciXfwpS9M/FPwQFwN2Esxo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:74:dc:43:54:7f:c9:c9:cd:2f:b9:3d:aa:0f:75:6a:9f:30:4c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
        Validity
            Not Before: Nov  4 15:32:37 2025 GMT
            Not After : Nov  5 16:57:37 2025 GMT
        Subject: CN=CBA1E959DE3DABBB60048ED26D1E6B55FDABE30C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bc:8f:5c:f1:45:a0:ef:06:52:5b:62:68:42:
                    13:ff:80:27:73:70:91:34:d3:41:45:8d:dc:cd:13:
                    18:f7:67:38:76:a4:be:c3:79:dd:71:42:76:7d:94:
                    fe:49:c6:08:22:12:69:fe:07:bb:b4:41:c6:dc:f2:
                    aa:7b:00:25:1c:50:73:2b:b3:c2:70:62:3c:ea:2a:
                    ed:4d:e5:f0:76:17:f6:1c:44:e7:aa:2e:c7:77:82:
                    a8:f8:88:21:79:b8:3a:af:37:69:73:d0:00:25:6f:
                    2f:56:5b:9f:d1:ef:33:9c:d3:ee:82:6e:81:87:26:
                    10:6c:e1:da:1f:a8:ff:ac:de:ea:8b:e1:90:0a:fb:
                    cd:cf:25:d6:d3:a4:81:9a:4b:55:55:db:b2:aa:f3:
                    fb:15:37:ee:d3:2d:3e:43:99:60:c4:d1:6d:40:59:
                    73:2c:7c:cc:a9:77:48:25:27:e8:f1:c5:b4:d7:86:
                    5e:00:eb:e4:36:60:58:48:86:c1:94:21:26:a1:a2:
                    10:a3:b0:b9:b8:cc:96:a5:2d:b9:2d:3a:33:60:f5:
                    26:4c:64:00:d6:3d:ea:f9:68:2b:a5:98:8a:48:8e:
                    86:d2:ab:72:5f:e7:a4:0f:44:2d:d4:2b:4e:9a:ba:
                    a5:2d:cb:09:bd:68:1a:a0:9d:a4:3f:95:2a:07:e9:
                    d0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A1:E9:59:DE:3D:AB:BB:60:04:8E:D2:6D:1E:6B:55:FD:AB:E3:0C
            X509v3 Authority Key Identifier:
                keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a3:3a:61:5e:66:18:35:7d:de:fa:5b:bd:e4:2d:de:0a:a9:
         5b:4c:9b:c0:29:1d:a3:2d:6e:44:72:db:ed:fa:0f:df:92:f6:
         0b:d1:68:f2:6b:60:6d:d5:08:fa:38:ec:c9:1e:fb:3d:d7:8e:
         93:07:77:29:aa:1b:aa:cb:2e:fa:a9:70:a3:a7:0d:59:85:c7:
         f6:d9:45:18:fa:be:b4:f1:fc:c7:78:c2:37:72:9c:79:36:bd:
         79:d9:ed:3a:9e:21:71:90:eb:3a:85:33:3f:3b:78:e0:ff:f8:
         76:6e:f8:85:c3:e6:de:32:11:be:87:1b:b3:a4:bf:5f:41:7d:
         b7:ef:c6:af:a1:38:89:82:2c:a8:bc:73:7f:c1:12:62:f0:bb:
         b5:00:50:2f:23:84:ee:86:67:77:af:b4:db:5e:fb:88:a2:db:
         7e:f8:8b:e0:50:5b:e3:e6:ba:6d:40:52:b4:4e:e0:0b:03:6f:
         73:4c:09:28:c7:d2:65:a2:8d:04:63:06:9b:e9:c5:76:98:11:
         d7:46:0d:90:bf:ab:be:97:47:49:55:15:52:21:8e:ca:d3:49:
         17:5b:d5:52:32:37:24:90:06:e8:83:2e:10:ab:18:50:62:6b:
         08:3b:46:db:49:e8:e8:8d:17:72:8c:b0:17:04:9a:4c:de:28:
         17:d3:2d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:21:16 2025 by rpki-client