Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
File:                     608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft (raw, json)
Hash identifier:          k+GIgJzVXpJH5ARCm74LsNfr8K1qNkfkYIUGp5l8tNw=
Subject key identifier:   C4:5F:55:59:F3:74:A8:AB:9E:1A:82:60:A5:59:7B:94:97:50:05:F1
Authority key identifier: 60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
Certificate issuer:       /CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Certificate serial:       0F05D5CDB97C97D05985E3008D96F7E5D6B5C0FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
Manifest number:          C4
Signing time:             Wed 05 Nov 2025 01:11:39 +0000
Manifest this update:     Wed 05 Nov 2025 01:06:39 +0000
Manifest next update:     Thu 06 Nov 2025 02:28:39 +0000
Files and hashes:         1: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl (hash: b1ATKKSKfgDmld2PdsFhkr1IKMXLTYkMc/f/K0HFSJM=)
                          2: AS215375.asa (hash: LpUFum+e3/JZSud1FMmC87+zcGX6+jjYOpf3QCDbjko=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:05:d5:cd:b9:7c:97:d0:59:85:e3:00:8d:96:f7:e5:d6:b5:c0:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
        Validity
            Not Before: Nov  5 01:06:39 2025 GMT
            Not After : Nov  6 02:28:39 2025 GMT
        Subject: CN=C45F5559F374A8AB9E1A8260A5597B94975005F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8a:e1:01:fa:bf:a4:21:0b:dc:e3:be:1a:f0:
                    7f:20:98:34:c2:fe:bf:2a:79:16:90:90:63:0c:da:
                    0b:c1:f3:83:7b:71:03:12:3f:f5:31:d8:92:9f:41:
                    a8:5b:db:c5:a0:51:2d:1e:ea:ea:b9:aa:d6:14:2d:
                    c7:65:53:3a:d8:bf:83:2b:d2:05:4f:51:ae:72:44:
                    ee:9a:96:85:90:6d:4d:47:b6:f4:0c:65:fe:d3:19:
                    c8:20:88:4c:79:b3:5c:d4:f0:a9:ec:a9:4c:dc:23:
                    df:b4:bf:51:c8:1c:64:e5:d3:fc:48:a1:4e:92:ea:
                    bc:89:a0:a7:bf:d3:b3:39:85:41:17:44:34:c1:d5:
                    51:aa:56:cf:9e:fc:cc:b8:5f:db:09:51:5c:c5:a6:
                    97:ad:06:30:ac:ef:35:11:88:ed:ff:62:ac:2b:0e:
                    2c:42:76:0a:42:2c:e1:0b:91:41:8d:fe:7a:00:2e:
                    20:c4:8f:40:e5:13:27:e1:f3:06:fb:23:3f:cf:c5:
                    2c:7e:dc:b3:f7:45:b2:3e:7f:5c:b1:07:75:f9:40:
                    35:aa:17:41:b1:64:30:0c:fb:51:60:47:38:fa:b0:
                    f4:98:8e:b7:6a:f3:48:1b:62:91:c7:36:a2:1d:a2:
                    a0:e1:b9:62:35:9d:21:73:6d:0c:ac:29:27:8b:bb:
                    62:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5F:55:59:F3:74:A8:AB:9E:1A:82:60:A5:59:7B:94:97:50:05:F1
            X509v3 Authority Key Identifier:
                keyid:60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:cf:9f:67:33:3b:f0:29:62:66:41:f7:78:0e:dd:5b:3d:40:
         fd:32:fa:77:43:20:c9:41:57:49:04:1f:99:ed:8e:e7:46:e0:
         0a:0a:b5:03:66:ac:1c:dc:5f:55:aa:6e:cf:2c:95:57:09:0b:
         ce:b7:ea:bd:eb:53:c7:4c:db:79:82:7c:c0:14:5c:4e:66:5d:
         ab:5c:c1:83:7a:0f:f1:e7:ad:11:18:b6:01:1c:58:4e:d8:8b:
         0d:cc:83:ce:26:4e:21:82:17:1b:e8:db:0c:0e:b4:d9:92:8e:
         6e:a2:ea:27:22:e0:d0:35:63:57:1c:e4:bc:8b:e6:3d:c8:c6:
         45:f6:11:5b:6d:cc:8e:bf:89:ff:21:88:97:eb:b7:20:81:e1:
         eb:87:1f:a5:4f:c1:ea:2c:74:25:04:f7:22:e9:69:c7:c5:55:
         b0:fb:04:ad:fa:a7:e6:b9:34:d0:c4:c8:96:f8:7d:15:6e:d9:
         dc:d3:20:8b:9e:9f:31:75:9e:72:13:6b:73:d6:c8:16:56:76:
         1f:23:b2:48:d1:f4:8b:42:5b:d1:a7:99:68:da:7d:53:e2:cb:
         60:17:49:11:02:5a:ff:fd:bc:d6:cb:4e:50:ca:2d:3f:a0:ac:
         a5:37:cf:75:53:73:a0:0f:ad:7c:a2:89:94:a5:94:38:66:0d:
         0d:e1:a9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:54:21 2025 by rpki-client