Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
File:                     608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft (raw, json)
Hash identifier:          K93v/ve2TuJvm1DURxemuWfmpTDvvjWERbpXOtfvoqE=
Subject key identifier:   EF:A3:00:3F:AD:81:3D:3F:64:E1:08:C1:90:69:1A:E7:74:7B:21:C6
Authority key identifier: 60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
Certificate issuer:       /CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Certificate serial:       4B720DCB605C9253CF841B7AE4FEFAF54A3AA4D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
Manifest number:          11
Signing time:             Sat 14 Jun 2025 07:51:18 +0000
Manifest this update:     Sat 14 Jun 2025 07:46:18 +0000
Manifest next update:     Sun 15 Jun 2025 09:41:18 +0000
Files and hashes:         1: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl (hash: 6fBNNV2wI71kMrFkeQaqyp1TDwv6x4YMKAA3cKVmNak=)
                          2: AS215375.asa (hash: LpUFum+e3/JZSud1FMmC87+zcGX6+jjYOpf3QCDbjko=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:72:0d:cb:60:5c:92:53:cf:84:1b:7a:e4:fe:fa:f5:4a:3a:a4:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
        Validity
            Not Before: Jun 14 07:46:18 2025 GMT
            Not After : Jun 15 09:41:18 2025 GMT
        Subject: CN=EFA3003FAD813D3F64E108C190691AE7747B21C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9f:44:1e:da:5f:03:3a:b8:6f:e2:75:23:c3:
                    4b:35:e1:6d:8a:e3:16:3b:c8:dd:6a:1e:0b:69:7b:
                    d5:cb:a7:90:b0:c7:8a:15:86:ec:6f:01:93:10:2f:
                    3a:1d:b2:57:46:47:bd:51:18:2d:b7:6f:ee:34:4a:
                    f2:ee:48:a5:e9:1d:2b:e9:b6:35:dc:b7:ee:13:c1:
                    b2:e2:ef:5f:b6:f6:7a:fa:d3:aa:1f:b4:de:7f:06:
                    4e:12:d8:fd:42:15:db:14:d3:ec:22:f7:46:72:07:
                    a1:86:55:bd:97:4a:51:72:7f:8f:bd:06:4a:28:b1:
                    c5:42:10:39:53:68:92:98:8b:68:b0:ad:e1:d5:fc:
                    23:ee:29:15:d7:dc:eb:ae:9f:91:4a:d2:53:71:1c:
                    a8:fc:bc:61:e2:5b:2e:fc:fa:4e:9b:40:77:1f:52:
                    51:01:23:d8:c8:c4:ee:67:42:63:6e:46:9a:75:58:
                    3b:95:e7:71:60:c0:96:93:a1:ea:6c:2b:07:a6:95:
                    2a:fb:6f:10:e0:bb:89:6f:0b:b2:a6:44:f0:c2:44:
                    eb:ce:9a:76:2e:96:68:ef:a7:b6:85:f2:19:8a:73:
                    ac:90:bc:1a:3f:3b:b6:2e:1d:06:b3:2a:bc:65:33:
                    1b:b9:c2:0c:07:a3:f5:94:b6:74:61:d0:32:97:d0:
                    db:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A3:00:3F:AD:81:3D:3F:64:E1:08:C1:90:69:1A:E7:74:7B:21:C6
            X509v3 Authority Key Identifier:
                keyid:60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ef:19:0c:e6:ce:d6:c8:b6:c8:b1:a4:d0:71:6e:4c:87:64:
         52:9e:52:61:2e:c8:89:bd:51:fb:be:f7:2a:52:eb:6a:85:3b:
         1b:7e:f3:55:97:17:c6:07:83:ae:80:29:a7:8c:a2:18:f3:8c:
         e1:62:f3:81:52:ab:07:d1:ff:0c:08:3b:2c:f7:21:b6:20:14:
         4d:73:f1:4b:14:9f:8d:38:3f:8e:df:f8:aa:30:2e:af:c6:5f:
         00:58:e4:09:5c:39:4e:3d:0a:88:51:b7:21:68:63:df:97:8c:
         61:b1:cf:65:0b:54:28:03:3a:47:83:96:5a:ec:b0:c5:12:4b:
         be:ac:4e:0a:9b:5f:f2:78:91:6d:a1:05:91:99:76:18:af:a0:
         af:94:8f:0d:0b:66:ea:6a:3a:a8:a4:66:a1:27:ab:6a:02:1d:
         08:6b:15:3c:89:58:4a:b7:3c:d2:69:3b:4f:8e:fa:b6:4a:9f:
         bf:03:e0:ca:ac:5b:80:28:84:67:0b:07:9c:c0:af:1b:68:2a:
         7f:d1:d8:2c:0c:78:a5:ae:27:19:9b:b5:33:62:62:a9:48:40:
         db:1f:6e:29:d3:c7:a2:8e:8c:14:27:ec:a8:12:55:56:09:21:
         b5:e5:f8:4c:aa:fb:e3:5c:34:43:aa:a8:c8:26:fb:4b:f3:22:
         b6:77:f2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:31:51 2025 by rpki-client