Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
File:                     B3C078E149D9741434FD8877AB4CED46DC2720DA.mft (raw, json)
Hash identifier:          Kr0B6L2BggfSv1GI8Rjw9KH47lSePHkfzyAEHMvYnyQ=
Subject key identifier:   5C:B7:E4:8E:4C:6D:6B:A2:90:D8:C7:56:83:5E:B4:51:59:AB:3A:BA
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Certificate issuer:       /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial:       62924C8FA2B0F9BB11E9FA89F45605E872ABCE0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
Manifest number:          0290
Signing time:             Mon 04 Aug 2025 01:26:21 +0000
Manifest this update:     Mon 04 Aug 2025 01:21:21 +0000
Manifest next update:     Tue 05 Aug 2025 01:33:21 +0000
Files and hashes:         1: B3C078E149D9741434FD8877AB4CED46DC2720DA.crl (hash: lM05NdLnZvB0IIMcCP3wtZTbBnfCSRzd0lH0cQTBZVY=)
                          2: AS215147.asa (hash: J2x/D/dp4X7UL/t56blYMubeUgQMJur/XGZvebo5ANU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:33:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:92:4c:8f:a2:b0:f9:bb:11:e9:fa:89:f4:56:05:e8:72:ab:ce:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
        Validity
            Not Before: Aug  4 01:21:21 2025 GMT
            Not After : Aug  5 01:33:21 2025 GMT
        Subject: CN=5CB7E48E4C6D6BA290D8C756835EB45159AB3ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:08:b1:98:89:38:0d:ed:ea:05:0e:10:7f:63:
                    65:08:59:fb:6d:ee:0b:af:f9:47:2e:e7:ce:39:16:
                    06:d8:28:ef:2d:6b:e4:ec:55:3b:c8:dc:54:13:29:
                    05:86:5a:6f:ed:ad:93:96:1c:a9:80:84:d0:bc:3e:
                    c7:8e:a9:30:18:6f:85:53:2e:4c:e9:dd:6d:e6:f9:
                    1f:df:85:ff:c2:fe:d5:77:ee:d8:2a:c2:3b:c8:8b:
                    ec:1a:19:53:04:6a:6f:e1:db:b9:7c:ec:50:55:7c:
                    69:88:8f:3a:5b:11:db:4f:5f:00:c0:f1:78:d8:fc:
                    39:9d:2c:4e:00:e8:3a:57:c5:5b:10:0c:11:7a:2c:
                    29:7b:57:ce:33:10:4b:07:97:98:36:50:31:f3:cf:
                    8f:3f:1c:e9:ce:f7:b7:b2:68:f0:ec:58:52:8f:39:
                    8c:9d:db:66:b6:0c:49:2f:bb:16:92:43:57:5c:0b:
                    aa:02:2d:de:8e:49:68:58:70:51:e3:07:f8:57:0c:
                    29:db:39:cf:df:af:54:5d:1f:62:47:82:f0:e8:de:
                    27:ee:e0:2e:18:31:ea:c3:30:68:a8:5a:42:47:bf:
                    89:68:49:8f:dc:be:89:09:0e:9f:1d:7e:a5:66:4b:
                    8f:46:5d:2f:ec:cc:4c:76:ca:58:7b:62:c4:55:d1:
                    78:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B7:E4:8E:4C:6D:6B:A2:90:D8:C7:56:83:5E:B4:51:59:AB:3A:BA
            X509v3 Authority Key Identifier:
                keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:3b:b5:e4:84:33:d2:30:d2:c4:df:28:82:7f:fd:85:65:7e:
         48:ae:d7:27:8b:9f:eb:d2:cd:9e:db:50:8c:95:93:df:16:69:
         db:12:2f:c7:3a:c4:53:71:2c:28:c0:87:54:96:f1:9d:b6:ca:
         55:15:af:3a:a0:11:dc:f6:82:29:3e:51:5c:c0:85:b6:2f:f3:
         78:97:df:23:69:4f:c1:11:71:c6:fc:24:56:00:fa:b3:2c:84:
         69:75:b8:5d:8d:ba:d6:01:3b:ee:f0:da:3b:1e:84:06:0d:14:
         90:85:6a:d4:ea:a8:b2:7b:73:fe:a8:2a:a9:24:a3:90:18:3d:
         f6:05:ed:68:b8:3e:07:05:ef:04:d2:fd:af:a3:51:80:24:f1:
         77:7f:81:1d:c5:5b:16:4f:68:79:29:67:c1:21:9f:e1:24:76:
         b5:ae:b3:f0:0e:c0:dc:34:ef:77:6c:e8:e8:5c:01:96:1e:a3:
         1c:e7:ef:bc:0a:87:47:ca:19:dc:37:81:75:dc:e7:13:a2:9b:
         74:60:1d:31:86:36:d9:55:b1:f3:d7:52:b5:4e:3f:30:7e:9e:
         24:ca:be:de:a0:9b:42:60:8f:e4:c4:fc:30:74:1b:c5:58:10:
         31:4d:90:11:ca:19:c2:0a:d6:cb:39:ac:40:c8:42:d0:ca:60:
         9b:03:23:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:20 2025 by rpki-client