Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File:                     0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier:          EoNB0vpj37QpWj/iI/4uwDrv2VrPhjL9DtOyPxLybA0=
Subject key identifier:   31:5E:81:CE:FC:96:CE:A3:4A:EF:72:B1:60:81:F5:4E:DD:F1:EE:56
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer:       /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial:       78915608E5DACFA591D07A38959744AEB73D8583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number:          01DF
Signing time:             Sun 03 Aug 2025 23:12:58 +0000
Manifest this update:     Sun 03 Aug 2025 23:07:58 +0000
Manifest next update:     Tue 05 Aug 2025 01:27:58 +0000
Files and hashes:         1: AS215084.asa (hash: VnCOMkKT2maWsf2f4NVt587A2kDQziKAN+YsQMVpLkI=)
                          2: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: zU5oOk0qaZ/vWDyPe3sLmx7LGxrQL/AV9DRJrdQXwjA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:91:56:08:e5:da:cf:a5:91:d0:7a:38:95:97:44:ae:b7:3d:85:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
        Validity
            Not Before: Aug  3 23:07:58 2025 GMT
            Not After : Aug  5 01:27:58 2025 GMT
        Subject: CN=315E81CEFC96CEA34AEF72B16081F54EDDF1EE56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:30:3b:1f:e4:51:74:0f:10:f1:c7:da:e5:92:
                    e3:36:66:0b:bd:e3:d3:1c:31:bb:33:3c:4e:74:22:
                    64:a9:36:d3:a8:ee:b1:18:63:64:9d:35:2d:44:84:
                    5b:c6:6b:ce:91:7b:9c:42:ca:aa:41:6f:49:e4:cc:
                    44:8e:4c:f9:f7:6a:46:6f:61:8e:9f:89:c3:54:a0:
                    ad:cd:3f:c3:98:23:aa:52:7d:aa:77:a4:66:63:58:
                    94:de:c1:d4:71:d2:af:a9:d1:27:fd:df:ce:bc:53:
                    83:8b:3c:2e:e5:60:0a:ef:ef:a2:0b:9d:3b:f2:a4:
                    41:ce:0b:e6:80:33:cd:e7:0a:45:40:cd:65:bf:73:
                    bb:66:a9:ad:61:12:bc:2d:1d:c9:15:7f:57:4e:fa:
                    3d:b2:97:ff:c0:c0:1c:17:c0:b5:c3:ef:04:15:a9:
                    0c:b2:f8:2a:57:1d:70:5c:8c:0a:6e:61:78:1d:c5:
                    82:83:c5:d5:f3:5d:2b:5d:b8:d1:9d:fa:85:c4:cd:
                    a4:c6:58:23:3f:27:cf:1e:bc:30:3f:f4:f3:7b:0f:
                    0a:f4:e6:34:f8:bd:ff:fb:bc:f4:b1:f5:e9:69:c8:
                    49:36:18:ca:5c:43:7b:30:fc:25:4c:3e:96:e2:48:
                    ac:93:50:4d:06:15:f1:93:cc:a5:3e:8b:03:1e:ef:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5E:81:CE:FC:96:CE:A3:4A:EF:72:B1:60:81:F5:4E:DD:F1:EE:56
            X509v3 Authority Key Identifier:
                keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:f0:5f:e3:f2:0e:85:fe:b2:31:e7:3c:a7:75:ef:be:77:ef:
         9b:c1:ac:70:24:aa:3d:60:45:a8:a6:a5:f6:09:38:bd:36:86:
         36:c6:2c:27:f6:85:bd:f1:4c:3d:6f:51:68:b7:bc:4e:c2:4a:
         40:80:32:55:b3:be:ee:67:ec:59:2e:81:4b:b7:2b:77:73:f9:
         17:a2:2a:f1:96:63:af:2f:af:96:44:ee:c2:d2:38:cc:af:85:
         53:38:0b:ce:85:b4:af:f6:53:df:29:99:c0:fe:e4:ca:a9:a0:
         4e:25:0f:a6:9b:c6:c9:8f:8a:c2:c0:9d:62:ca:fb:27:cc:be:
         3a:85:6d:44:97:d3:4e:b2:94:78:11:e8:67:f1:e0:ff:38:ac:
         4e:cd:35:5e:4d:4b:94:a4:e7:e4:b5:0a:8d:73:d4:62:e7:5c:
         cb:1c:ca:11:2a:7b:02:08:62:f2:f1:0e:73:d7:9a:8a:56:68:
         af:c1:26:cc:c1:c1:c8:c5:3c:50:8c:48:5e:a3:04:15:d2:2a:
         58:87:17:e1:45:fc:38:ea:27:c5:0b:ca:fc:7d:98:9d:7d:fe:
         53:f9:8b:2c:d2:99:7e:bc:3d:e8:95:95:9e:e3:ba:86:04:e5:
         ef:b4:cb:b2:58:71:d7:6e:47:27:c7:83:1a:56:a9:b8:1e:cf:
         5d:b3:86:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:17 2025 by rpki-client