Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
File:                     7D7059638411E3231E759E74A813BF9376209E77.mft (raw, json)
Hash identifier:          ilXMGEY4rwFR1niFNXmv0sPeifsk4XAWjUOW9YZRrac=
Subject key identifier:   63:14:79:8A:00:26:26:1E:32:75:5B:91:D7:9C:42:A0:CB:24:2C:ED
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Certificate issuer:       /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial:       4A238C2FEF867F2001DBAB80F416F643F19DC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
Manifest number:          0196
Signing time:             Sat 14 Jun 2025 03:31:41 +0000
Manifest this update:     Sat 14 Jun 2025 03:26:41 +0000
Manifest next update:     Sun 15 Jun 2025 06:54:41 +0000
Files and hashes:         1: AS215849.asa (hash: WRilh/6hJb7kAkUd7i3j3vQPKdOIGwVbb9ZLfAC7rKQ=)
                          2: 7D7059638411E3231E759E74A813BF9376209E77.crl (hash: cMW4Ymzcl0OYt/dBujLWPJu/qvscZHRmzAoUEexEGJg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:23:8c:2f:ef:86:7f:20:01:db:ab:80:f4:16:f6:43:f1:9d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
        Validity
            Not Before: Jun 14 03:26:41 2025 GMT
            Not After : Jun 15 06:54:41 2025 GMT
        Subject: CN=6314798A0026261E32755B91D79C42A0CB242CED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:97:c9:60:3a:bd:e2:ff:44:b4:d9:16:a6:2a:
                    cf:c3:8f:da:49:81:89:a3:11:3c:ab:6b:48:df:24:
                    1f:d5:8e:f6:8f:eb:89:90:ba:86:bc:51:37:d2:0a:
                    d3:ef:41:8f:50:09:41:d3:12:55:e0:43:78:26:7c:
                    93:2b:06:20:da:95:8d:48:27:dd:d5:a4:be:e2:88:
                    bf:6d:89:b4:0c:0a:c0:4e:40:cf:78:26:3f:bb:2a:
                    da:24:9f:d0:1d:92:90:b0:5c:1d:8f:12:fa:8b:ff:
                    57:c4:d8:f9:69:a6:71:b0:29:f3:c4:2d:14:a5:15:
                    82:fb:19:1a:f7:da:7c:86:fe:7c:7d:77:f2:f3:b8:
                    9b:82:fe:29:7d:c8:c7:ef:f2:61:48:8a:b5:65:21:
                    22:e6:2c:24:b4:09:1e:5c:77:4c:90:3a:68:24:f4:
                    b2:bb:e3:f9:37:16:5e:d2:ee:c1:d9:6e:d1:74:07:
                    6c:05:26:9d:5f:16:52:53:90:05:e5:4b:48:9e:2f:
                    0a:6b:79:32:34:7c:ee:39:bc:40:c1:f1:fe:00:27:
                    51:84:38:98:7f:23:8a:d6:0c:79:10:de:10:ac:a3:
                    fe:fb:61:c9:06:ce:d5:5a:c8:42:28:bc:8d:ed:0e:
                    fe:20:5b:6c:37:23:2d:d1:e3:84:0c:b4:54:fe:37:
                    a5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:14:79:8A:00:26:26:1E:32:75:5B:91:D7:9C:42:A0:CB:24:2C:ED
            X509v3 Authority Key Identifier:
                keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:fb:db:36:66:20:be:ed:3d:37:ef:f6:47:9c:72:38:40:ac:
         72:dc:1a:cc:f4:f0:1e:9b:17:2d:b2:83:93:b4:3d:cc:e2:91:
         2a:d3:e9:31:87:e6:f9:78:b3:80:ff:95:a4:b7:bf:fa:62:59:
         18:09:21:82:ba:0a:51:0d:a0:62:c3:df:1b:94:83:4a:e3:be:
         e9:e9:80:b8:4f:f7:5d:54:f5:3d:b1:69:bc:0b:b3:3a:13:ca:
         61:8c:f3:ee:3e:c6:81:3d:fa:09:81:be:1b:e6:7b:ac:f7:91:
         ae:be:3a:f7:34:85:0b:31:ff:b2:59:df:d5:98:89:f2:b5:03:
         8d:72:8f:67:6f:e3:87:41:04:e6:50:05:63:6c:2c:c1:9e:1f:
         47:fd:1b:a3:97:d0:1c:24:da:2f:f9:ed:7e:31:9b:57:23:ba:
         62:31:2f:4a:16:5d:c3:40:2d:20:77:a5:98:42:95:fd:fd:fd:
         b0:44:89:73:4a:a0:4d:6e:b5:08:0e:53:25:5c:47:00:32:33:
         46:88:57:7a:cc:19:4d:eb:35:1a:de:c3:32:c8:3d:ab:0a:02:
         66:cc:4c:78:68:8a:22:3c:3a:30:d5:ce:f3:c6:61:e0:45:d8:
         ba:21:79:15:d3:3c:12:47:55:ff:b8:5c:89:19:bf:b3:db:96:
         1d:a1:0a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:01:57 2025 by rpki-client