Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
File:                     25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft (raw, json)
Hash identifier:          +aQgoUw7yZ97zsWjpGvOQznta3ETwSmODTTRpU/OlBE=
Subject key identifier:   39:6C:73:F5:D1:6B:7C:44:3C:83:28:6E:EB:7E:FE:67:42:D4:57:AF
Authority key identifier: 25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
Certificate issuer:       /CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Certificate serial:       72DAB783ED678C125D1C65EA4BEED0B6E4B7E157
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
Manifest number:          047F
Signing time:             Tue 04 Nov 2025 14:26:30 +0000
Manifest this update:     Tue 04 Nov 2025 14:21:30 +0000
Manifest next update:     Wed 05 Nov 2025 17:16:30 +0000
Files and hashes:         1: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl (hash: 9QegwE3WbpT9UnT1z89ghCrWAJGO689WIM3dYALxMg4=)
                          2: AS205603.asa (hash: hilS75f+xThcKc+nN214Mi4BwyvAFPo1c2Y0cUS3H24=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 17:16:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:da:b7:83:ed:67:8c:12:5d:1c:65:ea:4b:ee:d0:b6:e4:b7:e1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25c73dfc868c3f62cb7ff971af477671caf380aa
        Validity
            Not Before: Nov  4 14:21:30 2025 GMT
            Not After : Nov  5 17:16:30 2025 GMT
        Subject: CN=396C73F5D16B7C443C83286EEB7EFE6742D457AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d9:32:6c:b6:7e:3e:cb:a7:06:b1:b8:0c:b2:
                    2a:1f:fb:48:bb:e6:be:95:05:23:83:f9:c4:76:a1:
                    77:4e:55:c7:f1:61:23:2c:e1:c4:89:3e:44:9b:99:
                    b5:d5:e3:a9:15:c4:1b:12:88:a4:96:6b:ed:dd:fd:
                    a0:d5:5c:1d:4f:0f:e6:ab:cf:66:29:ce:b4:1b:3d:
                    9d:32:9c:c8:9e:11:3f:4e:25:73:e2:a4:77:7e:1c:
                    97:7d:0a:f3:33:00:05:d4:23:c4:2c:38:d8:2e:02:
                    1f:db:d7:79:3c:03:cd:a1:2e:c3:5a:51:dd:97:f1:
                    b0:8d:09:ad:8f:46:26:0c:ee:f7:f9:c8:da:05:22:
                    e6:29:b7:96:f4:21:30:9c:ae:84:ed:20:3a:40:a2:
                    86:7b:0a:18:c4:13:2a:fa:99:a5:01:a9:cc:4a:d5:
                    18:94:a2:aa:64:1b:7e:6d:64:f5:08:74:26:35:53:
                    34:cb:d0:5e:7f:ad:d7:01:bf:58:37:00:20:4e:c4:
                    1e:cc:a2:da:dd:21:1b:61:46:e2:0d:19:e7:fd:8d:
                    47:69:52:2e:0f:5b:f8:e4:f9:d4:bf:2f:a4:b9:aa:
                    10:69:4d:7c:b0:bf:dc:47:dd:43:9e:02:d1:b0:66:
                    c9:a7:02:de:d2:1c:13:5a:a7:1d:d8:ef:e4:98:8d:
                    d1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6C:73:F5:D1:6B:7C:44:3C:83:28:6E:EB:7E:FE:67:42:D4:57:AF
            X509v3 Authority Key Identifier:
                keyid:25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:05:8d:be:21:6e:12:f2:6c:b2:64:fd:ad:c4:2e:67:12:67:
         d6:f8:e6:ac:aa:c9:d2:6b:f2:4b:66:f1:9f:fe:5e:3a:3f:5f:
         8b:05:c9:a5:f6:9a:f7:29:9b:e0:b5:7b:8a:e3:68:df:8e:55:
         21:e5:5a:e7:33:61:ef:da:08:a3:56:39:6e:a0:35:92:64:58:
         86:75:6a:32:22:20:41:8c:aa:40:96:b0:29:bc:62:58:9f:a1:
         c4:a2:2a:2b:d7:f7:a7:f7:2f:2d:53:39:98:b1:5e:00:86:9e:
         2e:2d:57:e0:a4:b3:c5:0d:20:bf:fc:a5:48:4b:24:b6:a7:22:
         8e:d0:c0:f0:f5:af:1d:8b:4b:61:3b:a3:ff:11:fb:c2:f7:44:
         c1:22:d4:b7:ed:db:42:71:cc:41:a8:77:05:2b:71:ca:9b:e2:
         ae:ec:a6:6d:0c:a5:b4:81:4b:f4:d4:b5:22:c4:34:8f:39:24:
         d8:f8:3d:a0:af:5d:3f:5d:de:0f:fb:a1:05:9a:95:e1:d1:ea:
         2e:8b:b3:cb:b6:a0:22:18:2d:a9:5a:ad:e2:9a:c8:0f:cd:32:
         6a:86:ed:a5:4f:0b:b7:58:d4:39:14:60:46:88:1d:5f:9a:e1:
         90:99:d4:05:33:0d:9d:36:f9:aa:cf:08:6c:82:7f:5a:4c:f7:
         39:da:b1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:50 2025 by rpki-client