Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
File:                     B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft (raw, json)
Hash identifier:          lBJZl2AfSzxTC+9Kkkp2SLwEiIL97/bHATw98DvYC88=
Subject key identifier:   D4:5E:1F:1E:E9:DF:14:01:C3:F9:5D:99:03:2E:DB:A3:46:8A:CB:09
Authority key identifier: B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
Certificate issuer:       /CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Certificate serial:       7CEC77A0C71D27C312EDFD3C537B0B8597FA8376
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
Manifest number:          0263
Signing time:             Sun 03 Aug 2025 22:12:07 +0000
Manifest this update:     Sun 03 Aug 2025 22:07:07 +0000
Manifest next update:     Tue 05 Aug 2025 01:53:07 +0000
Files and hashes:         1: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl (hash: 6Tv+KBq1g0leMqgqevgd8keJXKJmfx7eDntxqoEgQlk=)
                          2: 323030313a3637633a3638383a3a2f34382d3438203d3e20323135393536.roa (hash: 9LWLJC/CS8sOfArHPeCb8VXjodevg9GVDezV1/woQjw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ec:77:a0:c7:1d:27:c3:12:ed:fd:3c:53:7b:0b:85:97:fa:83:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
        Validity
            Not Before: Aug  3 22:07:07 2025 GMT
            Not After : Aug  5 01:53:07 2025 GMT
        Subject: CN=D45E1F1EE9DF1401C3F95D99032EDBA3468ACB09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:27:7a:88:c5:72:46:06:08:06:46:8b:ac:2d:
                    c2:ca:7f:be:09:d3:b7:4a:f2:d1:73:4e:eb:b9:fd:
                    27:f8:d0:bf:1d:52:1e:99:02:d5:33:17:c8:91:b3:
                    ce:26:61:11:98:eb:11:53:75:00:ad:27:a7:53:f9:
                    58:96:2a:ac:7e:5a:08:76:02:6a:b5:0c:55:11:b1:
                    61:f4:b9:87:76:b9:7a:4d:be:a2:95:d5:2d:77:da:
                    87:39:e2:42:8e:23:bf:a7:01:e3:8b:3c:67:50:4c:
                    49:89:f3:0c:8f:43:52:a8:39:9d:c9:56:b8:7a:da:
                    f2:85:04:52:65:f7:b0:64:de:8d:d0:82:4c:71:53:
                    ca:49:5d:e3:4c:2b:b9:78:7c:05:5c:66:57:cc:0a:
                    3f:87:9e:ad:78:16:75:b8:68:5e:48:57:93:64:c5:
                    24:5e:39:18:9d:be:67:b2:df:1d:f7:87:cb:be:0b:
                    ce:d1:58:c7:bc:66:9f:44:99:3d:42:d7:b5:87:cd:
                    db:09:27:88:67:d1:a8:e2:c0:f6:01:fb:85:ff:c7:
                    a4:68:08:62:81:66:5a:d3:9e:a5:09:d5:c6:b4:55:
                    62:f8:fd:54:37:9b:51:aa:9d:b2:46:a2:a5:f1:6d:
                    46:d0:d2:06:3e:63:d0:86:65:99:49:54:52:ef:92:
                    40:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5E:1F:1E:E9:DF:14:01:C3:F9:5D:99:03:2E:DB:A3:46:8A:CB:09
            X509v3 Authority Key Identifier:
                keyid:B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:0a:8f:31:26:03:29:6d:73:bd:a8:89:79:be:2f:79:a3:c2:
         63:e8:8d:fc:a0:78:28:46:d1:c5:71:38:66:e6:6a:4c:c5:78:
         df:43:70:c8:ea:27:ce:75:b3:63:9c:d7:88:41:7a:49:1d:bd:
         b0:eb:36:ff:70:ce:c7:8a:9e:80:0f:ee:88:8a:5f:e4:c7:25:
         2d:75:1d:31:3c:26:97:f6:26:aa:40:30:a9:83:a4:12:e1:2a:
         2c:83:51:d7:91:5e:ce:0a:bb:23:7b:6e:b7:49:a8:38:de:f9:
         c8:ec:dc:88:3a:51:22:6c:a4:82:5c:6b:66:99:68:b1:73:08:
         3b:3e:a2:84:d0:ab:39:85:9c:1b:52:b5:ce:18:b9:70:3a:17:
         bc:6d:2c:5d:7e:ae:66:b2:24:48:83:1a:5d:15:fd:3d:1e:56:
         63:4e:ee:9e:08:49:a7:d0:06:29:72:0f:8c:4d:b6:07:47:34:
         0a:e5:13:71:14:f0:c2:08:d3:09:2d:5b:f3:fe:7b:15:ca:72:
         ec:82:26:07:a5:9a:8c:cc:b3:ed:ef:ea:65:ac:0f:36:d7:c1:
         af:cc:0b:3f:6d:ca:1d:51:f5:7c:32:a2:0d:7e:13:f1:a3:ec:
         a2:61:c2:a8:1c:1c:73:f7:5e:47:52:5c:9a:ce:f5:5b:fc:24:
         f0:dd:db:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:57:55 2025 by rpki-client