Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
File:                     578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft (raw, json)
Hash identifier:          CByvC437msyK0f8Hajk95+rlcclky9pHJPwcN1Ew9NE=
Subject key identifier:   DF:EF:69:B0:4A:49:64:2A:4B:78:C5:E8:C3:ED:DC:5C:A4:5C:5E:70
Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3
Certificate issuer:       /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
Certificate serial:       1507CF38FD45221CFF89A2E6139B668413AF4589
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
Manifest number:          EC
Signing time:             Wed 06 Aug 2025 13:49:26 +0000
Manifest this update:     Wed 06 Aug 2025 13:44:26 +0000
Manifest next update:     Thu 07 Aug 2025 17:37:26 +0000
Files and hashes:         1: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl (hash: LynxTsW4Pp/tw+xzkg3QKAg+O/k1oKhL2uoqfhTkw4s=)
                          2: AS215296.asa (hash: ZUhznpJKsAa9LaDOPMe8wN6G79cK71SOYf6WHfqiJOY=)
                          3: 3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa (hash: 54w2F3M9c9ZMYqej/uVTYoc9lVaBw0QpLSZEW7mlB7o=)
                          4: 323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa (hash: 9+L5QD9C8ye40Ikj2zBEBBChEOO2tsV/W1In9gyAruM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:07:cf:38:fd:45:22:1c:ff:89:a2:e6:13:9b:66:84:13:af:45:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
        Validity
            Not Before: Aug  6 13:44:26 2025 GMT
            Not After : Aug  7 17:37:26 2025 GMT
        Subject: CN=DFEF69B04A49642A4B78C5E8C3EDDC5CA45C5E70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b0:5e:93:22:50:07:74:d6:c4:4e:97:46:8e:
                    cf:53:21:d4:29:8f:2e:35:b5:5a:5e:e3:91:69:dc:
                    52:92:a5:f2:22:dd:13:7b:0c:f7:eb:01:a9:72:0b:
                    a3:11:d2:77:5f:5c:24:cc:4c:e5:c0:ca:39:68:ac:
                    4c:6a:f2:71:44:90:19:df:c1:1a:30:cc:24:e2:24:
                    20:14:e9:8f:ff:b6:39:bb:86:1b:3d:dc:59:4e:91:
                    75:fa:29:01:a7:a5:bd:08:90:c4:f5:15:4c:96:21:
                    82:82:0e:8f:29:d4:21:59:b3:34:27:10:15:c9:c9:
                    17:d3:6d:25:d6:0b:0c:f0:df:8d:bb:9e:3b:5d:d8:
                    5f:69:a5:5e:7c:01:3f:c1:c1:23:3a:c8:92:02:21:
                    15:56:e8:77:78:b2:e3:22:52:3a:c4:58:48:a4:d9:
                    bf:54:c6:7c:f5:7b:fb:ab:2c:d0:17:44:22:11:a8:
                    7d:62:01:ca:0d:f1:f4:1a:0b:39:70:c3:90:a2:38:
                    5c:05:c2:56:25:65:e0:a2:19:46:b2:db:4f:21:b1:
                    de:c2:fc:9d:d5:ce:b0:a8:be:a8:58:3f:25:f1:6a:
                    d7:da:df:a9:2c:c4:7f:c3:50:da:0f:91:6c:c8:7c:
                    ea:6b:e6:1f:a5:9e:17:eb:1b:54:46:03:3f:e1:8c:
                    03:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:EF:69:B0:4A:49:64:2A:4B:78:C5:E8:C3:ED:DC:5C:A4:5C:5E:70
            X509v3 Authority Key Identifier:
                keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:a8:4e:42:b0:ef:4e:8d:a6:15:17:05:c9:a7:0a:56:ef:35:
         78:ac:75:68:14:2d:0d:4c:3a:52:36:cf:90:86:c7:41:ee:bb:
         0d:f6:db:b7:eb:c9:15:4c:70:16:59:d8:d5:e3:94:9d:0d:8f:
         3b:05:7d:39:cf:c5:c0:38:2a:b7:5c:5c:fb:52:d2:5a:c9:9c:
         a1:d2:49:f1:22:ac:67:7a:90:c1:fe:2a:96:11:be:9b:83:aa:
         51:10:32:88:69:60:95:8d:f3:8e:58:92:cf:ce:2c:65:4c:78:
         4e:d6:cf:bf:86:af:03:af:8f:5c:18:89:94:89:7f:83:e6:a6:
         6b:a6:20:ce:8c:e1:3f:69:ea:ea:91:ab:d1:f8:05:80:13:cd:
         f6:4e:9c:2c:3e:e4:0a:9b:97:12:0b:71:79:56:80:89:cc:ad:
         90:cf:3a:78:82:ea:ee:71:8b:8b:8a:c1:87:30:08:a0:c4:e9:
         89:13:41:71:72:4f:be:7f:ff:05:8d:f1:67:d6:26:ed:b7:82:
         c7:48:9a:a5:d3:fb:c7:50:ab:75:54:6a:83:de:6f:1a:13:b9:
         20:9d:4c:46:ce:b1:9d:b7:43:6e:29:8e:6f:76:1e:d0:db:da:
         19:ef:33:11:15:49:3d:00:88:3c:6a:a0:20:59:7d:df:fd:25:
         85:c4:22:b8
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUFQfPOP1FIhz/iaLmE5tmhBOvRYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc4ZDdkYzk3NzliMjc4MTVlYmI1YzNmNWZjZjA3Y2M1
ODM3MDhiMzAeFw0yNTA4MDYxMzQ0MjZaFw0yNTA4MDcxNzM3MjZaMDMxMTAvBgNV
BAMTKERGRUY2OUIwNEE0OTY0MkE0Qjc4QzVFOEMzRUREQzVDQTQ1QzVFNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBsF6TIlAHdNbETpdGjs9TIdQp
jy41tVpe45Fp3FKSpfIi3RN7DPfrAalyC6MR0ndfXCTMTOXAyjlorExq8nFEkBnf
wRowzCTiJCAU6Y//tjm7hhs93FlOkXX6KQGnpb0IkMT1FUyWIYKCDo8p1CFZszQn
EBXJyRfTbSXWCwzw3427njtd2F9ppV58AT/BwSM6yJICIRVW6Hd4suMiUjrEWEik
2b9Uxnz1e/urLNAXRCIRqH1iAcoN8fQaCzlww5CiOFwFwlYlZeCiGUay208hsd7C
/J3VzrCovqhYPyXxatfa36ksxH/DUNoPkWzIfOpr5h+lnhfrG1RGAz/hjAPLAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU3+9psEpJZCpLeMXow+3cXKRcXnAwHwYDVR0j
BBgwFoAUV419yXebJ4Feu1w/X88HzFg3CLMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWNhMjUzNTAtOWUzZi00NmUxLWFlMmItMWM2MWI2ZWE1
YWUyLzAvNTc4RDdEQzk3NzlCMjc4MTVFQkI1QzNGNUZDRjA3Q0M1ODM3MDhCMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Y0MTl5WGViSjRGZXUxd19YODhIekZn
M0NMTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lY2EyNTM1MC05
ZTNmLTQ2ZTEtYWUyYi0xYzYxYjZlYTVhZTIvMC81NzhEN0RDOTc3OUIyNzgxNUVC
QjVDM0Y1RkNGMDdDQzU4MzcwOEIzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr6hOQrDvTo2mFRcFyacK
Vu81eKx1aBQtDUw6UjbPkIbHQe67Dfbbt+vJFUxwFlnY1eOUnQ2POwV9Oc/FwDgq
t1xc+1LSWsmcodJJ8SKsZ3qQwf4qlhG+m4OqURAyiGlglY3zjliSz84sZUx4TtbP
v4avA6+PXBiJlIl/g+ama6YgzozhP2nq6pGr0fgFgBPN9k6cLD7kCpuXEgtxeVaA
icytkM86eILq7nGLi4rBhzAIoMTpiRNBcXJPvn//BY3xZ9Ym7beCx0iapdP7x1Cr
dVRqg95vGhO5IJ1MRs6xnbdDbimOb3Ye0NvaGe8zERVJPQCIPGqgIFl93/0lhcQi
uA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:09:58 2025 by rpki-client