Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
File:                     9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json)
Hash identifier:          zcJ/ct9svvbKxIr2vM3hzT0lTBrqHwS19aBSe3ncCco=
Subject key identifier:   BF:4F:64:F7:72:03:36:77:9B:44:3F:F7:B9:FA:35:CF:7A:E6:81:4E
Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
Certificate issuer:       /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Certificate serial:       5B71D2A062C742A560A61D4FB12B7686E20756B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
Manifest number:          03F6
Signing time:             Sun 03 Aug 2025 21:19:41 +0000
Manifest this update:     Sun 03 Aug 2025 21:14:41 +0000
Manifest next update:     Tue 05 Aug 2025 00:47:41 +0000
Files and hashes:         1: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: 3LQCLtbZ2cAzmsqD8inTKmHS0+b4RIJVefCUUonuvB0=)
                          2: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: /LejqbWiFUxs1DgkjzVItnmcQXCtVjOkQxj/fIk9rAQ=)
                          3: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: twheygdBU9M/hWK8PwEKS7vel1IBGYLsGKuF6NDPdmA=)
                          4: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: QlNtxapPtCDVmKsd/rR7Y2Bq1QIkmg64gwg6mpWc9ZY=)
                          5: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: ld9bmw/lU5ViE7fFfnUAARe92vzpSXeZ47xTrIGHE2Y=)
                          6: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: uWYPVYjRnhouz2kB1gip220mm9ixJ1+yxtSXIITlxEw=)
                          7: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: 4JL3Gtu7UsX3IaHs3LaQwmdxUfCfFV6YWJerzJoc+wE=)
                          8: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: kVZlSJSrWOIFgbVyyqSUiD6jECTpvfhx5mx8hRL1cGE=)
                          9: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: YcmyLeFBQ+WK9MxW4qT13yT/CsdMqFWcCNcHges7cNY=)
                          10: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: +6pKiWIr1xfpXpXCXiVMVMi0tFetJIO1JWmpuLH4c10=)
                          11: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: mr8O2GLITID87EQbUR0mW/IyDelg6k8ezJcKyZbdo9E=)
                          12: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: 1jWpw+W9zeIRwNdxwEeWvA1uKZ5XVqeLW/yed0hU+d4=)
                          13: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: yiPh36TU1+o+jLX45pyYr1yhJEOI86BPrMUwrS94mMI=)
                          14: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: Pgs5ueHQXHOzRUAnFpUKAel9Ig4WE+HMpXX4wHeR3SY=)
                          15: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: nrTdofG3QiyT59ifvXqBtX8pF4lYbmqFJc6mO1yyOW0=)
                          16: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: 8htEN27nXC1XFUYvScmaKLGazPRUUosEipnSlN6XgBk=)
                          17: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: DudKC7EbN/x1z3E3UcohZZDxNJCJJwujdDPss+8DrkI=)
                          18: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: vCrLMX0eSFK/WsSjH4NPI6BnYmwIN7ZEFJbozFxO6uE=)
                          19: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: qWp9paAJXWyG6T4NlWTD/O+mrcUKf+wb2OOSJ/RUTQM=)
                          20: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: mOAttZBNx/CTeO/Z3xtwFj9TNAzOHD7wWSzttDopHBY=)
                          21: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: O6Y1hG1nwzeeD6cHBxdPUahfliAdIPWZFY71/gw4KVA=)
                          22: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: iksl6QO5bGAwqBp6Vth9mckUoVZxpFnDxq6gmgw5QDs=)
                          23: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: W9T8aPnkMAlNbGOA+isd3U8U+YdKRxlDW0/+vHw4iGg=)
                          24: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: q/tmnbq1kdd2hUMwbcuSKcZt7pux1EaGGpLbn7IfofI=)
                          25: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: S7PYQmgyaS+nUukOrNi+7gU0SVsm2vupfOTXwPtPOXM=)
                          26: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: dqiC7sfkexEdY4bNAfWo7TkIe5GTWHX5uIAGfupS9Ro=)
                          27: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: hFAW06mmhAPSV/HJ4B8aC2PvIR5CrcKx3FcqsTikSiM=)
                          28: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: 7gdiZpTYF4VKwdmEsTHKuwi6oAiZC6mVLx4cpcdl/GE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Aug 2025 18:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:71:d2:a0:62:c7:42:a5:60:a6:1d:4f:b1:2b:76:86:e2:07:56:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
        Validity
            Not Before: Aug  3 21:14:41 2025 GMT
            Not After : Aug  5 00:47:41 2025 GMT
        Subject: CN=BF4F64F7720336779B443FF7B9FA35CF7AE6814E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:69:90:96:52:a7:09:85:af:b0:76:42:b4:46:
                    5e:1d:9b:df:ae:2d:f9:94:6c:41:e3:b9:a3:27:cb:
                    f2:9c:3c:88:d1:53:a3:29:be:df:ba:b7:53:7d:85:
                    b8:0f:14:d5:de:94:8e:fb:60:05:c1:1c:3f:18:27:
                    98:b9:d4:07:93:96:a2:5f:0a:ad:4f:50:ff:5c:3b:
                    93:e5:e9:1e:e2:c1:c3:b5:8e:53:32:5b:f8:68:82:
                    2e:b9:8f:b2:a6:ca:86:48:56:dc:27:58:c7:62:fc:
                    f1:12:25:63:8a:db:78:21:d0:05:87:8f:f3:79:19:
                    4a:af:00:28:5d:b3:d9:e8:bf:3b:0b:60:ab:1a:47:
                    68:f5:39:1a:a9:31:ad:d5:41:4b:b0:eb:26:cf:6e:
                    03:3e:c4:46:c4:20:13:2f:11:62:d6:86:31:1f:f5:
                    c5:55:5d:d5:9e:36:36:80:00:1f:ac:ab:13:76:65:
                    c8:b4:d6:79:9a:d6:a9:69:1f:14:75:8b:c1:ca:0b:
                    79:87:4b:39:1a:02:b8:51:47:04:94:8e:fd:2a:8f:
                    8f:15:5a:79:d2:a3:50:b6:54:51:bd:db:7e:85:5e:
                    eb:70:ea:8f:fe:c5:39:e4:29:49:50:ab:f0:75:85:
                    13:c3:da:01:5f:71:35:3d:51:f4:07:c8:61:61:0c:
                    9f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4F:64:F7:72:03:36:77:9B:44:3F:F7:B9:FA:35:CF:7A:E6:81:4E
            X509v3 Authority Key Identifier:
                keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:5d:39:f4:c8:42:47:a3:e8:d2:6a:ca:f5:d1:7f:0f:6e:13:
         7a:7e:5e:e1:1a:8f:06:0e:3b:78:2f:63:f4:2f:07:8c:4a:9d:
         90:9d:69:8d:5b:1b:02:a2:1a:b2:fc:e1:ca:b0:89:76:2d:f2:
         a9:7e:b0:11:0c:17:e2:81:e5:3d:4b:72:97:a4:dd:48:22:ea:
         cf:37:10:ed:23:0e:9d:06:32:4b:62:9b:3c:d7:3a:db:42:46:
         0d:7b:5f:f4:86:a3:c6:db:5d:bb:9b:c7:85:db:2d:6b:7c:ab:
         44:dc:6b:03:5f:b3:f3:de:11:07:81:bb:e9:a6:e9:d4:8e:ca:
         d4:bf:6d:b8:90:5c:fb:e4:92:76:08:c9:dc:3f:6e:f0:68:ee:
         23:83:f8:12:98:15:2c:f4:34:f2:92:bd:38:ef:0b:74:e9:0c:
         9b:0c:1e:06:f1:79:e7:17:ca:1e:66:99:93:d6:77:fb:41:c8:
         12:09:c4:a1:1d:00:75:11:c4:d2:c2:b1:c3:6a:c1:0e:2f:5d:
         aa:5a:71:f6:a1:72:1b:4c:f3:95:bf:8c:07:47:37:bc:75:43:
         55:d3:3b:e0:bc:46:9b:6b:c6:4f:b6:90:da:0b:90:81:73:ea:
         dc:ca:da:44:f9:da:35:57:47:28:a5:86:85:54:6d:a7:08:af:
         5e:e2:80:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 04:05:51 2025 by rpki-client