Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
File:                     B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft (raw, json)
Hash identifier:          PZLDJXmYWr7LToJLK/231rL8kgzXnycIYZG9/RiwFNE=
Subject key identifier:   63:B4:1C:CF:A0:3A:92:00:58:29:5E:DF:D2:CD:A3:FC:9C:E3:22:30
Authority key identifier: B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
Certificate issuer:       /CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Certificate serial:       7A9786714685170004B1FA4ABDA9EC2EDDDB0532
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
Manifest number:          2D
Signing time:             Mon 04 Aug 2025 07:09:57 +0000
Manifest this update:     Mon 04 Aug 2025 07:04:57 +0000
Manifest next update:     Tue 05 Aug 2025 10:17:57 +0000
Files and hashes:         1: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: ikPIiFRhFNPp4wzJn8w9YCg2eDdJG03INaF7Jeb4D9A=)
                          2: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: tIjYpQd9GyWainiE9GzQFbd7ZqDFGn1arDb1AExxerU=)
                          3: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: pe/tp2bLBPulUkbhZe9b5ATBM6Rh5HMZWo4IJTXGPDU=)
                          4: B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl (hash: XGlBqkTQ/HrzMloY5/UFItQrMZs5FU/qws+NMQGyUSk=)
                          5: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: t/2Kihb52wxLH3GVF+LrphldGHxVkV2gtesMFke+X4A=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Aug 2025 23:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:97:86:71:46:85:17:00:04:b1:fa:4a:bd:a9:ec:2e:dd:db:05:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
        Validity
            Not Before: Aug  4 07:04:57 2025 GMT
            Not After : Aug  5 10:17:57 2025 GMT
        Subject: CN=63B41CCFA03A920058295EDFD2CDA3FC9CE32230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ff:ab:07:db:67:25:7c:3b:28:8b:4d:a8:b3:
                    9a:13:7b:fd:85:7b:66:75:6c:60:b5:bc:a4:0c:79:
                    8f:29:4d:2f:a1:e8:3f:09:66:44:b6:ed:98:90:4b:
                    d1:0d:33:89:4d:45:75:f7:82:df:32:68:07:4a:bc:
                    b8:49:35:49:cd:b6:22:0d:d4:16:4c:5d:29:e3:b3:
                    f2:c3:0a:f0:29:0a:1f:2a:79:ec:2c:7a:9f:a8:bb:
                    4f:52:44:32:8d:a0:5e:74:8a:75:26:e1:6a:17:c7:
                    13:56:1a:0c:77:25:bb:de:df:66:06:42:d4:3b:b0:
                    1f:d6:8a:6a:13:e1:c2:70:3c:08:7e:eb:cf:84:c0:
                    1a:76:19:2c:a5:98:23:63:3b:c4:ad:6b:b7:7e:53:
                    f2:71:41:30:b3:d5:a5:35:de:d7:aa:f9:36:2f:79:
                    3c:24:81:78:41:75:f6:c9:be:2c:e7:1c:51:26:11:
                    48:af:21:a1:08:c2:b1:ab:60:3c:4b:e5:6c:a2:30:
                    68:48:53:0c:cd:a4:d8:b6:fc:69:bb:42:8d:be:3b:
                    a2:c5:78:e6:9e:b0:fc:f2:58:17:93:04:ba:c1:a6:
                    77:d7:d5:ca:8a:ac:31:f0:30:3c:a6:a0:07:7b:a1:
                    2c:7c:22:19:83:ad:65:62:46:40:b1:ee:d0:ab:f2:
                    ae:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B4:1C:CF:A0:3A:92:00:58:29:5E:DF:D2:CD:A3:FC:9C:E3:22:30
            X509v3 Authority Key Identifier:
                keyid:B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:4d:2b:7f:79:d0:3c:78:1c:55:ff:06:d3:e9:44:55:98:00:
         e5:63:23:9a:3a:d8:5b:a2:5e:7c:70:67:a9:c2:36:d0:71:be:
         45:98:fe:69:35:50:e3:14:27:e6:e1:4c:de:a3:93:27:43:52:
         33:e9:8a:6a:89:b9:93:41:cd:8c:38:34:45:f0:36:ff:7f:34:
         48:90:0f:5f:dc:c2:6e:c1:41:81:27:d4:75:a8:32:6b:75:e5:
         8c:33:20:9d:c6:a8:dd:65:e4:e2:da:71:32:66:3c:f5:cc:39:
         22:57:f6:b6:9b:e9:7c:f4:21:a2:f2:30:7e:f7:56:ec:11:4e:
         36:be:1c:85:6f:df:fa:cd:ce:d1:39:f4:8c:62:88:ca:35:9d:
         03:24:6c:43:13:be:7b:a6:a0:c9:1a:89:7f:15:cf:e0:5f:29:
         e7:ac:a8:6c:b9:cc:4f:30:40:02:92:ea:e2:0a:64:1a:d6:8d:
         2c:f7:85:ef:2c:f6:9d:e1:08:21:d3:d8:0e:8f:48:28:fd:1c:
         eb:98:3e:25:25:39:a8:ae:df:58:b1:04:19:f4:16:df:c3:6f:
         f9:2d:2a:b6:dc:17:c4:e3:fe:fd:61:18:5b:e9:a8:16:99:50:
         a1:9e:7d:de:e8:92:a4:d8:63:c0:25:4b:7e:a8:ed:4d:b6:71:
         ad:85:80:fe
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUepeGcUaFFwAEsfpKvansLt3bBTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY0NzlFMDkwNEIzMDE5NzVCMTlEMkJGRjQyQkUwOERC
RkQ2OEQ2NTAeFw0yNTA4MDQwNzA0NTdaFw0yNTA4MDUxMDE3NTdaMDMxMTAvBgNV
BAMTKDYzQjQxQ0NGQTAzQTkyMDA1ODI5NUVERkQyQ0RBM0ZDOUNFMzIyMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ/6sH22clfDsoi02os5oTe/2F
e2Z1bGC1vKQMeY8pTS+h6D8JZkS27ZiQS9ENM4lNRXX3gt8yaAdKvLhJNUnNtiIN
1BZMXSnjs/LDCvApCh8qeewsep+ou09SRDKNoF50inUm4WoXxxNWGgx3Jbve32YG
QtQ7sB/WimoT4cJwPAh+68+EwBp2GSylmCNjO8Sta7d+U/JxQTCz1aU13teq+TYv
eTwkgXhBdfbJviznHFEmEUivIaEIwrGrYDxL5WyiMGhIUwzNpNi2/Gm7Qo2+O6LF
eOaesPzyWBeTBLrBpnfX1cqKrDHwMDymoAd7oSx8IhmDrWViRkCx7tCr8q5/AgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUY7Qcz6A6kgBYKV7f0s2j/JzjIjAwHwYDVR0j
BBgwFoAUtkeeCQSzAZdbGdK/9Cvgjb/WjWUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzkvQjY0NzlFMDkwNEIzMDE5NzVCMTlEMkJGRjQyQkUwOERCRkQ2OEQ2NS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvQjY0NzlFMDkwNEIzMDE5NzVCMTlEMkJGRjQyQkUwOERCRkQ2
OEQ2NS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03
Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvOS9CNjQ3OUUwOTA0QjMwMTk3NUIx
OUQyQkZGNDJCRTA4REJGRDY4RDY1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuU0rf3nQPHgcVf8G0+lE
VZgA5WMjmjrYW6JefHBnqcI20HG+RZj+aTVQ4xQn5uFM3qOTJ0NSM+mKaom5k0HN
jDg0RfA2/380SJAPX9zCbsFBgSfUdagya3XljDMgncao3WXk4tpxMmY89cw5Ilf2
tpvpfPQhovIwfvdW7BFONr4chW/f+s3O0Tn0jGKIyjWdAyRsQxO+e6agyRqJfxXP
4F8p56yobLnMTzBAApLq4gpkGtaNLPeF7yz2neEIIdPYDo9IKP0c65g+JSU5qK7f
WLEEGfQW38Nv+S0qttwXxOP+/WEYW+moFplQoZ593uiSpNhjwCVLfqjtTbZxrYWA
/g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:06:56 2025 by rpki-client