Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
File:                     4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft (raw, json)
Hash identifier:          XdEd5zOBOH4EWB+OCfaIAyr13h9FoizbJia0x/Pi0hc=
Subject key identifier:   AA:61:57:3C:18:AA:A4:AB:64:27:A9:85:2D:23:C3:0A:32:46:CE:0C
Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
Certificate issuer:       /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Certificate serial:       2118CD3D866A5BF4D38726F9C39E67A70BF0850A
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
Manifest number:          B6
Signing time:             Tue 04 Nov 2025 09:34:19 +0000
Manifest this update:     Tue 04 Nov 2025 09:29:19 +0000
Manifest next update:     Wed 05 Nov 2025 12:30:19 +0000
Files and hashes:         1: 326130363a313238333a633131303a3a2f34342d3434203d3e20323135313437.roa (hash: eXVCemDmONV15C52gD5uieDCPXBK962v/14gFWdt93I=)
                          2: 326130363a313238333a633031303a3a2f34342d3434203d3e20323037323532.roa (hash: h0vT/prOx9vwiaveGRIgx6hYlS5pRm7loFEHoMt0gjM=)
                          3: 326130363a313238333a623333363a3a2f34382d3438203d3e20323132303439.roa (hash: YqdEVY7SOTNAO11FQbD+th1qujzrUObpLGS5PUruVeA=)
                          4: 4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl (hash: Yik5g5n7ncfwlPMNRB5mw8TG1y7UhvY4YL5f+p0U7RA=)
                          5: 326130363a313238333a633031653a3a2f34382d3438203d3e20323136303433.roa (hash: RbV8aV1hwdgLoFTBB5o9XuJZhQN2G66eOV/RA0BgHQM=)
                          6: 326130363a313238333a623333343a3a2f34382d3438203d3e20323132303439.roa (hash: p7ojcQ2k7RgOVh4dazmmzhPGgg3/0M56J3ZYT71iOpk=)
                          7: 326130363a313238333a633133303a3a2f34342d3438203d3e20323131303636.roa (hash: m4Luo9xGitfq3ojwlUfNtYjEMDVGY86VY8ZKFo2fqeE=)
                          8: 326130363a313238333a633035303a3a2f34342d3434203d3e20313937363334.roa (hash: oeOpStq+yTIhXAbkO6LdiaaohylU6oHXOIb1McpnccE=)
                          9: 326130363a313238333a633037303a3a2f34342d3434203d3e20323136303739.roa (hash: mTzVhSMll7viHURYqoIRwSFCVsO4fjPFD8/ZerpXHyM=)
                          10: 326130363a313238333a623333353a3a2f34382d3438203d3e20323132303439.roa (hash: snY4Ta6RuGK+BYVIvxiTToKWxR/e+68OpgJnyZhDOlg=)
                          11: 326130363a313238333a633031643a3a2f34382d3438203d3e20323136303433.roa (hash: 4/ka7ifCzic1cggPNooOTtZhw7zW/yZ+MZkomdGiZ2k=)
                          12: 326130363a313238333a633132303a3a2f34342d3434203d3e2030.roa (hash: jzjfLKSOGAN4cdNFv5OjXLTzBjRIXHX15OXoMKXd6Cs=)
                          13: 326130363a313238333a633031613a3a2f34382d3438203d3e20323136303433.roa (hash: FI6+lnt7wYKf/koajd7leuAGrgnOrTyLUbLsPKITY1A=)
                          14: D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer (hash: cX55x9cUAbjavpLsWCoGmd0EPuFejyz0ypMt9d6XQ9A=)
                          15: 326130363a313238333a646561643a3a2f34382d3438203d3e20313939363839.roa (hash: SG5JNgdnMjm2OKXYddSy6anR6u3fmHQbGoT1LncLqwo=)
                          16: 326130363a313238333a623330303a3a2f34302d3438203d3e20323132303439.roa (hash: C9VygPMz1kCJjZPsH7ebFvgFHWmWa4oZ2yT5qoQ5ZX4=)
                          17: 326130363a313238333a623030623a3a2f34382d3438203d3e20323136313133.roa (hash: 4sNpvCDpmLQp2mPXp2Ksgv7uyg8pxayLVvTTtKN/kGA=)
                          18: 326130363a313238333a633031633a3a2f34382d3438203d3e20323136303433.roa (hash: N8mf63hWqpJO+0bcOeR9TPEpzawlCLyuIigTkiFhntY=)
                          19: 326130363a313238333a626130303a3a2f34302d3438203d3e20323039363638.roa (hash: pDH3/3Dk1Fq980Em9CqMToFDUz3enDEGYm53t1F1Sc0=)
                          20: 326130363a313238333a633034303a3a2f34342d3434203d3e20323037323532.roa (hash: KKXlwvhQJqWcwFRoeiL4Ai77EOga92r6EnYIMF156v4=)
                          21: 326130363a313238333a633032323a3a2f34382d3438203d3e20323136303635.roa (hash: d6qHjIqS+NQlJJC4fgewHy8RhS3xafbvkXvQ4DSoLBk=)
                          22: 326130363a313238333a633031663a3a2f34382d3438203d3e20323136303433.roa (hash: XX8C1AozDmXpqv9dzBQTyEko4QWspsT7yYoHU4dP6MI=)
                          23: 326130363a313238333a3a2f33322d3438203d3e203438373030.roa (hash: Wr4akw4KZeTvVblVoL8Jt+it3/yUvt7V4gxMtbASZUM=)
                          24: 326130363a313238333a646566663a3a2f34382d3438203d3e20313939363839.roa (hash: EdRNEC2NhNz1dR3GdTaOVDmAQ8sskRvEiM6mgrxdX1A=)
                          25: 326130363a313238333a633032313a3a2f34382d3438203d3e20323136303635.roa (hash: KgK/s7YcGzFUWJMW5IeSycArSyGlw1j42I4Yf8lcrCM=)
                          26: 326130363a313238333a623030623a3a2f34382d3438203d3e20323037343234.roa (hash: 46s55ubn5d3syu1JbUaOFkMdM1SbsGOMWMhdQ+Kpt6c=)
                          27: 326130363a313238333a633061303a3a2f34342d3438203d3e20323135373338.roa (hash: /eQcc3bAu0HXOQt2Ubpfxq3rdFnxWQ7Z7lY/KZzUgcE=)
                          28: 326130363a313238333a633034663a3a2f34382d3438203d3e20323037323532.roa (hash: BsDYhwB961Qyz3SUa8v0S6G15dbxVZ499UCKo/7aoPI=)
                          29: 326130363a313238333a623333303a3a2f34382d3438203d3e20323132303439.roa (hash: Y1ntaNzDkw4cYAPpDRBmMDcy9D0olFyf+JjbLcEG7SY=)
                          30: 326130363a313238333a633032663a3a2f34382d3438203d3e20323136303635.roa (hash: 3zDJJzIy+SjBKUnaDlwIxYf9YXHGzV1g+hM4bFoucIk=)
                          31: 326130363a313238333a623130303a3a2f34302d3438203d3e20323136303532.roa (hash: iVNEZgOpMFlEdOoV4epTUxFj6KWFxX6+5w3Fhp7PsYE=)
                          32: 326130363a313238333a626330303a3a2f34302d3430203d3e20323036343434.roa (hash: iolIMZvypg6PJiuOU91pEjZF4Pb2HUYXupJxlSpEcl4=)
                          33: 326130363a313238333a623230303a3a2f34302d3438203d3e20323136323637.roa (hash: 9bzXBq65v2uKCqQUSEdD7VkwusMemNbVnPl7hG1ygA4=)
                          34: 326130363a313238333a643030303a3a2f33382d3338203d3e20323134393135.roa (hash: px1fI/XgIjBMCMd4K5kckwwrPVsoYaMf6QYTfTPcDLE=)
                          35: 326130363a313238333a633032303a3a2f34382d3438203d3e20323136303635.roa (hash: Kt/l33sg5Y3ocVyNgNOeTMWu3DIkMM7XX4gb61bKDRg=)
                          36: 326130363a313238333a393030303a3a2f33382d3338203d3e20323135333635.roa (hash: 020HnR9rIKfuV2n6hd7OAHR/9d46/KnFYyVNUfcKfZI=)
                          37: 326130363a313238333a633031623a3a2f34382d3438203d3e20323136303433.roa (hash: ruK85AjjWhlS693Y4dvHuHGq0Q3TZQwI2Ys7rCaxHBc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 12:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:18:cd:3d:86:6a:5b:f4:d3:87:26:f9:c3:9e:67:a7:0b:f0:85:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
        Validity
            Not Before: Nov  4 09:29:19 2025 GMT
            Not After : Nov  5 12:30:19 2025 GMT
        Subject: CN=AA61573C18AAA4AB6427A9852D23C30A3246CE0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c6:48:52:1d:a7:d0:03:de:05:44:3f:40:b5:
                    57:e7:38:7a:6e:d6:31:af:76:90:75:c9:fa:e7:70:
                    6c:78:7f:61:37:0f:e3:ba:fc:21:ce:59:0d:84:3c:
                    a8:dd:15:f8:f1:73:5b:60:61:ee:c9:81:93:ab:96:
                    4a:7d:94:bd:f9:85:29:76:45:bd:ab:0c:48:52:bb:
                    c6:86:1f:2e:58:94:02:0f:4f:60:0e:2a:e3:62:8f:
                    c0:ee:5d:e1:0d:a4:54:17:57:84:06:84:22:4d:44:
                    11:2b:a6:9d:13:dc:f2:91:0a:f1:79:4c:8f:9f:3a:
                    be:77:2c:be:ed:96:94:a3:f4:82:91:0c:b7:42:f1:
                    03:49:0a:03:f8:bf:24:0c:9e:fb:a5:00:c8:e7:a8:
                    35:e6:89:c9:b4:4c:42:66:b2:31:f5:1f:f2:b7:8c:
                    12:d3:6e:a0:e9:9d:f6:f8:ef:32:cd:51:c2:a0:0e:
                    cd:c7:40:b3:f8:65:d2:62:8e:59:23:b9:f9:40:cc:
                    24:c5:64:28:ab:1b:a9:16:ad:f7:1b:5f:48:c4:9d:
                    56:bb:4f:04:12:8c:15:40:a0:ee:e9:7b:a5:d0:43:
                    8f:5f:92:e4:2f:71:2a:bd:a5:d7:a8:e4:92:70:43:
                    2d:dc:50:67:e7:80:16:4a:f7:9a:17:e6:e4:b3:93:
                    05:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:61:57:3C:18:AA:A4:AB:64:27:A9:85:2D:23:C3:0A:32:46:CE:0C
            X509v3 Authority Key Identifier:
                keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:42:64:fe:53:cb:21:fd:50:7e:16:c5:99:82:e2:43:5e:9a:
         bd:ee:70:e7:4f:49:b9:3d:8e:b3:2e:9b:0b:d3:b2:eb:8e:cc:
         94:16:ce:39:c6:c8:95:1b:2e:49:74:bb:62:8a:04:01:f4:f7:
         e3:93:e4:a3:2f:b6:13:c8:9f:7d:48:bb:e1:52:d6:4d:14:30:
         ad:f1:cb:a8:ff:24:cd:ea:5e:e5:bc:52:0f:63:07:ba:74:37:
         c5:ed:27:de:d1:3f:ac:e2:28:f0:16:b1:78:19:b8:d7:86:23:
         cb:7d:0d:1a:16:f7:76:47:3b:9d:a4:45:03:cb:34:4f:31:02:
         5e:83:0e:bb:d9:68:c1:ea:8f:6d:1e:a4:4f:ee:71:c5:d1:f2:
         c2:70:22:28:f9:e0:9e:d7:55:cf:94:cd:95:80:a4:43:31:70:
         2e:e1:98:48:c4:6f:94:a2:d5:39:6f:56:e7:34:fe:9a:84:38:
         c6:ad:3a:fa:02:28:00:02:67:1d:56:00:a5:7f:5f:1a:15:f9:
         41:f9:02:35:47:cd:91:41:50:6e:b5:06:3f:ea:ed:33:71:d8:
         d5:60:78:fe:7b:69:9a:40:94:25:d9:bc:e2:be:8b:97:2f:ce:
         84:46:f2:c2:61:ab:6c:44:cd:f6:e7:63:1f:26:08:8f:eb:20:
         fb:5e:61:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:44:03 2025 by rpki-client