Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft
File:                     702B79B445330AC21D237308277A4472598CE771.mft (raw, json)
Hash identifier:          BqWeMTz6k7u3tp0DSQyEjKAvoZKQhCXI0Sd9detW4H0=
Subject key identifier:   10:99:3A:09:AF:19:66:E5:39:30:94:21:27:07:D3:F7:9D:A8:04:8B
Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71
Certificate issuer:       /CN=702B79B445330AC21D237308277A4472598CE771
Certificate serial:       0DC4B0A0925BAD494FB67E5FB462B3BF6DDAA1E2
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft
Manifest number:          6A
Signing time:             Tue 04 Nov 2025 02:31:17 +0000
Manifest this update:     Tue 04 Nov 2025 02:26:17 +0000
Manifest next update:     Wed 05 Nov 2025 05:38:17 +0000
Files and hashes:         1: 326131343a373538303a666666613a3a2f34382d3438203d3e20323134393535.roa (hash: h/rRMvyqafFU+yTlCYjO1aoLzPvMYTq8Atefyqn1aw8=)
                          2: 326131343a373538333a663730363a3a2f34382d3438203d3e20323134393535.roa (hash: HF0IXoiIoV1vsEb3Y7UE6hceXgn4rnvPt86H7Wi7oFU=)
                          3: 326131343a373538333a663730373a3a2f34382d3438203d3e20323134393535.roa (hash: KKLY1zCTXfmGMrjDFuT7b/5dqeecgqHT0wX+vU1j/NU=)
                          4: 326131343a373538333a663730313a3a2f34382d3438203d3e20323134393535.roa (hash: RzicPZXer6PLdeFy+vOsancgSNcjrm95+RPOXY7LoDc=)
                          5: 326131343a373538333a663730323a3a2f34382d3438203d3e20323134393535.roa (hash: j1h3rUtpYcXTQ9tg2+zKR1MIHOPPCpnwfhKyK3a6mSc=)
                          6: 326131343a373538333a663730393a3a2f34382d3438203d3e20323134393535.roa (hash: ody+MZu+p9r7722qUv+nib+WdzL08bt7JIhdIl0nBOM=)
                          7: 326131343a373538333a663730383a3a2f34382d3438203d3e20323134393535.roa (hash: s15NOBRzlJhT8Ilr0QxZxBoPvIfuNlcjTL4p1JyK0Rg=)
                          8: 702B79B445330AC21D237308277A4472598CE771.crl (hash: LkTf6Eha1pgRt7pi/4b3L7DAEpmAWNn0q5dvLGrhHQk=)
                          9: 326131343a373538333a663730333a3a2f34382d3438203d3e20323134393535.roa (hash: 9+boFqIS6keyE5RNh9z/i3/Vy3fO+EE8pDJc8uN4NyQ=)
                          10: 326131343a373538333a663736343a3a2f34382d3438203d3e20323134393535.roa (hash: zM36/OphB/KbTgVAZhJZfKncuog5pc9Z90qFovwCspo=)
                          11: 326131343a373538333a663734333a3a2f34382d3438203d3e20323134393535.roa (hash: F//u8b8URxPoSW5tKZ7gI7LWdU+B7yQQrxeBR/nXITQ=)
                          12: 326131343a373538333a663730613a3a2f34382d3438203d3e20323134393535.roa (hash: KrncfgwV2JNmUMMX9XTAiUcGcVNG82mQHu5/P0lF/YQ=)
                          13: 326131343a373538333a663730353a3a2f34382d3438203d3e20323134393535.roa (hash: v1ff3/5opCg79B8vnRLLf35N5RlDFleXR6jWqIzcy+A=)
                          14: 326131343a373538333a663730343a3a2f34382d3438203d3e20323134393535.roa (hash: GR7y7aRgVAUP5lUmI8IZDhrv8mAyuuXgZxhshW1ruYs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c4:b0:a0:92:5b:ad:49:4f:b6:7e:5f:b4:62:b3:bf:6d:da:a1:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=702B79B445330AC21D237308277A4472598CE771
        Validity
            Not Before: Nov  4 02:26:17 2025 GMT
            Not After : Nov  5 05:38:17 2025 GMT
        Subject: CN=10993A09AF1966E5393094212707D3F79DA8048B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:62:04:e2:4f:2a:dd:d2:f8:0c:00:04:f8:ca:
                    4b:6d:2b:49:6c:de:eb:ea:1e:c3:fa:d9:d6:dd:f5:
                    66:50:36:92:1b:24:a2:dc:93:f1:e7:d9:5a:90:40:
                    4e:55:8f:05:57:24:f9:0a:90:cb:a0:a4:02:21:08:
                    e1:78:5b:ef:aa:8e:6f:b7:51:2b:46:41:48:b6:bd:
                    49:fb:e3:00:9b:c7:ad:20:17:09:15:4b:67:89:d7:
                    da:c0:ab:68:b0:be:87:6f:ca:55:07:97:db:b7:ab:
                    fa:de:c7:4f:f5:1c:4e:16:86:15:b1:5b:4a:98:3d:
                    9c:01:23:1b:9a:82:a1:c6:bc:b0:03:76:5f:28:7f:
                    16:ec:de:f0:9c:80:96:b9:0c:31:a0:79:bb:7d:0a:
                    75:75:b0:b8:58:13:d0:00:1b:da:8a:34:06:9b:13:
                    25:c7:a0:80:ca:e7:d8:f4:d0:c8:04:1b:53:a5:c8:
                    d8:65:88:62:c5:e3:e0:f3:9d:d2:30:a5:9c:c5:38:
                    b0:ba:fd:07:df:c9:9c:ea:22:08:93:af:d5:e4:fa:
                    62:a7:88:b6:18:02:72:aa:b8:50:7c:5d:95:d1:cf:
                    af:0a:6a:ce:f6:52:4f:d4:3c:a9:49:8c:77:0d:d0:
                    7c:01:c1:af:fb:dd:10:02:4e:c2:12:99:8a:e2:87:
                    da:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:99:3A:09:AF:19:66:E5:39:30:94:21:27:07:D3:F7:9D:A8:04:8B
            X509v3 Authority Key Identifier:
                keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f5:04:86:46:36:20:22:5a:c3:97:a8:7c:69:90:e4:51:0f:
         0c:29:de:0d:9a:95:0a:1c:8e:a7:46:a6:46:29:f5:4e:52:a2:
         eb:27:e7:fc:07:2e:f5:f8:68:24:90:6f:01:62:2e:18:78:df:
         63:a9:72:42:4d:6c:24:08:ae:3d:1b:d7:83:24:1b:bf:48:30:
         95:4c:79:28:2b:df:0a:d6:41:3f:98:af:da:c0:51:2a:94:fa:
         f7:50:31:6e:af:57:f4:7c:53:c0:85:56:10:c6:98:64:b3:5e:
         10:16:dc:cc:b1:fd:d2:a6:e4:a2:63:94:8e:5d:3e:d2:c3:81:
         9a:7d:e5:05:84:88:56:27:3d:3e:1a:ae:da:a6:fb:a1:37:c1:
         64:e5:11:1a:92:9f:2d:7b:9b:35:7e:c1:d0:8a:31:9e:89:cd:
         7d:6e:87:3b:5d:7c:57:72:d0:55:55:af:38:36:64:ba:24:f3:
         9d:30:4d:55:cd:8f:6d:96:0e:62:ef:9f:85:64:3b:ce:1c:ef:
         ad:44:54:80:ae:cc:18:08:98:37:c9:2f:97:16:a6:54:97:17:
         18:aa:af:62:8d:25:2d:e8:87:01:f4:16:17:f6:38:44:64:10:
         e7:73:98:63:f1:6b:f2:d4:d8:7f:bb:15:b5:eb:e9:cf:cc:b5:
         c6:9b:fa:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:23 2025 by rpki-client