Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
File:                     92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft (raw, json)
Hash identifier:          ExubnyeXfpHzo+rvEttOVEPYsgo3Q8nz77cpLtWnC+4=
Subject key identifier:   16:CD:38:3C:BE:60:DD:53:8A:58:3B:A5:56:D4:DA:5F:1B:4C:DA:44
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Certificate issuer:       /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial:       570670269803820BECB85EA508A21D885A709584
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
Manifest number:          98
Signing time:             Sun 10 Aug 2025 11:37:23 +0000
Manifest this update:     Sun 10 Aug 2025 11:32:23 +0000
Manifest next update:     Mon 11 Aug 2025 12:45:23 +0000
Files and hashes:         1: 39352e3231342e3138332e302f32342d3234203d3e20323039313831.roa (hash: lTsB3YA1lHFbSl1Cmaufvak87ZyxIaRmoFdP+J/wwxc=)
                          2: 39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa (hash: P3AXSCPo5qCcqJ/tF9UnDRiSqmNKJoNVWYccPe9dv1w=)
                          3: 34352e3135362e35322e302f32322d3232203d3e2039303039.roa (hash: eK18gsMy8+wzgYZmaz7TkcO08JcfPTkHAWlv0aJXuz0=)
                          4: 39352e3231342e3137322e302f32342d3234203d3e20313937343737.roa (hash: PxR9Gj8WOc/7LwGO5t67j8SuO3iXayzi64SIiemjFkw=)
                          5: 39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa (hash: 7RDjli52ea3Y5rIxOBi7CoAOYzObgN76cF1oNhGaH/0=)
                          6: 34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa (hash: JaeJstE2poR1Rlm8a7RHcBFfHeeu7vNkxKzYr0p4Jc8=)
                          7: 39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa (hash: EnyfxlxrEZoOAQu439Mhaj0MSgN4o3Cr584mhVLUCgw=)
                          8: 39352e3231342e3137332e302f32342d3234203d3e20383334.roa (hash: cirGnJyv9EspRQxNyGyC6PnLZwK1svkwcmvgRnr8Tqg=)
                          9: 39352e3231342e3138302e302f32342d3234203d3e20323033373538.roa (hash: yeHT2siMw+46e40lrxlb+yyyQe2+Rk/4CH0GwC6laEg=)
                          10: 39352e3231342e3138322e302f32342d3234203d3e20323132333834.roa (hash: ahvCpQCYKDC5UmCWINUE1+9+R3CEuxDs9xpt+/mHGMc=)
                          11: 3138352e3131352e3230372e302f32342d3234203d3e20313939373037.roa (hash: 5Sl2Z3ptNbtvr3FBhOdZcqrM9plEnj22ST5HcnfsBGc=)
                          12: 34352e3133392e3139382e302f32342d3234203d3e20323134343636.roa (hash: 9KX5zC7UuI47N7heL//vNyLO3x7YEi1CucEhFX8SUR0=)
                          13: 3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa (hash: G13vY29QnBftdVi9wxOE7EsR55MD+5g83z0Wgjkq5Ig=)
                          14: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl (hash: Eim9Ed+Yu2SYomrlDZAb8G4lsVE+6T+LBC/9PhR8pcc=)
                          15: 39352e3231342e3137352e302f32342d3234203d3e20313335333931.roa (hash: dZLABnxKpTxFiKmt1/yK20i3zGqpWgZ6NnQoPD/883U=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 12:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:06:70:26:98:03:82:0b:ec:b8:5e:a5:08:a2:1d:88:5a:70:95:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
        Validity
            Not Before: Aug 10 11:32:23 2025 GMT
            Not After : Aug 11 12:45:23 2025 GMT
        Subject: CN=16CD383CBE60DD538A583BA556D4DA5F1B4CDA44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:85:5f:be:b2:67:3e:aa:c9:b2:11:35:bd:28:
                    b5:d8:3e:73:75:57:60:c9:e0:3b:9b:43:d1:59:32:
                    58:f3:c7:c3:a3:89:34:8a:ce:ff:ea:78:49:04:62:
                    2a:fe:a7:e4:45:d4:73:43:59:67:14:68:92:c8:9e:
                    9a:5c:23:00:db:39:cf:f9:8d:c6:a1:05:a9:34:be:
                    5d:9d:ab:a1:f9:13:12:3c:25:f8:fc:d1:b8:f8:e3:
                    2f:85:47:d3:13:53:97:80:45:70:05:79:3a:2c:8d:
                    9d:f1:4f:5f:a9:c3:69:38:b0:99:8e:2e:9c:5d:bc:
                    c1:15:57:80:4e:b9:7e:ad:ac:99:9c:03:74:31:f7:
                    12:a7:4c:47:70:d8:70:10:f1:cd:43:a1:8e:c8:87:
                    ae:84:49:ca:cd:49:87:1e:08:83:0b:ae:b0:4f:5e:
                    97:80:2d:e7:54:d9:21:a0:50:59:55:38:1d:8a:1e:
                    bd:71:6d:fc:49:0d:d3:a7:e6:45:11:33:64:78:d4:
                    20:8f:62:95:48:56:c6:6d:41:ff:7d:04:fa:25:b5:
                    29:94:4f:11:ae:b0:2f:e3:2d:a3:f0:5b:f7:0e:62:
                    b0:58:4d:27:65:5c:07:6b:a9:d6:1a:b2:10:1c:6e:
                    be:a4:b6:c8:63:27:10:5d:48:d3:e3:aa:4f:db:d0:
                    bc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CD:38:3C:BE:60:DD:53:8A:58:3B:A5:56:D4:DA:5F:1B:4C:DA:44
            X509v3 Authority Key Identifier:
                keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:5c:af:2f:b3:6f:67:62:52:aa:59:f3:17:81:64:8e:3d:d6:
         89:aa:29:16:ab:88:7c:1f:49:00:11:07:00:d5:e1:f7:00:ff:
         cf:8e:10:9a:4f:52:99:88:f4:5b:d5:3a:7c:15:ef:5b:a2:81:
         da:fb:b4:94:4a:89:81:09:3e:29:86:f9:21:9f:bd:78:cd:a9:
         c6:34:76:b1:38:7f:33:f0:9f:00:9f:98:8d:0b:57:d0:02:92:
         62:ca:91:8d:8e:05:34:96:8a:5a:1d:cd:52:ee:a7:7c:f5:f4:
         b9:5f:41:7e:05:d0:67:1f:1c:29:6f:af:1e:6e:2a:96:8c:07:
         39:bb:54:ba:df:b8:b6:57:f7:98:04:81:98:c1:fb:e8:70:9b:
         87:ae:4d:13:6b:96:55:37:bd:7f:9c:6e:44:4f:14:d5:9b:10:
         a8:9a:1a:e7:aa:44:f2:43:74:42:af:0c:66:ea:e3:c1:31:f3:
         38:0e:f5:1c:20:5a:44:cf:3d:e7:e8:4f:8b:c6:3d:d3:4e:80:
         b6:0a:4c:b8:03:b2:a4:d5:6a:9b:c0:82:d1:40:ba:e8:e8:35:
         d9:d4:41:3d:5c:56:cc:28:5c:f0:3a:54:6b:3b:bd:13:07:3a:
         e1:f3:8a:47:3a:de:ec:db:13:0f:a4:2b:ad:b8:0d:76:33:17:
         74:67:cd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:53:36 2025 by rpki-client