Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
File:                     92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft (raw, json)
Hash identifier:          ekkZ3fPQFkf2R/2MKDrDVS7UJaj0ZFAVtLjEC8b6cYk=
Subject key identifier:   35:91:31:18:7E:54:7C:9D:4D:27:C1:C2:89:4C:35:16:7D:7D:D7:9B
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Certificate issuer:       /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial:       1BD1025B0044383DD387760E15012045871FD276
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
Manifest number:          50
Signing time:             Thu 19 Jun 2025 19:53:21 +0000
Manifest this update:     Thu 19 Jun 2025 19:48:21 +0000
Manifest next update:     Fri 20 Jun 2025 21:45:21 +0000
Files and hashes:         1: 34352e3135362e35322e302f32322d3232203d3e2039303039.roa (hash: eK18gsMy8+wzgYZmaz7TkcO08JcfPTkHAWlv0aJXuz0=)
                          2: 39352e3231342e3137322e302f32342d3234203d3e20313937343737.roa (hash: PxR9Gj8WOc/7LwGO5t67j8SuO3iXayzi64SIiemjFkw=)
                          3: 39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa (hash: 7RDjli52ea3Y5rIxOBi7CoAOYzObgN76cF1oNhGaH/0=)
                          4: 39352e3231342e3138322e302f32342d3234203d3e20323132333834.roa (hash: ahvCpQCYKDC5UmCWINUE1+9+R3CEuxDs9xpt+/mHGMc=)
                          5: 34352e3133392e3139382e302f32342d3234203d3e20323134343636.roa (hash: 9KX5zC7UuI47N7heL//vNyLO3x7YEi1CucEhFX8SUR0=)
                          6: 39352e3231342e3138312e302f32342d3234203d3e20323134303235.roa (hash: 1UxYccK9JJCwmCQOcrxMzUmtYqXMEA+sXJKMK+TMi4g=)
                          7: 34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa (hash: JaeJstE2poR1Rlm8a7RHcBFfHeeu7vNkxKzYr0p4Jc8=)
                          8: 39352e3231342e3138332e302f32342d3234203d3e20323039313831.roa (hash: lTsB3YA1lHFbSl1Cmaufvak87ZyxIaRmoFdP+J/wwxc=)
                          9: 3138352e3131352e3230372e302f32342d3234203d3e20313939373037.roa (hash: 5Sl2Z3ptNbtvr3FBhOdZcqrM9plEnj22ST5HcnfsBGc=)
                          10: 39352e3231342e3137352e302f32342d3234203d3e20313335333931.roa (hash: dZLABnxKpTxFiKmt1/yK20i3zGqpWgZ6NnQoPD/883U=)
                          11: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl (hash: mdOWkO3L07JvyFs+YtjFRoX6tafBQHYW/UW7Z04qFpY=)
                          12: 39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa (hash: EnyfxlxrEZoOAQu439Mhaj0MSgN4o3Cr584mhVLUCgw=)
                          13: 39352e3231342e3137332e302f32342d3234203d3e203433363431.roa (hash: lEcRDdf6cIhY1Oa3628nbp4zU28+wjCf+aFM7KnL8Ho=)
                          14: 39352e3231342e3138302e302f32342d3234203d3e20323033373538.roa (hash: yeHT2siMw+46e40lrxlb+yyyQe2+Rk/4CH0GwC6laEg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 21:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d1:02:5b:00:44:38:3d:d3:87:76:0e:15:01:20:45:87:1f:d2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
        Validity
            Not Before: Jun 19 19:48:21 2025 GMT
            Not After : Jun 20 21:45:21 2025 GMT
        Subject: CN=359131187E547C9D4D27C1C2894C35167D7DD79B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6c:d2:7f:09:40:9a:70:8a:17:c3:cf:54:39:
                    be:87:25:af:dd:65:48:8a:6c:73:55:1f:cc:7f:18:
                    aa:67:44:be:69:21:6b:3e:be:72:0a:22:c5:ac:a5:
                    59:67:9b:e0:ce:ed:0c:1a:92:ac:46:f7:c0:8c:0e:
                    5b:e3:06:b9:eb:cd:89:11:1b:49:5f:59:36:9e:e5:
                    29:69:b4:e7:24:5a:8a:cc:54:c4:e8:80:63:89:65:
                    b1:9e:26:fc:6a:c0:c6:dd:ef:e4:b3:70:30:ef:f5:
                    54:eb:b6:d4:bb:2a:03:8f:7d:23:39:85:fb:15:0e:
                    35:c2:29:f0:f3:31:ce:ab:43:f1:c9:11:8f:3c:fd:
                    b3:37:87:ce:a2:17:87:8c:e5:0e:52:44:5a:7f:4e:
                    dc:1b:40:26:8e:33:c4:fc:f1:ce:64:e4:fa:84:92:
                    75:90:dc:9f:f3:9d:13:d5:35:5e:91:ec:ca:65:86:
                    d4:d7:33:08:2d:12:01:40:c5:0f:a9:4b:9e:dd:5c:
                    86:6b:71:22:bf:83:e4:89:86:76:cc:73:4d:09:67:
                    83:4b:8b:cd:79:f8:19:ca:84:b1:0f:5b:0f:d2:9b:
                    be:f0:e6:52:05:38:9b:ab:ff:a5:b6:1a:e5:91:34:
                    32:98:48:c6:52:0a:4b:7d:96:bb:b0:cc:be:61:47:
                    8b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:91:31:18:7E:54:7C:9D:4D:27:C1:C2:89:4C:35:16:7D:7D:D7:9B
            X509v3 Authority Key Identifier:
                keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:75:c6:46:2b:38:a6:1f:38:5a:d1:e5:98:75:8b:44:2c:ac:
         a0:e6:96:60:dd:a7:42:e3:c8:b4:32:69:ea:a5:ba:3c:91:66:
         99:6d:6d:05:c9:e3:b2:00:83:fc:bd:e9:6b:1a:3b:65:66:a2:
         14:42:1b:9c:48:c8:20:86:16:ac:e6:7d:46:0d:7c:43:91:6e:
         89:78:8d:88:dc:2e:a9:cc:58:3a:24:54:de:b5:44:d0:ab:71:
         52:2e:0d:2e:bf:24:ca:fa:35:d0:4f:7f:35:ff:a4:80:f6:a8:
         d5:8f:05:5b:2d:ff:ce:15:c8:45:5d:fe:2a:2f:0f:2b:c8:fc:
         0e:7c:d4:3e:53:db:05:76:b4:92:e2:95:c8:90:22:43:8f:7a:
         b3:6a:53:a3:01:a0:33:73:e9:00:cc:b9:cf:13:e1:86:64:d0:
         32:70:cb:57:6d:f1:f8:13:1f:f4:e7:89:12:cc:05:57:36:29:
         47:c4:cd:06:df:a3:c8:d1:ce:a8:8c:57:52:98:a2:38:2c:ea:
         19:2d:d1:95:17:27:03:9b:5d:99:8b:d3:96:42:1f:d6:65:d4:
         58:29:0d:dd:05:3f:4a:52:28:8e:78:3c:18:3a:cc:62:d4:f9:
         30:f8:55:82:99:bb:33:55:99:62:93:e1:28:b5:97:5b:c4:29:
         7a:6c:f4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 11:34:54 2025 by rpki-client