Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft
File:                     B6366F3DD14AC5399103961C30642E6779892C6C.mft (raw, json)
Hash identifier:          xNcM/5WvVTV23lgmcCi0PFXchh1eAnzaktH41ghY8ic=
Subject key identifier:   A4:1D:BF:F6:AE:D8:1B:83:D4:64:6F:21:2A:57:17:03:98:CB:AE:7D
Authority key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C
Certificate issuer:       /CN=B6366F3DD14AC5399103961C30642E6779892C6C
Certificate serial:       284F2FAEF1433F32C167ECE9EBDC98A414256DC8
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft
Manifest number:          01B3
Signing time:             Sun 15 Jun 2025 05:43:10 +0000
Manifest this update:     Sun 15 Jun 2025 05:38:10 +0000
Manifest next update:     Mon 16 Jun 2025 06:00:10 +0000
Files and hashes:         1: 326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa (hash: viX/3SQM4nfUuWRAgbcq7qnkCzLamDSQbyAAFuwSt0E=)
                          2: 326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa (hash: Bbj3dkfLCLvHSBOV2mo0X/dvVWVRNeC0CCNXaIH1NSU=)
                          3: 326130363a313238333a386230323a3a2f34382d313238203d3e20323037363935.roa (hash: gGGmoVRdDJpfumR8HrIQxuhNHolKOgXQjiMyUg//KAg=)
                          4: 326130363a313238333a386230313a3a2f34382d313238203d3e20323037363935.roa (hash: d6zE0vPcP8Hi7fB0sWHhmkUIMAYTtQOCQQODiEd8kFk=)
                          5: 326130363a313238333a386330303a3a2f34302d3438203d3e20323131303636.roa (hash: Fozivs5VK4pgLoGEsqoGlUwV1cuRecwfPaBUsSrDB4Y=)
                          6: 326130363a313238333a386130303a3a2f34302d3438203d3e20323131303636.roa (hash: /Rv6Qyd4oJNesSRg3hY6FH8XM9bnDURMSVi/jtj0pWA=)
                          7: 326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa (hash: dd3FrIdYxmcCZ+0yiqqDqpbbY31J+y6oBOm7qM8H0EU=)
                          8: B6366F3DD14AC5399103961C30642E6779892C6C.crl (hash: gIuIqAJBL43tM+5AI6ACrMigrUFoszoSEHD4W3Hpf6k=)
                          9: 326130363a313238333a386630303a3a2f34302d3438203d3e20323135343030.roa (hash: vL69GiNyTYYwFZpGgx32SlQ/WSepnbtpAqumAaaHZAU=)
                          10: 326130363a313238333a386230303a3a2f34302d3438203d3e20323131303636.roa (hash: HcR8I97oYThFv0VpxMGU5cj9rhive5rP2rR8SXDiybY=)
                          11: 326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa (hash: NwxUM+Bu0lOfXqc/NSfMdy0y0UUCQqdUXqKBNCkgBgQ=)
                          12: 326130363a313238333a386530303a3a2f34302d3438203d3e20323131303636.roa (hash: HsjlAFHIQV6UlrYLXmXWr7Flxeyjlcgjqx5Y+vyThiA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 05:56:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:4f:2f:ae:f1:43:3f:32:c1:67:ec:e9:eb:dc:98:a4:14:25:6d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6366F3DD14AC5399103961C30642E6779892C6C
        Validity
            Not Before: Jun 15 05:38:10 2025 GMT
            Not After : Jun 16 06:00:10 2025 GMT
        Subject: CN=A41DBFF6AED81B83D4646F212A57170398CBAE7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d3:82:43:36:14:f9:bb:c8:0f:8a:d4:aa:54:
                    54:6e:6c:3a:3b:45:a6:f5:be:ff:7a:cd:9b:26:8a:
                    e7:20:b4:98:6b:ba:d2:1c:30:1c:64:86:53:3a:78:
                    35:b6:01:a7:da:1e:36:5e:ea:9a:20:ac:d9:01:e9:
                    6a:c5:ff:a2:0c:b1:32:cb:b5:35:b8:d0:43:63:45:
                    ab:72:f6:2c:21:c8:3b:42:0c:8b:01:7a:48:86:02:
                    80:8b:2b:e2:e3:b6:b3:64:8b:ad:86:ad:e4:a7:42:
                    3e:3a:10:e5:48:0a:05:2a:75:1b:ea:19:e3:7e:49:
                    d4:07:c0:4f:63:5a:5e:f9:c2:e3:14:af:6c:fc:db:
                    ae:c5:18:c5:d1:5e:70:41:fb:59:a9:df:d9:92:cb:
                    e8:ff:6f:ac:16:98:bb:00:6f:3e:a6:1b:1b:ea:f0:
                    88:dd:18:3f:dd:b2:b9:da:3a:9c:8b:eb:13:df:31:
                    18:1c:e4:46:bb:21:13:10:30:07:cb:78:ff:e6:5f:
                    59:99:95:a1:07:d0:6f:72:55:ed:db:a8:e3:50:39:
                    8b:0a:03:df:63:17:63:0a:6f:18:8d:9e:52:53:4f:
                    fb:1a:47:d3:4c:98:86:e6:11:e6:61:27:0a:0e:3e:
                    92:69:39:8f:51:c2:b2:fa:59:86:c4:14:02:62:ea:
                    68:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1D:BF:F6:AE:D8:1B:83:D4:64:6F:21:2A:57:17:03:98:CB:AE:7D
            X509v3 Authority Key Identifier:
                keyid:B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:0d:35:62:d0:ee:79:d6:d7:0b:d8:f7:5d:8e:e8:c7:27:ac:
         a7:0c:df:83:02:26:15:b7:08:56:02:42:d6:18:ae:43:12:ef:
         17:1c:7c:81:29:aa:81:57:06:da:32:67:ce:e0:37:c0:1b:04:
         62:69:39:ff:de:a0:61:7d:35:27:b5:1b:a6:b5:57:7c:b0:da:
         96:73:97:89:a2:04:41:35:08:9d:01:ec:1a:b6:d2:a2:07:cd:
         67:66:b5:34:34:8c:dc:1b:51:5c:27:a3:4b:28:9e:b7:a7:5a:
         ab:98:1a:03:a4:67:bc:7d:18:d0:b6:d6:d3:e0:74:80:b1:e8:
         19:ac:23:98:5a:ac:db:d0:bc:50:4e:1f:dc:a4:23:b3:84:42:
         82:ad:04:9f:f2:5b:4a:1f:42:ba:6e:66:5a:aa:ab:71:9f:cf:
         cd:19:c5:d9:a4:9c:ad:ca:28:fa:e2:d6:3c:75:ff:a1:f8:cd:
         5a:79:e1:ad:f2:8e:f6:25:25:35:c0:a3:e9:d5:ed:05:a8:07:
         38:44:fd:ef:81:19:19:93:02:a3:75:e3:9f:e1:5f:9b:b9:a4:
         e8:71:36:c2:f2:96:70:b8:10:75:ac:fb:4f:ae:ec:9c:a0:cd:
         e5:6d:e3:a5:3c:86:8d:89:0c:5d:5e:a6:b5:b5:83:b5:fb:4b:
         b5:b5:4a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:16:46 2025 by rpki-client