Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
File:                     D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft (raw, json)
Hash identifier:          RQ8G7rkwBy73quAsavhcwanBNi0WTr38n7KaaE+ZEtg=
Subject key identifier:   72:DF:A9:F2:2A:D9:F7:5D:BB:0F:B6:05:19:A7:FC:3D:E5:94:00:CC
Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C
Certificate issuer:       /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
Certificate serial:       63CD315C2164C2D57B6A9A5B0106DA1CAF50FC32
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
Manifest number:          41
Signing time:             Mon 04 Aug 2025 01:40:41 +0000
Manifest this update:     Mon 04 Aug 2025 01:35:41 +0000
Manifest next update:     Tue 05 Aug 2025 03:45:41 +0000
Files and hashes:         1: 326130363a313238333a386230303a3a2f34302d3438203d3e20323131303636.roa (hash: E/viu9vBcRpgXLkYydv4L1bSWYconnC9RhF31aVMM/0=)
                          2: 326130363a313238333a386630303a3a2f34302d313238203d3e20323131303636.roa (hash: r9X5RrRgRpcWg3o0DruFRABIQJqS6HSEppSZqEX6zcQ=)
                          3: 326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa (hash: 1HZdS5easOTzXqx+g13vhM2s0dAHymCGMDkKOH0yoVM=)
                          4: 326130363a313238333a633131663a3a2f34382d313238203d3e20323131303636.roa (hash: MNB/IgLpAkC8BkMxVhMNWcW04HjOlc0Y//dSW/FFyhU=)
                          5: 326130363a313238333a386234303a3a2f34342d313238203d3e20323036363034.roa (hash: jMnRJSIBI/vK/lYdVRqiwNEB3nWoaFm4KV/BQrtgZJI=)
                          6: 326130363a313238333a386233303a3a2f34342d313238203d3e20323036363034.roa (hash: 6akZ76xc8TUp4h4v2+1J9UTOFvzSXYR8sBgcIPy6fb4=)
                          7: 326130363a313238333a386230333a3a2f34382d313238203d3e20323133343133.roa (hash: 9C302LCYvU+i5JLVJOH4qrTiJnLXDxCLo10Ivgf+geE=)
                          8: 326130363a313238333a386232303a3a2f34342d313238203d3e20323036363034.roa (hash: 5OdJnaKVh+px3V/b0A5vN4t5kNQD310BBRMdi9J8Cio=)
                          9: 326130363a313238333a386230313a3a2f34382d313238203d3e20323037363935.roa (hash: 6vaetUt7c9H+9aVn0u2KQRLHDuQZ528YxlkFqIwRrOU=)
                          10: 326130363a313238333a386130303a3a2f34302d3438203d3e20323131303636.roa (hash: 0UwJEaqOuZNt12cGdgRNs6h5sg/UqNE4VWJ7LVXWQWc=)
                          11: 326130363a313238333a386230363a3a2f34382d313238203d3e20323133343133.roa (hash: LRX/tmRuBv04fybDYPCQD9lanhfB9HcnVGBpgk5TB5I=)
                          12: 326130363a313238333a386230373a3a2f34382d313238203d3e20323133343133.roa (hash: +LsHR6M/sTp/p218VbiQsurX+iZ7B1G4y6ss3VYV+wk=)
                          13: 326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa (hash: B3lCmzbMTTF4JEYaqxL5SocH8KSyx1ZOaOngpc1c9xY=)
                          14: 326130363a313238333a386230323a3a2f34382d313238203d3e20323037363935.roa (hash: C58CzcueBZLGi3BZhVC1snl3/HIsG8jd8UxQItY5XqQ=)
                          15: 326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa (hash: +z0Qc7b7Pm0YyOUO4LNkttIVrmFKBrkfbPc/zfrDGTk=)
                          16: 326130363a313238333a386235303a3a2f34342d313238203d3e20323133343133.roa (hash: dOOOW/84MfRn0FlaAgKIZlDC6z44Kx+QMeFNOWgEBPc=)
                          17: 326130363a313238333a386530303a3a2f34302d3438203d3e20323131303636.roa (hash: zh/0wPRro0Lk1m44hGThxyXQVvLxur06EBEe3Ht0Czk=)
                          18: 326130363a313238333a386330303a3a2f34302d3438203d3e20323131303636.roa (hash: PjXxPcOFpDrt2/J2rK7/G4zujo+FjWZMvwQwdSAXtCs=)
                          19: D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl (hash: XZIM7JzGyDMXlofM4A43Bp6gsnAZSJV1zFVEd68sVG0=)
                          20: 326130363a313238333a386230353a3a2f34382d313238203d3e20323133343133.roa (hash: BwWttvdgE87UTe5eUGryLDR20yKZtRoPBaxCc1jPa9E=)
                          21: 326130363a313238333a383030333a3a2f34382d313238203d3e20323131303636.roa (hash: hYctHpFLZLrdZbOQKdUp5gBu76GVnDNrzAlSQDHkf8o=)
                          22: 326130363a313238333a386230343a3a2f34382d313238203d3e20323133343133.roa (hash: 8yrqf+s2g5bw5KG3SyAhrNgPcZSxkzmGXTu5AJ2lCBE=)
                          23: 326130363a313238333a386235303a3a2f34342d313238203d3e20323036363034.roa (hash: 4reeNbN2ltLfVHU8qpdiliEFl9Ty64DXI/3VJ3ck1VA=)
                          24: 326130363a313238333a386235303a3a2f34342d313238203d3e203131393637.roa (hash: uHWxG8kbtQnmFudwlF37/C8QH9hN+DOmVsGuiAGSHA4=)
                          25: 326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa (hash: fhZLtEdAcpVe5ZEFnO5ghX4tvoay2QbvYeWWfzdmNM4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Aug 2025 23:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:cd:31:5c:21:64:c2:d5:7b:6a:9a:5b:01:06:da:1c:af:50:fc:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
        Validity
            Not Before: Aug  4 01:35:41 2025 GMT
            Not After : Aug  5 03:45:41 2025 GMT
        Subject: CN=72DFA9F22AD9F75DBB0FB60519A7FC3DE59400CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:04:50:02:ae:4a:ae:ec:87:a6:73:c5:b9:8a:
                    2f:f9:a3:1f:07:c4:4b:e5:24:64:9a:7c:1a:21:10:
                    5f:81:7f:18:d1:62:6b:f4:d3:c4:2a:96:f1:b2:71:
                    2c:4a:92:ef:2f:68:a5:3a:c5:19:e2:5d:71:d6:ec:
                    5a:5f:a4:fd:c8:61:b6:56:03:16:68:97:f7:46:2b:
                    38:66:e4:19:b9:66:91:61:64:df:c8:ff:a7:7f:45:
                    61:17:74:b7:2f:5b:0e:58:d9:f1:e2:7b:05:70:4b:
                    5f:1f:f0:79:bd:37:49:8d:74:ef:db:c3:50:59:65:
                    61:b9:34:7a:cf:07:a3:bd:bc:13:32:95:76:66:49:
                    65:55:d9:3a:2a:dd:7f:d7:1c:3b:0a:b7:f1:5f:06:
                    87:08:98:3f:35:3e:8c:36:fa:cf:31:73:12:17:e1:
                    00:f0:e5:e1:af:0d:d0:86:fc:c0:de:4c:38:e9:85:
                    49:f8:fc:c2:a2:ca:71:d1:2c:60:52:15:36:25:25:
                    54:22:40:b4:50:1c:10:52:57:37:d6:21:4a:d8:6c:
                    82:86:49:18:87:56:4b:ac:f8:b0:6a:6f:a5:3c:d1:
                    5a:a7:ca:58:18:76:14:52:88:23:ab:d2:fc:38:fc:
                    bd:1c:0c:a1:8f:72:44:54:d3:85:0b:1c:ee:18:52:
                    8c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DF:A9:F2:2A:D9:F7:5D:BB:0F:B6:05:19:A7:FC:3D:E5:94:00:CC
            X509v3 Authority Key Identifier:
                keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ac:5a:a8:54:6f:c4:d5:31:2b:42:75:af:b6:f0:37:28:22:
         0a:2c:de:7f:2e:b9:c2:5e:6e:fa:93:f9:90:cf:7e:c9:55:b3:
         3b:85:2d:90:65:4f:5b:0e:4e:a1:f4:9f:bb:38:04:b4:16:d3:
         10:30:0c:87:f7:fc:b2:3c:57:e5:3c:d9:a5:9c:f2:f2:c7:0b:
         01:48:a1:1c:f9:82:ba:9a:43:00:d1:6a:b8:58:97:80:00:ba:
         60:47:87:e0:ab:15:b3:9a:3c:c8:e0:4c:aa:3c:fb:8f:8f:5f:
         a8:fe:56:c1:fb:5b:01:d6:d1:a5:5a:0f:01:d0:86:31:be:65:
         5f:ea:ef:da:f8:ce:37:88:a2:9a:b6:31:31:c7:f0:f0:74:9b:
         1e:ad:e6:ee:32:8b:a9:0c:36:c3:64:99:30:1d:67:ec:37:5f:
         c8:5d:23:64:88:6a:a8:f2:38:c1:20:4f:b3:40:29:42:af:82:
         07:3d:e3:14:6a:27:5f:3f:d8:37:49:66:79:4d:a1:3e:fc:32:
         ae:6a:65:e8:90:58:dd:ed:96:35:a9:dd:b1:7c:31:d0:97:28:
         b2:7b:da:c8:4d:27:69:b8:cc:ab:ab:ac:1b:57:cb:13:9d:be:
         28:c8:49:9d:a9:6a:4b:6b:07:20:fa:de:07:6f:73:19:fd:a0:
         b6:7e:18:df
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUY80xXCFkwtV7appbAQbaHK9Q/DIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz
QTdBOEIyQzAeFw0yNTA4MDQwMTM1NDFaFw0yNTA4MDUwMzQ1NDFaMDMxMTAvBgNV
BAMTKDcyREZBOUYyMkFEOUY3NURCQjBGQjYwNTE5QTdGQzNERTU5NDAwQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxBFACrkqu7Iemc8W5ii/5ox8H
xEvlJGSafBohEF+BfxjRYmv008QqlvGycSxKku8vaKU6xRniXXHW7FpfpP3IYbZW
AxZol/dGKzhm5Bm5ZpFhZN/I/6d/RWEXdLcvWw5Y2fHiewVwS18f8Hm9N0mNdO/b
w1BZZWG5NHrPB6O9vBMylXZmSWVV2Toq3X/XHDsKt/FfBocImD81Pow2+s8xcxIX
4QDw5eGvDdCG/MDeTDjphUn4/MKiynHRLGBSFTYlJVQiQLRQHBBSVzfWIUrYbIKG
SRiHVkus+LBqb6U80VqnylgYdhRSiCOr0vw4/L0cDKGPckRU04ULHO4YUoyXAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUct+p8irZ9127D7YFGaf8PeWUAMwwHwYDVR0j
BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4
MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz
YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB
MDY0M0NBQzNBN0E4QjJDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi82L0Q1NEQ0NDNC
NjdDMUNDNUVBMUI1NDQ2RUEwNjQzQ0FDM0E3QThCMkMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAarFqo
VG/E1TErQnWvtvA3KCIKLN5/LrnCXm76k/mQz37JVbM7hS2QZU9bDk6h9J+7OAS0
FtMQMAyH9/yyPFflPNmlnPLyxwsBSKEc+YK6mkMA0Wq4WJeAALpgR4fgqxWzmjzI
4EyqPPuPj1+o/lbB+1sB1tGlWg8B0IYxvmVf6u/a+M43iKKatjExx/DwdJserebu
MoupDDbDZJkwHWfsN1/IXSNkiGqo8jjBIE+zQClCr4IHPeMUaidfP9g3SWZ5TaE+
/DKuamXokFjd7ZY1qd2xfDHQlyiye9rITSdpuMyrq6wbV8sTnb4oyEmdqWpLawcg
+t4Hb3MZ/aC2fhjf
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:28:13 2025 by rpki-client