Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
File:                     B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft (raw, json)
Hash identifier:          pjEpk5bgjwVnt1ZVY9JHdRfQQslKDkt24XxWY0uPvK0=
Subject key identifier:   A0:89:54:C3:87:F8:41:D0:1E:A4:5C:05:04:12:1B:6E:51:38:E7:4E
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Certificate issuer:       /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial:       6E2175E54ADC7B5769B2D917575BAD6EED5A0B16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
Manifest number:          043A
Signing time:             Mon 04 Aug 2025 05:27:18 +0000
Manifest this update:     Mon 04 Aug 2025 05:22:18 +0000
Manifest next update:     Tue 05 Aug 2025 07:43:18 +0000
Files and hashes:         1: 3138352e3231352e3131342e302f32342d3234203d3e203631333137.roa (hash: R9WhNu2MdPr1NOFjMmZeGBiIE2nwtlE4Jo64OX4u4HA=)
                          2: 3138352e3135362e3231392e302f32342d3234203d3e203630343538.roa (hash: 8XkoDAvNeGNoBWLohtYrD/bWj0oa0HEtFyjdhTJh8rk=)
                          3: 3138352e33372e3232382e302f32332d3233203d3e203630343538.roa (hash: vZ0xeNj44WIw/+zpqjsYVz/OQXDqqT3PO1sgTbLjyjI=)
                          4: 3138352e3130302e37322e302f32322d3232203d3e203630343538.roa (hash: tt+7v33pgcfL/OR4IEoj2XRjnG0uMYFwUsQyGd/wSJQ=)
                          5: 3138352e3230322e3134342e302f32342d3234203d3e203630343538.roa (hash: wz4+Z748yPCelmg+RPJx6JGtTSzenzKPpdD84rUDauM=)
                          6: 3138352e3230322e3134372e302f32342d3234203d3e203630343538.roa (hash: 4WWLNzVcecuIV7DQH3TBRPk5m1a8bolBgWM4/XkK+mA=)
                          7: 34352e3134332e3134382e302f32322d3232203d3e203630343538.roa (hash: Sww7+LIBcy25xOjBNTHS8houn90nQJV29QTFkg33x0A=)
                          8: 3138352e3136372e32372e302f32342d3234203d3e203630343538.roa (hash: qmcJVcdT4rmfgLdWbchNjQUjUr84q4fznJ3O5A3Ac6k=)
                          9: 3139352e382e34382e302f32342d3234203d3e203630343538.roa (hash: 0QQ/atSVhgxbxnMmZi2CZaSsjgioOzPYv64es6L7MGQ=)
                          10: 39312e3139392e3130322e302f32342d3234203d3e203630343538.roa (hash: RopopLlJOVRjGz4avSxfYPvo0OC9G/eDY75KWGAV/aw=)
                          11: 3138352e3231372e3134302e302f32342d3234203d3e20323131333733.roa (hash: hNnRgizTxivmocfPjGcdnyRRZ7RF0OREZEdxCth7bFY=)
                          12: 3138352e3135362e3231362e302f32342d3234203d3e203630343538.roa (hash: EvCO85+TEFrCa3fyF2Hvn+tlr4Nv9RYk07bI6yFMPvw=)
                          13: 3138352e3136372e32362e302f32342d3234203d3e203630343538.roa (hash: AU1XTzixRsIIk2ZdZN58IrYKd8IFItgt7vU8fJub8+o=)
                          14: 3138352e3132352e37382e302f32342d3234203d3e203630343538.roa (hash: p8VAezPiQ82kk+zpMKLkJeAo6bWXq8DJwyiOE3M0QAE=)
                          15: 34352e3135312e3139322e302f32322d3232203d3e203630343538.roa (hash: MsQjsESlTuEcbjS9mONurH+MDUvuc4E1Aq8WiShITro=)
                          16: 3139352e3231312e35312e302f32342d3234203d3e20343030393039.roa (hash: 0gSBq8V9lU7SHxebbh3UieoZZ+QMrAfR0WkkimNMOGY=)
                          17: 39312e3139392e39302e302f32342d3234203d3e203630343538.roa (hash: 24Wi6BO1o+rN9DTXADpFgbBkLMPIwcsuYBHhIDkNNJk=)
                          18: 3138352e3232362e3135352e302f32342d3234203d3e203634323637.roa (hash: BphaL/Q+MmU9qXxX06J/d3Yz3MPwKV/7sGiY2uy2MYY=)
                          19: 3138352e33372e3233302e302f32342d3234203d3e203630343538.roa (hash: IY6mHaJKET6LoAapCaxdFKM5n9LWTpQVBjwiMh+lOuI=)
                          20: 3138352e3132352e37362e302f32342d3234203d3e203630343538.roa (hash: E1EBzi/x9bAqWwU2+c2DtydupdQVlQih+ZQ9KG5XJM8=)
                          21: 3138352e3136322e3137312e302f32342d3234203d3e203630343538.roa (hash: dIPcyVrIf7ut3mplg6I+FaMP77/taZ1uyGrgWAEtw1I=)
                          22: 3138352e3132352e37392e302f32342d3234203d3e203630343538.roa (hash: chFrGzVrsGDgHbR9U302S1vgNYtyu8hjjwKJPtAYWHA=)
                          23: 3138352e33372e3232382e302f32342d3234203d3e203630343538.roa (hash: mw435AXz9xHWhN238pBrnHfvo9tx+w0yMNZcNgIAnFw=)
                          24: B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl (hash: fFz87/saMiQcNJOjZ3zlcjWY73P0WNnnDYM4BpvW6rM=)
                          25: 3138352e3136372e32352e302f32342d3234203d3e203630343538.roa (hash: PR56mJAfACxvVOTWCWLvFZ+zDPcod8MGy8q5KeWDe1I=)
                          26: 3138352e3232362e3135332e302f32342d3234203d3e20323131343430.roa (hash: rGW7/8GB609/SHNrTEWoAaTI5dQHouhe15jjA9R2QwM=)
                          27: 3138352e33372e3233312e302f32342d3234203d3e203630343538.roa (hash: fMMz/NMrWe4m6FBXtQw+qCDaXqsRssd0JOLvgwTj808=)
                          28: 3138352e3230322e3134362e302f32342d3234203d3e203630343538.roa (hash: RGdxLEzytt0V9LWy9RSfzKHfvGrjEh/8BhnnQWUWyk0=)
                          29: 3138352e3232362e3135322e302f32342d3234203d3e203432383331.roa (hash: 2iZuFtoo8q53yETNgCmRHTR4lUa6RiA7X1J8o6k1GHg=)
                          30: 36322e3132322e3138392e302f32342d3234203d3e2033313730.roa (hash: mbpZXZK/fM7vaFZ5y82xMnQ6rCPjr7XSXm9Q6bD78C4=)
                          31: 3138352e3135362e3231372e302f32342d3234203d3e203630343538.roa (hash: rjDp5tr7Ibp1svXb6aTy1VUyxTkkVlR9zj5PgrnqiGs=)
                          32: 33312e3231372e3235302e302f32342d3234203d3e2039303039.roa (hash: L+538BnpKcoPw9UMvgnBDsovbAC1nWxPwoO/WNMOxrE=)
                          33: 3138352e3232362e3135342e302f32342d3234203d3e20323030303139.roa (hash: 96QSwOxwyYqTqJ3XjUWn9gHjbPepDDirLYFilwesJ0U=)
                          34: 39312e3139392e3132332e302f32342d3234203d3e203630343538.roa (hash: BatNReK7gXNaqXPa5VRtj5h++zM7ew2F8IoAg/I/2U8=)
                          35: 34352e3133312e38302e302f32322d3232203d3e203630343538.roa (hash: oqXmbxyjeaOX95W9eJVEUG/807pdk0CrvL0gbJu3djk=)
                          36: 3139352e382e3131392e302f32342d3234203d3e203630343538.roa (hash: uYf/vuY3IMzkKnywh+WrIJi9K5kM4HORH0NByn4xLTY=)
                          37: 3138352e3135362e3231382e302f32342d3234203d3e203630343538.roa (hash: IhLfWMdp3wfBoJIgMf1dZQYIiVjH+IC6uyZDFZApUo0=)
                          38: 39312e3139392e3130382e302f32342d3234203d3e203630343538.roa (hash: Ltqzgt94mzKk47x8Q+jGxz5JrNySG/Y0tzlAfjYhG0M=)
                          39: 3138352e3136322e3137302e302f32342d3234203d3e203630343538.roa (hash: v9yukWrQuv+5l5wy9/dUA6cYOeUvX0B8QwsY9W2Wlgk=)
                          40: 3138352e3132352e37372e302f32342d3234203d3e203630343538.roa (hash: iBX/+QeuXYuSCTlJT7cmF+tQX/4HCmniMjyG8lOqUWA=)
                          41: 3138352e3136372e32342e302f32342d3234203d3e203630343538.roa (hash: bOe+V/bSkHZWJOaV1Qj2XTs/2xeIT/LkKzSKku71Icc=)
                          42: 34352e3134362e3138382e302f32322d3232203d3e203630343538.roa (hash: oKJ0nojLfMNgIC0ZVHO9adCFA5GxNLUlSGYZ+ppZl7U=)
                          43: 3139342e35392e3232332e302f32342d3234203d3e20313939363134.roa (hash: Q+aTRZ6Bj34jlOI880qva89jcDljlnRfljW0rbqvKUM=)
                          44: 3138352e33372e3232392e302f32342d3234203d3e203630343538.roa (hash: HYaWDlREHWbcyxGyqKTrHitDp9vR4XbaPjWC/NS6hv0=)
                          45: 3139352e382e34392e302f32342d3234203d3e203630343538.roa (hash: 4nPeE4WDot0aQzE1E2AL4UC2dMhv5fMNvAbvgkN5zUQ=)
                          46: 3138352e3136322e3136382e302f32332d3233203d3e203630343538.roa (hash: FhpX/C9zk9FVjj10PImD/wKS/RfpAC0kUdP0bDZAwyg=)
                          47: 3138352e3230322e3134352e302f32342d3234203d3e203630343538.roa (hash: W83bzJQhGHobYnfM1tmulNDtSSyNf73jimSZ1AGOpI0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:21:75:e5:4a:dc:7b:57:69:b2:d9:17:57:5b:ad:6e:ed:5a:0b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
        Validity
            Not Before: Aug  4 05:22:18 2025 GMT
            Not After : Aug  5 07:43:18 2025 GMT
        Subject: CN=A08954C387F841D01EA45C0504121B6E5138E74E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a6:90:88:72:93:d7:d6:5b:90:4a:eb:70:89:
                    0d:56:ce:25:1c:9d:1c:9f:10:ea:27:ed:2d:ae:90:
                    11:b8:ff:fa:8d:9b:8a:87:35:62:4d:cf:53:b7:6b:
                    1c:88:1e:90:aa:1d:78:ea:bc:3b:17:e5:52:8e:11:
                    e5:5d:08:51:3b:94:bb:d4:88:ef:69:67:14:4f:08:
                    91:53:e0:fd:d8:ca:07:3e:15:57:c4:61:8a:d2:88:
                    d5:4b:e2:30:19:d9:ea:d1:3b:18:4d:69:0c:1a:5b:
                    72:24:0b:f3:bb:b0:50:26:2d:4a:17:7e:c5:da:45:
                    9e:cc:ba:1f:8d:55:63:f9:c1:0e:52:1e:80:d9:ab:
                    5b:1d:12:c7:49:e4:07:c3:7a:77:dc:48:4e:da:e0:
                    fe:69:bb:1d:7e:51:1c:43:7a:03:c9:07:64:e6:e4:
                    88:3d:9a:0d:43:b8:8c:a7:c6:7a:d2:cb:e1:58:0d:
                    67:d2:66:92:0d:a1:5f:9d:d3:ce:02:b3:71:30:f4:
                    0a:8e:60:ea:42:ae:8d:36:ca:ab:e3:61:bc:34:b8:
                    ac:3a:8e:f9:20:2c:43:08:65:f0:7c:e5:3f:33:7d:
                    ce:d0:9e:62:ca:7c:42:1f:06:ab:e5:c7:97:8b:33:
                    43:d8:f2:c0:61:fa:ea:07:e9:ff:fe:2a:ed:a4:85:
                    a6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:89:54:C3:87:F8:41:D0:1E:A4:5C:05:04:12:1B:6E:51:38:E7:4E
            X509v3 Authority Key Identifier:
                keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:94:16:cb:bf:ba:0d:7c:6c:14:fb:c6:45:9c:72:a9:74:0f:
         ec:b6:6b:f5:c1:db:ba:f0:b2:a8:42:75:0e:1c:31:9b:0a:63:
         d1:96:96:96:05:24:cf:4a:a3:fb:ad:d5:e3:c9:b1:8e:82:59:
         5a:d7:28:16:55:47:71:87:cc:f6:5c:bd:8b:5f:36:bc:58:21:
         5d:18:66:b5:99:2d:e1:19:d9:73:46:57:ce:c7:f4:90:b1:9a:
         20:2e:52:3d:f2:81:32:9c:f0:8c:a4:f0:41:87:a3:20:54:15:
         05:7a:aa:5c:51:2b:5d:ce:ac:0d:0c:72:bc:93:8a:30:21:0d:
         a9:e7:a4:d4:e8:c5:57:72:95:f5:62:ec:17:bd:31:90:62:7f:
         9a:ec:f2:ee:eb:a4:e2:a4:2a:3a:78:e2:b1:03:42:d3:1a:98:
         26:ac:2f:76:9e:33:68:48:45:3e:e4:f4:d2:2f:80:cb:1f:52:
         9f:1b:a4:03:ed:50:a5:cb:fc:68:9d:84:c4:47:c1:c6:6e:43:
         46:22:e7:6e:7a:f9:20:0f:fa:7c:aa:47:f4:35:17:73:bf:2d:
         8c:9e:22:64:29:a3:83:ef:84:34:de:63:ce:f4:61:a5:44:94:
         02:fd:b3:87:ab:78:51:3c:fc:c2:38:e6:b1:aa:df:82:c7:76:
         fc:e2:71:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:52 2025 by rpki-client