Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
File:                     2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft (raw, json)
Hash identifier:          ZB2HlJkYGwrPgczD+L8ilH8fy33n3rje7OMkHI9l6Bs=
Subject key identifier:   B0:33:C1:AE:D5:AB:30:5D:71:6A:EE:05:CB:8E:2E:EB:05:E3:5F:50
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       21DAFA9453AD3B620E8AC1BCA8262642AC81DDD1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
Manifest number:          03A0
Signing time:             Sun 15 Jun 2025 07:43:40 +0000
Manifest this update:     Sun 15 Jun 2025 07:38:40 +0000
Manifest next update:     Mon 16 Jun 2025 08:15:40 +0000
Files and hashes:         1: 323630323a663939323a61303a3a2f34362d3438203d3e20373031.roa (hash: pU0ZnM3XlKB6GD5HhzNYR1xLlIiBzU0KSYhW4ta0NEU=)
                          2: 323630323a663939323a36303a3a2f34342d3438203d3e20313532393030.roa (hash: HWpzvbc2LzEmXxoT+kul7X4owcauEKJHusM+Ir+9R/w=)
                          3: 323630323a663939323a66363a3a2f34382d3438203d3e203533363637.roa (hash: sENJdG2CAk2ncOxoRbfpkGE6oUC5cWz8NGXE5l1PbdQ=)
                          4: 323630323a663939323a66373a3a2f34382d3438203d3e203534363030.roa (hash: mbxs/KyiiXCzMzovQkdebBf0tfpmu0WoGFLW/0GE3wA=)
                          5: 323630323a663939323a66353a3a2f34382d3438203d3e20323134323538.roa (hash: fIYxXr7UvbVyg5ErbGlT+osMThoxVt1juRlayE+Ah94=)
                          6: 323630323a663939323a61353a3a2f34382d3438203d3e20323038303633.roa (hash: gL71Oo4khFGG4+rwcF6m9KHJDaySt3piSD+oyO2G3+0=)
                          7: 323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa (hash: mMm7sIXO5/HOrFuCVxMLtUjUW7H7tIPfaYADdGLvndY=)
                          8: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl (hash: UBJHG4mZhZ/Q58BCFfS5sTECcxTRstAvZMzys2FkRag=)
                          9: 323630323a663939323a39303a3a2f34342d3438203d3e203236303432.roa (hash: MoXC/8DWDCDJNU7C3Mk26mgfoj92Dv/12Z/ZM6kBr4o=)
                          10: 323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa (hash: H4rlObELQ4x8lFTYx1O62Ru3wMsX/PzI3uR609UHR+0=)
                          11: 323630323a663939323a35303a3a2f34342d3438203d3e203430363736.roa (hash: izLerJCXQHRMj4EuHnpJKhCKBCsakjo+L9Seyo/D9Sg=)
                          12: 32332e3137302e3231362e302f32342d3234203d3e203538323032.roa (hash: GxalkmsKA3NBmKqpRbD10jaxIIxZkAYcIT4LC7UOrQU=)
                          13: 323630323a663939323a66613a3a2f34382d3439203d3e203430363736.roa (hash: sRvK25+z4/XzVzRz/NRjDVLoeu4AhidYEGZ8Z4be+vU=)
                          14: 323630323a663939323a35303a3a2f34342d3438203d3e20313939393539.roa (hash: s0tjGNQz3a0IJwtqI+yV2w0ziifnk/CWeyQrn3w3/qg=)
                          15: 323630323a663939323a66663a3a2f34382d3438203d3e203633333930.roa (hash: ofYyhY8QxgV7oA+K00vYAeRxc4dVjV27+J0ru1bGCjk=)
                          16: 323630323a663939323a61343a3a2f34382d3438203d3e203131333531.roa (hash: mMlSRkhdeeA9awCrBTY6qmDvxb75/R4fTCUImcwE1Zk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 08:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:da:fa:94:53:ad:3b:62:0e:8a:c1:bc:a8:26:26:42:ac:81:dd:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Jun 15 07:38:40 2025 GMT
            Not After : Jun 16 08:15:40 2025 GMT
        Subject: CN=B033C1AED5AB305D716AEE05CB8E2EEB05E35F50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:a3:00:f8:c2:9e:58:d0:71:22:fd:d5:29:0d:
                    4c:3e:3e:b3:c9:19:ec:08:23:42:e4:9a:52:f3:3e:
                    97:f3:1b:61:26:f7:c4:c1:0a:e7:10:4b:06:00:fb:
                    f1:c8:3b:7a:71:d1:57:ad:71:6c:76:65:29:46:ab:
                    80:96:22:66:fd:cb:88:94:1f:4d:64:ba:b7:36:05:
                    70:05:7d:d3:4e:0c:ca:1f:15:9a:23:6f:82:5b:13:
                    21:bb:34:68:72:72:35:7a:69:a7:0a:0e:de:57:43:
                    2c:13:67:98:76:d7:06:07:ff:d9:03:e8:9c:27:46:
                    5b:70:5c:27:d8:4c:4b:b9:20:bf:36:98:c8:dd:f1:
                    ef:8e:96:29:38:b4:18:63:6f:88:73:55:85:0d:1a:
                    d9:b8:04:c5:1c:b2:21:19:3f:07:96:a1:1a:8c:f8:
                    d5:79:c2:a8:fa:3c:f9:e4:7d:c0:c8:0a:2f:68:f6:
                    55:42:d0:ef:01:58:02:86:8b:ec:a0:67:3e:35:97:
                    f2:70:68:54:39:f8:c1:d8:2f:37:8d:30:99:2f:b3:
                    dc:87:bf:b8:0d:0d:ac:ef:fd:bf:6d:85:23:bb:59:
                    1d:16:ea:ae:1e:bd:cc:35:af:7e:93:ce:6e:9c:d7:
                    24:60:d6:a6:43:21:7e:39:84:0d:1e:3c:8b:bc:0f:
                    6b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:33:C1:AE:D5:AB:30:5D:71:6A:EE:05:CB:8E:2E:EB:05:E3:5F:50
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ce:4e:02:1d:20:e0:ac:2f:4a:ec:5f:7d:41:64:88:24:8a:
         36:7b:29:bf:39:b3:cb:f0:5e:de:b1:55:26:0e:d1:9b:22:37:
         00:7d:04:61:b5:db:60:6a:da:39:9b:ad:88:30:45:71:12:47:
         ae:d2:f3:1a:e7:c0:2a:ad:de:50:1f:54:27:53:ee:33:18:c9:
         23:63:74:74:e0:a2:2f:7f:ea:3d:2b:19:c0:c4:e0:84:d2:3c:
         4b:4a:6b:56:41:3c:e7:67:a5:b8:e0:ae:46:0a:53:c7:a8:ca:
         ec:4a:33:23:dc:f2:3e:07:b3:48:f4:a1:b0:89:1d:c7:32:b6:
         20:aa:cb:ae:ec:2c:7b:85:a1:ad:fe:1e:7c:81:69:e1:86:9a:
         48:8e:d5:6e:07:0c:a8:2d:b8:bd:f8:01:24:ea:a8:73:32:d7:
         cd:75:8a:a3:b9:ad:8c:7e:a6:ab:44:ce:56:1b:12:f4:65:1b:
         ff:ce:97:83:12:1b:24:00:1e:2f:da:20:76:c3:77:35:0c:03:
         64:82:68:a1:40:f3:43:f1:26:ee:8b:00:72:4b:72:07:d5:96:
         19:3f:c9:91:83:d0:6d:08:ab:c3:95:e5:54:21:1d:7d:1c:a3:
         ce:3b:61:d3:e6:b5:13:c3:9b:04:06:03:5f:65:e3:c1:4e:54:
         9d:da:47:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:56:59 2025 by rpki-client