Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
File:                     45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json)
Hash identifier:          HIVwxonP7dU/nurwvYJyuOi6x5zLQWgRwyak7BxnH3w=
Subject key identifier:   82:15:ED:35:88:47:7E:51:88:AD:E6:D1:F5:14:5E:08:99:30:DA:1D
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Certificate issuer:       /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial:       4053954645D5AAC6D1BAC67954872D4FE15DBEF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
Manifest number:          D7
Signing time:             Wed 06 Aug 2025 05:27:21 +0000
Manifest this update:     Wed 06 Aug 2025 05:22:21 +0000
Manifest next update:     Thu 07 Aug 2025 07:04:21 +0000
Files and hashes:         1: 3139342e32362e32302e302f32342d3234203d3e20323132323338.roa (hash: YP/VU7Ddy/RINA1ejeDsmhFrZUIqFHueTf4iQvV7+Jw=)
                          2: 39312e3230392e3137392e302f32342d3234203d3e2039323332.roa (hash: DUgBG+DDM8ST08Z0XIhaDsSEtBOUn3VXDgiNBjQq7a4=)
                          3: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: AeGgNi4bw9l3zN1DkQ6g095MQ+7U7OthIn51Fzss3Oc=)
                          4: 3139342e32362e332e302f32342d3234203d3e203236373337.roa (hash: vAloYgRmheNvh8P1qphoutsfkKJ8NLcb3vYOmiEsQYI=)
                          5: 3139342e32362e322e302f32342d3234203d3e2037303138.roa (hash: KZ2g79XWhSpy1OjdBEbA7bKBiIPr4KF5cEbdhi1cO+c=)
                          6: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 1itaUJD6MM9qJoykl2AD3Me7plWTAUPMb45hv4KS1Is=)
                          7: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: eRfFsAmiOd7fmXSkLY1iDQqDLPihvnF73pAdlTyZEec=)
                          8: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: g9+qPCIMbMsxLbmabycfUHp6SrIAw5buxV/5VJi8ArY=)
                          9: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: jUzg8MFBi50HDoiq8ZBSiLc/BkEY3Sqp4qzgmYg5v/k=)
                          10: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: e2sDKCcJlT/U2mWShGzkoM6fLVC3axyQA7582KFjXl0=)
                          11: 37372e38312e38302e302f32332d3233203d3e203230383630.roa (hash: ENs1tyjr+QsCNkYiVs8CGb16BSmudiUVAdhDAu4V/ek=)
                          12: 3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa (hash: BFuLnnyWuJctlm6cMRTXIHiK+UW5qbLi6zguqt9+aRs=)
                          13: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: FUbnkxuvcKLpw8C4HQaABzR8zDln4ay05cwGyEgtqLs=)
                          14: 3139342e32362e32312e302f32342d3234203d3e2037303138.roa (hash: 7yEbo3DradWn9p6FL6O0sR90rL76BXVbRvfqqu/D+3E=)
                          15: 37372e38312e37392e302f32342d3234203d3e2037303138.roa (hash: Mtmk/kZphhA5s4uopguvEbJvjOjUXgfeStc99+50/4U=)
                          16: 37372e38312e37372e302f32342d3234203d3e20313337353137.roa (hash: mnQJW4GBjGEsRXTh3Y2cxT8Pj8O29OUkMaI68Qj1ywg=)
                          17: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: sxtXA2eVprRgAPdjB6IZUpHTWxye7ZI2nEVGAB55zbo=)
                          18: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: ZRiHbt3iKKs0O/K+Xj70IALSK3+jGBgHEkJ3Uk6rxC8=)
                          19: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: 5dRVBKW35y7iFIiRLUDq8m1n2BOxfA25M+9TksFAth0=)
                          20: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: Vuif+1Rwal2KWngsbR1gG7PlppvF8JCFTHMdlSgwTho=)
                          21: 3132382e36352e3136382e302f32312d3234203d3e2036303739.roa (hash: i6JhDTo2qgsHKnhvdAD8kBBVl6YUcjppNLTK7aRFku0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 07:04:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:53:95:46:45:d5:aa:c6:d1:ba:c6:79:54:87:2d:4f:e1:5d:be:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
        Validity
            Not Before: Aug  6 05:22:21 2025 GMT
            Not After : Aug  7 07:04:21 2025 GMT
        Subject: CN=8215ED3588477E5188ADE6D1F5145E089930DA1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ca:98:14:8a:66:fb:1e:6f:9f:08:63:d0:51:
                    33:99:01:ba:1b:2d:c3:8f:45:c6:12:a6:b8:00:65:
                    54:dd:6c:1b:7c:b1:e9:20:cf:0d:64:ba:38:45:a4:
                    3e:ee:b9:ac:e8:94:60:18:e9:f6:28:17:55:47:fb:
                    e0:5f:90:7b:2e:3f:52:36:f0:79:08:a1:1b:7e:0d:
                    38:d8:58:ac:51:5c:ee:83:8b:39:2e:ee:e2:c7:4e:
                    72:5c:72:db:26:96:3e:0c:29:7d:47:7d:ba:83:c2:
                    ef:04:47:6e:26:94:cb:3d:5a:d7:c4:cf:cf:47:2d:
                    ff:4e:e8:b1:db:18:ad:03:6f:aa:a8:fe:a2:ea:7b:
                    36:6c:fd:c8:dc:b3:f7:3e:ea:e3:b6:ad:71:aa:34:
                    ee:94:df:b8:27:74:32:05:54:64:32:a6:d8:a5:75:
                    a7:3e:15:57:20:5d:71:e0:b8:0a:fe:19:7f:55:b5:
                    89:72:3f:4a:71:57:81:c4:c2:ec:9e:5e:56:a4:77:
                    03:e2:81:a6:ff:37:4f:87:e1:bd:5d:23:80:8e:41:
                    be:96:51:9e:a1:4b:89:74:7a:3a:b9:c6:ce:b6:c0:
                    bd:e3:47:45:d0:2a:c2:8d:ae:5c:4c:8c:e6:02:79:
                    d2:47:0b:e5:a7:16:ed:74:5f:ef:ca:3e:42:13:84:
                    ef:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:15:ED:35:88:47:7E:51:88:AD:E6:D1:F5:14:5E:08:99:30:DA:1D
            X509v3 Authority Key Identifier:
                keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:49:76:1f:b5:e4:c0:c8:14:ba:e3:0d:70:07:8f:51:2c:14:
         74:fe:98:59:66:53:80:1e:86:cc:78:9e:2e:bc:5b:45:e3:42:
         25:38:72:55:40:27:bc:5e:68:8c:d4:d7:07:68:60:f1:a7:1d:
         9f:27:a1:73:34:18:9c:77:e9:64:aa:cc:1a:0c:14:b5:74:8a:
         aa:06:11:ab:ce:18:b3:3c:fd:25:cd:d6:3b:56:6e:23:bc:dc:
         06:54:d0:07:65:b5:f4:d4:0c:4a:9f:63:0e:33:57:a6:14:2f:
         69:a7:2c:02:32:12:bc:9d:44:4d:71:6f:2f:0a:75:a8:97:41:
         ab:ca:22:14:6d:2d:2f:6c:44:30:98:98:6c:38:e2:fe:ba:4e:
         ed:b9:83:ca:c9:05:4f:53:d3:5c:e1:ee:72:7d:e9:88:bc:d6:
         0f:a2:40:ad:71:e5:dc:f3:5f:4d:c6:c6:97:6d:03:50:51:3f:
         26:cd:83:1f:44:d3:ba:fe:5f:1e:0e:7a:09:54:29:bd:53:e6:
         cb:c6:ca:c1:b7:ad:df:a1:d1:8b:cd:d6:32:e8:6f:f3:51:5d:
         72:94:e5:6d:7c:43:5e:5f:fb:c2:d6:9d:c0:e0:27:75:23:ae:
         09:63:55:96:43:b7:01:9a:34:96:e4:4d:e6:5a:9c:27:fd:0c:
         84:11:64:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:08:36 2025 by rpki-client