Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
File:                     51917E722DB03952D9056BED2F6BD4BF98B78976.mft (raw, json)
Hash identifier:          Kr6gBn7HWA8vxN8snwbJrR6h/s4Z3qQQJRsyzZjWysA=
Subject key identifier:   CE:FB:67:66:38:A0:40:8B:1B:0D:54:59:88:7C:04:8A:F8:0F:42:D1
Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
Certificate issuer:       /CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Certificate serial:       46CA5B82576DEECCF70771C45CBDFE6955892D33
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
Manifest number:          74
Signing time:             Wed 06 Aug 2025 02:51:06 +0000
Manifest this update:     Wed 06 Aug 2025 02:46:06 +0000
Manifest next update:     Thu 07 Aug 2025 06:21:06 +0000
Files and hashes:         1: 326131343a373538303a3530303a3a2f34302d3430203d3e20323039373130.roa (hash: UtWLjV2JD6X8emwUC9bu8RyXGCD7bzymrTBVIEkaVv8=)
                          2: 326131343a373538303a666635323a3a2f34382d3438203d3e20323039373130.roa (hash: vs66PWFM6L/hirNyhIXTRaz65c001j+IhkCdp8VdfS4=)
                          3: 326131343a373538303a666635333a3a2f34382d3438203d3e20323039373130.roa (hash: UpFVw7x1NBf/Uix4G0zJEj+QV4riL3tEIjso5GywhOU=)
                          4: 326131343a373538303a666635343a3a2f34382d3438203d3e20323039373130.roa (hash: i7VkbN6Rb5CnHlmR8BF2dlC+Uq3PFV4wJTcaolWAu+U=)
                          5: 326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa (hash: 5weylF9E+kZUqdJn7nMGLccAIkWjUNuo5MqarqyfkO8=)
                          6: 51917E722DB03952D9056BED2F6BD4BF98B78976.crl (hash: w4eMA50bf2IzoHTYXaig7PfezMsDd7VzKMZ4ShaV7uk=)
                          7: 326131343a373538303a666635313a3a2f34382d3438203d3e20323039373130.roa (hash: KcfiSDiqDvlLOqfaLqph9s6F4NvpySAcmNFiwDriyms=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 06:21:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ca:5b:82:57:6d:ee:cc:f7:07:71:c4:5c:bd:fe:69:55:89:2d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976
        Validity
            Not Before: Aug  6 02:46:06 2025 GMT
            Not After : Aug  7 06:21:06 2025 GMT
        Subject: CN=CEFB676638A0408B1B0D5459887C048AF80F42D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cf:d2:0b:37:99:37:62:a6:af:7e:5d:ac:ea:
                    c2:28:bf:86:8d:1f:85:63:34:6a:fb:73:66:ff:25:
                    51:1b:86:cf:5c:eb:4f:2e:83:bc:08:b7:a3:ca:c1:
                    0b:e8:1b:79:da:fe:2c:4d:73:52:78:d5:fe:c5:ab:
                    11:74:8a:09:a9:89:92:9e:9f:13:d2:23:60:2d:f2:
                    5c:78:23:67:8b:8a:e1:bc:c1:7e:ca:a1:7b:99:51:
                    b7:78:d1:5c:b6:37:1c:43:8c:99:b1:a5:26:f2:3b:
                    ed:57:4a:5f:08:52:5d:ca:cd:da:0a:cf:c3:ad:d2:
                    5d:ba:8e:6d:c5:75:24:83:fe:4f:ae:bb:b3:65:04:
                    c2:81:86:99:f3:71:8f:3c:ab:53:f3:f1:ae:84:a5:
                    6f:ec:a2:94:38:e5:0d:8b:37:22:99:ba:f7:fc:a9:
                    08:74:49:64:dc:73:fc:76:72:b9:e5:c3:e6:52:cb:
                    1f:4a:fe:5c:5a:cc:9c:38:58:ef:8f:f3:ab:c3:b9:
                    7d:db:9e:de:bf:6d:00:e8:91:00:cc:48:50:e2:14:
                    36:0e:96:eb:05:c8:09:e1:57:6d:9d:40:df:54:00:
                    6e:80:6e:b6:0f:2f:26:2f:19:8e:62:84:de:46:17:
                    5b:37:1a:53:02:19:fa:ab:40:9b:f3:06:4f:00:b1:
                    34:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FB:67:66:38:A0:40:8B:1B:0D:54:59:88:7C:04:8A:F8:0F:42:D1
            X509v3 Authority Key Identifier:
                keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:c0:26:c0:4a:b4:43:c7:3e:4f:b5:79:e4:fd:7f:43:5e:72:
         db:04:03:e7:ca:93:12:00:7d:e1:37:e1:76:81:9d:5c:16:1c:
         a0:d4:b3:1c:7d:20:bd:11:20:18:88:c0:f4:8e:bb:fb:00:bb:
         f2:9b:7c:59:45:3c:68:e8:4d:d5:42:e7:fd:c6:38:48:80:8a:
         c0:dc:af:87:12:29:65:41:f6:79:e0:fa:0a:57:c4:b5:41:9a:
         65:cb:51:da:b1:56:33:eb:84:22:56:47:ea:4d:91:3f:6a:2a:
         1e:20:b3:fa:a0:d7:4b:96:d2:e4:91:01:b8:8b:fb:40:de:43:
         d0:48:e5:64:29:e7:02:f2:66:46:38:17:fd:ed:c8:cf:df:1a:
         d4:02:53:d2:c2:05:ea:00:8a:95:8a:d7:8f:61:72:09:26:8a:
         32:99:f1:21:21:56:8a:69:5a:50:74:de:d5:03:ef:0b:3e:c6:
         38:47:b5:2b:14:13:b5:7f:73:d1:94:86:87:78:43:09:0f:b6:
         82:0a:6e:90:de:72:48:c7:ab:a7:23:96:64:cd:cd:b7:e4:35:
         63:18:85:1a:69:0e:93:69:83:d0:5b:ba:ab:56:f8:e7:18:a7:
         0c:86:e1:c4:90:7d:a3:e1:a0:5d:ff:dc:ba:93:1c:09:56:ce:
         5e:bd:ef:61
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIURspbgldt7sz3B3HEXL3+aVWJLTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5
OEI3ODk3NjAeFw0yNTA4MDYwMjQ2MDZaFw0yNTA4MDcwNjIxMDZaMDMxMTAvBgNV
BAMTKENFRkI2NzY2MzhBMDQwOEIxQjBENTQ1OTg4N0MwNDhBRjgwRjQyRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIz9ILN5k3Yqavfl2s6sIov4aN
H4VjNGr7c2b/JVEbhs9c608ug7wIt6PKwQvoG3na/ixNc1J41f7FqxF0igmpiZKe
nxPSI2At8lx4I2eLiuG8wX7KoXuZUbd40Vy2NxxDjJmxpSbyO+1XSl8IUl3KzdoK
z8Ot0l26jm3FdSSD/k+uu7NlBMKBhpnzcY88q1Pz8a6EpW/sopQ45Q2LNyKZuvf8
qQh0SWTcc/x2crnlw+ZSyx9K/lxazJw4WO+P86vDuX3bnt6/bQDokQDMSFDiFDYO
lusFyAnhV22dQN9UAG6AbrYPLyYvGY5ihN5GF1s3GlMCGfqrQJvzBk8AsTS/AgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUzvtnZjigQIsbDVRZiHwEivgPQtEwHwYDVR0j
BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz
ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy
RjZCRDRCRjk4Qjc4OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzllY2FjNDEzLTRjZDItNDcyYy1iMDFlLTc0NDU4Y2VhMzg2Yy8wLzUxOTE3RTcy
MkRCMDM5NTJEOTA1NkJFRDJGNkJENEJGOThCNzg5NzYubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBkwCbA
SrRDxz5PtXnk/X9DXnLbBAPnypMSAH3hN+F2gZ1cFhyg1LMcfSC9ESAYiMD0jrv7
ALvym3xZRTxo6E3VQuf9xjhIgIrA3K+HEillQfZ54PoKV8S1QZply1HasVYz64Qi
VkfqTZE/aioeILP6oNdLltLkkQG4i/tA3kPQSOVkKecC8mZGOBf97cjP3xrUAlPS
wgXqAIqVitePYXIJJooymfEhIVaKaVpQdN7VA+8LPsY4R7UrFBO1f3PRlIaHeEMJ
D7aCCm6Q3nJIx6unI5Zkzc235DVjGIUaaQ6TaYPQW7qrVvjnGKcMhuHEkH2j4aBd
/9y6kxwJVs5eve9h
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:31:37 2025 by rpki-client