Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
File:                     B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json)
Hash identifier:          xSQs8adN33wgFwjVWKOkWiQgre82p84SYlpqE2m1tpk=
Subject key identifier:   B1:E3:15:E4:F2:27:0C:8B:CF:69:E5:8B:48:E4:1C:32:A4:A1:67:9D
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       329F07C9E0B626AA9768B19E34DA45E0F55FF9C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
Manifest number:          05A6
Signing time:             Mon 04 Aug 2025 05:22:18 +0000
Manifest this update:     Mon 04 Aug 2025 05:17:18 +0000
Manifest next update:     Tue 05 Aug 2025 06:18:18 +0000
Files and hashes:         1: 3231332e3133392e36362e302f32342d3234203d3e203134363138.roa (hash: KfrtJjSrdaJP5uvqRj2CQapVnmUpyN82iN3vrd+6yjk=)
                          2: 3231332e3133392e39322e302f32342d3234203d3e20383334.roa (hash: v0tNFH1u/s9uww1+x0zLopoqAlrYrdWeRhsSzqaLV6I=)
                          3: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (hash: FBtJ+MNYwdWO4In9hmlePFb198UWpspP65HhFA9Ht28=)
                          4: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (hash: 4HobDf2IR5LvPu11gvXGRRjA/4KYDCBMeX1L5falDQI=)
                          5: 3231332e3133392e39312e302f32342d3234203d3e2039303039.roa (hash: iHrVGYqO0jEnmhXvt0u+E3Fi7EyKrYFB7bEQzlX2suw=)
                          6: 3231332e3133392e37332e302f32342d3234203d3e20333936333536.roa (hash: p9bl2cITeGqyDsp+qYa6XKu0+IBsfcA9I2MK2L2iu7Q=)
                          7: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: vs2b7sm3b3a6ih0FOLh30+kJAWgxfwtdRLZicKgW2iY=)
                          8: 3231332e3133392e36372e302f32342d3234203d3e20383334.roa (hash: D6SogqGmOJbzVtDCb1JuxW8Fgqo7v+Dc/bOrJE9HIsI=)
                          9: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: +A7YZkvAN81rPDpTJkId3sZMflwrFWtwJvc3yTwbIVs=)
                          10: 3231332e3133392e36392e302f32342d3234203d3e20313337353137.roa (hash: HH3jqYI0MpU2yLi9Hw8yJjtic3EBakXCP+g63lrfqjg=)
                          11: 3231332e3133392e37392e302f32342d3234203d3e2033333230.roa (hash: PtRMyKTdbfZGfPE5XdhdhFh3qhxKx8+kxVjMWXNcsWU=)
                          12: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (hash: CZYh6lYb4N4Hi46B2oVp46GIE/gWlkXTwUlUU+TKpIw=)
                          13: 3231332e3133392e37392e302f32342d3234203d3e20323132313530.roa (hash: 0JPdHuSbHUk0VXaqk6MQ9H7eLXZuOQ1QZwBPgp3LcZ4=)
                          14: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: 3sBgBPhXGekAATE8XJ410DzQWJqVxKjP0XKZZazqwjc=)
                          15: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: NjWmld7in/C2wyn6DXt7Xnv7mQPq1jiHpZcTZuGeBQ0=)
                          16: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (hash: IdSy9DI41okmJzC8kiYhvPIkxbhT29hGtDcstol94Gs=)
                          17: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: e8Q+7NDWmF3F4Uj9/7ke4+doN1u9LpAmZfSQbeDPPKM=)
                          18: 3231332e3133392e36352e302f32342d3234203d3e20383334.roa (hash: fEnIBTw+jRf0ERbu7SqJm25t6OgI5sbbUb8jDkTz+nQ=)
                          19: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (hash: CLzyfVEPAwKX3mhx3cFkDV2A+7c3eW1iEPnVFN3/un0=)
                          20: 3231332e3133392e38362e302f32342d3234203d3e2039303039.roa (hash: FfLZiCS8Nd3284OE5qfthGu+7ch+27qC/k5QS2NyeLA=)
                          21: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (hash: pjnqIb4dxS7ohemcNICs3/5MSebDeHfZm+o3ScY7Wbs=)
                          22: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (hash: euqkb79t1OVkqJLV4h0sY2Fb9LyHpO6FssRdPdeta2o=)
                          23: 3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa (hash: LCM/dunTFfsiENo1u3oy0PNFVtxRWwm9bEHFaBempdc=)
                          24: 3231332e3133392e37372e302f32342d3234203d3e20333938323536.roa (hash: AAU8mMA/8qMP5OVFvU4ND40XGDRIHcFw5zTvG37HSds=)
                          25: 3231332e3133392e37392e302f32342d3234203d3e20323037333838.roa (hash: ++GZ339S0KrF867J3TV0tr4TdthWz9Doq5ZUIyvykVE=)
                          26: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: M5KJEFx6ngzgWcWaswPQRo9lko/DzsisbWDI/JPapI0=)
                          27: 3231332e3133392e37352e302f32342d3234203d3e20323731393837.roa (hash: k/dg+vn2LRgJwjRiBw+dTVhqGlwM5OEWHrHzMTRZgGU=)
                          28: 3231332e3133392e36362e302f32342d3234203d3e203136353039.roa (hash: 1hlK3K+inj21DftfAPCqNx9Ur756v/RvYDQKchDD0RY=)
                          29: 3231332e3133392e38342e302f32342d3234203d3e2039303039.roa (hash: recgwGLHRmHMtvRRJVUhe6BWHyw6Djaciag4FXuYftw=)
                          30: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: aplL4eWGO1854T22hYUsUkBTP8Rpw5inKqfwVoAi4uA=)
                          31: 3231332e3133392e38302e302f32332d3234203d3e20383334.roa (hash: qiWvZJxXyA1T8nIVbLoZ99OExdcS5mc15RZxXCZOFJM=)
                          32: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: pcqczpZd3N8rkxbwgnioI5KV9SeSdrdvwmseTG1EX1s=)
                          33: 3231332e3133392e39332e302f32342d3234203d3e2039303039.roa (hash: 9cktvEdh4jpik+wY0YHKxFgG9OCHki2tIjn/mKo9IKg=)
                          34: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (hash: zOTGboIZBsrY2C4wOPiGbp4YdGPWL/CIf9OR+DPh8lw=)
                          35: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (hash: m9VEyjC6AstkEvUHZu0nndWjDPejGmt2Un1d+bIvwNg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:9f:07:c9:e0:b6:26:aa:97:68:b1:9e:34:da:45:e0:f5:5f:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Aug  4 05:17:18 2025 GMT
            Not After : Aug  5 06:18:18 2025 GMT
        Subject: CN=B1E315E4F2270C8BCF69E58B48E41C32A4A1679D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:eb:d4:0d:ed:58:c3:49:3e:4d:54:ad:a6:a8:
                    34:78:f8:f1:75:f6:2b:36:13:e2:b0:75:1c:df:29:
                    a9:c5:29:d2:bc:e7:6f:48:f6:77:06:b6:a5:af:74:
                    88:9a:ba:c5:1e:5a:f7:d1:4c:d8:12:ba:66:91:bf:
                    b9:c1:0b:02:e9:a5:cc:c0:d2:6e:6e:d9:e6:98:d9:
                    04:13:6b:a2:1c:c0:6e:1f:9e:21:e6:74:02:bb:34:
                    14:06:3a:b3:3a:5e:46:63:15:e5:ea:3b:9f:bd:97:
                    7d:68:e1:9e:90:53:7e:33:25:c6:e3:d9:14:71:e0:
                    62:e6:38:46:c0:13:72:57:24:a9:ab:a2:27:5f:a0:
                    4e:70:01:67:97:64:f4:75:d3:82:d9:1b:1d:b5:ff:
                    dc:a9:73:c2:ec:7f:ee:32:34:ee:09:5e:1a:73:02:
                    23:f6:56:25:e1:da:16:e8:82:24:63:21:b4:64:a8:
                    c3:04:74:03:cc:d6:70:6d:c7:1f:c4:59:bc:58:04:
                    54:ff:c9:3c:f2:9b:f1:82:06:1a:7d:fe:58:1f:2b:
                    12:5c:ac:bf:93:52:be:d6:72:3e:c4:65:ab:1a:1a:
                    fd:e1:ed:f5:eb:ea:56:79:6c:19:f1:4c:2a:6c:dc:
                    02:5d:cb:e0:c0:7c:e4:59:59:3f:ac:19:0a:bf:d5:
                    5f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E3:15:E4:F2:27:0C:8B:CF:69:E5:8B:48:E4:1C:32:A4:A1:67:9D
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:57:0d:69:8a:ae:f3:83:4d:64:d6:83:cc:e9:25:1e:12:d6:
         aa:96:44:19:08:1d:6b:28:8b:06:fc:0c:8e:0b:c9:1e:63:98:
         14:65:07:be:0f:33:9d:87:a2:92:a1:64:c6:0d:25:56:2c:f7:
         cb:d4:f3:bf:66:8e:3b:0e:4e:56:c1:be:f3:02:60:bc:7c:2d:
         38:9c:0f:bb:b2:f9:e7:17:15:02:4b:c4:62:d6:63:45:5b:cb:
         51:24:db:6c:fd:39:e1:02:ed:4c:eb:e8:cb:58:7a:38:2a:0d:
         51:fc:db:fd:37:80:19:10:3b:34:dd:79:30:fc:d4:5a:66:b1:
         5f:86:21:6c:df:96:d5:57:1c:be:e4:3e:9b:81:f7:9e:69:d1:
         a6:8e:ce:c7:6c:45:c2:75:dd:06:a0:65:28:8a:3b:5d:c4:49:
         73:81:01:15:87:83:a5:aa:32:bb:9f:b7:5b:ae:6d:59:4a:d3:
         aa:fd:47:01:b4:e2:a6:e6:90:c1:80:71:56:9c:93:e2:19:e9:
         1e:f3:ba:e5:91:e1:47:5e:f4:78:75:a7:4a:b6:ba:15:99:65:
         60:86:80:95:99:81:9e:18:8d:7c:f1:fc:8b:5d:97:0a:1f:d9:
         65:42:47:1f:56:da:cc:5f:d3:bd:58:80:1a:2f:0e:2a:42:e7:
         24:10:4b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:49 2025 by rpki-client