Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
File:                     E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json)
Hash identifier:          QncXCOZeDLNKHMSDyXVnK7y3HDrBzC7r7VeI6bCoXHM=
Subject key identifier:   51:46:60:D2:36:67:02:5B:1C:18:11:B1:3B:00:AF:FF:B4:A5:46:6B
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Certificate issuer:       /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial:       3E17FE464F65F111D233606CD2215662382D2CD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
Manifest number:          D4
Signing time:             Wed 06 Aug 2025 08:02:22 +0000
Manifest this update:     Wed 06 Aug 2025 07:57:22 +0000
Manifest next update:     Thu 07 Aug 2025 09:10:22 +0000
Files and hashes:         1: 39312e3230392e34382e302f32342d3234203d3e2034363337.roa (hash: 4+D5jdmTDYB1GvCAU0z5GBGlSPW7Q/zpduO0wdWv8pU=)
                          2: 326130663a356663303a646561643a3a2f34382d3438203d3e203339363733.roa (hash: gO+lPcmBJ3b3FFlaD55CICvRL4LDSg56OGDANGd62H4=)
                          3: 39312e3230392e34302e302f32342d3234203d3e203232343237.roa (hash: na/qAaTdIJ7PT1YXsvaqUnpzD/nkfVV0HbNT3JlIn2w=)
                          4: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: MExZWMifyDNrVuEKDWaQ+ALCtyZlpuosSPFDT0IsSrU=)
                          5: 326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa (hash: Qj8pflv8KszWoeUIqOpeKQUtZrsbyJDTmnxefpUjjlo=)
                          6: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: UjFw0WQQLm//XoiWgykA8VWz+amzh0YCKaelwGihPq4=)
                          7: 39312e3230392e35382e302f32342d3234203d3e203634323637.roa (hash: vVPhAwxMoGbJX95BZTqrmZCi086rlFMNDRhMBQEniYs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 09:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:17:fe:46:4f:65:f1:11:d2:33:60:6c:d2:21:56:62:38:2d:2c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
        Validity
            Not Before: Aug  6 07:57:22 2025 GMT
            Not After : Aug  7 09:10:22 2025 GMT
        Subject: CN=514660D23667025B1C1811B13B00AFFFB4A5466B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d7:d6:f4:df:ee:ba:21:c6:45:06:4f:66:b4:
                    c7:d4:4c:4f:40:6c:cd:52:aa:c0:85:a6:73:ae:05:
                    5b:47:f3:23:8e:88:41:69:6b:1a:27:4e:79:33:6d:
                    67:86:c2:60:f1:6a:bb:a9:33:45:ea:38:fe:0e:fb:
                    6f:a5:a9:74:16:f4:52:89:dc:68:ef:49:14:62:f3:
                    9f:f2:b1:44:08:8d:88:fe:15:d0:a3:1d:4e:46:55:
                    e6:b2:2e:81:3a:ec:bf:2e:70:c1:c4:03:04:ed:7d:
                    3c:cf:aa:b4:9e:29:2c:2b:82:15:7b:f7:dc:c7:ce:
                    d7:0a:8a:83:1c:20:99:ea:e0:d3:15:e6:7f:38:62:
                    51:3d:17:b3:3b:a7:2f:aa:79:4b:2b:a9:0d:01:3f:
                    a8:9e:33:10:d1:e4:44:30:5e:bf:74:12:99:0e:dd:
                    9a:8c:fe:fb:30:05:a2:b0:77:3d:e1:38:b4:cd:e3:
                    e3:1e:8c:ac:42:5f:18:bc:6d:4b:b0:d6:15:0b:32:
                    dc:fb:99:44:8a:39:f7:cc:5a:d3:9f:bb:ce:a2:a3:
                    d8:60:57:7e:fd:a5:7c:94:6c:19:ed:b2:67:a0:1f:
                    58:5c:e4:2c:e9:90:47:32:d5:d7:47:fb:a5:95:bc:
                    e4:a9:86:7b:68:ed:e4:75:c0:3e:1f:2e:c6:66:5b:
                    5c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:46:60:D2:36:67:02:5B:1C:18:11:B1:3B:00:AF:FF:B4:A5:46:6B
            X509v3 Authority Key Identifier:
                keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:58:01:e3:59:8a:51:58:8b:7c:ea:b0:14:20:f0:a9:89:3a:
         64:f0:2f:20:77:9c:08:04:68:8a:b9:45:0a:7b:80:65:45:55:
         1c:7a:e9:6e:19:7d:d6:43:67:6b:a3:77:c9:62:32:88:9e:7c:
         62:3c:f3:d5:4b:0a:ad:d2:4d:57:74:ae:55:67:04:41:73:a5:
         0a:44:64:da:15:75:b9:7b:6d:e8:cb:14:dc:2f:14:4e:85:6a:
         44:68:22:53:86:58:7f:ce:47:84:8c:e2:67:35:98:52:79:bf:
         a0:af:3c:22:6f:4f:19:fb:3d:7a:52:91:3d:2c:1f:3c:a2:d5:
         76:db:0f:87:82:be:32:0c:c2:31:b7:78:4f:ff:b8:cc:c3:fb:
         a9:94:5a:51:3a:97:49:9a:0d:9e:96:01:af:3e:2d:e4:94:1d:
         ac:7b:da:29:fb:85:dc:51:06:7f:ec:3b:dd:a1:de:e1:06:56:
         41:43:86:55:4b:7d:03:f3:bc:0e:8a:b6:b9:ef:50:77:5a:13:
         b0:2d:c5:64:c1:ef:30:5a:b9:73:58:a9:52:23:b4:c2:50:6d:
         c4:00:21:45:68:a3:3e:b8:55:c4:a3:71:a4:15:37:de:59:8d:
         b1:6d:bf:87:5f:93:8d:6f:c7:e0:04:68:2d:27:c8:22:6d:84:
         3f:68:d9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:57:10 2025 by rpki-client