Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
File:                     E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json)
Hash identifier:          3M+lj01Jq4+jB8AR3qVINI85mTnjNFoDplSsqPMd+30=
Subject key identifier:   7E:56:6D:34:F5:4F:00:6E:7F:CD:7B:A6:EC:DD:5E:E1:40:F1:78:8C
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Certificate issuer:       /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial:       4AF63E9BFC424697CA4BC5962B5175C8D3C48306
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
Manifest number:          90
Signing time:             Mon 16 Jun 2025 15:38:02 +0000
Manifest this update:     Mon 16 Jun 2025 15:33:02 +0000
Manifest next update:     Tue 17 Jun 2025 19:13:02 +0000
Files and hashes:         1: 39312e3230392e34302e302f32342d3234203d3e203232343237.roa (hash: na/qAaTdIJ7PT1YXsvaqUnpzD/nkfVV0HbNT3JlIn2w=)
                          2: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: UjFw0WQQLm//XoiWgykA8VWz+amzh0YCKaelwGihPq4=)
                          3: 326130663a356663303a646561643a3a2f34382d3438203d3e203339363733.roa (hash: gO+lPcmBJ3b3FFlaD55CICvRL4LDSg56OGDANGd62H4=)
                          4: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: +oBV+OEMOjS8ddMF4MT0EOMtR+e0eOoLxQzRBx+E208=)
                          5: 326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa (hash: Qj8pflv8KszWoeUIqOpeKQUtZrsbyJDTmnxefpUjjlo=)
                          6: 39312e3230392e34382e302f32342d3234203d3e2035353131.roa (hash: pWHUy4sfDHhMYcXOwCmnLzzNUiYAcTbJlR4z9A6zTiI=)
                          7: 39312e3230392e35382e302f32342d3234203d3e203634323637.roa (hash: vVPhAwxMoGbJX95BZTqrmZCi086rlFMNDRhMBQEniYs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f6:3e:9b:fc:42:46:97:ca:4b:c5:96:2b:51:75:c8:d3:c4:83:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
        Validity
            Not Before: Jun 16 15:33:02 2025 GMT
            Not After : Jun 17 19:13:02 2025 GMT
        Subject: CN=7E566D34F54F006E7FCD7BA6ECDD5EE140F1788C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:34:4d:0f:27:95:0c:38:b9:e5:2f:07:56:e4:
                    48:82:1b:ed:47:a7:0e:69:9b:34:0c:31:b7:4c:cd:
                    7a:a4:5e:a1:bb:ed:30:fa:48:f8:61:d6:dd:5b:47:
                    1d:c2:c0:b6:1e:87:56:a5:bb:92:b7:a6:e8:e0:a4:
                    4e:c8:65:50:cc:cd:c0:b2:36:af:90:bd:d0:16:0c:
                    87:38:2e:52:54:48:6b:a5:37:e9:a2:1c:d0:5c:16:
                    54:8f:1e:e0:37:42:fd:89:e5:ac:92:c0:f3:42:9f:
                    c7:5a:55:70:2b:99:fc:6c:4c:de:30:cc:51:49:b8:
                    d6:6d:e2:a6:f8:21:d7:ec:9c:78:8f:ce:ed:ec:1a:
                    dc:0d:f6:7c:ca:a8:f1:08:02:d7:f0:ea:23:04:7d:
                    97:b9:29:31:29:f6:5a:63:10:d5:1b:8c:a1:fd:3c:
                    59:19:e0:fb:a0:9a:29:24:f1:bc:df:30:25:17:e6:
                    4f:bf:a7:5d:63:f8:00:34:3c:f6:e5:38:cc:c3:c2:
                    23:7d:7c:a6:d2:39:ad:b9:9f:6b:2a:51:cd:ed:43:
                    dd:f4:fb:0c:44:ba:7e:d2:fb:24:59:db:91:6d:d5:
                    12:b4:30:9a:35:33:3c:01:f8:69:97:da:65:3c:f2:
                    94:4f:69:e9:d0:95:51:15:89:2b:d4:70:01:5d:84:
                    fa:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:56:6D:34:F5:4F:00:6E:7F:CD:7B:A6:EC:DD:5E:E1:40:F1:78:8C
            X509v3 Authority Key Identifier:
                keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:67:ff:e1:01:a2:98:f9:96:b8:65:cf:89:eb:be:c3:dc:8a:
         0a:51:4a:55:b0:ad:1d:da:da:e6:6a:f0:7b:5b:ed:b2:d8:27:
         3b:19:73:2d:63:6d:89:76:d6:1e:a7:2b:b5:9b:46:c0:fa:4b:
         1a:68:51:b0:92:e1:db:fd:16:00:d7:d0:7e:b5:d3:9a:3f:c1:
         fe:76:c0:69:b8:8d:0b:9f:f8:5d:41:16:f9:6c:7c:89:b1:b5:
         d6:bd:76:f1:cd:b4:b4:ad:cd:2c:34:7b:e4:e0:4e:19:32:1c:
         fb:f7:97:83:5c:0b:e2:46:e8:4b:00:af:cf:bb:ec:35:30:dc:
         0e:a3:c0:75:0c:71:16:48:f4:4f:51:fe:45:12:08:b3:a4:40:
         c9:ab:29:6d:41:db:09:87:7c:fd:cc:ed:59:29:de:4f:df:31:
         9f:99:99:de:d3:f1:73:50:d1:14:69:fb:20:ae:79:e6:19:4c:
         42:e8:5a:3e:32:1b:7c:a3:2c:5f:cd:84:ce:bf:f5:91:5a:c1:
         c9:28:af:07:e9:19:a3:a7:56:5a:b7:ba:3c:a5:98:db:ae:24:
         5d:d3:8d:de:5d:a2:82:4a:56:e8:14:08:fe:18:a2:21:c3:4a:
         95:b0:4d:83:b9:49:7c:b0:b3:8a:99:43:f3:83:55:bb:3b:6d:
         44:68:fb:32
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUSvY+m/xCRpfKS8WWK1F1yNPEgwYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTIwNWViZjA2NWZjNDkyOWYxODAyNjYyYWU2MmQ3Zjk3
NjI2MDBlNjAeFw0yNTA2MTYxNTMzMDJaFw0yNTA2MTcxOTEzMDJaMDMxMTAvBgNV
BAMTKDdFNTY2RDM0RjU0RjAwNkU3RkNEN0JBNkVDREQ1RUUxNDBGMTc4OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4NE0PJ5UMOLnlLwdW5EiCG+1H
pw5pmzQMMbdMzXqkXqG77TD6SPhh1t1bRx3CwLYeh1alu5K3pujgpE7IZVDMzcCy
Nq+QvdAWDIc4LlJUSGulN+miHNBcFlSPHuA3Qv2J5aySwPNCn8daVXArmfxsTN4w
zFFJuNZt4qb4IdfsnHiPzu3sGtwN9nzKqPEIAtfw6iMEfZe5KTEp9lpjENUbjKH9
PFkZ4Pugmikk8bzfMCUX5k+/p11j+AA0PPblOMzDwiN9fKbSOa25n2sqUc3tQ930
+wxEun7S+yRZ25Ft1RK0MJo1MzwB+GmX2mU88pRPaenQlVEViSvUcAFdhPq3AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUflZtNPVPAG5/zXum7N1e4UDxeIwwHwYDVR0j
BBgwFoAU4gXr8GX8SSnxgCZirmLX+XYmAOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1
N2ZlLzAvRTIwNUVCRjA2NUZDNDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRnWHI4R1g4U1NueGdDWmlybUxYLVhZ
bUFPWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjBiZTNlMS04
NTRlLTQ2NjItOTJlOC0wMjg5NTBmZjU3ZmUvMC9FMjA1RUJGMDY1RkM0OTI5RjE4
MDI2NjJBRTYyRDdGOTc2MjYwMEU2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGf/4QGimPmWuGXPieu+
w9yKClFKVbCtHdra5mrwe1vtstgnOxlzLWNtiXbWHqcrtZtGwPpLGmhRsJLh2/0W
ANfQfrXTmj/B/nbAabiNC5/4XUEW+Wx8ibG11r128c20tK3NLDR75OBOGTIc+/eX
g1wL4kboSwCvz7vsNTDcDqPAdQxxFkj0T1H+RRIIs6RAyaspbUHbCYd8/cztWSne
T98xn5mZ3tPxc1DRFGn7IK555hlMQuhaPjIbfKMsX82Ezr/1kVrBySivB+kZo6dW
Wre6PKWY264kXdON3l2igkpW6BQI/hiiIcNKlbBNg7lJfLCziplD84NVuzttRGj7
Mg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 19:32:17 2025 by rpki-client