Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
File:                     3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json)
Hash identifier:          KZSihHLNb1uuLvnIZ9EUiMBNoXf2RoNzEi2E19kcIsA=
Subject key identifier:   F7:64:14:1D:EC:97:22:81:EE:5A:52:BD:2D:2E:F5:8A:89:20:18:EA
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Certificate issuer:       /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial:       761A077DF33A89DF61634AB7B5A8E455BC2431CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
Manifest number:          054F
Signing time:             Sun 03 Aug 2025 18:37:16 +0000
Manifest this update:     Sun 03 Aug 2025 18:32:16 +0000
Manifest next update:     Mon 04 Aug 2025 20:27:16 +0000
Files and hashes:         1: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: BX+afd5v4CnQw1Csb+gERO9bOUf9cjiesQkq05EVznU=)
                          2: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: W9NdT6aoX4s9PghUA97T0GAxnEF0Q0u3VMj+QX70R5Y=)
                          3: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: 2mJFb3j98iS3WwOyYDzT/44zu56P1Mt1+w22nAIK9Eo=)
                          4: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: O475B5YNr+mk4vbByMFVmoqbRTenx4kmx66C3HIfdsg=)
                          5: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: L+rO+MXrQK3tGBKkhTiQd3Pp/oT0n0nJ8NfAxPcZ/Ik=)
                          6: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: krs6rxjGgkgxIC0XFsSJIDbJbJTaOxRVYKdhwP98j0o=)
                          7: 3138352e3232392e3230332e302f32342d3234203d3e20323036373335.roa (hash: +12elja/TRgK8YWG00PTJRaGaFKqfWK9R0yIngktuC8=)
                          8: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: 7MRl2ndToXr+/Nwpi0fWFQSP/EKXsP73R/4IMWd5dgM=)
                          9: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: NTiGjgrJWtlD9Roa9FRQtbjOAAcPR35U4Ayfj8SpKuI=)
                          10: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: +zgqg7oCfaFMqowtNn81ipaj3irDs5wSCtc6B41Oes8=)
                          11: 3138352e3232392e3230302e302f32342d3234203d3e203139343337.roa (hash: EP6RD+ZuD8/aeGRdu5DeM51xsrxE2M7oAfAneTY5Btg=)
                          12: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: nzc+7vTx0fxusJ8QBUU0nZ0s/13eeYO5i8RfnoHHUhc=)
                          13: 3138352e3133302e36322e302f32342d3234203d3e203239303636.roa (hash: mH/CiZmwU0yIfVsdjhTMAG/KAtonINfckXbmsVpawiw=)
                          14: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: 5U9kh/Q1+pD8ktgLTSH2rTlmtF2qNT/hbi1XnCHITmo=)
                          15: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: fyEm36B55a1pd4HLESzxtTjALoxzu4leetK2j/pzqHY=)
                          16: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: RdOuxQjMUqkQryMcrXonWYYeJva5RY8rohAdG2ITJdw=)
                          17: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: PJ+hFoQn13KIpw+om1vEuY46Ag0fpemJXe6gwevd4eA=)
                          18: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: KhYwWjM/5tZMAc1Ys2Qi/Z3IxKzkYaHG79mNsaA679A=)
                          19: 33362e3235352e39322e302f32332d3234203d3e203139333138.roa (hash: FthEwpOIKT5rKWCqEXY9gMB5simU3azPQORqXvTeqVo=)
                          20: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: aTFuiZRKSKlOcP1bFw/QEJGr9kwsAqFvqfR62oNQfMc=)
                          21: 33362e3235352e39322e302f32332d3234203d3e203230333236.roa (hash: uAr910mpCFzZrOxxImyBVxZ5bzjvqrL8T8981qvKdos=)
                          22: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: /OGL5Xocpa/mA4GEutGuQoiWc4p3DBj9VM0kpmdQZxo=)
                          23: 3138352e3234342e39352e302f32342d3234203d3e203230343733.roa (hash: wcPx+O7KmTHA1Z17UF9VIIdo6IS06Ij+d7NLeipHdoU=)
                          24: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: ezbmX/yRe+yRvkLs/8FFZoupwCiBI67aZ+0JqkrMl4Q=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Aug 2025 20:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:1a:07:7d:f3:3a:89:df:61:63:4a:b7:b5:a8:e4:55:bc:24:31:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
        Validity
            Not Before: Aug  3 18:32:16 2025 GMT
            Not After : Aug  4 20:27:16 2025 GMT
        Subject: CN=F764141DEC972281EE5A52BD2D2EF58A892018EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9c:c1:50:da:c5:d0:ad:75:1d:06:e9:4d:8e:
                    0c:05:2e:e9:30:1c:83:44:35:d7:42:64:f9:b9:3f:
                    32:86:a5:86:0c:75:bf:cd:ca:09:24:94:97:31:7f:
                    b2:2d:81:25:83:c1:27:85:b6:60:76:5d:3e:5a:e9:
                    17:57:55:86:58:00:cc:1d:ae:04:87:93:c8:ab:f3:
                    7c:84:8a:ad:9e:a4:85:13:ff:6e:81:6e:06:52:10:
                    67:33:1b:f7:ac:a9:60:ea:be:03:8b:c5:3f:e6:b2:
                    4f:6e:4c:da:99:7d:c2:98:35:28:9f:4d:4e:33:d1:
                    1a:69:d8:32:d0:78:06:2f:ef:7b:7c:15:11:31:fb:
                    24:2c:b2:24:22:f4:47:b7:85:9c:89:61:b3:40:09:
                    b5:a7:d7:bc:c7:90:87:58:0e:06:5a:89:ab:56:d1:
                    7e:33:eb:93:aa:83:ac:4c:3d:5c:ee:e7:5e:a5:b0:
                    bb:f9:c7:5c:4d:dc:c9:e8:78:9f:42:6c:dd:ed:1a:
                    ab:2b:4d:16:88:cc:34:7e:2d:17:6b:8f:c5:0a:6a:
                    6d:f2:0e:d8:e3:4d:87:f3:fd:f2:cd:da:e5:15:46:
                    42:ce:05:2c:a2:bc:5d:27:e4:52:a8:45:71:97:28:
                    ed:de:a4:f0:93:14:c8:ae:3b:ca:51:d2:e2:01:a4:
                    ad:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:64:14:1D:EC:97:22:81:EE:5A:52:BD:2D:2E:F5:8A:89:20:18:EA
            X509v3 Authority Key Identifier:
                keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:dc:49:cd:0c:73:02:a6:ec:b0:59:5b:87:a6:c7:85:bd:af:
         f5:84:82:cd:17:c0:e3:38:67:a9:17:65:4f:33:69:64:e4:e0:
         0c:dc:2c:4b:7a:0f:79:8f:92:98:2b:7c:2b:8f:29:bd:e5:10:
         f1:0c:ab:fb:76:25:aa:92:7f:dd:7e:43:c3:6d:5c:2a:61:34:
         de:4a:8a:6e:ac:a5:2d:14:27:a1:88:29:1d:92:03:46:22:6f:
         2f:18:28:27:56:7d:88:2c:5f:96:7f:3f:35:57:16:72:94:9d:
         eb:e4:0c:81:7e:be:99:bc:87:df:9e:cc:63:a2:63:d7:8c:32:
         0e:07:6c:0e:1f:dd:e8:51:7e:21:e9:4c:77:7c:5a:0a:69:62:
         71:06:0f:5f:dd:7f:1b:db:74:f1:2e:fa:a1:1e:c4:39:44:43:
         0d:f4:2f:10:ce:52:77:2d:65:fa:ef:8e:7a:c2:b1:7a:f7:a2:
         2f:59:71:ba:70:fc:0a:e9:fe:08:c0:6e:2d:a8:43:ad:82:93:
         e3:2b:fa:18:5c:14:3d:03:7f:8f:0e:cb:e3:b4:90:3b:e2:5c:
         71:ea:2a:a4:2b:c0:96:a2:ba:ef:7b:2b:ec:fa:48:8f:33:68:
         5f:02:b7:c1:79:ff:96:3f:e6:9b:ee:c6:6a:bf:e4:15:26:be:
         25:30:76:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:50 2025 by rpki-client