Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft
File:                     1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft (raw, json)
Hash identifier:          7Rt9sSigh3OdmbPynr42wdofNJi9L3MzPyvCBw4cOhc=
Subject key identifier:   4C:40:5C:9D:03:7F:17:93:B7:C5:4F:AC:2A:F3:7D:AF:98:FF:8E:12
Authority key identifier: 1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79
Certificate issuer:       /CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79
Certificate serial:       71E79360B83CC91B47A0B7B32D42613AD0D5F105
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft
Manifest number:          7D
Signing time:             Mon 04 Aug 2025 15:31:56 +0000
Manifest this update:     Mon 04 Aug 2025 15:26:56 +0000
Manifest next update:     Tue 05 Aug 2025 19:05:56 +0000
Files and hashes:         1: 326131343a373538303a3730303a3a2f34302d3430203d3e20313938303235.roa (hash: q6g7NvOylKcoMKHIBFZ0Cue6q0bByY4gqgu482bGvYs=)
                          2: 1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl (hash: ALJ9efk7nb4YwOIi/7/q790Xm5E3/N8VxSFXEiv3Nbk=)
                          3: 326131343a373538303a3761303a3a2f34342d3438203d3e20313531313934.roa (hash: MhfSMgOUdMy7zOQbQ7utCWK4Xb73mUPNGp3jE9+Q0vs=)
                          4: 326131343a373538303a3734303a3a2f34342d3434203d3e20313337393038.roa (hash: 2XHTj/cfAPJdVFHVIH4P55LBG+fLJn82CtSAwFgxMbs=)
                          5: 326131343a373538303a3737303a3a2f34342d3434203d3e20323133383931.roa (hash: Y5ilvBbE12qO1Ud5YZb+YMRUcGap41Si5541sY2pw8w=)
                          6: 326131343a373538303a3730303a3a2f34302d3430203d3e20313531313934.roa (hash: omUm+VClsl1esxeSZas8cPGaOt8NK5P0JK8DttORXSQ=)
                          7: 326131343a373538303a3730303a3a2f34342d3434203d3e20313938303235.roa (hash: 4L0QSAftYtcw4WDJTyxob29wy6e4AqxikKCoI1U7ltM=)
                          8: 326131343a373538303a3731303a3a2f34382d3438203d3e20313938303235.roa (hash: Hxl/WHpFi1Lrr9tPJHprlKCFg1f6KdSpCnh41pb8RUw=)
                          9: 326131343a373538303a3762303a3a2f34342d3438203d3e20313938303235.roa (hash: JAE7lucu4kiMGAKTCYpftvBPLTlJBVnkXPYkQPr6BDU=)
                          10: 326131343a373538303a3732313a3a2f34382d3438203d3e20313938303235.roa (hash: F0yheovlhp7K4XimVlJIY2XY5LQ9rO6Lio/g2Fp5WxY=)
                          11: 326131343a373538303a3733303a3a2f34342d3434203d3e20323038373534.roa (hash: YgvU7sxrMhf4/I0u7F9ePehiaAqP0nrViPzYLyrcqg4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e7:93:60:b8:3c:c9:1b:47:a0:b7:b3:2d:42:61:3a:d0:d5:f1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79
        Validity
            Not Before: Aug  4 15:26:56 2025 GMT
            Not After : Aug  5 19:05:56 2025 GMT
        Subject: CN=4C405C9D037F1793B7C54FAC2AF37DAF98FF8E12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:93:9e:82:c9:52:d7:19:65:10:57:42:a8:8c:
                    68:7d:60:60:a7:c9:3e:ed:a0:ba:58:5d:0b:1e:5b:
                    bd:8d:cc:cd:b7:e7:c6:ab:90:9b:a7:30:d9:63:82:
                    f3:e2:06:85:ef:78:67:c3:a4:14:c2:dc:c8:5b:3c:
                    62:53:b6:12:f2:d3:30:db:ac:17:1e:57:1b:d6:1e:
                    43:36:47:b5:cd:f3:2b:98:2b:65:23:76:b8:ab:53:
                    5a:eb:80:9f:45:e1:6c:18:0c:ce:4d:7a:61:c4:03:
                    8f:4a:32:2c:33:0b:b6:e1:a8:97:47:b3:e3:4f:6b:
                    40:cb:5b:f0:40:cb:36:ae:a2:0b:8b:b2:ca:d5:da:
                    50:26:8a:a9:d7:ef:b6:9a:c6:26:8d:07:7e:8b:ff:
                    63:b8:de:62:eb:7f:8a:ff:b5:fb:81:ca:65:30:1c:
                    63:e7:be:49:84:da:27:cb:c7:46:61:08:73:48:f2:
                    07:8b:15:1a:65:20:fd:32:84:58:fe:73:92:b1:d8:
                    a2:fa:da:32:2f:db:5d:f0:23:92:04:1b:16:a5:70:
                    a0:2e:18:7f:4c:7c:4b:b1:ba:39:9d:15:96:13:12:
                    bb:10:94:aa:b3:81:3d:a0:da:7b:79:09:9d:85:c6:
                    47:13:d5:4f:de:57:f4:04:4a:c2:06:e6:32:ed:c2:
                    2f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:40:5C:9D:03:7F:17:93:B7:C5:4F:AC:2A:F3:7D:AF:98:FF:8E:12
            X509v3 Authority Key Identifier:
                keyid:1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:25:61:32:e5:fe:f0:84:be:0f:f3:0d:e4:3e:44:25:5e:04:
         cf:5f:64:89:84:63:19:01:74:cb:fa:22:2c:1e:f4:3c:36:61:
         05:88:a1:b6:ea:59:8c:0f:ba:72:a0:7a:be:56:b1:54:fc:6f:
         37:2b:d8:d3:68:76:f7:89:01:89:08:27:8f:c2:e8:f7:39:e9:
         62:3b:8e:9b:8c:56:71:75:36:27:99:ab:d3:6f:f4:47:f2:f1:
         ef:ba:7d:e8:67:d9:6b:f7:42:9c:d5:25:75:34:f2:21:2b:57:
         8f:15:a0:20:69:f9:7f:f5:84:59:05:10:da:2b:91:0a:81:dd:
         ab:60:e1:56:0d:bc:50:5f:b0:fa:89:2e:59:ad:6f:99:27:7d:
         c5:f7:da:f4:a7:76:ce:7e:a7:ea:c6:79:a0:f1:21:c7:6b:be:
         9a:f8:fa:b8:1d:36:2e:9f:41:33:5a:1f:28:93:43:d0:85:2c:
         6e:89:19:54:f9:22:23:97:f3:34:be:79:37:94:e2:74:03:6d:
         8a:a7:af:c5:e7:4a:4f:b3:4c:48:ea:ce:6e:d7:54:77:5d:b5:
         2a:75:41:9d:97:96:f6:ca:f1:66:c1:14:c5:e9:59:c8:31:7b:
         15:0d:89:3c:b3:3b:0c:6c:35:c0:5d:6a:f6:9c:7d:bb:45:bb:
         ce:a5:59:2d
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUceeTYLg8yRtHoLezLUJhOtDV8QUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI4MDQ4NTMxQ0ZFRDI1REVERTRFRjkzQ0JFRUJEMzdB
MDA1M0M3OTAeFw0yNTA4MDQxNTI2NTZaFw0yNTA4MDUxOTA1NTZaMDMxMTAvBgNV
BAMTKDRDNDA1QzlEMDM3RjE3OTNCN0M1NEZBQzJBRjM3REFGOThGRjhFMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJk56CyVLXGWUQV0KojGh9YGCn
yT7toLpYXQseW72NzM2358arkJunMNljgvPiBoXveGfDpBTC3MhbPGJTthLy0zDb
rBceVxvWHkM2R7XN8yuYK2UjdrirU1rrgJ9F4WwYDM5NemHEA49KMiwzC7bhqJdH
s+NPa0DLW/BAyzauoguLssrV2lAmiqnX77aaxiaNB36L/2O43mLrf4r/tfuBymUw
HGPnvkmE2ifLx0ZhCHNI8geLFRplIP0yhFj+c5Kx2KL62jIv213wI5IEGxalcKAu
GH9MfEuxujmdFZYTErsQlKqzgT2g2nt5CZ2FxkcT1U/eV/QESsIG5jLtwi8dAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUTEBcnQN/F5O3xU+sKvN9r5j/jhIwHwYDVR0j
BBgwFoAUG4BIUxz+0l3t5O+Ty+69N6AFPHkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzZmZDRlYTEtYTI2Ni00ZGVhLWI0OGEtMTVkYTM1NDUy
MTA5LzIvMUI4MDQ4NTMxQ0ZFRDI1REVERTRFRjkzQ0JFRUJEMzdBMDA1M0M3OS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xQjgwNDg1MzFDRkVEMjVERURFNEVGOTND
QkVFQkQzN0EwMDUzQzc5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2M2ZmQ0ZWExLWEyNjYtNGRlYS1iNDhhLTE1ZGEzNTQ1MjEwOS8yLzFCODA0ODUz
MUNGRUQyNURFREU0RUY5M0NCRUVCRDM3QTAwNTNDNzkubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA1JWEy
5f7whL4P8w3kPkQlXgTPX2SJhGMZAXTL+iIsHvQ8NmEFiKG26lmMD7pyoHq+VrFU
/G83K9jTaHb3iQGJCCePwuj3OeliO46bjFZxdTYnmavTb/RH8vHvun3oZ9lr90Kc
1SV1NPIhK1ePFaAgafl/9YRZBRDaK5EKgd2rYOFWDbxQX7D6iS5ZrW+ZJ33F99r0
p3bOfqfqxnmg8SHHa76a+Pq4HTYun0EzWh8ok0PQhSxuiRlU+SIjl/M0vnk3lOJ0
A22Kp6/F50pPs0xI6s5u11R3XbUqdUGdl5b2yvFmwRTF6VnIMXsVDYk8szsMbDXA
XWr2nH27RbvOpVkt
-----END CERTIFICATE-----
Generated at Tue Aug 5 08:16:36 2025 by rpki-client