Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
File:                     4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json)
Hash identifier:          jxki1NKjxGqV/u759JOmsK5aunCYClCxI52dE9387do=
Subject key identifier:   FB:94:75:1F:F4:F4:60:E8:ED:00:08:EC:D1:9C:C9:2D:1A:42:AB:FD
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Certificate issuer:       /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial:       4EF6406A3A69366E0F50072A9A47A319D1D6270D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
Manifest number:          032E
Signing time:             Tue 05 Aug 2025 23:42:21 +0000
Manifest this update:     Tue 05 Aug 2025 23:37:21 +0000
Manifest next update:     Thu 07 Aug 2025 03:34:21 +0000
Files and hashes:         1: 3138352e31332e3232372e302f32342d3234203d3e203533333536.roa (hash: fyjNZl2BnH5gWmJXj7IkwC9hLUY6iDMpaWQ6H8Zs07M=)
                          2: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: JO9eMRAwPS+hZf1UF8eYFlm1nYrsRkC7Oj1Lhed/bAU=)
                          3: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: 9QDAlicDZU2dKA/slyHao02LhaPY7/2iCnESN6BbiqA=)
                          4: 3138352e31332e3232352e302f32342d3234203d3e203631333137.roa (hash: 8TzKoFnFzYaSWN5mBXGHVTu7YevWpqGi2XUkHCPKssM=)
                          5: 3135392e3235332e322e302f32342d3234203d3e20323031393439.roa (hash: rMlznZEKjgK14Dq61AY4g7iAg2BKRbr2SN8fW4K6f5M=)
                          6: 3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa (hash: Y4VGjNKxdM1kt8f9/kG9Dub6HzXbG7OXpVqySki/RW4=)
                          7: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: cKnNLC66X19KWTLeS9BLlyG6jkzxqkdJwZjUWCrZPHc=)
                          8: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: uV5gP669aq0NtuCXuZBm6wWsNYwP/024H/522nPjCx8=)
                          9: 3231372e32382e3133382e302f32342d3234203d3e20323039393736.roa (hash: oyOFvRhi/TPEOopsZuEaDpEux2304igP8lMcDVdyDmE=)
                          10: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: ium02BtB+GfbIHn2YGUt7i7of/NJnXnez2EEtYL+duE=)
                          11: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: kbUfx2g7/W6xr6BcRBqigrahrWSKqlZaZ80tT5+SQUk=)
                          12: 3135392e3235332e312e302f32342d3234203d3e20383334.roa (hash: +Cgri0dz3lCclo0MuT04LNn4FtNZlpiIq1+Gu2V5CA8=)
                          13: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: BBtDiVH6ipkIX53iiQRjvNqx8tbYlJvtD8VMOI40qtE=)
                          14: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: 8/3XzRXXjmYpSthB/PqRmvioB+R4a98BuFhtWRNYmtk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 03:34:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f6:40:6a:3a:69:36:6e:0f:50:07:2a:9a:47:a3:19:d1:d6:27:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
        Validity
            Not Before: Aug  5 23:37:21 2025 GMT
            Not After : Aug  7 03:34:21 2025 GMT
        Subject: CN=FB94751FF4F460E8ED0008ECD19CC92D1A42ABFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:77:c7:79:b1:79:e6:35:af:cd:24:65:85:8d:
                    d8:4f:3b:ac:77:7b:fb:a6:b5:41:2e:53:dc:56:f0:
                    21:92:75:41:47:24:cb:6e:81:a3:ef:58:c6:b9:02:
                    6f:3c:00:89:1f:48:a7:c5:d6:9c:8d:25:ae:3e:68:
                    fb:d5:32:f0:8e:53:cc:63:61:58:b7:60:8a:2d:9d:
                    21:97:b5:75:52:ca:8d:92:b2:94:00:e9:4c:71:13:
                    8a:09:40:1e:b6:fa:e6:fa:62:fe:22:c9:62:c3:fe:
                    d8:75:75:80:57:2e:f4:bc:29:da:12:80:bc:08:43:
                    8f:21:20:20:83:fd:6d:3f:fc:e1:ed:5d:40:83:fa:
                    d4:07:d3:78:41:19:13:9f:5e:50:da:02:aa:4f:2e:
                    1e:7b:3c:5c:1b:2a:1e:e1:af:74:81:c8:db:07:6e:
                    bc:fc:7d:f1:40:ab:e0:49:66:4c:8f:10:9d:67:a7:
                    7c:84:ea:4b:df:43:ec:8c:89:3e:8c:ec:42:7b:93:
                    f0:bd:04:00:53:07:29:b7:09:76:18:98:b2:a0:e9:
                    3c:4d:5a:f8:6c:8a:d6:42:b1:e4:8b:7c:b8:df:18:
                    2e:01:85:bf:a9:66:fd:db:09:3b:2c:b1:8b:26:32:
                    23:7e:62:8f:44:b5:98:cc:43:74:28:71:bb:67:a4:
                    c5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:94:75:1F:F4:F4:60:E8:ED:00:08:EC:D1:9C:C9:2D:1A:42:AB:FD
            X509v3 Authority Key Identifier:
                keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d3:da:97:23:b4:33:7c:ba:30:61:d7:54:53:60:d0:d5:cb:
         0b:27:48:c5:d3:ad:ea:72:8b:a9:ef:af:45:df:18:c5:3e:71:
         b7:f1:b4:32:cb:da:78:8e:8d:8f:ec:84:68:56:30:c7:e8:56:
         0e:a0:7e:4d:46:1c:b2:43:eb:72:cf:af:52:cd:2c:9c:ec:98:
         b2:a6:4a:e8:1d:cf:a8:b0:d3:58:85:ce:b8:0a:ae:52:2f:01:
         6e:32:58:e3:1a:0e:dd:ac:6b:09:5a:ae:7a:5e:ca:f8:7d:8b:
         3c:63:29:38:66:c1:bf:83:88:75:4e:67:e6:6f:7b:94:bb:48:
         c2:50:4c:cc:12:cf:2b:bf:6f:7a:1a:29:08:ba:9b:5d:3d:37:
         db:84:f8:ca:27:e4:3f:66:b6:09:4b:9c:89:2b:45:dc:6b:62:
         8f:a8:39:dd:7c:89:6f:06:4e:03:d3:4d:fd:17:17:f2:19:35:
         95:9d:8b:8d:f8:5a:e3:56:5a:65:85:f1:c4:79:b8:5e:8e:d2:
         f8:bc:ad:4f:15:17:8f:b2:55:34:62:40:a7:70:80:9f:c7:9d:
         4a:bd:bd:9c:6c:9a:a3:16:ac:bb:f4:f2:35:0d:91:a6:15:a8:
         51:2b:3b:13:ce:3d:aa:b7:ed:dc:7b:75:51:97:b3:5b:a3:a6:
         52:f7:ad:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:28:01 2025 by rpki-client