Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
File:                     CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json)
Hash identifier:          qChV3qDu6e3QPha6yhJgDT9owRHtXEgdbbd6eExTEsw=
Subject key identifier:   C6:46:6E:36:6F:4D:7A:56:5C:D5:95:CF:69:8F:62:FC:6A:C4:7B:AA
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Certificate issuer:       /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial:       487C91B4445F80B36A0816BD903592BD648E7687
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
Manifest number:          04B1
Signing time:             Fri 13 Jun 2025 18:07:49 +0000
Manifest this update:     Fri 13 Jun 2025 18:02:49 +0000
Manifest next update:     Sat 14 Jun 2025 19:57:49 +0000
Files and hashes:         1: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: UYRhWU2YtAQySXQJqSHhc8PkHnSqANYorHfiKIAiPmA=)
                          2: 3134362e31392e32322e302f32342d3234203d3e20313533303538.roa (hash: 2SLKnEVPZMy3usNHsHt5Ch/LNVXs09hZIVJwRKFQFr4=)
                          3: 322e35382e38372e302f32342d3234203d3e20313532363732.roa (hash: +rWzK8c3I0mUlyc4CB5sYOxWVJDWlQhpAcNTPOGyP7Q=)
                          4: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: abwJb2MhmDIeE8Juz22gjWpNyhBkEz4pOyEWxjHyUjY=)
                          5: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: aPdRk0yj6WHAWMnGbb2l+kFCRQlNzfB9p5fiHofDu7s=)
                          6: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: /ccO/PHW3+UCENLL/402ef3ih83C4VxuVWOsTM4kxcY=)
                          7: 322e35382e38362e302f32342d3234203d3e20313432313131.roa (hash: 7SLtdrOwA2eFb8LT7xwxSGFdwIFFw8tyKAggL/zou9U=)
                          8: 38392e3130372e392e302f32342d3234203d3e20313335343032.roa (hash: CF1o19b2G6YoxRL+aWvNU/mAV5Rfml4vxNpjr2wCa6Y=)
                          9: 36322e3132322e3138362e302f32342d3234203d3e203631333137.roa (hash: VUIjdEczLAKkO/RvceFD0qOM2mE5giUZbHDkmK+A23o=)
                          10: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: U1S3You+fAZhVhvcdrRdWu8kGCzRG+R0tCv8DlClNys=)
                          11: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: DwyMTECLZLlRq4hX5aEaISadvCNFurefZUnuOjs+FiM=)
                          12: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: 5DUJVA+pSWGfl0obwZfoWi9lZoQLdECnA4H9VJT+xbw=)
                          13: 322e35382e38372e302f32342d3234203d3e203633303233.roa (hash: WbpHdVV0xVpCwUnLgF8nsd0yyKBCVPm0rur/cIPX9FI=)
                          14: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: gstSQe8hViowEjQTTf4SRPbSc3NVx6iubnx1NRq3ZX0=)
                          15: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: 4PxoYzD3CaAxIFD1zVCjS0SIlEMOZydpEKyI1cyYk28=)
                          16: 3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa (hash: bpy3XEt/Glb0ctRVcD/5DBdI9ndCLAP4MyfQv0tMcPQ=)
                          17: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: M0Bu6CLDPFxg3KYMEJy4xB3uyzQGHvj9eJ5j3Kf1CaE=)
                          18: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: v1QUuec4IlaRWF8qnXoGfrjTuKu4oRihpEuFp0L+VI8=)
                          19: 34352e36362e3134382e302f32342d3234203d3e203631333137.roa (hash: 9x1QRSqxq7oLu3gp885IDU4m85ilCP4ZqtuwIJ3/i80=)
                          20: 322e35382e38352e302f32342d3234203d3e203437343336.roa (hash: hAZ5kWpNRMunR/vi9XFn9LjO1XL5Oe8W5ce8D+wt5fM=)
                          21: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: lhD2AirLJKoA1byijcbKW+catIiIM5AuDHLdpKXiAzA=)
                          22: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: 5EJNV4UhdWOuwnTNcgbmbjrtx0zc2Gwd0NznlniRrK0=)
                          23: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: Q3PPUlB/JvHRLRIa7IieyrUl/m1wHR8wutqNN0xNel0=)
                          24: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: Fnjx+RFd66qdmTcd1PG8dLz2onNSyt8IxXY7q3Iavok=)
                          25: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: +0+BMKRTtfETBsNhFuZJ58IeHPeEeC5XeLygoAqbVag=)
                          26: 322e35382e38372e302f32342d3234203d3e20313432313131.roa (hash: kUgTE2a4CKsPHl9bLrfZ/Gta+XZ5VP70TULFsMrpKIE=)
                          27: 34352e31332e3135302e302f32342d3234203d3e20383334.roa (hash: bs6oQRpsOynYG4VywnxScHIvv6AZiyg/KXJnkS+Rmyg=)
                          28: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: HkphqP9od5I6cgosV1wv4ZV0YjQA96l2cTfDfo5nVNc=)
                          29: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: 3xKezHtI+fBhKmdU9ku1wV8BXxr20U7aYSfVPGdTqek=)
                          30: 34352e382e3137332e302f32342d3234203d3e20323135303531.roa (hash: KTke8ZWqVLA3ANHJ800vvcDHEpQ20KNFTJcuTxVUvFI=)
                          31: 322e35382e38362e302f32342d3234203d3e20313532363732.roa (hash: SnLw+il3E4ShagMIZ3xAs3PPoZVCPzSv5KXOpyFHA+8=)
                          32: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: gXjyGjokR9/5Y0gpVJm8KauiuSUQ/ZzKTh6iqaAn5cA=)
                          33: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: 4UgfT6p/2Q50B5wnsVKN4mv/hFd7RZLIZ15wgnKLY7k=)
                          34: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: Ro1lpTz9rpOFRcpKRxfuZnm3EW/PVF8k4xUf6rTgwW0=)
                          35: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: gPOJ5OYy4C3HcRMZFW4SHF49vn1yyv2a5aCn7ZHuj8I=)
                          36: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: zHC88T/k2yERlRpPUSJd+i9oPxlBG0BZSsU2UENS6jw=)
                          37: 3134362e31392e3231352e302f32342d3234203d3e203432383331.roa (hash: iRYq59bmQokDL09C0IXxdPyvoOhAH6U1C6tDW9/0QSs=)
                          38: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: wvxwg3g3XtQ4pMd/572fd2P39j1bNippUPP9CSVWVAU=)
                          39: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: siRUc9UrYUtGtst8xmTfZXX5ky0DyjQ9X9pDZzjH32c=)
                          40: 3231322e32342e3132372e302f32342d3234203d3e203331383938.roa (hash: mRDnXMKuJaWwbQD+oeFODHhpxAepn6qdnI95rnFVJYU=)
                          41: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: /BJwUN9ogW9gUI5fEpq5TqdItx+gr05E4PzR5YVIKUQ=)
                          42: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: SSud8t3KKHalWdE+mUUMbvPhl3XLTRW/1sSDsjx9Cpk=)
                          43: 3134362e31392e35332e302f32342d3234203d3e203633303233.roa (hash: lkEVkKc4eXSY3QZhzmP5cXAKGT9cvIlC4Q0AKtEHATE=)
                          44: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: 6RpkFGUytBbpPYpiYeQU8RLNy0XHMLVUHEtirH/7vUw=)
                          45: 38332e3133382e35302e302f32342d3234203d3e20333936303236.roa (hash: ROshz8droRWJVd4rm2DnnBWseQFkJrKJ50c2V6tyBz0=)
                          46: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: WkX/VhOIB2Xh55Xo8/0X7WB7DxjTEctJTPIyu/NmXnQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 19:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7c:91:b4:44:5f:80:b3:6a:08:16:bd:90:35:92:bd:64:8e:76:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
        Validity
            Not Before: Jun 13 18:02:49 2025 GMT
            Not After : Jun 14 19:57:49 2025 GMT
        Subject: CN=C6466E366F4D7A565CD595CF698F62FC6AC47BAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cb:a0:38:2c:2f:7b:df:f8:19:6c:ce:d2:2c:
                    3e:e9:b6:62:57:18:ba:bd:32:fa:60:6b:77:40:a8:
                    f5:a7:00:9d:13:a4:cb:ca:c0:4f:a3:94:f0:37:06:
                    ce:20:70:f5:3e:fb:49:e9:67:35:9a:13:03:59:ff:
                    44:a2:73:25:e2:6b:07:a7:08:e9:69:6b:d6:e9:95:
                    7c:8c:fa:89:6a:d9:c8:a7:9e:4a:3f:6e:42:eb:49:
                    2f:0f:0f:42:c7:5e:ed:d0:9c:8c:af:89:6a:75:38:
                    6c:1e:3f:f8:eb:af:e9:f0:8a:ca:19:a1:23:9a:e7:
                    37:9e:ef:f8:51:37:db:93:15:9d:3f:2a:2a:5f:7e:
                    6d:a6:c9:b0:c5:7d:68:55:50:8b:95:eb:8a:0f:d6:
                    da:6b:7d:78:20:cb:43:b9:25:e7:bb:66:62:c1:8b:
                    9c:f8:0e:00:45:09:37:c1:13:c6:e8:70:af:fd:f1:
                    ee:6b:ed:3a:ba:26:05:6b:9c:3b:bc:87:bb:b5:79:
                    4d:22:b9:80:96:7f:a1:a0:cd:3b:dc:ab:63:ee:7e:
                    d9:e1:47:68:2e:16:15:c4:e6:70:6e:42:95:6e:48:
                    21:01:8f:70:da:2f:1f:ae:5f:c0:b4:ef:7c:48:22:
                    87:5d:51:4c:2f:1e:a0:df:b8:39:8d:44:91:4c:22:
                    03:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:46:6E:36:6F:4D:7A:56:5C:D5:95:CF:69:8F:62:FC:6A:C4:7B:AA
            X509v3 Authority Key Identifier:
                keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c9:9e:01:3d:fd:f5:05:05:e4:2c:b0:76:ed:64:6b:b4:8c:
         78:4c:d1:78:9b:0c:e1:53:51:e1:d6:5e:60:bf:d2:a5:1f:20:
         f9:e1:fd:72:26:df:6f:eb:4a:fa:ba:b9:be:91:b5:70:b2:af:
         e3:91:31:b3:c8:fb:40:3f:52:33:c9:97:0c:31:c7:59:b6:75:
         98:ec:82:b7:bb:35:ef:e5:84:b8:34:fc:f0:06:cd:c5:cc:84:
         43:80:01:60:8e:3a:7e:44:0d:11:04:3b:68:8d:65:dd:4f:05:
         fe:ec:a2:ec:05:6d:a8:65:9e:a1:df:74:e7:c5:15:78:8b:b0:
         b0:60:3e:51:b3:58:df:6a:28:fc:2a:b3:13:ea:3f:11:bc:97:
         86:7a:69:9f:b0:1d:c8:f6:4d:94:cf:d8:4d:58:55:65:61:34:
         f8:aa:bb:ba:53:5c:1b:7e:73:47:33:4f:0c:94:8b:8c:8e:af:
         9c:7a:1b:c9:e2:4b:5c:a1:1e:87:93:d3:dc:db:35:b5:94:7a:
         cf:82:c4:c6:9a:f3:04:3b:36:64:b9:64:d8:3c:cb:39:ce:26:
         1f:c5:54:7a:42:11:e5:7f:f5:cf:34:b6:11:a0:c3:b0:4b:13:
         e3:15:e5:00:07:8f:4e:0c:36:88:a2:49:e2:4f:50:6d:cc:bb:
         20:94:ab:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:01:35 2025 by rpki-client