Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
File:                     98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json)
Hash identifier:          lRrYE2VXpCaxjoVAsGsKetcbtg/eiRJoh4PXEixqzgg=
Subject key identifier:   E6:9A:41:E5:3D:25:B9:D5:C0:04:64:99:D1:6C:F4:5E:B6:51:B5:49
Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
Certificate issuer:       /CN=98a87cad5b710890a9528f166f4202393824e6b8
Certificate serial:       41DD8BC8111AF01BA8827C7ACBEBC03BB0063E45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
Manifest number:          03F5
Signing time:             Mon 04 Aug 2025 06:07:49 +0000
Manifest this update:     Mon 04 Aug 2025 06:02:49 +0000
Manifest next update:     Tue 05 Aug 2025 06:45:49 +0000
Files and hashes:         1: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: SY6OvQv9R/Ut8R5yFxdy0RVK/9dKsg8ZwmC3iNS9Rpw=)
                          2: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: Fqs+xGh2wCPoRebx3WWGGz8gG+3wDYrzV+eGaABVra0=)
                          3: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: EEtfGKQPQ42nFzzdsRfixi4zKQ5tTYPEdAQ1iAcmdE4=)
                          4: AS48070.asa (hash: YsK0/rV2BmXeHeRJ0VrNqX7Hbez3e33zUXMrV6bup5Y=)
                          5: 326131313a353730353a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: YvH+3atWqaB4zJsHYK1cEoa4+J3Y8wbDOetaRpGkY9U=)
                          6: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: IiLsd5rWyRAEtPC2BRNztBwgXOWFkCLAq6FHsMnhQxg=)
                          7: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: NDHvIIcUiAk7uX5boyMA8yHxKUGe6BZWK+cptlXNnOA=)
                          8: 326131313a353730333a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: amyhppkunQUKDCiBGMFxQfAHBmd/6ZM1Y2JA6Xv6mjw=)
                          9: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: 242POLRepYH713AUptOGvBkM/JpRNVCsIm5BodQGTyY=)
                          10: 326131313a353730313a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 0SF0WfEKn6tAt+SqtI0zWos8/5DwYGM33/T6SlnO8Oc=)
                          11: 326131313a353730363a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: +GiVUNSbcYm0MXNlVgxa6VflGOlRp9hOfbY/aidYY1U=)
                          12: 326131313a353730323a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: zY7Phzmd75TKCthkmSaY4oyTFaKkCEl/y4pnJz6mHMw=)
                          13: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: Pc4F216M/oD/fxZDUk8HLynWg8D1IQ0ANHs5N2ZC0VQ=)
                          14: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: wQ/YXS5V0WqyAz3I38Grxwtf2vC7Tnq0YU0pMolmNpk=)
                          15: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: S5WIAkzllTXfMiWpREUuucFgM0BSw7Pb5gT995rR5+k=)
                          16: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: ma+wlMqMsb7J0TC2Gy822cEZS57hTDfS/GzCjZsgQ1k=)
                          17: 326131313a353730373a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 11LkJhM5pGNm95iRuza8Ye8pvz7Hby+G2YVPV9KFFMI=)
                          18: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: /8dVa93viKNoM1pCJooeH0rtbsVAVvDJFpjlC3WNZyI=)
                          19: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: 5n8dFHTpCNvK3UUlWRgEe3tRGhb/EpQAe0EZbQ1k2M8=)
                          20: 326131313a353730343a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: e6pNQA8izdBKRkcuzWtfOOmNK456AAkxlNJ6pMTNpsc=)
                          21: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: VIdYFIOIqW5zJ3T1LDGwWjmJ764XjM+ac+86S8Ja5hk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:dd:8b:c8:11:1a:f0:1b:a8:82:7c:7a:cb:eb:c0:3b:b0:06:3e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8
        Validity
            Not Before: Aug  4 06:02:49 2025 GMT
            Not After : Aug  5 06:45:49 2025 GMT
        Subject: CN=E69A41E53D25B9D5C0046499D16CF45EB651B549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:61:29:90:1d:a9:14:a6:18:3e:ec:19:5a:
                    79:0e:88:40:08:13:eb:64:27:e4:e8:52:1d:1b:29:
                    1b:8c:76:31:80:f1:ef:c5:1c:49:98:40:cd:66:25:
                    b2:64:9e:2d:3a:15:5e:78:4d:01:42:2f:b6:49:40:
                    c5:ee:20:d4:ef:58:c2:90:5f:3a:22:85:f8:cc:bd:
                    96:d5:5b:63:52:6b:ad:0a:69:0c:ab:2b:78:1e:1a:
                    0e:65:5c:cd:cc:87:11:09:df:c0:28:82:fb:d7:aa:
                    51:2d:a0:e0:b0:92:97:26:c9:b8:32:c0:4a:99:47:
                    8c:f5:09:83:07:30:ec:0c:bd:b3:6d:06:66:78:11:
                    96:0b:fc:4d:56:18:2a:36:8e:04:1c:63:d0:80:5b:
                    7a:5c:42:66:ce:14:4c:7f:96:b9:6a:51:c6:e8:92:
                    66:db:d0:c6:d2:9c:45:64:61:30:c5:e3:f4:1d:d4:
                    4e:2c:68:65:a1:d0:70:ca:3e:68:2b:45:8c:0f:a4:
                    56:e1:76:50:e2:a5:71:90:80:b6:c3:1d:12:64:14:
                    8d:59:06:39:78:de:4f:ba:7b:31:42:12:5c:17:e7:
                    45:2b:b6:87:e8:88:06:ca:92:4c:9b:8f:d8:44:80:
                    39:f4:fc:86:a2:e4:32:aa:d6:eb:5c:69:3a:e9:50:
                    ec:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9A:41:E5:3D:25:B9:D5:C0:04:64:99:D1:6C:F4:5E:B6:51:B5:49
            X509v3 Authority Key Identifier:
                keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:55:39:f2:16:d4:c2:b1:1d:f3:5f:71:66:4b:e5:d9:28:6c:
         26:7c:65:9e:16:96:20:46:28:d0:71:e8:8a:91:aa:11:3e:de:
         ec:5c:a4:91:98:2d:32:93:f1:95:d9:21:4c:7c:3f:e9:ad:a1:
         81:40:67:c4:2a:ac:90:a3:10:23:5b:86:15:ca:87:dc:94:f4:
         0c:ac:cf:11:4f:1e:a6:3a:aa:8e:8f:d2:24:24:13:a8:e4:bc:
         23:44:b9:48:3e:bf:ae:bc:1c:57:88:80:29:ec:d4:16:67:40:
         68:01:1f:4c:cd:64:c7:93:07:2b:b6:0b:bc:a5:93:d1:9f:88:
         18:fc:cf:44:d3:ec:ad:9b:ed:8f:55:ac:a8:a5:da:36:14:69:
         fa:36:b5:f8:f6:fe:90:36:eb:04:a7:5f:b8:aa:6b:10:0d:83:
         d9:e6:10:e0:08:95:3f:c5:eb:a6:39:e1:b0:50:ea:49:72:77:
         02:36:a4:01:6a:64:a2:ba:5f:1a:d2:8c:13:1e:25:85:24:6e:
         ba:72:56:d8:9f:41:3b:00:17:e7:87:33:78:bf:d3:66:a0:c5:
         2c:42:9f:3c:be:5b:c1:a4:54:37:e1:81:13:d0:58:30:f9:32:
         70:3e:5a:4c:2b:d1:b7:50:96:7b:c9:6b:90:5d:3b:40:a3:f4:
         32:45:93:9f
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUQd2LyBEa8Buognx6y+vAO7AGPkUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz
ODI0ZTZiODAeFw0yNTA4MDQwNjAyNDlaFw0yNTA4MDUwNjQ1NDlaMDMxMTAvBgNV
BAMTKEU2OUE0MUU1M0QyNUI5RDVDMDA0NjQ5OUQxNkNGNDVFQjY1MUI1NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoXWEpkB2pFKYYPuwZWnkOiEAI
E+tkJ+ToUh0bKRuMdjGA8e/FHEmYQM1mJbJkni06FV54TQFCL7ZJQMXuINTvWMKQ
XzoihfjMvZbVW2NSa60KaQyrK3geGg5lXM3MhxEJ38AogvvXqlEtoOCwkpcmybgy
wEqZR4z1CYMHMOwMvbNtBmZ4EZYL/E1WGCo2jgQcY9CAW3pcQmbOFEx/lrlqUcbo
kmbb0MbSnEVkYTDF4/Qd1E4saGWh0HDKPmgrRYwPpFbhdlDipXGQgLbDHRJkFI1Z
Bjl43k+6ezFCElwX50UrtofoiAbKkkybj9hEgDn0/Iai5DKq1utcaTrpUOzzAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU5ppB5T0ludXABGSZ0Wz0XrZRtUkwHwYDVR0j
BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh
NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn
azVyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00
YjFhLTQ2ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC85OEE4N0NBRDVCNzEwODkwQTk1
MjhGMTY2RjQyMDIzOTM4MjRFNkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVU58hbUwrEd819xZkvl
2ShsJnxlnhaWIEYo0HHoipGqET7e7FykkZgtMpPxldkhTHw/6a2hgUBnxCqskKMQ
I1uGFcqH3JT0DKzPEU8epjqqjo/SJCQTqOS8I0S5SD6/rrwcV4iAKezUFmdAaAEf
TM1kx5MHK7YLvKWT0Z+IGPzPRNPsrZvtj1WsqKXaNhRp+ja1+Pb+kDbrBKdfuKpr
EA2D2eYQ4AiVP8XrpjnhsFDqSXJ3AjakAWpkorpfGtKMEx4lhSRuunJW2J9BOwAX
54czeL/TZqDFLEKfPL5bwaRUN+GBE9BYMPkycD5aTCvRt1CWe8lrkF07QKP0MkWT
nw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:49 2025 by rpki-client