Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
File:                     2472949B3C234930DBE99B1B5CD5196AB16D151B.mft (raw, json)
Hash identifier:          rOykE6FFuaoNdie/Vs6Iq/xnLh8VLaNJFJO6IKmtD/g=
Subject key identifier:   9E:AC:04:46:3A:57:22:83:F6:32:F6:A9:F2:AD:3A:80:77:60:09:DF
Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
Certificate issuer:       /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Certificate serial:       49B3BC51DCF5BF2F44AF4601480239141C6A9D79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
Manifest number:          025A
Signing time:             Sun 15 Jun 2025 08:18:48 +0000
Manifest this update:     Sun 15 Jun 2025 08:13:48 +0000
Manifest next update:     Mon 16 Jun 2025 11:17:48 +0000
Files and hashes:         1: 323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa (hash: Lmh4khK9jqfGM7AgqtrinnAM2ubStxsQ/YZSUwbqCvU=)
                          2: 32332e3137302e37322e302f32342d3234203d3e203436373636.roa (hash: FghA8Zz7QbzObKv2ia/HqFgnN9W82bmOSCIz6G2zFuE=)
                          3: 2472949B3C234930DBE99B1B5CD5196AB16D151B.crl (hash: OtbDsvp5kBp5Q6QN6J+PdgSYEfn3liaOnJXAGb6U2kU=)
                          4: 323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa (hash: 4IHJsjfC0Zoq18aE2FFzAMYZQpT6YF+Y54OUnxbTiPM=)
                          5: 323630323a663961323a3a2f34382d3438203d3e203436373636.roa (hash: dNvxw0+R2mi2yZ7yZ+PkpHw5t4IMqFyhS0zsCoWaY88=)
                          6: 323630323a663961323a32303a3a2f34382d3438203d3e203436373636.roa (hash: LOHxn0RgwORnxWPoX7PgNpofW2yqHK4ri4vHvhFnLZQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 11:17:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b3:bc:51:dc:f5:bf:2f:44:af:46:01:48:02:39:14:1c:6a:9d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
        Validity
            Not Before: Jun 15 08:13:48 2025 GMT
            Not After : Jun 16 11:17:48 2025 GMT
        Subject: CN=9EAC04463A572283F632F6A9F2AD3A80776009DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5b:5f:3b:2f:8b:94:b7:79:26:27:b1:fa:45:
                    ef:44:05:9b:e1:a6:be:6f:c5:7f:36:ea:0c:39:bc:
                    8c:c5:35:35:c2:a3:29:7e:9a:06:43:db:02:05:9f:
                    f0:c2:31:22:de:40:b0:49:16:81:0e:8a:e9:85:02:
                    40:67:99:c2:df:cc:0a:0d:46:17:aa:68:84:6d:a2:
                    80:b4:aa:25:d7:72:91:c2:69:a2:00:ab:7b:c6:b7:
                    b6:55:1d:d7:80:5a:07:aa:53:90:4c:fa:f9:00:6c:
                    51:cf:d4:55:3e:03:52:38:7e:d2:f7:dd:f8:45:25:
                    4f:97:b0:ad:da:c7:7a:9b:68:fc:c2:09:91:6d:6c:
                    03:8a:75:15:0a:62:e4:f1:f2:cb:c6:df:e0:0a:a9:
                    df:00:27:10:bc:6c:74:21:35:aa:d2:98:18:85:10:
                    54:af:79:45:57:cc:74:b8:c4:14:21:5f:9f:23:0a:
                    10:8e:01:99:f8:69:64:95:36:af:66:64:6f:7b:94:
                    c6:bd:ba:b4:93:97:f8:c7:4b:82:a0:2c:69:3b:b7:
                    4a:d1:2e:87:ff:09:37:12:1e:94:06:13:02:6f:39:
                    41:89:4e:68:cf:8f:83:d7:96:b9:ab:00:1d:38:6e:
                    d7:43:40:7a:fc:86:77:e9:6f:1c:26:9a:ac:d1:bc:
                    9b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AC:04:46:3A:57:22:83:F6:32:F6:A9:F2:AD:3A:80:77:60:09:DF
            X509v3 Authority Key Identifier:
                keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b0:39:46:06:ac:23:1f:5d:75:9d:ef:92:b1:9b:83:56:d7:
         c8:00:b8:02:39:0a:e7:60:9c:df:23:36:cc:9b:2c:9f:0c:6e:
         4a:72:7a:d1:16:d9:93:7a:09:e7:71:13:e3:b8:97:1a:da:19:
         b6:89:8b:56:c8:ba:19:9c:1b:2f:c0:da:3d:72:41:24:89:68:
         7d:f9:16:d6:a2:13:c0:3e:d6:5c:6d:ae:cc:c6:18:91:ed:d3:
         f3:d4:a0:6b:4b:c9:dd:b5:62:b3:44:2f:9a:07:28:4a:c6:e8:
         e6:f9:8b:6f:35:a5:e3:1a:d3:dd:e5:18:db:cc:00:99:db:4c:
         df:a1:22:68:7e:e4:6e:54:c6:89:a1:fa:db:e8:27:3d:0a:22:
         a9:8e:87:9f:39:80:2d:42:2a:30:3a:f7:6d:86:26:76:a4:f8:
         91:c0:db:c5:94:32:ef:2c:b0:a9:47:cb:bd:d4:6f:34:b5:6d:
         ab:32:e4:81:c9:a1:54:bf:c2:f0:3c:d4:d3:02:e2:dd:64:e7:
         3e:e8:e0:98:7e:89:46:3a:83:72:72:f1:a0:9e:fd:e9:8a:dc:
         2e:83:a3:7d:c1:af:5b:93:c8:ed:1e:67:b1:88:4c:0f:ca:b9:
         90:4a:af:72:ac:89:c1:61:80:26:48:8b:3b:eb:d0:60:03:56:
         8f:29:72:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:02:03 2025 by rpki-client