Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft
File:                     75A838E02C61800F73D3019DE0A51F567B64BC0E.mft (raw, json)
Hash identifier:          Rp9bllf48abCDWD3TrwTBjia4Ew400E/L6zOfQKU18I=
Subject key identifier:   F2:3F:BC:A0:F6:13:F7:5A:AB:91:1C:15:66:9F:8C:A7:7A:75:55:A6
Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
Certificate issuer:       /CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Certificate serial:       32BC0457AD86320085CED518997F2A1EDEF09B8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft
Manifest number:          44
Signing time:             Wed 05 Nov 2025 07:56:57 +0000
Manifest this update:     Wed 05 Nov 2025 07:51:57 +0000
Manifest next update:     Thu 06 Nov 2025 08:46:57 +0000
Files and hashes:         1: 326130663a316363353a3730303a3a2f34302d3438203d3e20323034303731.roa (hash: sV0yETwTmIXrePHZAXDdmddQH9Qkwv/w6ZmZ0C48Cxg=)
                          2: 326130663a316363353a3830303a3a2f34302d3438203d3e20313530323839.roa (hash: 48lbv5iKKHw3/X1Z8uTS0XvIGI/0fCxnRa+tKbLLn1g=)
                          3: AS44324.asa (hash: G7vPN3CliC53tqiTYNunmYCXaPCEPgIMK6mKAwpMfm8=)
                          4: 75A838E02C61800F73D3019DE0A51F567B64BC0E.crl (hash: NaWUV7mWO+5j2THJsa0chQ44YErE46kLHziDEQ4DldY=)
                          5: AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer (hash: E3ySvizPdaZ0ur8D42buEVT82HdPc6JhqaWOeLvQtOI=)
                          6: 326130663a316363353a34303a3a2f34342d3438203d3e20323131353735.roa (hash: QpwwdAZOOs5BUruAxr/jY+OnAcO4g9v4dc0VJjrLR6o=)
                          7: 326130663a316363353a6230303a3a2f34302d3438203d3e20323134353735.roa (hash: o+zMczxDH5k0bxLKjGFdyPf4XREu2E6kpBmBhZN2RNk=)
                          8: AS214720.asa (hash: hnP8GbqTWKybeF2t8CLvmja+ltaRCzJDrYHHLB8PYL8=)
                          9: 326130663a316363353a32303a3a2f34342d3434203d3e20323034353138.roa (hash: eAkdc9AT/MKr5w4W1aDuTVAZbL0jOTsmTOs/Bc2Bw0Y=)
                          10: 326130663a316363303a3a2f33322d3438203d3e203434333234.roa (hash: f8Mf78IBN2TfGVFDjMSxAD/+Qj9bKMZ/6HBqgvxyK28=)
                          11: 326130663a316363353a6130303a3a2f34302d3438203d3e20313938323636.roa (hash: mBN7/JgXjckTnXUb74kNk/0ntzDmoFMenDBqet84Vfg=)
                          12: 326130663a316363353a6530303a3a2f34302d3438203d3e20323034353339.roa (hash: egFgP8yYaSjaS5VDE5+uLtoXIKDL2ma41MOdLca3pro=)
                          13: 326130663a316363353a6430303a3a2f34302d3438203d3e20323034323434.roa (hash: ggBgH1kr0FT9cl1tGFXLNpszCDlLuRkSR6UN51pbBxw=)
                          14: 326130663a316363353a31303a3a2f34342d3438203d3e20313533333736.roa (hash: nbwRx9WqOhyBtRMERDbvSdUK0ttelKjtK9W21b7svLM=)
                          15: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (hash: iQmIjSS34MBH0s/+nSwsAMtLHiibwoN+yHne70yG4xY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:bc:04:57:ad:86:32:00:85:ce:d5:18:99:7f:2a:1e:de:f0:9b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e
        Validity
            Not Before: Nov  5 07:51:57 2025 GMT
            Not After : Nov  6 08:46:57 2025 GMT
        Subject: CN=F23FBCA0F613F75AAB911C15669F8CA77A7555A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7c:b6:6c:92:fa:27:c6:42:55:96:db:89:40:
                    e5:52:7c:0e:08:a7:20:4f:62:c5:87:9a:fc:9a:4a:
                    d0:b6:17:5a:b2:33:12:e3:ca:7b:fc:42:3f:22:22:
                    3a:0b:31:10:ab:d8:ac:ab:58:9e:bb:35:af:2a:32:
                    b1:37:79:32:c9:57:ad:e0:ca:e6:ea:0d:21:93:89:
                    07:1e:ed:b1:bf:76:99:73:f2:29:28:cb:d1:02:d0:
                    4c:e9:6d:38:0a:f2:e1:9d:0c:13:0b:57:26:dd:e9:
                    5d:2e:9e:10:ff:c3:56:b8:38:bf:a0:ed:3f:b5:f5:
                    ad:a2:51:6b:68:7f:b0:2a:94:7e:e7:30:e1:37:c5:
                    7c:f1:e8:7b:56:91:3d:6a:56:0f:b0:28:9e:b6:2f:
                    0c:6d:49:ef:ab:4c:82:98:92:7d:34:5f:4e:79:fb:
                    53:b3:10:dd:be:4f:8f:e0:7c:ed:b2:b9:0f:a6:ab:
                    6f:d8:50:14:55:a7:9f:df:be:8d:81:64:7f:e7:df:
                    b6:98:d9:5b:da:dd:ef:6d:75:16:8d:a9:34:83:c4:
                    31:6f:b7:6d:de:56:99:9d:b8:1a:86:6f:99:11:b6:
                    3c:4a:62:ec:87:43:71:06:40:fb:f9:72:d1:36:83:
                    3d:07:2f:8d:12:45:66:92:b7:bd:ed:f7:f2:31:b1:
                    a2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3F:BC:A0:F6:13:F7:5A:AB:91:1C:15:66:9F:8C:A7:7A:75:55:A6
            X509v3 Authority Key Identifier:
                keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:8d:69:1f:7f:12:a5:e7:2c:19:f3:fe:6d:ef:62:8a:16:8c:
         6e:b3:e4:78:23:8d:37:6e:66:ed:67:da:44:c4:62:36:9a:68:
         c0:15:08:ab:d1:ac:c4:8f:f8:9f:42:c2:5e:ba:7f:6b:08:9a:
         b2:72:f3:f3:88:c2:3c:48:a5:08:80:8a:f2:cb:81:e2:4b:ca:
         e6:1b:d1:57:c8:9a:10:6e:de:ee:c5:1d:8b:8e:bd:01:69:bc:
         4d:ea:8b:6c:57:16:f1:2b:aa:c6:cd:33:de:4d:9d:05:56:cb:
         59:44:74:26:e5:82:07:18:73:e1:a8:2b:a1:08:67:a7:98:d3:
         d8:c9:ef:07:62:ae:7b:b5:dc:f1:53:0b:e1:2e:01:22:75:6a:
         0d:77:94:f3:b5:24:46:5a:4e:c4:7c:c1:3b:a5:55:0f:00:98:
         6d:83:32:e9:cf:fb:d0:27:a9:5e:dc:83:d6:18:32:a1:47:38:
         c5:7e:3a:93:bc:09:7c:cf:0e:d3:d6:00:d4:2b:39:1f:bb:99:
         90:d0:56:4c:94:c4:fb:cb:7c:8e:6b:4e:34:e4:16:1c:b0:6f:
         f6:93:34:46:11:ab:56:16:9a:fe:09:2a:27:26:ea:7c:58:e3:
         1e:39:ce:6c:5d:3d:f0:71:e5:6e:7c:af:4f:60:d1:e3:e2:b1:
         c9:48:5f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:31:36 2025 by rpki-client