Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft
File:                     DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft (raw, json)
Hash identifier:          oz0fnLO0D0v4T/zJggrPXt9kfuBhprL8u08V1JlHipw=
Subject key identifier:   D1:EA:2E:20:DE:C2:3E:A2:E0:BA:9D:F2:22:D2:09:4E:3F:BE:E7:24
Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
Certificate issuer:       /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Certificate serial:       047BF7C32704B3569984B35082FC68089360D17C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft
Manifest number:          41
Signing time:             Tue 04 Nov 2025 15:00:28 +0000
Manifest this update:     Tue 04 Nov 2025 14:55:28 +0000
Manifest next update:     Wed 05 Nov 2025 16:40:28 +0000
Files and hashes:         1: 323630323a663932613a613437313a3a2f34382d3438203d3e20323131373239.roa (hash: YvpJK6nWV+rrvxxMyLyhWpdmUtaTAqqDGbtveQN/mgw=)
                          2: 323630323a663932613a6330303a3a2f33382d3438203d3e203430393239.roa (hash: WAEwY9n9szHi7Kkm4pyIXqQdzMe1DPfR5aylFbxqcm0=)
                          3: 3134392e3131322e3131372e302f32342d3234203d3e20313533333731.roa (hash: dDJtJKKq70B1Vvrt2gSO8360QywtnG62buElXygcB9U=)
                          4: 323630323a663932613a613437393a3a2f34382d3438203d3e20323037353239.roa (hash: avce3NViBRqstlcRVSZNR/D9S0G0l1args9FWdl6sHM=)
                          5: 323630323a663932613a613437613a3a2f34382d3438203d3e20323136303536.roa (hash: 7Vc50SzPzT8ObUoABToUDthH08et+z87Gi27SG62dw8=)
                          6: AS40929.asa (hash: WS91vqex457/OWG+vclVk6gVqkoxbGnIoGFk8MyYYfM=)
                          7: 323630323a663932613a663030303a3a2f34302d3438203d3e20313430393135.roa (hash: 0MEIUBup3qv1i1SPiI38Hu99JxS/lmJ93WOTGaX/FWA=)
                          8: 323630323a663932613a3a2f33322d3438203d3e203533383038.roa (hash: hSQPQNYtaloGuIBTmiDXNzK85H3WsPwGL3kSwWeFwys=)
                          9: AS198304.asa (hash: q6KSxo7FHxjgdEPhAALk+XGdsVy+0l6tPN3S2nObclE=)
                          10: DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl (hash: Gx6WJbhXD1eEJKdUAO3/TXVLUzxq1SL/xLQ4PGOcIKc=)
                          11: 323630323a663932613a613437383a3a2f34382d3438203d3e20323131353735.roa (hash: GWFj06chKZGucleScz0C7o3A8NGUthJ495skpWCH2b8=)
                          12: 323630323a663932613a313331343a3a2f34382d3438203d3e20323034353138.roa (hash: koHJDDDFT0xYjdI8D+a7kBimNIpjMm1+OQcUfCWMQEc=)
                          13: 323630323a663932613a613437653a3a2f34382d3438203d3e20313530323839.roa (hash: HJhbeBIyN7j+cfMcORgmlgmT0q4RK+5k+fM+/J3jIAM=)
                          14: 32332e3137352e32352e302f32342d3234203d3e20313533333731.roa (hash: gkKU56sFQRHTJGFrC5nqutTByTpB7lh/CeQus3Lf6Zs=)
                          15: 323630323a663932613a653030303a3a2f34302d3438203d3e20323033323336.roa (hash: IBkuk87LMV+FnqYEF6hfLVWmE1OPlroVpgH2GTCd25A=)
                          16: 323630323a663932613a613437623a3a2f34382d3438203d3e20313531313934.roa (hash: fH+eAUk8TEes+2Iai8KdY14xxwWZr2HwK76wJzo2G/g=)
                          17: 32332e3137352e32342e302f32342d3234203d3e20343031343433.roa (hash: 77/SVUxdFmtfk76nEs5lTe/zhQD1RKdzwP9cjrwjB1Q=)
                          18: AS53808.asa (hash: gY02Y4cZ8TFTHoeYyKta5Y/Vo66fDUM2di9F1HBWwig=)
                          19: 323630323a663932613a613030303a3a2f34302d3430203d3e20313938333034.roa (hash: oPCojI7Eue0yt942Ht5P7kSBGUXjdXUyDnyhf4wTdXA=)
                          20: 323630323a663932613a663230303a3a2f34382d3438203d3e203430313135.roa (hash: xB/p4/3fCvd7hS1/dnqM7LuWcD8HfRwy/o0N54fkSrI=)
                          21: 323630323a663932613a613437303a3a2f34382d3438203d3e20323038373534.roa (hash: vr8Z8zerFeHLwPG1Sj5JmKhD36wh/wZg2B1HvzcqjWk=)
                          22: 3230362e3235312e35322e302f32322d3234203d3e203439333034.roa (hash: 9v2QjpDsJPZbBDDpUZr7ydvpM8Cp3G+4wDPcpeGfs24=)
                          23: 323630323a663932613a613437643a3a2f34382d3438203d3e20323130333532.roa (hash: ublW8rFIXq/VF+hK9JDmh7flVrTu2j344XC3SkY9ohg=)
                          24: 323630323a663932613a613437633a3a2f34382d3438203d3e20313938303235.roa (hash: KM2hJz/lncCBvTk0N2kNTxTwRufECPfi71/kGX97DdU=)
                          25: 323630323a663932613a613437343a3a2f34382d3438203d3e20313339333137.roa (hash: E4T48Xa0z2oRpppt0kd+9gM6ocnhmZSsvwpBSiuPpCY=)
                          26: 32332e3137352e32342e302f32342d3234203d3e20313938313030.roa (hash: kr4SYs4DOlxedtPmP6j4qtMqp2fKBamyULuQdJpIcEI=)
                          27: 323630323a663932613a643030303a3a2f34302d3438203d3e20313339323939.roa (hash: LyhvXLMvCzSxljEklDhIR7CEH4oj9WerwVkkCnG/SsQ=)
                          28: 323630323a663932613a613437663a3a2f34382d3438203d3e20343031383335.roa (hash: tXwIuvLfkqRRbrGnj7O8lQ40iRP7EXPDLkgQZ+fgw6o=)
                          29: 32332e3137352e32342e302f32332d3234203d3e203434333234.roa (hash: Ll5vJFutahJkWr4VzOHWGGr69grKSEO2M/wfqdD5M1s=)
                          30: 323630323a663932613a646561303a3a2f34342d3438203d3e20323133363035.roa (hash: S2I7MFxagpC/hWfkw5xbkk1THpqc1oHMahoIddI+A44=)
                          31: 323630323a663932613a653130303a3a2f34342d3438203d3e20313430393135.roa (hash: Rxe81doYcLhSmYGob0lUEF9nPndgWbRjKPZDlpeWJTQ=)
                          32: 323630323a663932613a613437333a3a2f34382d3438203d3e20323134343339.roa (hash: 00cEFDgpVA4UIkTJ20Sbm3J+Mc4bybyoiSZwdDvNsnk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7b:f7:c3:27:04:b3:56:99:84:b3:50:82:fc:68:08:93:60:d1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
        Validity
            Not Before: Nov  4 14:55:28 2025 GMT
            Not After : Nov  5 16:40:28 2025 GMT
        Subject: CN=D1EA2E20DEC23EA2E0BA9DF222D2094E3FBEE724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a8:1c:46:e6:e7:0d:41:ed:bb:0d:4f:e6:a9:
                    f9:1b:ab:d4:9c:df:97:c8:67:42:18:80:2c:0e:99:
                    85:b6:d6:de:e1:9d:3c:ab:89:92:5e:07:fe:a2:b5:
                    9e:9f:d2:75:aa:7c:f9:dd:47:04:8d:f7:36:e5:0c:
                    ae:98:74:f0:e3:c5:26:20:c1:92:b0:76:f8:0c:ec:
                    a5:22:94:0a:6f:54:1b:05:15:ab:fe:de:90:ad:80:
                    44:ad:7e:75:21:51:df:54:df:0e:be:8d:44:fb:07:
                    75:85:ac:02:bb:f4:40:36:4f:ca:75:2d:e1:8e:a8:
                    16:9e:79:b0:e3:39:f3:3c:7f:e8:38:0d:8a:53:9c:
                    38:f6:eb:73:7e:21:93:14:6f:f5:9a:d4:6f:6a:92:
                    ed:83:69:c8:e4:73:72:51:89:34:63:ac:d7:29:5a:
                    c7:59:89:e2:3f:4d:49:f2:e3:64:3d:a2:c7:7a:07:
                    7c:39:93:da:3a:1d:a7:f2:fc:66:8e:06:e5:c3:97:
                    96:90:eb:79:e6:41:1d:8a:46:e5:7d:8e:2d:b2:cc:
                    03:3e:ba:d9:d7:c8:47:af:e1:4b:72:3d:0a:8c:8f:
                    01:84:54:46:94:bd:39:ec:fd:53:c0:93:a7:ac:a9:
                    7d:68:a8:75:91:8c:ed:d3:2c:03:48:df:87:aa:b5:
                    54:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EA:2E:20:DE:C2:3E:A2:E0:BA:9D:F2:22:D2:09:4E:3F:BE:E7:24
            X509v3 Authority Key Identifier:
                keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c1:a9:8b:9f:45:50:d5:98:99:19:62:c9:47:bd:14:1b:f1:
         b9:ae:2a:0d:5d:d6:46:df:a5:d8:82:b5:6a:50:e7:05:6a:28:
         13:1d:1a:d8:ac:60:62:c6:19:2a:27:31:cb:80:89:fc:c2:78:
         95:11:64:46:f0:f2:49:ae:69:a7:ff:02:cd:d8:18:b1:bc:9a:
         45:1e:cd:6e:b1:97:85:71:3e:c1:e2:36:81:32:b8:86:23:c1:
         21:ed:c2:b1:e7:ad:75:c1:17:63:77:8d:c5:3f:60:e4:b4:f2:
         e5:ef:f6:0d:a2:36:1a:81:8d:b1:ce:59:c0:eb:d6:1d:10:ea:
         92:05:94:0f:4a:f9:bc:13:fd:03:6d:fa:ac:3f:ca:e8:38:1e:
         50:10:e2:f2:5b:13:dc:0b:04:c9:7c:09:01:13:d3:1a:60:9e:
         d0:47:6e:6b:60:e9:80:9f:b2:d1:46:65:df:00:97:14:ab:86:
         d2:16:0b:e0:67:ed:5c:8d:4a:7e:a4:49:8f:d7:8e:97:4d:84:
         2e:9d:d2:d2:bc:2e:c1:15:6d:43:96:bd:54:e1:a9:de:db:97:
         67:02:52:55:29:cc:a0:4c:5f:0b:18:25:66:19:85:ea:fd:59:
         37:83:8b:67:33:02:b3:6a:26:4a:56:fc:95:ad:11:a7:a6:e7:
         f0:fa:bc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:23:28 2025 by rpki-client