Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
File:                     E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft (raw, json)
Hash identifier:          uOcKsIvt4QqRhmZ4QlDFeiqtK8XaAeLXF4/C6JPmiqY=
Subject key identifier:   22:1D:75:BC:60:3A:3E:20:72:7A:62:5C:66:74:A3:1E:AB:47:48:95
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Certificate issuer:       /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial:       6BFD626A19F3D27743FF4C3FB5DBA79CB0B7714F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
Manifest number:          27
Signing time:             Sat 14 Jun 2025 05:12:51 +0000
Manifest this update:     Sat 14 Jun 2025 05:07:51 +0000
Manifest next update:     Sun 15 Jun 2025 07:23:51 +0000
Files and hashes:         1: 34352e3134392e3135322e302f32342d3234203d3e203235313630.roa (hash: F5qAcWfgptgKaaDsmY0iSSOR+nBZv9RYAI/0kq8SYl8=)
                          2: 3138352e3136322e3137362e302f32342d3234203d3e2030.roa (hash: 7nM/cx/azlTw+xx/P6nG5UL7vQ1Rv5+v0RRz+G1eUPQ=)
                          3: 3138352e3136322e3137372e302f32342d3234203d3e203634323637.roa (hash: /1m1oguvqlFAZeE/pimTTtaJVN2H8its6YXMEA9yyH0=)
                          4: 38392e3135302e34392e302f32342d3234203d3e2039333034.roa (hash: q57iXdWw+7j5OH0xE9rwzduA1TqFwwM2jVhXvaojFW4=)
                          5: 3139342e39392e3135362e302f32342d3234203d3e203232343237.roa (hash: rIB6LZlyDY4ccd8aiBOUspQRAkgz2Qkx5QliZapGW3w=)
                          6: 39312e3233312e3132362e302f32342d3234203d3e2035363530.roa (hash: it6kdqtvQIR1fmnyxGg95/2ozlg9ybLYZncNwT8sS4M=)
                          7: 3138352e3136322e3137382e302f32342d3234203d3e2032393134.roa (hash: s1bbd6LyvYQrZ11FtU3Xa/oNq7QSAV2j6DcxJrrwcV0=)
                          8: E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl (hash: 2vjPQJcukCRHzwmRwoxBEKgbosjqajh5divWQjN4M5Y=)
                          9: 3138352e3136322e3137392e302f32342d3234203d3e203132383734.roa (hash: Oev3T5PHjGnxWqjgwbUH88tHYEWPx4hW7vlkYnxUh4c=)
                          10: 39312e3233322e39392e302f32342d3234203d3e20313937353337.roa (hash: G+mgzv7tRhUfmSaRumVwyhbJ8nNvEA0s859L61Ejv18=)
                          11: 3138352e3132332e3135372e302f32342d3234203d3e203539343332.roa (hash: gIsOY/Rt5itSjR6UBfQr0akoBho0OQVg1aF/BeCGDiQ=)
                          12: 34352e3134392e3135332e302f32342d3234203d3e203133333335.roa (hash: oW4WynaArlYMwXoVGq9L68dOfSrJj8wnnWqrszCEjBM=)
                          13: 34352e3134392e3135332e302f32342d3234203d3e20323635393139.roa (hash: kgIiY2hKU4E4tRDz3OnYpx84hUJKrY7sZF8oMbsebok=)
                          14: 34352e3134392e3135342e302f32342d3234203d3e20323135373237.roa (hash: 3YMqsF2qChJzors0dtjmx2U4xGxgGj3DyyPa+NGOfX4=)
                          15: 3138352e3132332e3135392e302f32342d3234203d3e20383334.roa (hash: m5J+zlJVFKKHd9IGbj5hbxR4Cu+5/IeGAEvLM12xDLA=)
                          16: 3138352e3132332e3135382e302f32342d3234203d3e203239383032.roa (hash: TLiGnJOFD2b+z4uS2pKNa+Gc2aYGJ4ZFIaexiybn7wo=)
                          17: 3138352e3132332e3135362e302f32342d3234203d3e203236303432.roa (hash: ynUXE+LDYJH/GYuDiJI+HLAJ3jTXbGgrvxOxfk3f5R0=)
                          18: 3139332e31372e39352e302f32342d3234203d3e2039333034.roa (hash: 9Guine2JQ0PR4yaj3jvnIIIaTUv4lkdQwALSGSbr1I8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:fd:62:6a:19:f3:d2:77:43:ff:4c:3f:b5:db:a7:9c:b0:b7:71:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
        Validity
            Not Before: Jun 14 05:07:51 2025 GMT
            Not After : Jun 15 07:23:51 2025 GMT
        Subject: CN=221D75BC603A3E20727A625C6674A31EAB474895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:24:40:ca:74:b5:a2:cd:91:08:49:6a:01:24:
                    6a:82:33:42:36:01:ed:6f:6d:53:ad:ca:85:ee:95:
                    48:93:75:17:b5:67:f8:c1:6f:a2:bc:1a:f6:4c:86:
                    02:70:91:1c:a1:b1:ac:08:32:3c:7e:d1:b7:12:a7:
                    dd:32:af:25:90:2e:d0:40:59:16:92:54:dd:07:37:
                    49:86:c2:48:79:6b:d1:5a:e8:a0:8b:5c:ce:d9:8b:
                    d3:37:4c:29:19:d5:54:d8:fd:c0:2b:43:98:5c:7a:
                    f1:21:6c:a4:5c:b4:26:86:dc:3e:e3:28:41:c6:e1:
                    9a:af:1c:4d:ff:d3:54:c1:8d:38:83:11:75:4c:fa:
                    e7:2f:33:4f:d5:ee:9b:f2:e0:e8:55:73:21:a0:cf:
                    f3:24:7d:94:71:14:d6:8c:9f:08:f3:d3:57:17:97:
                    8b:2f:27:10:c8:9a:00:e9:2a:6c:f8:da:46:ce:38:
                    f4:39:45:7f:5d:c6:01:00:e9:a6:6e:93:f4:d3:0b:
                    d4:87:9c:1e:49:6d:e3:da:b5:74:85:f7:13:57:bd:
                    81:73:77:c9:c5:6a:2f:12:92:7d:26:8b:c5:9e:a6:
                    9c:f3:48:6a:de:0f:17:b8:71:9f:c3:1d:d1:79:08:
                    fd:12:b2:0a:a5:fb:2d:2b:b8:15:5c:68:90:95:e6:
                    40:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1D:75:BC:60:3A:3E:20:72:7A:62:5C:66:74:A3:1E:AB:47:48:95
            X509v3 Authority Key Identifier:
                keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:84:18:e8:7e:14:9a:bc:00:0a:75:a1:d2:4d:2d:52:ca:ad:
         06:ce:07:5b:23:2a:df:db:99:e3:46:1c:d3:e3:d5:88:59:f3:
         70:b6:6c:aa:ef:f2:0b:4e:8a:38:05:27:f9:8f:fe:9a:07:68:
         89:94:74:6e:e4:be:24:0a:07:92:0b:c4:93:fc:35:c3:ab:9c:
         96:2a:e7:4b:9e:e4:3b:f7:bc:41:1d:e3:5d:1e:88:bf:66:4b:
         76:99:d6:dc:0e:39:ea:d6:6b:8a:6f:71:4c:b5:c3:25:de:ae:
         7b:f5:a2:1a:ad:77:9d:c6:73:d9:c3:38:39:ec:6e:91:33:f7:
         ef:e2:87:18:0a:ad:f7:39:e5:e8:93:56:e8:06:2e:dd:cc:80:
         64:94:aa:4e:09:0c:f7:83:34:9f:1b:39:46:5e:82:d5:b3:9c:
         06:45:ed:f0:3b:4d:fc:1f:74:f2:a2:12:7d:c0:d0:c7:75:d2:
         b9:0a:b6:2e:01:fc:03:79:7c:57:1c:67:09:f2:35:5f:22:32:
         12:b0:11:a4:75:70:4e:b1:1b:45:69:b4:7f:2c:e2:b1:a7:f4:
         0f:08:e6:08:2f:34:05:e7:ec:84:3f:db:f9:e7:89:48:2c:b3:
         73:c5:de:66:16:7d:e0:35:b7:b8:ac:fb:5e:c6:8f:4b:88:98:
         1e:89:ff:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:14:32 2025 by rpki-client