Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
File:                     E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft (raw, json)
Hash identifier:          zMiMJiqHHTmjB4zoI6LYAWjzaB+PdKmCdadz4GMY+5Y=
Subject key identifier:   4D:C8:EB:4D:7C:DC:4E:5A:76:B9:D0:5E:BA:D3:10:EB:F8:DA:55:6A
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Certificate issuer:       /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial:       56E4461C07684CD48AF9A3ACA3E947BD902A8554
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
Manifest number:          F5
Signing time:             Tue 04 Nov 2025 21:12:22 +0000
Manifest this update:     Tue 04 Nov 2025 21:07:22 +0000
Manifest next update:     Wed 05 Nov 2025 23:26:22 +0000
Files and hashes:         1: 3138352e3136322e3137362e302f32342d3234203d3e203537303433.roa (hash: SVrpMsQaq2+Of1pyWLABKDNguVH/um78jdJjsg2PZXk=)
                          2: 34352e3134392e3135332e302f32342d3234203d3e20323635393139.roa (hash: kgIiY2hKU4E4tRDz3OnYpx84hUJKrY7sZF8oMbsebok=)
                          3: 3139342e39392e3135362e302f32342d3234203d3e203232343237.roa (hash: rIB6LZlyDY4ccd8aiBOUspQRAkgz2Qkx5QliZapGW3w=)
                          4: 38392e3135302e34392e302f32342d3234203d3e2039333034.roa (hash: q57iXdWw+7j5OH0xE9rwzduA1TqFwwM2jVhXvaojFW4=)
                          5: E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl (hash: GEYKBWqftenRM2meB5/L57n0eXXqQvVAP65r5mTh7U8=)
                          6: 3138382e39342e3139312e302f32342d3234203d3e2039333034.roa (hash: kHLj0CCSRey0XdhxSgcTxmLdHvnBUVZqQawwENhkgrs=)
                          7: 34352e3134392e3135332e302f32342d3234203d3e203133333335.roa (hash: oW4WynaArlYMwXoVGq9L68dOfSrJj8wnnWqrszCEjBM=)
                          8: 3138352e3132332e3135382e302f32342d3234203d3e203239383032.roa (hash: TLiGnJOFD2b+z4uS2pKNa+Gc2aYGJ4ZFIaexiybn7wo=)
                          9: 3138352e3136322e3137372e302f32342d3234203d3e203634323637.roa (hash: /1m1oguvqlFAZeE/pimTTtaJVN2H8its6YXMEA9yyH0=)
                          10: 39312e3233322e39392e302f32342d3234203d3e20313937353337.roa (hash: G+mgzv7tRhUfmSaRumVwyhbJ8nNvEA0s859L61Ejv18=)
                          11: 3138352e3233342e3130302e302f32342d3234203d3e203335363631.roa (hash: 7IoW8V7sYCxYnK3GpV+L+iywqaWF/MSER2M0Aaj+ktk=)
                          12: 34352e3134392e3135322e302f32342d3234203d3e20323134313433.roa (hash: ZqsnAbwfQsSLAO15y/hQmlAKLget/IE+XAeE4Nr5/8I=)
                          13: 3138352e3136322e3137382e302f32342d3234203d3e2032393134.roa (hash: s1bbd6LyvYQrZ11FtU3Xa/oNq7QSAV2j6DcxJrrwcV0=)
                          14: 3138352e3136322e3137392e302f32342d3234203d3e203132383734.roa (hash: Oev3T5PHjGnxWqjgwbUH88tHYEWPx4hW7vlkYnxUh4c=)
                          15: 3138352e3132332e3135362e302f32342d3234203d3e20323133323832.roa (hash: GDvt5K8JvoUItISvzfr5Lq2NAjGhfbtSPK2vmFHq3HY=)
                          16: 3138352e33332e32362e302f32342d3234203d3e20323132363039.roa (hash: +Uou40uKN3P8LL5yuWZGR768rlaEfbKR2VYxApN71AA=)
                          17: 34352e3134392e3135322e302f32342d3234203d3e203235313630.roa (hash: F5qAcWfgptgKaaDsmY0iSSOR+nBZv9RYAI/0kq8SYl8=)
                          18: 3138352e3132332e3135372e302f32342d3234203d3e203533333536.roa (hash: lHbHKjkzEHNG8HMgZvfO2b7EsuiOvBYyEIHvvUxLyMU=)
                          19: 39312e3233312e3132362e302f32342d3234203d3e2035363530.roa (hash: it6kdqtvQIR1fmnyxGg95/2ozlg9ybLYZncNwT8sS4M=)
                          20: 3138352e3132332e3135392e302f32342d3234203d3e20333936333536.roa (hash: 8ymSE6/IZ4mS3/jdg4jdCuqPIOO7MFcCnM1/lcLJutM=)
                          21: 3139332e31372e39352e302f32342d3234203d3e2039333034.roa (hash: 9Guine2JQ0PR4yaj3jvnIIIaTUv4lkdQwALSGSbr1I8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e4:46:1c:07:68:4c:d4:8a:f9:a3:ac:a3:e9:47:bd:90:2a:85:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
        Validity
            Not Before: Nov  4 21:07:22 2025 GMT
            Not After : Nov  5 23:26:22 2025 GMT
        Subject: CN=4DC8EB4D7CDC4E5A76B9D05EBAD310EBF8DA556A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:0a:7b:f9:fe:c9:c6:99:aa:b8:ca:a5:ab:
                    e3:56:4f:19:9d:6e:13:c8:c6:22:db:f2:b7:08:a6:
                    07:3c:98:18:88:8c:cb:88:c4:f5:bc:5a:0f:8d:f0:
                    7b:70:16:7b:ed:28:06:cd:c2:fe:79:df:da:fd:52:
                    65:b2:c5:37:dd:83:fd:c1:4d:43:ea:1e:9a:80:5c:
                    92:47:3f:5c:de:56:a6:5f:6b:14:76:38:1d:82:e7:
                    97:67:60:67:f7:61:20:29:43:6a:32:a1:8f:81:f1:
                    a0:1e:d6:ab:01:62:4b:47:1d:29:50:a8:f8:6e:98:
                    e4:92:34:df:93:81:95:d0:fd:ff:0b:cd:a8:e7:f0:
                    a5:b2:fc:e9:b0:d1:8f:64:00:88:f2:20:b7:0d:14:
                    82:7a:67:e1:9e:ec:f8:de:2b:ed:90:7e:ca:d3:e5:
                    9d:a7:ba:e1:b8:58:db:5a:25:8a:30:b7:b1:1d:b0:
                    24:88:76:36:81:c5:b6:68:7a:01:9b:e8:12:79:36:
                    f4:31:aa:99:0f:2b:05:9e:17:7d:83:ce:2e:31:72:
                    b2:e5:da:67:2c:e2:f5:80:2a:b6:66:4d:7e:28:47:
                    28:bb:6a:e9:f8:4a:c4:68:cd:59:10:91:49:91:ca:
                    6e:16:e3:05:8e:46:a0:6c:b9:66:5c:e4:3c:93:68:
                    49:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C8:EB:4D:7C:DC:4E:5A:76:B9:D0:5E:BA:D3:10:EB:F8:DA:55:6A
            X509v3 Authority Key Identifier:
                keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e3:00:8f:aa:88:c6:91:9d:c7:33:98:2f:d8:47:d8:1f:01:
         cb:e4:02:19:5b:78:17:66:4d:cf:2f:f5:62:95:e7:2c:d4:dc:
         2d:99:9c:59:cd:c1:08:a2:1e:a5:89:86:93:31:dc:54:a1:e0:
         48:cc:76:02:a1:f0:f8:b8:0e:bf:4e:d3:56:41:0f:f3:04:c9:
         a2:03:19:64:32:a7:4f:28:9d:59:af:e1:b2:4b:1c:c7:49:40:
         af:37:b7:ef:96:f9:4d:e6:5d:29:b8:45:11:dd:d5:18:c5:4c:
         da:7a:d8:17:bc:cd:fa:89:02:cc:65:42:a9:69:d4:01:64:20:
         7e:c5:ab:79:43:15:0c:10:c1:cc:22:7c:43:f0:4f:46:18:ed:
         23:e1:bc:2c:c8:7b:64:c9:84:0d:9c:49:e9:8b:d8:bf:11:84:
         14:2f:c6:bc:ab:8e:42:76:ee:5d:df:08:3a:8d:82:50:9c:af:
         c8:22:99:e9:0a:c1:7a:85:42:aa:41:0c:bb:90:a1:28:7b:37:
         6a:2d:7c:7b:89:21:64:3b:ec:62:e9:2b:2c:58:fc:ae:2b:56:
         e0:9e:7a:82:32:44:91:4c:e9:e0:9a:fd:bc:81:33:7f:2c:e4:
         8d:f9:6c:e0:56:cc:20:05:38:f5:52:54:70:e8:99:0a:b4:ec:
         69:a2:9a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:19:14 2025 by rpki-client