Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
File:                     F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json)
Hash identifier:          vMM59u2gGSdLkL6c51H8DHOftgzaHNsLXvjrEt5MtEM=
Subject key identifier:   B0:6E:C2:93:17:D0:30:D9:50:59:F5:A3:AD:4A:2B:1F:3A:C6:BE:16
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Certificate issuer:       /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial:       703820D043062232D04B8D7D818D352FD340FD88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
Manifest number:          0199
Signing time:             Sun 19 Oct 2025 10:51:37 +0000
Manifest this update:     Sun 19 Oct 2025 10:46:37 +0000
Manifest next update:     Mon 20 Oct 2025 13:40:37 +0000
Files and hashes:         1: 3137382e3133322e3139362e302f32342d3234203d3e20323035383836.roa (hash: uXr7xv/utv3nrmiA56MIjtPUbX68CjWOqcNFqNQ16UA=)
                          2: 3130392e3233342e3231322e302f32342d3234203d3e2039333034.roa (hash: E1rTwoIvXUNDaM0STfVaIqf1sVvsAgpb9o5+zj/sF4M=)
                          3: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: 6TrR9eiRNzBfJRrubefTFudn86wqW7t6u+0cIxHNR5g=)
                          4: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: UAeHXbW3QhFNKys+iIRYQQp2rK+CbLJVmAbT44zmQ1k=)
                          5: 3137382e3133322e3139342e302f32342d3234203d3e2033333230.roa (hash: fQsEWjsrThcFlJLP0H4ir/IvOeNDAQWZ1RZpyw7wV08=)
                          6: 3137382e3133322e3139362e302f32342d3234203d3e203235313938.roa (hash: 3j8K/Kqcqdvwpx/OlssyZRS1YjevchGxZsOaT54dM7E=)
                          7: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: Ej1HuQzuhYe60A2HNErPZLUdfpH5EaYPpZ+PpBEwVxY=)
                          8: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: g03b1IthT7R6emRcKoovUUAfL6xJm+JexZ6oxCLs8E4=)
                          9: 352e3232362e3138392e302f32342d3234203d3e2039333034.roa (hash: KMYDoKnPWH3TUSOlAA/wzDsC66Y3O5PlUt+i9WMB8YA=)
                          10: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: 0XlqzvD5WZeVhzrMIb+ArV6j60KVoqxW88qIB/mg2yk=)
                          11: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: 7XlPdZ+5k5dznfPMoT3Ni5uRfyL41Likgo5fplEaDTA=)
                          12: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: xGDSj9rMMdhGkci1rj9QS/c2p6IRznTgPF56svMZjZY=)
                          13: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: UgtgsSF4DmUx+FqAs5WV6TWI9fyKhqfkEeJgaHpzYEc=)
                          14: 352e3232362e3139302e302f32342d3234203d3e20313337353137.roa (hash: dSlf5pGXbGsGZE5EEAyZeM/B2DRLa5hIPls1KRkA5S4=)
                          15: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: QogqP7T3C5fHQMzB+6xPAFGzBH6CzSFH+7YfohZwgjA=)
                          16: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: uhM+/0v8HioS/qE+KkDqR673YS11oQr5aznZkyp/yx4=)
                          17: 352e3232362e3138342e302f32342d3234203d3e20313534303439.roa (hash: H9hlRxAktpjIeT3DJhaD4nFRiEtoUGveoYH/KllFDKE=)
                          18: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: 4qmNKGx6VCIK53hbSqHwJPgKKMACqFJu608tkfoDU90=)
                          19: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: pWCIuSrDYwp+tan25QY6TeO9jMNRWP/W0zj94P0620Y=)
                          20: 3130392e3233342e3230392e302f32342d3234203d3e20333935373933.roa (hash: o3GE/oY8MCJAGEjtcPLWPVhOZbFRZAMmde/X42j4j+s=)
                          21: 3137382e3133322e3139332e302f32342d3234203d3e2033333230.roa (hash: oI+z5B0JaicbPoA0ktNCShJBGRgRTGuhGcC7A8+Ru9U=)
                          22: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: nFzeEleWTSIYtIbjgNdPg9c+CwbgHF8u+W2VGtxEBpQ=)
                          23: 3137382e3133322e3139372e302f32342d3234203d3e2033333230.roa (hash: MuzLKtyseOT68ju0FOjjeN3pxilqG43fi3IvFyF1hyA=)
                          24: 3137382e3133322e3139352e302f32342d3234203d3e20313335333931.roa (hash: RVvsf+GbQ+gvRF/WRSFeBmTdyh0atmXnd8DAVmdlYaw=)
                          25: 3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa (hash: b3VPqm78d32upkRS45HOejDpaZzakM7RvUm8zYxxirQ=)
                          26: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 5LOGXsAFfY8MpN+3dgrjf5uTyIh00nk/J0/MSXxVmy4=)
                          27: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: XdAkV6zbkuI1AZDLksTC73fyYmD1RaBTy+I3AGFuaxA=)
                          28: 3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa (hash: 6BGcWOFPHM6AYGamfRs+s+1VsWvQIYZ1oxiJHAvfJjg=)
                          29: 352e3232362e3138362e302f32342d3234203d3e203633303233.roa (hash: kysMqqfL+cxQFiZ9hx+MYhVVLOWVsGxNP3RzuLn0/y4=)
                          30: 352e3232362e3138372e302f32342d3234203d3e203331383938.roa (hash: kBpq1LEvwgTf4WM51jxpYydvFyszuazgeravGzXETJo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:38:20:d0:43:06:22:32:d0:4b:8d:7d:81:8d:35:2f:d3:40:fd:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
        Validity
            Not Before: Oct 19 10:46:37 2025 GMT
            Not After : Oct 20 13:40:37 2025 GMT
        Subject: CN=B06EC29317D030D95059F5A3AD4A2B1F3AC6BE16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c3:ec:68:00:b0:ea:aa:1f:64:6a:a3:25:ca:
                    1a:12:2d:2b:5a:eb:d5:0e:1c:d3:e5:b9:81:60:7d:
                    9e:f2:02:6c:34:08:b6:14:8a:95:9e:4b:af:70:fc:
                    a1:30:6b:6b:ee:1f:e0:a9:4d:68:83:24:8f:a0:c0:
                    65:1b:85:bf:81:2f:c2:5d:d0:e3:c7:e7:21:05:05:
                    de:17:37:a9:70:bd:ec:5b:55:99:59:ec:f2:ad:1f:
                    22:cd:12:29:a5:36:2e:51:7c:45:cd:4c:a7:af:ef:
                    61:4d:fc:80:a9:a6:7c:c5:e6:6c:3d:95:5d:71:06:
                    1d:6e:2d:9c:a9:c0:31:05:b9:12:a4:73:00:8f:11:
                    ae:b7:df:12:29:da:b2:e5:25:31:a6:b3:19:50:1f:
                    d6:f3:6b:33:d5:1f:0b:ff:31:c0:16:5c:09:c8:7b:
                    7e:0a:b8:d8:91:a7:1f:66:37:a1:96:5e:fc:60:e9:
                    6b:12:7a:1d:9f:b3:a9:35:46:0a:4e:1b:d3:0f:46:
                    b8:f7:ce:2c:f1:cf:65:04:74:e0:be:b7:c7:e0:e3:
                    c5:55:e4:d8:16:e1:20:72:d5:30:91:12:eb:d7:4d:
                    a1:7d:71:4e:80:cf:a5:cc:99:23:41:a2:18:0e:09:
                    f5:10:98:1f:11:58:f4:b7:a9:d4:00:6f:8f:31:c8:
                    69:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6E:C2:93:17:D0:30:D9:50:59:F5:A3:AD:4A:2B:1F:3A:C6:BE:16
            X509v3 Authority Key Identifier:
                keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:a4:24:23:0b:b3:89:98:a0:b0:f8:b7:ce:5d:f7:55:78:b0:
         82:6b:b0:9e:53:79:d8:5c:9c:77:37:ab:bd:1d:a7:0d:bd:28:
         2d:ce:54:c9:00:43:ed:9e:65:59:5d:9d:55:8e:f3:4f:20:8c:
         ce:cd:97:bd:07:8f:38:29:b6:f3:1a:b6:eb:78:7d:e8:86:d4:
         c6:57:e2:7f:93:c9:fe:88:29:e9:48:de:43:5d:63:66:9c:07:
         e1:8a:33:10:a1:d9:c9:3b:0e:60:f8:93:55:2b:75:11:4e:2f:
         13:41:0d:86:8b:d1:d1:06:f3:9d:45:76:64:5d:d9:56:72:12:
         45:4e:9a:df:f6:e2:c4:c6:1f:b4:a4:14:cf:cb:36:8a:f9:0d:
         9a:8e:df:ea:25:34:bc:05:13:41:ce:fb:90:da:41:79:2e:7a:
         68:2d:b4:0f:5a:e2:2d:e1:32:0f:d3:db:d2:c8:68:1e:9a:f0:
         d8:d7:46:47:a2:7a:a7:ee:55:49:b1:c8:d8:ba:11:e9:0f:3e:
         25:7b:9d:42:99:b7:90:82:bb:09:45:96:ca:ab:67:8f:56:69:
         be:55:23:3c:3c:60:a1:72:18:92:3c:eb:4b:9c:a0:34:ee:5c:
         24:be:97:14:ca:9b:eb:be:73:f6:99:4f:73:52:20:60:53:f1:
         8f:f5:04:3a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUcDgg0EMGIjLQS419gY01L9NA/YgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk
MTZjZWVkMzAeFw0yNTEwMTkxMDQ2MzdaFw0yNTEwMjAxMzQwMzdaMDMxMTAvBgNV
BAMTKEIwNkVDMjkzMTdEMDMwRDk1MDU5RjVBM0FENEEyQjFGM0FDNkJFMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClw+xoALDqqh9kaqMlyhoSLSta
69UOHNPluYFgfZ7yAmw0CLYUipWeS69w/KEwa2vuH+CpTWiDJI+gwGUbhb+BL8Jd
0OPH5yEFBd4XN6lwvexbVZlZ7PKtHyLNEimlNi5RfEXNTKev72FN/ICppnzF5mw9
lV1xBh1uLZypwDEFuRKkcwCPEa633xIp2rLlJTGmsxlQH9bzazPVHwv/McAWXAnI
e34KuNiRpx9mN6GWXvxg6WsSeh2fs6k1RgpOG9MPRrj3zizxz2UEdOC+t8fg48VV
5NgW4SBy1TCREuvXTaF9cU6Az6XMmSNBohgOCfUQmB8RWPS3qdQAb48xyGlNAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUsG7CkxfQMNlQWfWjrUorHzrGvhYwHwYDVR0j
BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0
NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G
czd0TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wY2MwODczNy05
MjY3LTQwMmEtOTlkNC03YWFhZmVhNDQ0ZWQvMC9GNzY4RkY2RTY4MTg1OEMwRUMx
OUYzQTkzRkExNzkyQ0QxNkNFRUQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABaQkIwuziZigsPi3zl33
VXiwgmuwnlN52FycdzervR2nDb0oLc5UyQBD7Z5lWV2dVY7zTyCMzs2XvQePOCm2
8xq263h96IbUxlfif5PJ/ogp6UjeQ11jZpwH4YozEKHZyTsOYPiTVSt1EU4vE0EN
hovR0QbznUV2ZF3ZVnISRU6a3/bixMYftKQUz8s2ivkNmo7f6iU0vAUTQc77kNpB
eS56aC20D1riLeEyD9Pb0shoHprw2NdGR6J6p+5VSbHI2LoR6Q8+JXudQpm3kIK7
CUWWyqtnj1ZpvlUjPDxgoXIYkjzrS5ygNO5cJL6XFMqb675z9plPc1IgYFPxj/UE
Og==
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:31:24 2025 by rpki-client