Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
File:                     F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json)
Hash identifier:          iJvzy+TCOqY3ID7pthDV5aYCbVhuZZzIgqDJlObFu4c=
Subject key identifier:   26:E5:86:D2:3E:07:14:DC:24:36:B0:2F:DE:8E:0B:5D:68:51:00:2A
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Certificate issuer:       /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial:       0B40B0A92CD62FA0AC6D97DC98762B0D929780B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
Manifest number:          0146
Signing time:             Sat 23 Aug 2025 06:07:33 +0000
Manifest this update:     Sat 23 Aug 2025 06:02:33 +0000
Manifest next update:     Sun 24 Aug 2025 08:32:33 +0000
Files and hashes:         1: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: UAeHXbW3QhFNKys+iIRYQQp2rK+CbLJVmAbT44zmQ1k=)
                          2: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 5LOGXsAFfY8MpN+3dgrjf5uTyIh00nk/J0/MSXxVmy4=)
                          3: 352e3232362e3138362e302f32342d3234203d3e203633303233.roa (hash: kysMqqfL+cxQFiZ9hx+MYhVVLOWVsGxNP3RzuLn0/y4=)
                          4: 3137382e3133322e3139372e302f32342d3234203d3e2033333230.roa (hash: MuzLKtyseOT68ju0FOjjeN3pxilqG43fi3IvFyF1hyA=)
                          5: 3137382e3133322e3139362e302f32342d3234203d3e203539343332.roa (hash: lGI4JnNVf3K/PEpsW+6oRNir8y6Pok8lHu/OSrGIr1U=)
                          6: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: uhM+/0v8HioS/qE+KkDqR673YS11oQr5aznZkyp/yx4=)
                          7: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: 4qmNKGx6VCIK53hbSqHwJPgKKMACqFJu608tkfoDU90=)
                          8: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: g03b1IthT7R6emRcKoovUUAfL6xJm+JexZ6oxCLs8E4=)
                          9: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: Ej1HuQzuhYe60A2HNErPZLUdfpH5EaYPpZ+PpBEwVxY=)
                          10: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: x8nwlL2wMk0DWBkDA/wps6zj42IjyUld6Fn1iVGKAaU=)
                          11: 352e3232362e3138392e302f32342d3234203d3e2039333034.roa (hash: KMYDoKnPWH3TUSOlAA/wzDsC66Y3O5PlUt+i9WMB8YA=)
                          12: 3130392e3233342e3231322e302f32342d3234203d3e2039333034.roa (hash: E1rTwoIvXUNDaM0STfVaIqf1sVvsAgpb9o5+zj/sF4M=)
                          13: 352e3232362e3138372e302f32342d3234203d3e2039323332.roa (hash: L10rHUQX4TGH4LKEy8+xW98uNY8br3AyCv26QQGltu4=)
                          14: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: 7XlPdZ+5k5dznfPMoT3Ni5uRfyL41Likgo5fplEaDTA=)
                          15: 352e3232362e3139302e302f32342d3234203d3e203239383032.roa (hash: IcG7713dyebDFbZHRU+x1BJJOLqYlSEgaSMS202odCw=)
                          16: 3137382e3133322e3139342e302f32342d3234203d3e2033333230.roa (hash: fQsEWjsrThcFlJLP0H4ir/IvOeNDAQWZ1RZpyw7wV08=)
                          17: 352e3232362e3138372e302f32342d3234203d3e20343031313633.roa (hash: IbKgcdiPr/i2i2rIRhBWD6e5rrg19IAANUbUYzpzvAs=)
                          18: 352e3232362e3138342e302f32342d3234203d3e20313534303439.roa (hash: H9hlRxAktpjIeT3DJhaD4nFRiEtoUGveoYH/KllFDKE=)
                          19: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: xGDSj9rMMdhGkci1rj9QS/c2p6IRznTgPF56svMZjZY=)
                          20: 3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa (hash: 6BGcWOFPHM6AYGamfRs+s+1VsWvQIYZ1oxiJHAvfJjg=)
                          21: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: 0XlqzvD5WZeVhzrMIb+ArV6j60KVoqxW88qIB/mg2yk=)
                          22: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: 6TrR9eiRNzBfJRrubefTFudn86wqW7t6u+0cIxHNR5g=)
                          23: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: nFzeEleWTSIYtIbjgNdPg9c+CwbgHF8u+W2VGtxEBpQ=)
                          24: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: XdAkV6zbkuI1AZDLksTC73fyYmD1RaBTy+I3AGFuaxA=)
                          25: 3137382e3133322e3139332e302f32342d3234203d3e2033333230.roa (hash: oI+z5B0JaicbPoA0ktNCShJBGRgRTGuhGcC7A8+Ru9U=)
                          26: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: pWCIuSrDYwp+tan25QY6TeO9jMNRWP/W0zj94P0620Y=)
                          27: 3137382e3133322e3139352e302f32342d3234203d3e20313335333931.roa (hash: RVvsf+GbQ+gvRF/WRSFeBmTdyh0atmXnd8DAVmdlYaw=)
                          28: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: UgtgsSF4DmUx+FqAs5WV6TWI9fyKhqfkEeJgaHpzYEc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:40:b0:a9:2c:d6:2f:a0:ac:6d:97:dc:98:76:2b:0d:92:97:80:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
        Validity
            Not Before: Aug 23 06:02:33 2025 GMT
            Not After : Aug 24 08:32:33 2025 GMT
        Subject: CN=26E586D23E0714DC2436B02FDE8E0B5D6851002A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:76:b2:3c:52:3a:28:4d:e0:68:55:22:2f:42:
                    ab:f1:00:a8:bc:b9:c9:cf:bc:e3:2a:fb:d0:e4:f4:
                    ec:2b:de:2c:b9:22:a9:39:ee:76:1d:d3:db:ee:8d:
                    06:ea:f7:66:55:d5:54:42:27:58:63:8a:1a:9c:d8:
                    00:32:d0:ee:7d:92:cd:c9:ea:fa:6b:7f:82:7c:20:
                    1f:af:63:75:df:4c:fe:24:c8:1a:b5:4f:bb:c4:5b:
                    af:68:3b:3e:6a:f1:e1:2f:6f:ec:59:ad:1d:a5:54:
                    47:21:54:e8:ee:0f:98:24:af:95:a4:46:45:30:64:
                    fe:38:92:cb:a9:d8:3e:fd:c7:31:c2:c4:87:24:04:
                    13:c6:3d:c4:72:41:89:2f:2a:9e:90:fb:e4:1d:00:
                    b0:d2:53:09:b9:65:36:9e:8f:5e:41:63:71:7e:5f:
                    45:15:b8:db:c5:f9:e4:21:aa:af:35:7d:75:d3:19:
                    ab:ed:f6:9a:23:3c:b9:7c:13:cb:be:bb:42:02:b5:
                    d3:80:1d:f3:b0:3d:62:a1:2f:37:d3:d1:0f:a4:1b:
                    f6:17:d4:a2:d9:70:79:8d:af:60:56:a5:6c:97:bd:
                    48:14:f1:c9:23:58:1a:8a:08:3d:3c:9f:2c:17:1e:
                    c4:ec:63:e2:ac:0e:24:4e:e1:d6:6b:22:5f:a2:e2:
                    09:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E5:86:D2:3E:07:14:DC:24:36:B0:2F:DE:8E:0B:5D:68:51:00:2A
            X509v3 Authority Key Identifier:
                keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:48:1a:c3:55:cf:79:c8:5f:70:9b:2c:d2:1e:e4:14:34:f9:
         29:b7:df:33:c9:4a:3d:63:6b:b3:ad:76:c8:a3:81:99:45:ca:
         01:f7:86:8b:8c:e3:6e:3b:23:aa:ac:0b:5b:f1:89:85:49:57:
         a5:14:7b:5f:82:e6:d2:8f:07:c3:0e:6e:6b:b7:9d:3c:0e:21:
         14:9a:63:a4:4f:33:ce:a3:17:c9:1a:d1:dd:31:34:ae:b7:55:
         59:47:02:fd:3a:35:02:ff:f0:d6:08:30:29:64:f2:87:bb:2c:
         2b:b8:5b:a9:e1:74:79:09:c9:9d:cf:5c:8f:b1:d6:34:ef:df:
         e4:2a:34:0b:5c:17:ef:5c:66:fa:40:b8:90:1c:3f:2a:4e:5e:
         0e:d0:68:50:84:e6:14:be:32:e3:b3:6b:8f:38:cf:c0:01:72:
         f2:e9:4f:0a:fe:12:d0:2f:80:f6:17:64:d6:60:2f:20:d1:d3:
         0e:68:48:6e:b5:2b:e0:4e:ad:d3:97:03:50:6d:fd:5d:b1:c4:
         ce:62:1d:4e:4f:55:8b:fc:3f:52:2a:90:85:07:55:03:62:2c:
         a1:0b:f3:17:9c:ca:b4:5a:f7:aa:13:df:38:9a:22:48:37:dc:
         5f:62:9b:98:b5:5b:74:8f:a7:c1:96:8c:a2:ba:8f:90:77:7f:
         25:ff:03:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:18 2025 by rpki-client