Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
File:                     3134EE987E08D8B5583FEEF621A03150C4F35434.mft (raw, json)
Hash identifier:          Ur2GemyTt9afDH+ZR7KNW+QXoY/AgeMMR09dsiqYXZA=
Subject key identifier:   D1:85:D9:A2:56:6F:8D:4D:DC:90:67:1A:B6:27:25:43:27:BF:DA:CC
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Certificate issuer:       /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial:       3DD426448567A3C690DDBDADAE71869F9A11B32D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
Manifest number:          0341
Signing time:             Sun 19 Oct 2025 03:56:58 +0000
Manifest this update:     Sun 19 Oct 2025 03:51:58 +0000
Manifest next update:     Mon 20 Oct 2025 05:47:58 +0000
Files and hashes:         1: 326131343a316563373a666230303a3a2f34302d3438203d3e20323134373435.roa (hash: 6hKao63oIzBdls8N02e3UeaWWtVa56Xgit+XQJDfjec=)
                          2: 39312e3139362e362e302f32342d3234203d3e20323135333138.roa (hash: j1BjBA5NyrZGkTgGio3bSgpZw6QFV9sBz2jgQ+DhB30=)
                          3: 326131343a316563373a663830303a3a2f34382d3438203d3e20323131303139.roa (hash: IUL9dWtw0Umsxfs7xwdo1JVZ6ulAsKal+ROC0kpiHgM=)
                          4: 326131343a316563373a666666653a3a2f34382d3438203d3e20323135343733.roa (hash: tXMEYMrTa38uR0L+SQ9LimzmDrpxo8zhMIaTp0PKkR0=)
                          5: 326131343a316563343a3a2f33322d3430203d3e203535323031.roa (hash: J7TluaWBMRkzmoR+yQUgqy6TY9pp5e+qFllmxawGaBk=)
                          6: 326131343a316563323a3a2f34302d3434203d3e20323135333138.roa (hash: 1f8XyNlehbCOnOttGzyrDosIHnqaI9sKAvrNf1ADCiI=)
                          7: 326131343a316563373a666666643a3a2f34382d3438203d3e20323038343533.roa (hash: cQGzH58GG/5AlClFkvMjXXZFAsalmfdZS0xTjTmJx5Q=)
                          8: 326131343a316563373a313030303a3a2f33362d3438203d3e20323134343831.roa (hash: mAC3tE41nQDojIaT/TKY9BuNdhC77RQ6VPm5O+XWCIE=)
                          9: 326131343a316563373a666530303a3a2f34302d3438203d3e20323135343637.roa (hash: 8asU86WRYRMPRuHXiCGWb31YsN6wlyGCHOUyjPq08QE=)
                          10: 326131343a316563373a666666663a3a2f34382d3438203d3e20323030313739.roa (hash: jxX5jejatt6POI8r69/OIdC4tpqjlqDh7/l5cMHt1Lc=)
                          11: 326131343a316563373a666330303a3a2f34302d3438203d3e20323130363435.roa (hash: D0UhxJixjH/6ED4b7asHdvZhN16xQRz9JstOKq1KOMc=)
                          12: 326131343a316563373a663731303a3a2f34342d3438203d3e20323030303838.roa (hash: AEg6jBnmgaUb2x64BLtcycaY+zMRMacIwLXjCKOp0Kc=)
                          13: 326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa (hash: 26SEXU3Pd+BR8SHx6kufhwY94Io89XBTIVQPTTPnVB8=)
                          14: 326131343a316563373a663732303a3a2f34342d3438203d3e203139333138.roa (hash: 354DUYTmwYIpJ7s6pAfElMpcSbsG0UySE6atyDydlaw=)
                          15: 326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa (hash: jfvc4Qyrnftgf9GYsuLUox0bHp6mia0CtR4lMdTVrZY=)
                          16: 326131343a316563373a666130303a3a2f34302d3438203d3e20323134333635.roa (hash: D7vq42LlJ1JkjKrlS8EXaLer6htaFFui19vj1Iz46+0=)
                          17: 326131343a316563373a323030303a3a2f34302d3438203d3e20323133353135.roa (hash: ei7uKbr21cStunIFD4/+QnxpXX+lUv4yRtUBnFqqQIw=)
                          18: 326131343a316563373a313130303a3a2f34302d3438203d3e20323135343337.roa (hash: LSZWA34YwCO9D6JtWEG8LpUQ1o3Anb+MGXWPU43gT4A=)
                          19: 326131343a316563373a666666633a3a2f34382d3438203d3e20323136333339.roa (hash: Xpu7YHsE9Uu/Z34+AM32q6wFmIndeEkcOzm4kV29gZU=)
                          20: 326131343a316563373a666661303a3a2f34382d3438203d3e20323133353135.roa (hash: uw8e5+V55rs+wlENeJdGRICWtffz7xQmePuL+3U/nIU=)
                          21: 326131343a316563373a663130303a3a2f34302d3438203d3e20323134313838.roa (hash: l6K8Ipuv+LpAjKBvLV7xS+N25xPDi1Q5md9XNlMDt3o=)
                          22: 2AFACA7F316DBE0CFF394F9D5952E52992F185F1.cer (hash: TzD6pGlBEMmZI/OlLFvK4Q5nKNXovDA7wOkDjfwohQo=)
                          23: 326131343a316563373a663730303a3a2f34342d3438203d3e20333937343233.roa (hash: 3NaEQ7JEzM4oESWmvkMu3mTAfj7phWpZMjjU4RHfTkQ=)
                          24: 326131343a316563373a663930303a3a2f34302d3438203d3e20323131363733.roa (hash: eFx1IPRipEBged0ZijUlxcw0OO6jOfnGP3TjandnEEA=)
                          25: 326131343a316563373a666430303a3a2f34302d3438203d3e20323136323034.roa (hash: s/Nou3yfPszN+70d0fh1KxFGk9lHz9YF1rBNojiEJcI=)
                          26: 3134EE987E08D8B5583FEEF621A03150C4F35434.crl (hash: JSM1wjV0uUyjxjYrx6OuMXd69cDp7jmKEjketgzbN/w=)
                          27: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer (hash: BF/TWOjb2Ii4r0osOdYS/rUG+zOQPpS2tAXbzEo5Wzo=)
                          28: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer (hash: jLV89odZdgTYzYRcumFoTReP+gmmk+raXpcoYf0+wxA=)
                          29: 326131343a316563373a663830313a3a2f34382d3438203d3e20323131303139.roa (hash: q5taedROXWkWDrb/6D/rTI85VzK640g7YzLTCK454po=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d4:26:44:85:67:a3:c6:90:dd:bd:ad:ae:71:86:9f:9a:11:b3:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
        Validity
            Not Before: Oct 19 03:51:58 2025 GMT
            Not After : Oct 20 05:47:58 2025 GMT
        Subject: CN=D185D9A2566F8D4DDC90671AB627254327BFDACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:e1:e2:ff:2e:e0:76:ae:15:ba:19:34:13:
                    69:ed:32:77:12:a2:fa:5d:6f:c2:d0:c5:0e:b9:98:
                    7a:76:68:d3:a0:a3:78:3e:86:b7:f1:45:d3:cd:a8:
                    80:ef:e0:1e:84:3e:70:4e:0a:e1:53:67:f1:be:f9:
                    d1:12:b4:f0:47:46:cd:03:b8:8e:f6:87:85:8d:7e:
                    aa:23:71:ff:59:e9:c2:9f:51:8d:2b:10:29:e0:f4:
                    83:87:27:79:91:18:c7:d9:fa:0b:b6:00:5e:34:47:
                    26:a2:0b:6a:4a:86:64:20:b7:09:6d:99:b9:7d:52:
                    15:ec:e7:8b:2f:38:b7:54:14:7a:54:70:8c:d5:87:
                    8c:e7:50:e4:20:f0:c0:23:69:96:f4:fa:5b:6e:d4:
                    80:24:34:4d:69:a6:73:51:9f:b8:87:6f:19:01:a2:
                    be:57:4d:bd:fd:32:ac:34:1a:2d:94:94:ea:c8:e0:
                    63:d7:ac:1c:cc:64:84:64:d0:0e:e5:a6:9c:5e:f0:
                    4c:fa:98:09:ba:ef:40:02:27:39:76:03:92:cd:ed:
                    d1:eb:bf:2d:18:28:eb:55:86:21:7b:15:c2:bb:e9:
                    ac:d7:96:99:fb:3c:f6:9f:af:91:8b:64:72:a6:aa:
                    9d:3a:d1:ed:96:cb:3e:e9:0b:44:8e:51:89:00:b7:
                    c5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:85:D9:A2:56:6F:8D:4D:DC:90:67:1A:B6:27:25:43:27:BF:DA:CC
            X509v3 Authority Key Identifier:
                keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e1:60:02:55:46:25:65:20:14:4a:8d:e4:f1:74:87:9e:b8:
         5f:2d:b3:bb:70:03:77:18:b9:b7:00:9f:a9:34:fb:72:f7:9c:
         8e:29:da:45:7b:ff:ae:a5:b4:1e:6d:d1:a3:6c:bb:9f:1d:70:
         92:0a:42:8a:f4:36:52:d6:30:35:93:0c:e4:29:4e:7a:2f:73:
         e5:ac:a0:31:b9:55:bf:30:1b:d7:33:e8:75:dd:00:be:3c:2f:
         55:b8:7e:24:b4:70:de:5d:bf:d7:56:1a:7f:87:aa:17:fd:b4:
         48:f2:2b:a3:df:91:88:ae:24:fc:be:d3:aa:03:cf:85:32:51:
         4a:a6:b0:88:1b:d8:f9:73:df:d2:f6:a4:f7:78:ef:5e:27:b7:
         bb:e7:ca:d3:a8:03:3c:36:f0:bf:49:8d:12:fa:74:6b:f2:99:
         7b:b2:7a:13:07:d5:a9:b7:52:09:07:04:b7:2f:90:56:b1:22:
         b8:a0:80:5d:50:53:58:bf:11:ee:ef:c5:f2:8f:8b:82:56:95:
         fa:7b:a1:90:aa:c9:f7:cd:90:53:47:90:e0:ef:1e:80:9f:bd:
         f0:ea:88:8e:c0:e8:bd:32:c3:63:44:55:ba:02:40:e4:88:39:
         eb:52:dc:ee:0f:36:1f:f9:8f:a2:e3:62:63:7e:a4:14:c4:2e:
         2c:fb:fe:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:51 2025 by rpki-client