Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
File:                     4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft (raw, json)
Hash identifier:          zulIWWI2xjEEMBZM1JvmjumG4JsCTPKJcT0UVs5G5Ec=
Subject key identifier:   CD:79:24:50:2B:0C:C4:AE:0A:D0:E8:CC:7B:10:78:18:21:A3:32:7D
Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
Certificate issuer:       /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Certificate serial:       05815A17B31FBD16A62BE997986469C98D1CAE1D
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
Manifest number:          4E
Signing time:             Sat 23 Aug 2025 13:13:12 +0000
Manifest this update:     Sat 23 Aug 2025 13:08:12 +0000
Manifest next update:     Sun 24 Aug 2025 13:32:12 +0000
Files and hashes:         1: 326130363a313238333a633031613a3a2f34382d3438203d3e20323136303433.roa (hash: FI6+lnt7wYKf/koajd7leuAGrgnOrTyLUbLsPKITY1A=)
                          2: 326130363a313238333a626130303a3a2f34302d3438203d3e20323039363638.roa (hash: pDH3/3Dk1Fq980Em9CqMToFDUz3enDEGYm53t1F1Sc0=)
                          3: 326130363a313238333a623330303a3a2f34302d3438203d3e20323132303439.roa (hash: C9VygPMz1kCJjZPsH7ebFvgFHWmWa4oZ2yT5qoQ5ZX4=)
                          4: 326130363a313238333a623333303a3a2f34382d3438203d3e20323132303439.roa (hash: Y1ntaNzDkw4cYAPpDRBmMDcy9D0olFyf+JjbLcEG7SY=)
                          5: 326130363a313238333a633131303a3a2f34342d3434203d3e20323135313437.roa (hash: eXVCemDmONV15C52gD5uieDCPXBK962v/14gFWdt93I=)
                          6: 326130363a313238333a646566663a3a2f34382d3438203d3e20313939363839.roa (hash: EdRNEC2NhNz1dR3GdTaOVDmAQ8sskRvEiM6mgrxdX1A=)
                          7: 326130363a313238333a623333353a3a2f34382d3438203d3e20323132303439.roa (hash: snY4Ta6RuGK+BYVIvxiTToKWxR/e+68OpgJnyZhDOlg=)
                          8: 326130363a313238333a633132303a3a2f34342d3434203d3e2030.roa (hash: jzjfLKSOGAN4cdNFv5OjXLTzBjRIXHX15OXoMKXd6Cs=)
                          9: 326130363a313238333a633032323a3a2f34382d3438203d3e20323136303635.roa (hash: d6qHjIqS+NQlJJC4fgewHy8RhS3xafbvkXvQ4DSoLBk=)
                          10: 326130363a313238333a633031643a3a2f34382d3438203d3e20323136303433.roa (hash: 4/ka7ifCzic1cggPNooOTtZhw7zW/yZ+MZkomdGiZ2k=)
                          11: 326130363a313238333a623030623a3a2f34382d3438203d3e20323037343234.roa (hash: 46s55ubn5d3syu1JbUaOFkMdM1SbsGOMWMhdQ+Kpt6c=)
                          12: 326130363a313238333a633061303a3a2f34342d3438203d3e20323135373338.roa (hash: /eQcc3bAu0HXOQt2Ubpfxq3rdFnxWQ7Z7lY/KZzUgcE=)
                          13: 326130363a313238333a633035303a3a2f34342d3434203d3e20313937363334.roa (hash: oeOpStq+yTIhXAbkO6LdiaaohylU6oHXOIb1McpnccE=)
                          14: 326130363a313238333a623333343a3a2f34382d3438203d3e20323132303439.roa (hash: p7ojcQ2k7RgOVh4dazmmzhPGgg3/0M56J3ZYT71iOpk=)
                          15: 326130363a313238333a3a2f33332d3334203d3e20313937343737.roa (hash: xMaSaL+WFr5YSwuBlDQCy4wcqzyZN4ZfdFfWkgYjPd4=)
                          16: 326130363a313238333a646561643a3a2f34382d3438203d3e20313939363839.roa (hash: SG5JNgdnMjm2OKXYddSy6anR6u3fmHQbGoT1LncLqwo=)
                          17: 326130363a313238333a623230303a3a2f34302d3438203d3e20323136323637.roa (hash: 9bzXBq65v2uKCqQUSEdD7VkwusMemNbVnPl7hG1ygA4=)
                          18: 326130363a313238333a633037303a3a2f34342d3434203d3e20323136303739.roa (hash: mTzVhSMll7viHURYqoIRwSFCVsO4fjPFD8/ZerpXHyM=)
                          19: 326130363a313238333a626330303a3a2f34302d3430203d3e20323036343434.roa (hash: iolIMZvypg6PJiuOU91pEjZF4Pb2HUYXupJxlSpEcl4=)
                          20: 326130363a313238333a623333363a3a2f34382d3438203d3e20323132303439.roa (hash: YqdEVY7SOTNAO11FQbD+th1qujzrUObpLGS5PUruVeA=)
                          21: 326130363a313238333a633031623a3a2f34382d3438203d3e20323136303433.roa (hash: ruK85AjjWhlS693Y4dvHuHGq0Q3TZQwI2Ys7rCaxHBc=)
                          22: 4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl (hash: CTdvz4RBSNUnJsLci+HpU2lCMzltuB7ZEyMB+Upl+AA=)
                          23: 326130363a313238333a3a2f33322d3438203d3e203438373030.roa (hash: Wr4akw4KZeTvVblVoL8Jt+it3/yUvt7V4gxMtbASZUM=)
                          24: 326130363a313238333a633031663a3a2f34382d3438203d3e20323136303433.roa (hash: XX8C1AozDmXpqv9dzBQTyEko4QWspsT7yYoHU4dP6MI=)
                          25: 326130363a313238333a623030623a3a2f34382d3438203d3e20323136313133.roa (hash: 4sNpvCDpmLQp2mPXp2Ksgv7uyg8pxayLVvTTtKN/kGA=)
                          26: 326130363a313238333a633031633a3a2f34382d3438203d3e20323136303433.roa (hash: N8mf63hWqpJO+0bcOeR9TPEpzawlCLyuIigTkiFhntY=)
                          27: 326130363a313238333a633133303a3a2f34342d3438203d3e20323131303636.roa (hash: m4Luo9xGitfq3ojwlUfNtYjEMDVGY86VY8ZKFo2fqeE=)
                          28: 326130363a313238333a633032313a3a2f34382d3438203d3e20323136303635.roa (hash: KgK/s7YcGzFUWJMW5IeSycArSyGlw1j42I4Yf8lcrCM=)
                          29: 326130363a313238333a633032303a3a2f34382d3438203d3e20323136303635.roa (hash: Kt/l33sg5Y3ocVyNgNOeTMWu3DIkMM7XX4gb61bKDRg=)
                          30: 326130363a313238333a623130303a3a2f34302d3438203d3e20323136303532.roa (hash: iVNEZgOpMFlEdOoV4epTUxFj6KWFxX6+5w3Fhp7PsYE=)
                          31: 326130363a313238333a643030303a3a2f33382d3338203d3e20323134393135.roa (hash: px1fI/XgIjBMCMd4K5kckwwrPVsoYaMf6QYTfTPcDLE=)
                          32: 326130363a313238333a633034663a3a2f34382d3438203d3e20323037323532.roa (hash: BsDYhwB961Qyz3SUa8v0S6G15dbxVZ499UCKo/7aoPI=)
                          33: D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer (hash: afnWkHc3SbC+LEhUMTLR3RwZpLrNfEHhSxTRMCWSv1I=)
                          34: 326130363a313238333a633032663a3a2f34382d3438203d3e20323136303635.roa (hash: 3zDJJzIy+SjBKUnaDlwIxYf9YXHGzV1g+hM4bFoucIk=)
                          35: 326130363a313238333a633034303a3a2f34342d3434203d3e20323037323532.roa (hash: KKXlwvhQJqWcwFRoeiL4Ai77EOga92r6EnYIMF156v4=)
                          36: 326130363a313238333a633031653a3a2f34382d3438203d3e20323136303433.roa (hash: RbV8aV1hwdgLoFTBB5o9XuJZhQN2G66eOV/RA0BgHQM=)
                          37: 326130363a313238333a633031303a3a2f34342d3434203d3e20323037323532.roa (hash: h0vT/prOx9vwiaveGRIgx6hYlS5pRm7loFEHoMt0gjM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:81:5a:17:b3:1f:bd:16:a6:2b:e9:97:98:64:69:c9:8d:1c:ae:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
        Validity
            Not Before: Aug 23 13:08:12 2025 GMT
            Not After : Aug 24 13:32:12 2025 GMT
        Subject: CN=CD7924502B0CC4AE0AD0E8CC7B10781821A3327D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:73:e3:f2:2b:70:fa:b6:70:56:b7:b6:4c:23:
                    90:b8:90:59:20:04:60:49:66:a9:17:99:fc:00:f5:
                    30:f9:43:87:1a:38:90:bf:48:17:ad:7c:d2:f8:45:
                    a1:db:b6:f1:d8:9f:8c:bd:b2:fe:91:e5:44:ab:ce:
                    82:b7:2e:78:c3:94:98:89:9b:78:3c:c4:0f:cf:b2:
                    a6:19:7d:9a:cb:89:3f:92:e5:8f:f5:8f:32:79:88:
                    93:27:69:a0:39:1a:ec:81:0b:97:00:ac:45:31:c4:
                    9f:66:30:62:50:03:d2:00:15:64:91:4c:9d:dc:44:
                    1b:b0:ba:78:ce:d2:7c:3d:70:2d:dd:4f:47:11:de:
                    3c:c0:e0:81:b1:67:05:e1:cf:a8:df:b7:13:81:ad:
                    de:b9:ae:bd:4d:72:b5:dc:63:a6:88:8a:38:75:7e:
                    10:f0:84:5f:28:be:c6:16:cd:89:4b:d6:47:3f:c5:
                    f3:68:d1:6e:9e:e6:03:57:b2:11:b0:80:27:b1:96:
                    32:69:39:30:19:66:5b:56:09:4f:21:7a:ad:96:62:
                    55:39:79:b2:6a:6d:b8:73:67:74:c3:b5:a2:ca:e3:
                    03:ae:6b:3b:29:aa:04:8a:75:ad:28:c4:82:e7:7c:
                    7a:e0:ee:13:7b:e1:50:54:7f:7f:df:95:dd:75:c6:
                    fb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:79:24:50:2B:0C:C4:AE:0A:D0:E8:CC:7B:10:78:18:21:A3:32:7D
            X509v3 Authority Key Identifier:
                keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:dc:a1:21:ef:b1:2f:d7:b2:69:1f:a0:e6:cf:4e:68:42:e0:
         f6:24:d6:20:49:e3:91:f8:2e:70:08:b7:3e:5c:66:5b:8d:cf:
         2e:b3:78:ca:1e:4b:25:18:74:b2:c1:9e:ca:b3:28:6c:c9:48:
         6e:55:6f:99:6b:e6:eb:95:5e:3c:4d:a4:78:1f:52:3e:ff:ca:
         47:95:ad:46:26:b7:6a:20:44:12:4a:f3:5a:45:25:55:88:f5:
         6e:bb:01:7f:9d:4a:7f:b8:a7:7c:1f:56:95:06:78:e8:38:9e:
         2c:66:15:f4:75:ec:6a:66:d1:86:d7:26:0f:92:27:17:f4:48:
         96:2f:9f:65:0e:ae:fa:8b:a8:dd:f2:0d:00:16:2f:02:24:89:
         a7:9d:c6:7a:a9:5c:91:e2:5a:6e:f6:57:25:22:1a:9c:c1:e7:
         67:88:5f:a6:03:e1:bc:be:e4:3c:e0:8f:15:6d:a0:35:b2:04:
         3c:ed:8c:6f:ac:bf:c1:0d:fc:6f:2c:2e:24:ac:61:c2:06:6c:
         18:0e:a6:62:c9:54:0b:cb:28:be:90:d3:6a:92:0b:7b:6a:b1:
         8d:2d:bb:d3:2a:71:ef:b5:d9:e7:57:7a:f1:68:5d:a3:16:a1:
         95:a9:24:7c:2e:d6:55:88:ad:37:8d:40:a4:f8:82:12:bf:a8:
         a8:bf:df:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:11:30 2025 by rpki-client