Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
File:                     8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json)
Hash identifier:          SnfCsHBO09u/XBWPl8hG6H/ayNnMPHW/irFcs8mcS5E=
Subject key identifier:   EC:59:C4:17:81:D1:91:2A:F7:23:C0:62:B7:44:37:3D:D2:1B:0A:87
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Certificate issuer:       /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial:       53DEEE1192B69E7F335D92139413B685F5A08B6F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
Manifest number:          0200
Signing time:             Fri 04 Jul 2025 01:52:29 +0000
Manifest this update:     Fri 04 Jul 2025 01:47:29 +0000
Manifest next update:     Sat 05 Jul 2025 05:35:29 +0000
Files and hashes:         1: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 8fwqZHGyIJyFYdJn0gwpv+qKZFLFFwexw2Z/QOknvfY=)
                          2: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: HscFYsQcMtvjpDQJk86+k68Lr7MoMlx0VU02QHyOcGk=)
                          3: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: j14pv+Fih0N85ic38d12TDY0uRhDLdNY7cvkmnI17jw=)
                          4: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: isp+v1bbWY3zX+eoFLAf4eK3r9/zMrMmocZ2PNCW2Rw=)
                          5: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: gQv5NI8fa+cTBzk0tpepQG6QGKXWkVIlxityrSNAUjQ=)
                          6: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: 33Hc4k2qb/SFtHgCtF148ZPS40TPUk0mIWne3Kl1fjs=)
                          7: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: LiQaiw5undZF8O9ZPrbB+SuBZXPDpvcvnNafAQKgteo=)
                          8: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: 06Oq8kkXsOv0rKoRYz/dx2UXUSYf9kyOjrjjxWn2c2o=)
                          9: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: dkDlXn7ZTKwdhEvN1AyaOINvq0aj0JnSzR14swqFK7s=)
                          10: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: QP4KPs363lKNvbDMC91nWR64EDb9a5wYXaiiUC4k7Hs=)
                          11: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: JVdP0q01IdpmOHNHM/8N7QIeZGO9fY1B0zhs290wioo=)
                          12: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: XJo8jS2djpRteJlKSIzBy0GSOcq3Jj/2wBDjV1PmcuQ=)
                          13: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: mgbh+id7sfJxNC8FBIA9w2AVClblyfoF7d8LLx0Ph9g=)
                          14: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: lL21MUDpM3YDFXY+VNPjMEqMt9/EFafQb01ArsWLAjk=)
                          15: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: z2fbMMdTRhRUpcDHMD2rvY/J1s4P2i8N3FhzYltODNc=)
                          16: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: 3t/0qmEuc7HUJ6jbuOuPnmd3ve4/XpcLhj4VdVBS4pk=)
                          17: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: 1A28R62a3xqM+UC6zeeQGL8j1SqK9YtodACC43TfXsc=)
                          18: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: IeK6ZG/g9V25xfR3xKZZdyq5xuMwonnHdhMMCLRMWBo=)
                          19: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 7nhFTtPjQhKd1Ac2yjZIA1kYzFwc8dF19rkGkZd+QFk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 05:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:de:ee:11:92:b6:9e:7f:33:5d:92:13:94:13:b6:85:f5:a0:8b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
        Validity
            Not Before: Jul  4 01:47:29 2025 GMT
            Not After : Jul  5 05:35:29 2025 GMT
        Subject: CN=EC59C41781D1912AF723C062B744373DD21B0A87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:27:19:73:49:e2:f8:57:5b:c7:9b:ed:47:0b:
                    23:e6:c5:42:57:06:89:e9:d5:71:aa:39:3a:a4:c3:
                    12:2b:86:3d:14:75:ad:66:9f:c6:61:33:d8:73:a5:
                    e0:19:fa:a6:5f:d2:e2:93:54:28:33:ac:35:bb:ec:
                    60:5b:f2:bb:e2:ac:fe:97:5e:57:a5:fd:f6:a0:64:
                    8b:5d:a9:38:ef:ba:03:7c:be:c6:00:c8:97:9c:f0:
                    b9:67:19:7b:2d:fc:68:2a:85:94:23:61:6c:1a:dd:
                    da:4e:60:41:64:18:b4:3a:78:3d:7f:82:25:2e:0b:
                    73:41:ee:ee:1a:0d:f8:58:ac:44:76:dc:f0:82:a9:
                    cf:cd:58:f2:32:75:67:93:18:8e:60:90:67:83:4d:
                    99:c0:8c:5f:2d:94:75:2f:e2:be:16:d1:3f:b9:10:
                    7a:97:46:29:ce:b1:b2:47:4f:3f:70:3c:91:de:22:
                    c1:49:1a:5a:33:76:75:01:80:8b:14:62:1b:27:d8:
                    c3:19:65:06:dc:0e:71:62:5d:28:c6:2c:cc:b9:8e:
                    04:8c:d6:90:b2:a9:25:97:d9:ba:9c:a0:8c:b2:42:
                    db:7d:6d:6a:64:40:eb:75:87:e5:28:5d:c7:87:a9:
                    5a:ca:83:e4:f6:33:e8:c8:b2:0e:18:f3:ee:1c:3a:
                    63:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:59:C4:17:81:D1:91:2A:F7:23:C0:62:B7:44:37:3D:D2:1B:0A:87
            X509v3 Authority Key Identifier:
                keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:40:43:4b:53:57:77:0b:7b:2b:ff:ff:46:9f:ad:70:a5:2b:
         31:67:16:26:15:f8:76:ab:6d:e4:96:e5:b1:f7:4e:21:da:89:
         3f:3c:c0:a0:1a:ea:de:94:41:82:fd:db:00:d5:11:79:22:f7:
         99:00:86:83:76:f1:37:1d:d2:b3:c4:c8:da:49:3c:11:47:6a:
         01:44:a9:79:2c:ac:70:de:6a:ca:d9:6e:f9:24:50:70:06:43:
         97:1d:ba:93:a3:31:e0:07:83:61:53:5e:88:27:e0:a9:c3:26:
         8b:5b:bf:b8:4d:d8:49:9d:1c:4d:df:f9:30:c2:ee:fe:7b:23:
         a0:ff:6e:63:ca:b7:58:3e:5b:2c:fc:7d:cb:dd:4f:c4:d1:fd:
         e8:8c:db:50:7c:3f:85:f2:50:86:38:6b:9c:62:1e:44:36:2c:
         b4:88:17:df:25:8f:c9:34:89:de:63:a0:4d:85:80:c6:4a:70:
         a9:5a:b4:90:62:86:4b:4b:df:14:3a:35:ad:25:08:55:52:5f:
         62:82:6c:ec:41:d8:40:49:65:5a:18:d6:96:ef:3f:ca:9e:65:
         fa:92:18:ed:09:17:8a:35:c2:ed:81:8d:7b:ed:9d:55:f4:35:
         78:b5:ff:9b:01:90:9b:57:3f:6f:d5:75:e1:fa:1b:0a:24:8d:
         de:af:2d:4d
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUU97uEZK2nn8zXZITlBO2hfWgi28wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF
MEFGQjM4QzAeFw0yNTA3MDQwMTQ3MjlaFw0yNTA3MDUwNTM1MjlaMDMxMTAvBgNV
BAMTKEVDNTlDNDE3ODFEMTkxMkFGNzIzQzA2MkI3NDQzNzNERDIxQjBBODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/JxlzSeL4V1vHm+1HCyPmxUJX
Bonp1XGqOTqkwxIrhj0Uda1mn8ZhM9hzpeAZ+qZf0uKTVCgzrDW77GBb8rvirP6X
Xlel/fagZItdqTjvugN8vsYAyJec8LlnGXst/GgqhZQjYWwa3dpOYEFkGLQ6eD1/
giUuC3NB7u4aDfhYrER23PCCqc/NWPIydWeTGI5gkGeDTZnAjF8tlHUv4r4W0T+5
EHqXRinOsbJHTz9wPJHeIsFJGlozdnUBgIsUYhsn2MMZZQbcDnFiXSjGLMy5jgSM
1pCyqSWX2bqcoIyyQtt9bWpkQOt1h+UoXceHqVrKg+T2M+jIsg4Y8+4cOmMjAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQU7FnEF4HRkSr3I8Bit0Q3PdIbCocwHwYDVR0j
BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4
NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE
QzQ5MEUxMkUwQUZCMzhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS80LzhFMDdEMzFD
NjQ1MkY3QTZCMjRFNjNDRERDNDkwRTEyRTBBRkIzOEMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBsQENL
U1d3C3sr//9Gn61wpSsxZxYmFfh2q23kluWx904h2ok/PMCgGurelEGC/dsA1RF5
IveZAIaDdvE3HdKzxMjaSTwRR2oBRKl5LKxw3mrK2W75JFBwBkOXHbqTozHgB4Nh
U16IJ+CpwyaLW7+4TdhJnRxN3/kwwu7+eyOg/25jyrdYPlss/H3L3U/E0f3ojNtQ
fD+F8lCGOGucYh5ENiy0iBffJY/JNIneY6BNhYDGSnCpWrSQYoZLS98UOjWtJQhV
Ul9igmzsQdhASWVaGNaW7z/KnmX6khjtCReKNcLtgY177Z1V9DV4tf+bAZCbVz9v
1XXh+hsKJI3ery1N
-----END CERTIFICATE-----
Generated at Fri Jul 4 17:26:19 2025 by rpki-client