Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft
File:                     702B79B445330AC21D237308277A4472598CE771.mft (raw, json)
Hash identifier:          DGwn9vDEcANQzl6ZBeLJK2lPYkAxswgVi6i90QfJELY=
Subject key identifier:   6B:F4:33:B4:21:41:30:E3:A2:21:2F:22:D6:BF:0B:00:9A:5F:32:2A
Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71
Certificate issuer:       /CN=702B79B445330AC21D237308277A4472598CE771
Certificate serial:       29972349837D813DA498D1BEFB09BD7CA784515B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft
Manifest number:          56
Signing time:             Mon 20 Oct 2025 01:31:16 +0000
Manifest this update:     Mon 20 Oct 2025 01:26:16 +0000
Manifest next update:     Tue 21 Oct 2025 03:56:16 +0000
Files and hashes:         1: 326131343a373538333a663730363a3a2f34382d3438203d3e20323134393535.roa (hash: HF0IXoiIoV1vsEb3Y7UE6hceXgn4rnvPt86H7Wi7oFU=)
                          2: 326131343a373538333a663730343a3a2f34382d3438203d3e20323134393535.roa (hash: GR7y7aRgVAUP5lUmI8IZDhrv8mAyuuXgZxhshW1ruYs=)
                          3: 326131343a373538303a666666613a3a2f34382d3438203d3e20323134393535.roa (hash: h/rRMvyqafFU+yTlCYjO1aoLzPvMYTq8Atefyqn1aw8=)
                          4: 326131343a373538333a663730323a3a2f34382d3438203d3e20323134393535.roa (hash: j1h3rUtpYcXTQ9tg2+zKR1MIHOPPCpnwfhKyK3a6mSc=)
                          5: 326131343a373538333a663730353a3a2f34382d3438203d3e20323134393535.roa (hash: v1ff3/5opCg79B8vnRLLf35N5RlDFleXR6jWqIzcy+A=)
                          6: 326131343a373538333a663734333a3a2f34382d3438203d3e20323134393535.roa (hash: F//u8b8URxPoSW5tKZ7gI7LWdU+B7yQQrxeBR/nXITQ=)
                          7: 326131343a373538333a663730333a3a2f34382d3438203d3e20323134393535.roa (hash: 9+boFqIS6keyE5RNh9z/i3/Vy3fO+EE8pDJc8uN4NyQ=)
                          8: 326131343a373538333a663736343a3a2f34382d3438203d3e20323134393535.roa (hash: zM36/OphB/KbTgVAZhJZfKncuog5pc9Z90qFovwCspo=)
                          9: 326131343a373538333a663730613a3a2f34382d3438203d3e20323134393535.roa (hash: KrncfgwV2JNmUMMX9XTAiUcGcVNG82mQHu5/P0lF/YQ=)
                          10: 326131343a373538333a663730313a3a2f34382d3438203d3e20323134393535.roa (hash: RzicPZXer6PLdeFy+vOsancgSNcjrm95+RPOXY7LoDc=)
                          11: 326131343a373538333a663730393a3a2f34382d3438203d3e20323134393535.roa (hash: ody+MZu+p9r7722qUv+nib+WdzL08bt7JIhdIl0nBOM=)
                          12: 326131343a373538333a663730383a3a2f34382d3438203d3e20323134393535.roa (hash: s15NOBRzlJhT8Ilr0QxZxBoPvIfuNlcjTL4p1JyK0Rg=)
                          13: 702B79B445330AC21D237308277A4472598CE771.crl (hash: woNo7R+YUOel70PhrrXQCx58q7UUavA/ocMaKoVeDxo=)
                          14: 326131343a373538333a663730373a3a2f34382d3438203d3e20323134393535.roa (hash: KKLY1zCTXfmGMrjDFuT7b/5dqeecgqHT0wX+vU1j/NU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 03:56:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:97:23:49:83:7d:81:3d:a4:98:d1:be:fb:09:bd:7c:a7:84:51:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=702B79B445330AC21D237308277A4472598CE771
        Validity
            Not Before: Oct 20 01:26:16 2025 GMT
            Not After : Oct 21 03:56:16 2025 GMT
        Subject: CN=6BF433B4214130E3A2212F22D6BF0B009A5F322A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:92:a5:7c:6f:90:6e:10:fc:25:c7:fd:96:c0:
                    20:d6:08:53:9d:ea:b7:19:79:18:7c:26:ab:a3:6e:
                    1e:0d:cc:2a:1f:1a:5e:34:c6:29:74:22:d2:21:be:
                    12:be:7b:76:27:0d:52:fa:d9:21:12:08:d1:13:bb:
                    15:90:ca:a2:60:03:8c:48:b7:e2:25:d6:bf:11:43:
                    60:83:08:45:94:76:ff:73:2c:fb:ab:01:cf:ef:95:
                    59:be:4a:fc:88:bb:81:d2:c7:c2:83:46:36:3f:97:
                    24:f4:ec:65:ae:d2:1f:79:4a:95:e8:13:2f:cf:fc:
                    73:c7:d2:f1:60:0b:e3:15:27:23:4b:4c:31:aa:00:
                    5b:a9:86:c2:23:37:9e:80:35:9a:56:8c:f1:63:e5:
                    91:8a:fa:d1:35:82:97:2a:e2:2f:ef:7f:c2:f0:43:
                    e2:48:45:1f:1e:3b:e3:a9:68:c9:e6:7f:98:de:6f:
                    33:cf:8c:dd:da:db:db:73:e8:35:a9:e4:17:fd:55:
                    1e:7c:b8:24:21:37:96:d6:5c:0f:f7:26:09:65:84:
                    a6:fc:31:3b:43:c9:52:7e:3e:55:9f:69:70:e0:3b:
                    46:5d:2c:90:61:f2:91:1c:28:15:79:d1:e2:6e:9c:
                    23:f0:1c:aa:96:40:17:8a:25:ef:31:83:f5:59:41:
                    42:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F4:33:B4:21:41:30:E3:A2:21:2F:22:D6:BF:0B:00:9A:5F:32:2A
            X509v3 Authority Key Identifier:
                keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:dc:ba:6c:51:c5:51:a6:cd:28:a3:e1:1b:22:77:50:3c:fd:
         56:2c:7c:c3:0e:1c:66:a4:db:78:3f:40:28:06:39:57:23:1d:
         28:ed:c1:2c:fb:8f:13:22:f2:f8:2a:cd:c5:bc:0a:26:62:e0:
         81:4b:71:34:cf:eb:d3:b5:b3:b4:81:0a:c8:6f:45:2d:ae:77:
         55:0b:47:b6:ed:54:da:a0:5d:ba:cc:f5:03:5d:12:88:83:51:
         44:bf:5f:bd:ac:02:b6:37:8e:cc:7a:15:d4:c3:4a:8e:b8:df:
         a9:7f:25:98:40:2e:ab:90:13:8d:43:c5:64:8e:d0:c0:02:b5:
         55:1c:61:62:98:a5:22:3b:47:db:0f:27:68:98:be:e4:ad:63:
         e4:24:5f:29:bd:40:94:15:05:cc:06:e2:ee:c7:5b:66:18:54:
         8d:96:27:70:fd:a3:63:be:41:6f:c5:55:6c:74:44:0d:d0:06:
         1e:6a:1f:02:9d:cd:5f:57:5b:d3:01:26:b9:0d:d8:1f:e6:d2:
         75:cf:79:68:d2:09:d3:29:02:d4:af:73:c0:49:60:dd:0a:f3:
         3f:fc:d5:b5:fd:63:82:f3:cf:a5:58:c1:81:04:17:47:71:81:
         c6:cc:92:b4:18:9d:c7:73:95:60:60:50:8b:d0:ae:a6:8f:b2:
         89:eb:51:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:43:27 2025 by rpki-client