Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
File:                     92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft (raw, json)
Hash identifier:          2qjx9EdwEZRojZ9z3Cxkz/9LzgpWOK39P+944lXE2YU=
Subject key identifier:   8C:A2:0E:F9:8A:03:EF:76:CC:64:B6:47:99:97:F9:5B:6E:50:C1:8C
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Certificate issuer:       /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial:       6F4E8F99C11C65A21C296AEAFD50F5CA19CD711A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
Manifest number:          AB
Signing time:             Fri 22 Aug 2025 22:47:33 +0000
Manifest this update:     Fri 22 Aug 2025 22:42:33 +0000
Manifest next update:     Sun 24 Aug 2025 02:03:33 +0000
Files and hashes:         1: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl (hash: q2h8JoRPEENhc6RyFpfOhUV16i9IfyeLjtnxipIh2Ow=)
                          2: 39352e3231342e3138322e302f32342d3234203d3e20323132333834.roa (hash: ahvCpQCYKDC5UmCWINUE1+9+R3CEuxDs9xpt+/mHGMc=)
                          3: 3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa (hash: yFl38PxDDUPllDewnZ7MEFH9Z5qJaOTL0zY/pvxRoUY=)
                          4: 39352e3231342e3137332e302f32342d3234203d3e20323135333034.roa (hash: ykvLLS6Z6kV/o/cgRwX1ZEaK41JubO1IO21DEk7RF6E=)
                          5: 34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa (hash: JaeJstE2poR1Rlm8a7RHcBFfHeeu7vNkxKzYr0p4Jc8=)
                          6: 34352e3135362e35322e302f32322d3232203d3e2039303039.roa (hash: eK18gsMy8+wzgYZmaz7TkcO08JcfPTkHAWlv0aJXuz0=)
                          7: 39352e3231342e3137332e302f32342d3234203d3e20323134363534.roa (hash: mFOzhyAh9tCioAD9KNfnMzhX/ZruiFJExBt3hGxBMhs=)
                          8: 39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa (hash: EnyfxlxrEZoOAQu439Mhaj0MSgN4o3Cr584mhVLUCgw=)
                          9: 39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa (hash: P3AXSCPo5qCcqJ/tF9UnDRiSqmNKJoNVWYccPe9dv1w=)
                          10: 39352e3231342e3138302e302f32342d3234203d3e20323033373538.roa (hash: yeHT2siMw+46e40lrxlb+yyyQe2+Rk/4CH0GwC6laEg=)
                          11: 34352e3133392e3139382e302f32342d3234203d3e20323134343636.roa (hash: 9KX5zC7UuI47N7heL//vNyLO3x7YEi1CucEhFX8SUR0=)
                          12: 39352e3231342e3137332e302f32342d3234203d3e203336353330.roa (hash: ZX0rYuyfoePX3zdEt8vwc7JgQs5NsAAOyIzAnAQ42ko=)
                          13: 39352e3231342e3137352e302f32342d3234203d3e20313335333931.roa (hash: dZLABnxKpTxFiKmt1/yK20i3zGqpWgZ6NnQoPD/883U=)
                          14: 39352e3231342e3137322e302f32342d3234203d3e20313937343737.roa (hash: PxR9Gj8WOc/7LwGO5t67j8SuO3iXayzi64SIiemjFkw=)
                          15: 39352e3231342e3138332e302f32342d3234203d3e20323039313831.roa (hash: lTsB3YA1lHFbSl1Cmaufvak87ZyxIaRmoFdP+J/wwxc=)
                          16: 39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa (hash: 7RDjli52ea3Y5rIxOBi7CoAOYzObgN76cF1oNhGaH/0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4e:8f:99:c1:1c:65:a2:1c:29:6a:ea:fd:50:f5:ca:19:cd:71:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
        Validity
            Not Before: Aug 22 22:42:33 2025 GMT
            Not After : Aug 24 02:03:33 2025 GMT
        Subject: CN=8CA20EF98A03EF76CC64B6479997F95B6E50C18C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:1a:02:df:f4:ba:dd:d3:2d:f9:b9:05:25:
                    8e:37:70:94:88:4b:86:6c:14:b8:61:e1:db:d6:82:
                    6b:8f:86:a0:ac:7c:d3:12:cd:4c:23:24:f6:48:79:
                    3d:dd:d0:e5:21:43:c9:ef:fb:63:8f:e7:21:17:49:
                    fa:8e:ee:13:6a:2f:0d:ca:80:db:1c:25:68:63:c4:
                    a3:da:cd:eb:cc:05:ca:4b:d9:68:64:5e:46:f0:2c:
                    93:2b:8c:79:89:e1:44:cf:59:88:ea:89:05:7b:79:
                    b4:b7:2b:93:34:e3:84:96:04:c0:54:51:80:cd:b4:
                    90:7b:ee:86:e2:1d:d2:9b:b9:d9:b9:ed:f8:c8:a3:
                    b9:47:16:be:2b:4b:2a:fa:44:f5:d6:2f:59:82:07:
                    32:ab:7a:ce:23:43:2c:f0:0c:37:4d:84:ff:00:81:
                    a7:a0:98:4f:6a:3e:22:8d:87:29:08:c3:cf:d0:91:
                    da:19:3f:d9:94:68:3c:73:c9:d9:62:c9:b5:99:28:
                    87:1d:86:f0:0c:3a:50:04:29:12:c4:01:fe:91:bf:
                    dd:4d:c3:54:4b:b2:8c:bd:5a:21:d6:57:49:2f:90:
                    74:37:0f:4e:01:c2:99:2f:e0:d2:78:60:05:67:e0:
                    52:9d:1f:68:42:b6:92:e4:de:47:91:f0:37:91:35:
                    73:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A2:0E:F9:8A:03:EF:76:CC:64:B6:47:99:97:F9:5B:6E:50:C1:8C
            X509v3 Authority Key Identifier:
                keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:07:09:0d:a6:48:89:cb:4a:78:5c:74:12:1a:3c:2e:e3:d4:
         a8:e5:e5:4e:1d:6e:cc:2b:11:2c:47:2a:5e:e1:5f:08:16:61:
         10:b5:7a:e3:e2:e7:03:d9:9f:4a:33:b9:fd:be:a5:eb:84:7d:
         67:b5:6e:9b:9e:b7:68:1a:7a:a9:14:f2:61:54:39:52:f2:8e:
         38:e5:d0:cc:e7:21:b8:5a:a6:12:11:67:82:3c:99:39:c7:24:
         ba:d0:c4:15:76:1d:f7:6f:a1:9c:e8:e6:35:0c:84:a3:36:f1:
         3f:a8:1e:cb:bd:81:d4:40:1a:d0:82:be:17:ee:0b:75:ec:98:
         7f:c9:68:c5:54:ef:10:5a:4c:2f:15:83:a4:b0:14:71:29:fc:
         b2:df:b1:fa:e9:33:bc:9b:76:9c:11:14:1c:57:8c:97:6c:e6:
         d4:c0:de:8c:fc:72:12:9d:eb:2b:2f:7b:4f:98:fa:33:b7:3c:
         ac:c4:f2:88:8d:b2:95:26:df:1e:80:53:a6:ce:04:c9:61:3f:
         e6:5c:63:51:d0:a3:62:2b:8a:21:e3:50:5f:0e:2d:b8:da:2f:
         fb:2c:58:94:97:21:f4:cd:47:73:59:0b:7d:0a:f7:d9:0b:5e:
         b5:0c:af:7d:f7:1d:7c:2d:65:b7:71:f3:5b:21:1d:8d:6e:56:
         00:56:c1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:45:01 2025 by rpki-client