Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft
File:                     B6366F3DD14AC5399103961C30642E6779892C6C.mft (raw, json)
Hash identifier:          VhoaCpNs+F740BPJyxFwDL4qWWW1KA+wkPvWOuzItJ0=
Subject key identifier:   24:BC:B0:8D:5D:10:DE:3B:27:8A:01:B8:68:1D:97:A3:C2:7F:72:20
Authority key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C
Certificate issuer:       /CN=B6366F3DD14AC5399103961C30642E6779892C6C
Certificate serial:       1ED405B9FE1113F875666FEE1BB870AE8A6F256C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft
Manifest number:          01CA
Signing time:             Mon 30 Jun 2025 18:56:54 +0000
Manifest this update:     Mon 30 Jun 2025 18:51:54 +0000
Manifest next update:     Tue 01 Jul 2025 21:51:54 +0000
Files and hashes:         1: 326130363a313238333a386230313a3a2f34382d313238203d3e20323037363935.roa (hash: d6zE0vPcP8Hi7fB0sWHhmkUIMAYTtQOCQQODiEd8kFk=)
                          2: 326130363a313238333a386230303a3a2f34302d3438203d3e20323131303636.roa (hash: HcR8I97oYThFv0VpxMGU5cj9rhive5rP2rR8SXDiybY=)
                          3: 326130363a313238333a386530303a3a2f34302d3438203d3e20323131303636.roa (hash: HsjlAFHIQV6UlrYLXmXWr7Flxeyjlcgjqx5Y+vyThiA=)
                          4: 326130363a313238333a386130303a3a2f34302d3438203d3e20323131303636.roa (hash: /Rv6Qyd4oJNesSRg3hY6FH8XM9bnDURMSVi/jtj0pWA=)
                          5: 326130363a313238333a386230323a3a2f34382d313238203d3e20323037363935.roa (hash: gGGmoVRdDJpfumR8HrIQxuhNHolKOgXQjiMyUg//KAg=)
                          6: 326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa (hash: Bbj3dkfLCLvHSBOV2mo0X/dvVWVRNeC0CCNXaIH1NSU=)
                          7: 326130363a313238333a386230343a3a2f34382d313238203d3e20323136323936.roa (hash: hRJAy8rfYMb9fIetyL4Aovif4w62DytXdeUN5J+59g8=)
                          8: 326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa (hash: dd3FrIdYxmcCZ+0yiqqDqpbbY31J+y6oBOm7qM8H0EU=)
                          9: B6366F3DD14AC5399103961C30642E6779892C6C.crl (hash: Mu4imuP3hE6hF/6cLEUI4nrHGvpI1+T0rjiV+X0CePs=)
                          10: 326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa (hash: NwxUM+Bu0lOfXqc/NSfMdy0y0UUCQqdUXqKBNCkgBgQ=)
                          11: 326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa (hash: viX/3SQM4nfUuWRAgbcq7qnkCzLamDSQbyAAFuwSt0E=)
                          12: 326130363a313238333a386230333a3a2f34382d313238203d3e20323136323936.roa (hash: czNTneXyy99tFiiPXSIezg9TlLS/pM0kjDuMw6EEwZw=)
                          13: 326130363a313238333a386630303a3a2f34302d3438203d3e20323135343030.roa (hash: vL69GiNyTYYwFZpGgx32SlQ/WSepnbtpAqumAaaHZAU=)
                          14: 326130363a313238333a386330303a3a2f34302d3438203d3e20323131303636.roa (hash: Fozivs5VK4pgLoGEsqoGlUwV1cuRecwfPaBUsSrDB4Y=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 11:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d4:05:b9:fe:11:13:f8:75:66:6f:ee:1b:b8:70:ae:8a:6f:25:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6366F3DD14AC5399103961C30642E6779892C6C
        Validity
            Not Before: Jun 30 18:51:54 2025 GMT
            Not After : Jul  1 21:51:54 2025 GMT
        Subject: CN=24BCB08D5D10DE3B278A01B8681D97A3C27F7220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:bd:b2:75:16:fb:b5:00:18:ca:59:0e:ca:
                    ae:8b:00:49:da:9d:18:91:c1:f1:86:cd:02:3e:a9:
                    8e:97:54:29:1d:92:77:55:b0:cc:da:d0:a5:cf:df:
                    98:57:b4:59:f1:7f:00:2c:9f:7e:c2:cb:e3:aa:d5:
                    8f:da:58:36:a7:4a:ff:21:a5:d1:5f:01:5d:f9:10:
                    7c:4e:c2:ce:a3:2a:be:4c:8b:99:db:8f:2b:45:ef:
                    ac:46:e4:16:0a:16:d8:57:a2:d9:23:c5:ee:f4:08:
                    3f:b6:f2:cf:f9:2c:88:d2:2c:74:d9:af:ee:e4:55:
                    0b:15:d2:1f:4d:e3:eb:e7:8c:c5:88:ae:1a:94:35:
                    c8:40:71:5c:e1:38:c6:3d:8d:d4:ab:c2:dc:e1:89:
                    43:9d:9c:7d:c4:f3:3f:b8:0a:e6:eb:33:6c:3c:52:
                    15:9e:32:06:00:cd:2e:18:fd:ab:c6:d9:08:f6:ae:
                    07:0e:41:f0:77:25:4d:17:0f:f4:19:2e:65:7d:ab:
                    b1:f0:1a:8f:43:a7:e3:f1:5a:1b:07:fa:e8:da:f3:
                    3c:80:e8:6c:31:08:52:41:5f:d4:24:a1:ca:a7:d2:
                    db:ed:62:57:75:af:90:4a:43:b0:1d:e5:21:e0:44:
                    a6:de:0d:c9:8d:cf:4b:ef:dc:9f:7f:d8:3b:24:39:
                    f7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BC:B0:8D:5D:10:DE:3B:27:8A:01:B8:68:1D:97:A3:C2:7F:72:20
            X509v3 Authority Key Identifier:
                keyid:B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:9e:ba:4c:92:7e:a4:bb:c1:59:79:ac:e7:e0:6e:be:6a:e1:
         0b:25:77:54:95:dd:e7:65:f5:8f:c0:97:d8:82:09:a7:d4:39:
         85:43:83:c6:bd:cc:8f:82:e8:95:1f:07:d7:cb:bc:dc:af:22:
         ad:be:4e:e4:f2:37:72:42:89:c7:29:6a:a2:1d:a5:df:bf:66:
         ff:87:c8:47:45:f9:82:de:7d:ab:39:94:a9:5c:fb:01:86:71:
         d0:07:9c:87:29:51:1e:d3:7a:ff:06:c0:59:ad:2d:ea:cd:03:
         da:1d:a2:f9:be:cb:07:fc:67:bd:33:7c:43:5a:61:37:ea:94:
         fb:a8:5a:5c:27:46:24:19:ef:56:0a:3b:e2:77:5c:74:6c:80:
         7f:af:17:d8:34:20:de:ce:f2:3a:77:b3:27:a0:20:c0:fc:ce:
         f0:1c:4c:46:cc:8a:9b:3a:62:01:2a:30:72:51:5a:37:e5:76:
         25:bb:a1:59:18:72:c8:9f:78:55:5f:ac:ee:2f:48:36:f5:08:
         50:b8:6f:4e:53:db:00:a6:88:b2:ee:31:fd:ff:89:a9:c2:90:
         4e:75:9a:fa:db:4f:fe:a6:67:e4:b5:fe:5d:51:68:33:9d:9f:
         03:86:72:5b:6a:dd:71:c8:fb:7e:12:c4:4c:27:31:fb:54:b2:
         7b:d9:33:31
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUHtQFuf4RE/h1Zm/uG7hwropvJWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3
OTg5MkM2QzAeFw0yNTA2MzAxODUxNTRaFw0yNTA3MDEyMTUxNTRaMDMxMTAvBgNV
BAMTKDI0QkNCMDhENUQxMERFM0IyNzhBMDFCODY4MUQ5N0EzQzI3RjcyMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyqL2ydRb7tQAYylkOyq6LAEna
nRiRwfGGzQI+qY6XVCkdkndVsMza0KXP35hXtFnxfwAsn37Cy+Oq1Y/aWDanSv8h
pdFfAV35EHxOws6jKr5Mi5nbjytF76xG5BYKFthXotkjxe70CD+28s/5LIjSLHTZ
r+7kVQsV0h9N4+vnjMWIrhqUNchAcVzhOMY9jdSrwtzhiUOdnH3E8z+4CubrM2w8
UhWeMgYAzS4Y/avG2Qj2rgcOQfB3JU0XD/QZLmV9q7HwGo9Dp+PxWhsH+uja8zyA
6GwxCFJBX9Qkocqn0tvtYld1r5BKQ7Ad5SHgRKbeDcmNz0vv3J9/2DskOfc/AgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUJLywjV0Q3jsnigG4aB2Xo8J/ciAwHwYDVR0j
BBgwFoAUtjZvPdFKxTmRA5YcMGQuZ3mJLGwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4
MDhiLzIvQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3OTg5MkM2Qy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz
YmItOWFjNi01YWI0MmRmYmY0MDkvMS9CNjM2NkYzREQxNEFDNTM5OTEwMzk2MUMz
MDY0MkU2Nzc5ODkyQzZDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi8yL0I2MzY2RjNE
RDE0QUM1Mzk5MTAzOTYxQzMwNjQyRTY3Nzk4OTJDNkMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBRnrpM
kn6ku8FZeazn4G6+auELJXdUld3nZfWPwJfYggmn1DmFQ4PGvcyPguiVHwfXy7zc
ryKtvk7k8jdyQonHKWqiHaXfv2b/h8hHRfmC3n2rOZSpXPsBhnHQB5yHKVEe03r/
BsBZrS3qzQPaHaL5vssH/Ge9M3xDWmE36pT7qFpcJ0YkGe9WCjvid1x0bIB/rxfY
NCDezvI6d7MnoCDA/M7wHExGzIqbOmIBKjByUVo35XYlu6FZGHLIn3hVX6zuL0g2
9QhQuG9OU9sApoiy7jH9/4mpwpBOdZr620/+pmfktf5dUWgznZ8DhnJbat1xyPt+
EsRMJzH7VLJ72TMx
-----END CERTIFICATE-----
Generated at Mon Jun 30 23:19:26 2025 by rpki-client