Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
File:                     25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json)
Hash identifier:          eL68jTMLg5LLHC1cic6jB6h0HK/IuxDnhX/s2GuhS7g=
Subject key identifier:   3B:2C:89:32:93:F5:13:A8:F8:C3:1E:CE:39:B5:66:E6:78:0B:1F:97
Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
Certificate issuer:       /CN=25827d84056b8444cc2a7842759035354b8416bc
Certificate serial:       4ABC271033D5BB5AA44EAF8E90B0DD24A030B2B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
Manifest number:          024E
Signing time:             Sat 23 Aug 2025 01:51:48 +0000
Manifest this update:     Sat 23 Aug 2025 01:46:48 +0000
Manifest next update:     Sun 24 Aug 2025 02:23:48 +0000
Files and hashes:         1: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: nCuZ5ADJB2e8lGpTQQDYT3/JtyMvU82Myd2okt8I23s=)
                          2: AS18607.asa (hash: UmRU72jnrIjcrDo/h9XDTnV/XRM8dz+BcjyGexjXWqI=)
                          3: 3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa (hash: wMCy3m1h75GfC2ATV5bYCJD7S6jjiI8Si5ikYie+OUI=)
                          4: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: dzwPhwqrXF4THjw0Gl+K+d3ns3KP/1zFf2s2oob0gYw=)
                          5: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: lVUTv9ePxFs76NYMpRch/wm8DFit0p7cLkwe+1lgWxI=)
                          6: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: MAksePoJ+rnc08XyHZPcbQHx/BhF1iv7lCiKD0GFWxw=)
                          7: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: Pf0WXVKsadiaiJtusSEXuFj/o/oP56mVyLEI27IiyE8=)
                          8: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=)
                          9: AS207487.asa (hash: Ha+forEe+xS82UGSV4B7j+UWBj+/I05XFS+Ojajx3y4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:bc:27:10:33:d5:bb:5a:a4:4e:af:8e:90:b0:dd:24:a0:30:b2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc
        Validity
            Not Before: Aug 23 01:46:48 2025 GMT
            Not After : Aug 24 02:23:48 2025 GMT
        Subject: CN=3B2C893293F513A8F8C31ECE39B566E6780B1F97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9e:29:44:f2:64:80:94:02:ee:f2:9b:e7:33:
                    85:6a:95:ec:f7:6d:28:8c:ee:f7:03:a0:89:9d:2c:
                    93:77:fc:17:60:3e:13:0f:24:b5:01:1d:d1:5a:a4:
                    52:ed:b8:51:5d:e2:41:fa:48:8d:c8:da:ad:61:bd:
                    ce:bc:a0:c3:81:46:49:69:6e:26:a2:ea:a7:a0:5f:
                    4a:a8:98:03:99:87:6c:7f:03:59:59:ca:79:e4:07:
                    5d:2c:ee:94:d1:58:f2:71:91:61:c9:a4:ad:f7:97:
                    01:44:fe:d6:cf:de:1a:2c:96:46:be:c4:6a:c2:4b:
                    ee:2d:e2:c2:fe:df:50:9c:1d:32:40:ea:10:37:22:
                    0c:d3:aa:2a:c5:38:6c:f6:05:98:fd:5e:7e:ea:d7:
                    42:53:c7:47:e8:fd:76:c7:4d:71:63:3e:78:0c:32:
                    3d:4c:e1:54:2c:31:2a:16:35:e6:23:8e:40:cc:f7:
                    db:2a:3d:01:54:f9:84:b8:99:e8:72:1d:eb:15:71:
                    36:e7:1a:b0:96:62:31:b7:7d:42:bf:c2:23:fe:5e:
                    d0:f3:0e:6a:20:5d:39:3e:2f:31:ff:b2:f3:26:51:
                    78:e2:2b:07:97:92:8a:7d:39:06:4d:2f:0b:95:38:
                    5f:d3:08:65:c7:b4:48:b6:bd:73:03:a4:bf:63:28:
                    01:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2C:89:32:93:F5:13:A8:F8:C3:1E:CE:39:B5:66:E6:78:0B:1F:97
            X509v3 Authority Key Identifier:
                keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:ef:fc:08:1f:40:9e:4e:bd:cc:4f:9a:a6:57:e6:3e:db:0a:
         68:98:ca:34:d9:42:3f:0a:ae:5c:34:63:e7:b8:32:3a:90:4f:
         6d:e2:56:02:ca:a8:f4:26:bb:82:72:18:5e:54:f8:98:91:a0:
         d7:c6:20:9b:5a:8a:55:bc:6c:af:ea:16:d4:48:4c:c2:79:c6:
         9a:a4:fe:af:9b:b0:05:de:3c:cb:4b:7b:7c:6c:66:20:73:59:
         f6:c1:36:96:e7:bb:30:b6:ba:8f:e0:0d:64:4d:cd:43:ce:d2:
         1b:66:71:90:6c:49:c4:3a:02:51:4b:b8:fc:55:34:06:39:b7:
         b4:e4:a3:6e:9c:3e:f1:72:b1:21:bb:50:ea:74:64:ff:25:b7:
         a0:09:37:74:30:12:91:fb:e2:63:97:6a:f9:15:fa:56:25:7e:
         d2:19:e2:11:e2:cd:89:2d:42:83:2b:1b:9b:45:20:88:bf:41:
         11:d1:f6:71:28:5a:90:77:b7:19:38:be:18:65:85:84:96:2e:
         fc:93:16:01:f7:d1:bc:a3:30:72:bf:f4:c4:d6:66:6b:51:41:
         03:4f:95:97:5c:d7:58:4a:02:3c:f5:b7:16:91:82:f9:ce:b2:
         85:4f:ed:f6:ec:92:78:a1:58:23:e9:f4:0b:64:d8:26:d8:d7:
         be:2f:86:0d
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUSrwnEDPVu1qkTq+OkLDdJKAwsrMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU4MjdkODQwNTZiODQ0NGNjMmE3ODQyNzU5MDM1MzU0
Yjg0MTZiYzAeFw0yNTA4MjMwMTQ2NDhaFw0yNTA4MjQwMjIzNDhaMDMxMTAvBgNV
BAMTKDNCMkM4OTMyOTNGNTEzQThGOEMzMUVDRTM5QjU2NkU2NzgwQjFGOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDenilE8mSAlALu8pvnM4Vqlez3
bSiM7vcDoImdLJN3/BdgPhMPJLUBHdFapFLtuFFd4kH6SI3I2q1hvc68oMOBRklp
biai6qegX0qomAOZh2x/A1lZynnkB10s7pTRWPJxkWHJpK33lwFE/tbP3hoslka+
xGrCS+4t4sL+31CcHTJA6hA3IgzTqirFOGz2BZj9Xn7q10JTx0fo/XbHTXFjPngM
Mj1M4VQsMSoWNeYjjkDM99sqPQFU+YS4mehyHesVcTbnGrCWYjG3fUK/wiP+XtDz
DmogXTk+LzH/svMmUXjiKweXkop9OQZNLwuVOF/TCGXHtEi2vXMDpL9jKAFvAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUOyyJMpP1E6j4wx7OObVm5ngLH5cwHwYDVR0j
BBgwFoAUJYJ9hAVrhETMKnhCdZA1NUuEFrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjliYmZkY2YtMzVjZC00NTI0LThmZmEtMzAwNWIwYjY5
YTI5LzAvMjU4MjdEODQwNTZCODQ0NENDMkE3ODQyNzU5MDM1MzU0Qjg0MTZCQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pZSjloQVZyaEVUTUtuaENkWkExTlV1
RUZydy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OWJiZmRjZi0z
NWNkLTQ1MjQtOGZmYS0zMDA1YjBiNjlhMjkvMC8yNTgyN0Q4NDA1NkI4NDQ0Q0My
QTc4NDI3NTkwMzUzNTRCODQxNkJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+/8CB9Ank69zE+aplfm
PtsKaJjKNNlCPwquXDRj57gyOpBPbeJWAsqo9Ca7gnIYXlT4mJGg18Ygm1qKVbxs
r+oW1EhMwnnGmqT+r5uwBd48y0t7fGxmIHNZ9sE2lue7MLa6j+ANZE3NQ87SG2Zx
kGxJxDoCUUu4/FU0Bjm3tOSjbpw+8XKxIbtQ6nRk/yW3oAk3dDASkfviY5dq+RX6
ViV+0hniEeLNiS1Cgysbm0UgiL9BEdH2cShakHe3GTi+GGWFhJYu/JMWAffRvKMw
cr/0xNZma1FBA0+Vl1zXWEoCPPW3FpGC+c6yhU/t9uySeKFYI+n0C2TYJtjXvi+G
DQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:44 2025 by rpki-client