Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft
File:                     8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft (raw, json)
Hash identifier:          enDeml27psDnKSLYksduqYCUMCZ7fyljODTVZLxMPWc=
Subject key identifier:   15:B9:78:FB:84:E8:2E:F1:7F:B1:ED:EA:FE:8C:64:67:B6:F9:3F:5D
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Certificate issuer:       /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial:       1F5EFA9D370E4AAE3327A7FE3198E516D45A1A34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft
Manifest number:          04C5
Signing time:             Sun 19 Oct 2025 21:11:39 +0000
Manifest this update:     Sun 19 Oct 2025 21:06:39 +0000
Manifest next update:     Mon 20 Oct 2025 21:50:39 +0000
Files and hashes:         1: 3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa (hash: pkJz5L9iLZRF+OIvLDh3t2xUInq31L6An4us+3j1eD0=)
                          2: 3138382e3136342e3135362e302f32342d3234203d3e20383334.roa (hash: sY/xAuh6Mg68YWt7c8TloEoU7TIBsTXsCx6tRGi7xp4=)
                          3: 3138382e3136342e3135352e302f32342d3234203d3e203631333137.roa (hash: W1I8woHaqJ6kU4xjFwKm1g6uV7UZ51m6Dv8R/7Dp0Oc=)
                          4: 3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa (hash: PjHq1CK+fSk+5WuONiKJilG5oXTFh0dZnkKMEZVNP8E=)
                          5: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl (hash: KieSYHbTWgpC40Q3qSfHpGmFKeSv3ewNY6beobhAx+k=)
                          6: 3138382e3136342e3135342e302f32342d3234203d3e2039333034.roa (hash: Xrl4k2Y1ZQnjBYts0VWEIYeb2G4oTSJ6MhQs1UM8vvM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 21:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5e:fa:9d:37:0e:4a:ae:33:27:a7:fe:31:98:e5:16:d4:5a:1a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
        Validity
            Not Before: Oct 19 21:06:39 2025 GMT
            Not After : Oct 20 21:50:39 2025 GMT
        Subject: CN=15B978FB84E82EF17FB1EDEAFE8C6467B6F93F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2f:a3:a1:18:7e:0a:8b:3a:11:eb:c2:b0:cf:
                    f7:ba:28:b9:8b:84:81:63:c5:2e:92:6e:74:14:59:
                    66:84:25:ae:3c:23:99:ad:6e:1f:ec:3e:8d:f3:ca:
                    6c:c4:e0:25:f5:59:e3:77:af:cf:3f:46:73:51:1b:
                    34:22:9c:fa:74:f4:48:61:17:9a:ad:6e:df:3c:2f:
                    5f:b8:59:7f:8e:b8:f9:9f:48:dc:43:d7:38:9b:95:
                    15:2e:8d:e1:3b:42:eb:e1:76:68:92:56:86:1c:5f:
                    68:9c:a2:57:7b:dd:1c:a8:b0:26:b6:9d:5e:12:7d:
                    8f:81:15:35:be:ea:9e:10:1b:ad:26:2f:56:57:d4:
                    44:28:70:0c:18:51:b5:21:49:01:56:e7:20:c1:8e:
                    5a:92:2d:16:8b:ee:a2:28:46:50:7c:7b:2c:91:f5:
                    a0:ba:36:e5:db:37:8b:a8:d8:9e:be:0f:99:89:21:
                    87:c6:71:cc:1e:b5:93:56:78:c8:b3:10:64:c8:32:
                    6a:25:9e:f8:23:c7:96:e9:2b:42:13:e5:ec:23:a8:
                    1d:c9:ae:99:f6:8d:5e:69:b9:f9:7f:23:2e:f4:3a:
                    6f:0e:24:dd:e8:c0:1c:51:6f:90:89:b3:bb:d7:f4:
                    9a:fb:b2:dd:b0:cc:9a:0f:2a:af:26:55:24:8d:63:
                    09:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B9:78:FB:84:E8:2E:F1:7F:B1:ED:EA:FE:8C:64:67:B6:F9:3F:5D
            X509v3 Authority Key Identifier:
                keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:08:1c:26:23:01:30:67:1c:bb:b2:e1:7b:c5:8a:9c:d6:08:
         af:f4:e4:40:d7:19:f9:bd:c7:c3:66:8a:14:bf:3c:81:5a:1c:
         8c:b8:a0:aa:c2:ac:d0:24:ba:c4:7b:dd:ae:35:20:6d:ea:4e:
         88:81:f7:9d:92:ec:2d:fd:54:ad:3f:4b:ec:14:7c:c2:cd:b9:
         ae:54:41:53:d6:3e:33:d0:1b:39:ca:48:c2:2d:90:b4:a6:6c:
         f2:fb:ae:17:82:84:e0:2f:92:0b:13:d3:8e:ac:3e:52:45:ed:
         37:65:c1:dc:a5:91:6d:2d:da:5d:19:91:f9:08:23:84:0b:10:
         d4:23:a0:24:9d:83:7a:61:d2:96:2c:e7:d3:ab:dc:df:29:38:
         d3:a5:c0:a7:c3:f9:4d:ff:b9:30:a7:dd:bd:ca:46:fa:66:b3:
         5c:63:e7:f4:15:2a:44:68:4a:43:48:67:da:ba:7f:d8:d8:0b:
         94:2f:b4:b5:55:dd:b1:8d:a1:05:3d:84:9e:2f:8c:b0:6c:97:
         5d:e9:92:1a:72:50:92:d0:ff:d8:8c:9c:e0:41:b1:ef:b7:72:
         02:44:ca:cf:f1:3b:58:7b:ff:e4:45:d4:50:dc:8c:83:d4:f0:
         a9:1a:36:9d:58:9e:78:be:8e:f1:f4:64:33:9c:9e:18:7a:92:
         be:48:93:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:14 2025 by rpki-client