Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft
File:                     0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json)
Hash identifier:          1q2UoOAR9xAjFeM5yEfGyNtMDABXVJvEB0Uznc69DO4=
Subject key identifier:   3B:64:BB:97:C0:B4:B5:60:FB:51:98:A4:94:04:4C:B0:2C:E9:50:C9
Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45
Certificate issuer:       /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45
Certificate serial:       6FCF0165505576788559A388A1B5058D4B295D1F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft
Manifest number:          024D
Signing time:             Sun 19 Oct 2025 14:38:15 +0000
Manifest this update:     Sun 19 Oct 2025 14:33:15 +0000
Manifest next update:     Mon 20 Oct 2025 14:50:15 +0000
Files and hashes:         1: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: OYFGGb9dMqAtV18cBeD3NbZ0TuwCvJXmn37LZwaW7zg=)
                          2: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: bjWKUcdJK3JxiL+GqIgQQNiLJnq1CfKPBgs/UuOHrJA=)
                          3: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: jAqeRW+G0tj75/HjlTu9upVrXQ/2AvwaP0ubMorKA1Q=)
                          4: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: nngwsUzjcCgp7J67u6IbTWkj93PgduGkKeTBT7xmA9Q=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:cf:01:65:50:55:76:78:85:59:a3:88:a1:b5:05:8d:4b:29:5d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45
        Validity
            Not Before: Oct 19 14:33:15 2025 GMT
            Not After : Oct 20 14:50:15 2025 GMT
        Subject: CN=3B64BB97C0B4B560FB5198A494044CB02CE950C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:be:62:79:f0:21:1d:a5:3a:17:34:87:7a:c5:
                    cf:29:d7:94:c1:e8:f8:0f:59:ba:7b:48:e0:0d:17:
                    cf:f4:6a:fd:49:1d:1a:cc:4a:67:f8:a9:e6:4e:3d:
                    47:ac:43:d4:dc:ad:b0:0d:65:de:8b:eb:08:45:01:
                    9f:00:43:53:8f:99:95:23:60:1f:bf:4a:14:62:fe:
                    85:aa:fa:8f:8c:a8:95:83:d7:16:5b:5d:9e:b6:ee:
                    80:9e:14:98:b8:a8:3b:c0:81:34:25:92:5b:cb:7a:
                    ef:87:00:a4:b7:d6:1d:5f:35:2f:5e:78:86:55:79:
                    7c:1a:8a:ef:25:ef:ea:e9:e5:3c:2c:77:cc:64:61:
                    30:d9:ad:2f:cd:11:dd:56:90:eb:d7:b1:20:f5:4d:
                    06:62:51:bf:e3:78:87:9d:7e:c6:7e:96:c3:ea:ca:
                    fd:49:e2:3f:a7:da:78:ad:00:a3:21:de:34:6c:b4:
                    d3:bd:7a:81:c7:8b:41:e8:e4:2f:ae:95:a1:dd:f5:
                    97:93:7b:b2:c8:57:a8:e4:33:74:57:ba:e6:7b:3f:
                    9f:ec:c3:87:7c:01:a2:22:e1:0c:47:16:1a:e2:ca:
                    f1:dc:e7:22:d3:d5:da:0e:7d:8e:5a:71:22:d0:2d:
                    20:5d:fa:87:68:10:8a:8a:34:e2:7f:a5:42:0e:2d:
                    2b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:64:BB:97:C0:B4:B5:60:FB:51:98:A4:94:04:4C:B0:2C:E9:50:C9
            X509v3 Authority Key Identifier:
                keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:74:38:3c:11:69:5f:02:be:cb:20:58:64:84:1b:cd:b9:16:
         67:aa:f9:af:38:19:1f:20:ce:8b:c5:69:7b:8c:51:2d:79:ed:
         4a:86:ae:7b:4f:6e:50:0d:03:f6:6e:de:af:3c:fc:2b:16:51:
         93:0e:ed:c3:94:f2:b1:a4:4b:39:42:d1:39:62:53:73:4f:09:
         05:d5:03:8e:bc:51:77:f5:22:0b:c9:7c:9c:fd:63:ab:fa:64:
         4f:6f:ff:ac:4e:c8:7c:3e:20:60:3f:b7:47:ea:fc:b2:0b:e2:
         db:b9:42:4b:a9:d2:ea:e8:10:0a:71:9e:35:1b:ce:0c:bc:6c:
         f4:de:12:b0:96:63:93:86:46:be:4e:6e:c2:d2:ab:ef:c4:9b:
         fc:43:69:10:d8:e2:66:85:76:fa:03:d4:99:79:18:09:5a:5c:
         9f:a1:b0:c1:ee:31:5a:0d:f5:3f:c2:0b:4a:63:e9:16:22:a7:
         44:b4:3a:8d:39:5f:fb:29:0a:52:1e:95:c9:2b:00:c5:76:9b:
         b7:a9:90:69:fd:38:79:fb:7a:08:06:da:f1:50:38:51:19:e5:
         94:15:3c:d4:64:4a:3d:e8:c7:e2:c5:1c:c4:27:91:a1:8a:fc:
         be:fc:b5:21:2d:81:da:d6:59:87:4a:80:50:bb:af:62:cb:b8:
         d4:13:b0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:20:26 2025 by rpki-client