Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
File:                     B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft (raw, json)
Hash identifier:          Y807ZkwHCUZiJPCudFzx1+WlEWE6dbcwb58VWXX2Rys=
Subject key identifier:   E6:74:75:75:B9:EF:0C:19:69:20:A5:F1:2F:49:EF:C0:11:EB:47:4C
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Certificate issuer:       /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial:       3B2277171130F1259BA399F837BFCBA25AA472C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
Manifest number:          04A2
Signing time:             Sun 19 Oct 2025 12:51:39 +0000
Manifest this update:     Sun 19 Oct 2025 12:46:39 +0000
Manifest next update:     Mon 20 Oct 2025 12:52:39 +0000
Files and hashes:         1: 3138352e3136322e3136382e302f32332d3233203d3e203630343538.roa (hash: FhpX/C9zk9FVjj10PImD/wKS/RfpAC0kUdP0bDZAwyg=)
                          2: 3139352e382e34392e302f32342d3234203d3e203630343538.roa (hash: 4nPeE4WDot0aQzE1E2AL4UC2dMhv5fMNvAbvgkN5zUQ=)
                          3: 39312e3139392e3130322e302f32342d3234203d3e203630343538.roa (hash: RopopLlJOVRjGz4avSxfYPvo0OC9G/eDY75KWGAV/aw=)
                          4: 3138352e3230322e3134362e302f32342d3234203d3e203630343538.roa (hash: RGdxLEzytt0V9LWy9RSfzKHfvGrjEh/8BhnnQWUWyk0=)
                          5: 3138352e3132352e37372e302f32342d3234203d3e203630343538.roa (hash: iBX/+QeuXYuSCTlJT7cmF+tQX/4HCmniMjyG8lOqUWA=)
                          6: 3138352e3230322e3134342e302f32342d3234203d3e203630343538.roa (hash: wz4+Z748yPCelmg+RPJx6JGtTSzenzKPpdD84rUDauM=)
                          7: 3138352e3132352e37392e302f32342d3234203d3e203630343538.roa (hash: chFrGzVrsGDgHbR9U302S1vgNYtyu8hjjwKJPtAYWHA=)
                          8: 3139352e382e34382e302f32342d3234203d3e203630343538.roa (hash: 0QQ/atSVhgxbxnMmZi2CZaSsjgioOzPYv64es6L7MGQ=)
                          9: 3138352e3231372e3134302e302f32342d3234203d3e20323131333733.roa (hash: hNnRgizTxivmocfPjGcdnyRRZ7RF0OREZEdxCth7bFY=)
                          10: 3138352e3231352e3131342e302f32342d3234203d3e203631333137.roa (hash: R9WhNu2MdPr1NOFjMmZeGBiIE2nwtlE4Jo64OX4u4HA=)
                          11: 34352e3134332e3134382e302f32322d3232203d3e203630343538.roa (hash: Sww7+LIBcy25xOjBNTHS8houn90nQJV29QTFkg33x0A=)
                          12: 3138352e3136372e32362e302f32342d3234203d3e203630343538.roa (hash: AU1XTzixRsIIk2ZdZN58IrYKd8IFItgt7vU8fJub8+o=)
                          13: 3139352e382e3131392e302f32342d3234203d3e203630343538.roa (hash: uYf/vuY3IMzkKnywh+WrIJi9K5kM4HORH0NByn4xLTY=)
                          14: 3138352e3135362e3231382e302f32342d3234203d3e203630343538.roa (hash: IhLfWMdp3wfBoJIgMf1dZQYIiVjH+IC6uyZDFZApUo0=)
                          15: 34352e3135312e3139322e302f32322d3232203d3e203630343538.roa (hash: MsQjsESlTuEcbjS9mONurH+MDUvuc4E1Aq8WiShITro=)
                          16: 39312e3139392e3130382e302f32342d3234203d3e203630343538.roa (hash: Ltqzgt94mzKk47x8Q+jGxz5JrNySG/Y0tzlAfjYhG0M=)
                          17: 3138352e3132352e37382e302f32342d3234203d3e203630343538.roa (hash: p8VAezPiQ82kk+zpMKLkJeAo6bWXq8DJwyiOE3M0QAE=)
                          18: 3138352e3132352e37362e302f32342d3234203d3e203630343538.roa (hash: E1EBzi/x9bAqWwU2+c2DtydupdQVlQih+ZQ9KG5XJM8=)
                          19: 3138352e33372e3232382e302f32342d3234203d3e203630343538.roa (hash: mw435AXz9xHWhN238pBrnHfvo9tx+w0yMNZcNgIAnFw=)
                          20: 3138352e3136322e3137312e302f32342d3234203d3e203630343538.roa (hash: dIPcyVrIf7ut3mplg6I+FaMP77/taZ1uyGrgWAEtw1I=)
                          21: 3138352e3135362e3231372e302f32342d3234203d3e203630343538.roa (hash: rjDp5tr7Ibp1svXb6aTy1VUyxTkkVlR9zj5PgrnqiGs=)
                          22: 3138352e3230322e3134352e302f32342d3234203d3e203630343538.roa (hash: W83bzJQhGHobYnfM1tmulNDtSSyNf73jimSZ1AGOpI0=)
                          23: 34352e3134362e3138382e302f32322d3232203d3e203630343538.roa (hash: oKJ0nojLfMNgIC0ZVHO9adCFA5GxNLUlSGYZ+ppZl7U=)
                          24: 3138352e33372e3232382e302f32332d3233203d3e203630343538.roa (hash: vZ0xeNj44WIw/+zpqjsYVz/OQXDqqT3PO1sgTbLjyjI=)
                          25: 3138352e3135362e3231392e302f32342d3234203d3e203630343538.roa (hash: 8XkoDAvNeGNoBWLohtYrD/bWj0oa0HEtFyjdhTJh8rk=)
                          26: 39312e3139392e3132332e302f32342d3234203d3e203630343538.roa (hash: BatNReK7gXNaqXPa5VRtj5h++zM7ew2F8IoAg/I/2U8=)
                          27: 3138352e3136372e32352e302f32342d3234203d3e203630343538.roa (hash: PR56mJAfACxvVOTWCWLvFZ+zDPcod8MGy8q5KeWDe1I=)
                          28: 3138352e3135362e3231362e302f32342d3234203d3e203630343538.roa (hash: EvCO85+TEFrCa3fyF2Hvn+tlr4Nv9RYk07bI6yFMPvw=)
                          29: 3139352e3231312e35312e302f32342d3234203d3e20343030393039.roa (hash: 0gSBq8V9lU7SHxebbh3UieoZZ+QMrAfR0WkkimNMOGY=)
                          30: 33312e3231372e3235302e302f32342d3234203d3e2039303039.roa (hash: L+538BnpKcoPw9UMvgnBDsovbAC1nWxPwoO/WNMOxrE=)
                          31: 3138352e33372e3233312e302f32342d3234203d3e203630343538.roa (hash: fMMz/NMrWe4m6FBXtQw+qCDaXqsRssd0JOLvgwTj808=)
                          32: 3138352e3136322e3137302e302f32342d3234203d3e203630343538.roa (hash: v9yukWrQuv+5l5wy9/dUA6cYOeUvX0B8QwsY9W2Wlgk=)
                          33: 36322e3132322e3138392e302f32342d3234203d3e2033313730.roa (hash: mbpZXZK/fM7vaFZ5y82xMnQ6rCPjr7XSXm9Q6bD78C4=)
                          34: 3138352e33372e3232392e302f32342d3234203d3e203630343538.roa (hash: HYaWDlREHWbcyxGyqKTrHitDp9vR4XbaPjWC/NS6hv0=)
                          35: 34352e3133312e38302e302f32322d3232203d3e203630343538.roa (hash: oqXmbxyjeaOX95W9eJVEUG/807pdk0CrvL0gbJu3djk=)
                          36: 3138352e3136372e32372e302f32342d3234203d3e203630343538.roa (hash: qmcJVcdT4rmfgLdWbchNjQUjUr84q4fznJ3O5A3Ac6k=)
                          37: 3138352e3232362e3135342e302f32342d3234203d3e20393834.roa (hash: OnyMDDjhfbjBWnmH/O9nK3hLulu4nf9Z9u4/z8prRCw=)
                          38: 3139342e35392e3232332e302f32342d3234203d3e20313939363134.roa (hash: Q+aTRZ6Bj34jlOI880qva89jcDljlnRfljW0rbqvKUM=)
                          39: 39312e3139392e39302e302f32342d3234203d3e203630343538.roa (hash: 24Wi6BO1o+rN9DTXADpFgbBkLMPIwcsuYBHhIDkNNJk=)
                          40: B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl (hash: Kqj9oxYlljzzzWPkUXOYyXghkI+pmfs4pCe7eLmOwm0=)
                          41: 3138352e33372e3233302e302f32342d3234203d3e203630343538.roa (hash: IY6mHaJKET6LoAapCaxdFKM5n9LWTpQVBjwiMh+lOuI=)
                          42: 3138352e3232362e3135352e302f32342d3234203d3e203634323637.roa (hash: BphaL/Q+MmU9qXxX06J/d3Yz3MPwKV/7sGiY2uy2MYY=)
                          43: 3138352e3230322e3134372e302f32342d3234203d3e203630343538.roa (hash: 4WWLNzVcecuIV7DQH3TBRPk5m1a8bolBgWM4/XkK+mA=)
                          44: 3138352e3232362e3135322e302f32342d3234203d3e203432383331.roa (hash: HpM8i92Nx8n+PHLNcWeurSiekKwVSUI6F0Ofn+tlEDo=)
                          45: 3138352e3232362e3135332e302f32342d3234203d3e20323131343430.roa (hash: rGW7/8GB609/SHNrTEWoAaTI5dQHouhe15jjA9R2QwM=)
                          46: 3138352e3136372e32342e302f32342d3234203d3e203630343538.roa (hash: bOe+V/bSkHZWJOaV1Qj2XTs/2xeIT/LkKzSKku71Icc=)
                          47: 3138352e3130302e37322e302f32322d3232203d3e203630343538.roa (hash: tt+7v33pgcfL/OR4IEoj2XRjnG0uMYFwUsQyGd/wSJQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:22:77:17:11:30:f1:25:9b:a3:99:f8:37:bf:cb:a2:5a:a4:72:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
        Validity
            Not Before: Oct 19 12:46:39 2025 GMT
            Not After : Oct 20 12:52:39 2025 GMT
        Subject: CN=E6747575B9EF0C196920A5F12F49EFC011EB474C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:22:9d:71:13:c5:20:00:1f:68:2a:7d:d7:d3:
                    a7:a4:c6:a4:9e:f5:8a:b7:79:cd:60:f2:5d:a9:cd:
                    b5:c8:ef:08:f8:c3:c2:a3:b0:ed:bc:f3:1d:9a:0c:
                    1a:03:91:3c:ec:33:f0:e2:31:7d:ed:66:61:48:9e:
                    62:4f:71:50:5d:94:a1:3e:a7:56:17:e7:f3:4f:96:
                    3c:42:a3:69:83:e4:d3:27:16:20:ed:02:8d:d6:6f:
                    e6:a5:41:b5:55:12:85:00:ea:45:6f:d6:bc:3e:0f:
                    c9:36:a3:87:44:0b:f6:36:c0:a1:e4:eb:dc:96:cc:
                    ac:d1:64:e2:96:86:00:d7:e1:7c:e6:0d:6b:20:74:
                    ab:6f:e9:26:ee:68:70:c3:20:12:28:32:f3:f9:41:
                    63:82:c7:11:82:e3:66:51:5d:6a:4b:e3:68:ae:e2:
                    fa:e3:06:c0:6e:7f:bf:28:43:34:03:32:0f:96:4d:
                    ba:6c:35:79:24:c3:01:47:58:43:5f:6a:27:2d:c4:
                    f0:08:f0:2f:2b:d3:e8:a0:74:3d:8b:1c:ba:5e:37:
                    88:12:f5:57:36:e0:e6:f8:84:f7:a9:64:58:cb:ea:
                    a6:36:9d:1c:fd:7d:48:91:89:3e:ad:45:61:b2:b2:
                    0e:f6:67:98:f8:94:6c:60:5b:ff:83:3c:55:7d:76:
                    93:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:74:75:75:B9:EF:0C:19:69:20:A5:F1:2F:49:EF:C0:11:EB:47:4C
            X509v3 Authority Key Identifier:
                keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:dc:26:dd:0b:a0:df:0e:36:b5:45:2e:db:48:01:a2:25:1d:
         87:6b:14:a6:1e:00:2d:62:84:b6:a2:ec:11:31:d2:9b:e8:31:
         8a:fb:6f:2f:2c:74:e4:b6:bd:b6:bc:73:3a:ea:e8:25:e6:39:
         05:42:0b:1b:fe:ce:ec:58:45:e7:de:9d:88:3c:fe:ed:a1:98:
         d0:11:fc:bb:3c:ff:5c:94:c1:30:3b:8e:d6:0d:3c:de:34:d8:
         5a:51:1a:c2:fd:40:9c:24:4e:1b:dd:32:18:37:c4:0f:26:a0:
         94:6c:88:ad:ad:da:85:0d:78:50:73:5b:92:0c:3b:1a:fd:f8:
         9a:c2:6e:27:4f:8d:34:78:02:ef:56:d5:11:f2:73:9d:02:69:
         36:3d:f3:7c:3f:7a:5b:15:ff:7c:05:5b:14:b1:e8:f2:4c:95:
         c6:14:58:76:49:58:88:d8:71:1b:80:f4:f3:22:a9:43:c2:62:
         3a:7f:3a:b0:fe:fe:28:44:33:53:3c:d9:6d:4a:7c:49:0f:d6:
         04:88:16:11:95:61:d4:56:40:0f:67:2a:0c:b5:b8:a7:a2:11:
         3a:bd:0e:da:4f:88:7e:06:00:47:ce:c1:77:e7:3e:94:9f:61:
         39:88:07:db:57:2e:1c:5b:3a:19:4c:b6:95:f7:b8:5f:7e:38:
         86:02:96:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:01 2025 by rpki-client