Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
File:                     0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft (raw, json)
Hash identifier:          09LF/Um7voCC1q8AZ+/f+SoyB/pdM47DBTftjcJzoRc=
Subject key identifier:   82:09:81:B2:D6:77:E9:B9:CB:C5:64:42:9E:C1:9F:05:8B:2D:10:D9
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Certificate issuer:       /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial:       57C330C34ED0F2EF2BB75C67720C3FBCE7F846BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
Manifest number:          01BD
Signing time:             Sun 19 Oct 2025 13:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 12:56:39 +0000
Manifest next update:     Mon 20 Oct 2025 14:17:39 +0000
Files and hashes:         1: 3139342e33342e3235352e302f32342d3234203d3e20383334.roa (hash: 9Nay8jCVOB7MKBbd6t/oX++dJQIYhzLuqo54ZgkMc3E=)
                          2: 3139342e33342e3235342e302f32342d3234203d3e20313532363732.roa (hash: hKPfS0qlA4vPTLhw9nwXVGJzFe2/vcx6+01rQ/Eesqo=)
                          3: 3138352e3231332e3235302e302f32342d3234203d3e20323132323338.roa (hash: ygSJr7gJnzCgddZdASy6lFYbTZobnImgktqUZvda03k=)
                          4: 38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa (hash: ohyXGo6Fwg3029u2hdROae+jQf4VI2skgvLUXH3jI8w=)
                          5: 38352e3131372e3232392e302f32342d3234203d3e20323132323338.roa (hash: qWG9h0hKE/+rc67V6b0QtNqJKNBV/dmrN+3owun/5GY=)
                          6: 3138352e3231332e3235312e302f32342d3234203d3e20313337353537.roa (hash: eYILiT2JPXpEDLdM1mRS7Zrw3uThCrbSVHgyCN3lFo4=)
                          7: 38352e3131372e3233302e302f32342d3234203d3e2035303635.roa (hash: 8/mMTd8OI6hx+rEazKaA5i9flVTt9So8wwSfFF6xpVo=)
                          8: 3139342e33342e3235322e302f32342d3234203d3e20313335343032.roa (hash: PzY2ZjUPUkaqIDtZu9fHD0rPK6Exx+TMbdxcEJS1upA=)
                          9: 3138352e3231332e3234382e302f32342d3234203d3e20323035383836.roa (hash: ODfn5/rpX0/qAWjZsS/cv+gVh3kFgfI7CdBECTg9zww=)
                          10: 3138352e3231332e3235312e302f32342d3234203d3e20313338383838.roa (hash: u9k1CEDVyAGe8je2Y99pF+EO5LdgGSTfU7yFr7GEyGA=)
                          11: 3138352e3231332e3235312e302f32342d3234203d3e20313338313630.roa (hash: fygAQSb+QwiyUnesqK4IcvvWfRduHnIesYUaMnTC6go=)
                          12: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl (hash: xN+N8S3qPqJFknswxSL6+oohzOlI2TR+mgvHijezMwA=)
                          13: 3139342e33342e3235332e302f32342d3234203d3e2035303635.roa (hash: tD+eYvXQsGkCcpnz6s7EBRYpOf8Iu4vdb3Qy27wUI6g=)
                          14: 3138352e3231332e3235312e302f32342d3234203d3e20393834.roa (hash: +mGpTck72lzkh7Ood/3OgnV6lEE5Ty61FGiwl0p4XrE=)
                          15: 38352e3131372e3232382e302f32342d3234203d3e20323134343538.roa (hash: rcAG2FX2+ZD0Qb1+KeZK9os832Q7CwzkoxVHQi9yY7k=)
                          16: 3138352e3231332e3234392e302f32342d3234203d3e20343030393039.roa (hash: 4O3foUV7f18NUYJQaeBYgK+aW1lr+7o+ea8CcQjVzCw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c3:30:c3:4e:d0:f2:ef:2b:b7:5c:67:72:0c:3f:bc:e7:f8:46:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
        Validity
            Not Before: Oct 19 12:56:39 2025 GMT
            Not After : Oct 20 14:17:39 2025 GMT
        Subject: CN=820981B2D677E9B9CBC564429EC19F058B2D10D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:34:ef:d9:6d:3c:f8:29:52:1e:f8:b2:03:ae:
                    47:22:2a:05:bb:8b:ab:c5:c9:53:5f:da:f4:23:96:
                    7d:8d:39:9c:7e:47:ca:79:51:72:d6:b2:c7:02:26:
                    d7:8b:eb:0b:b9:cd:6c:51:8d:5d:f6:27:92:b1:cd:
                    b2:23:3d:eb:de:79:04:03:5d:9c:ad:b3:8f:a4:a8:
                    a9:9f:42:66:c7:98:92:ac:21:bc:a2:2a:c8:c5:62:
                    f7:bc:d0:d7:77:1c:ff:13:34:3f:35:84:27:15:53:
                    63:81:fd:8b:ef:ce:6b:8e:b4:89:32:ae:bf:6d:6d:
                    95:de:70:5f:99:e5:3c:d2:09:dc:82:e3:5b:bc:52:
                    74:0d:d5:0e:4e:e9:af:ad:6d:b2:2a:d6:95:bc:69:
                    4a:88:d4:9d:0e:bb:dd:db:87:60:bf:51:9b:c6:4b:
                    25:4a:ec:9f:95:72:a0:b5:68:47:8b:8c:6d:88:49:
                    6c:58:b8:ef:99:20:9a:59:69:09:31:7e:a6:fa:5e:
                    ca:8b:4b:9e:dd:a3:dc:48:59:10:b7:cf:09:48:b9:
                    1c:e2:e4:c3:20:34:9a:5d:3e:92:2b:86:9b:59:e1:
                    66:19:06:71:0b:e3:7e:87:32:63:a8:ff:c4:58:57:
                    f1:51:06:42:4b:8b:d4:67:af:75:4d:35:62:56:83:
                    cd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:09:81:B2:D6:77:E9:B9:CB:C5:64:42:9E:C1:9F:05:8B:2D:10:D9
            X509v3 Authority Key Identifier:
                keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:21:dc:80:99:98:89:24:31:50:69:81:b6:f4:bc:63:33:38:
         ae:f3:84:bc:94:0d:28:f1:40:57:c2:f8:2f:a4:12:98:bf:7a:
         a9:7b:fc:d7:52:df:d2:13:42:eb:d4:b8:c7:62:e8:0b:78:76:
         06:9a:08:15:9b:9d:90:8a:2c:8f:b8:5b:d7:14:e7:e4:38:fe:
         8d:d4:59:31:46:1e:30:04:18:c0:fd:ba:f2:3b:3b:45:7a:7f:
         f3:a9:01:2a:1d:28:32:8e:a9:63:6f:ec:f3:df:9d:eb:b5:9c:
         f3:89:17:52:bc:a8:39:89:8a:0a:5b:a9:c1:3e:e4:0f:11:c8:
         de:c6:0e:d2:19:c9:d6:79:95:f1:e4:bd:cd:3e:88:a1:43:8d:
         8f:00:d2:c8:a5:1a:33:64:d6:de:87:30:ff:71:e6:37:6d:73:
         ca:14:eb:f5:33:d0:7e:39:3e:f2:a2:e3:96:1d:db:9b:ee:c0:
         51:e3:1e:f2:d1:eb:06:2b:68:ec:41:9a:80:f6:0e:87:f5:0f:
         dd:4a:fb:7e:ba:0f:c0:1f:99:38:c3:d4:94:6d:c0:18:50:1e:
         d8:26:ad:37:d1:cf:05:0c:d4:11:84:53:ef:1c:36:79:1c:22:
         01:7d:21:79:19:20:e7:29:2f:28:08:36:72:65:c7:a8:36:b3:
         62:cb:74:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:06 2025 by rpki-client