Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
File:                     A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json)
Hash identifier:          TKdOaeIlYuaeppSzPYPqLWW99OuCu6PJM/LaTQGHBJs=
Subject key identifier:   23:39:70:41:53:AE:79:6F:55:8A:49:1A:D8:D8:B9:46:AD:75:C3:7F
Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
Certificate issuer:       /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Certificate serial:       2DB0A966CA1274D53392711F99928783DA557171
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
Manifest number:          028B
Signing time:             Sun 19 Oct 2025 14:59:56 +0000
Manifest this update:     Sun 19 Oct 2025 14:54:56 +0000
Manifest next update:     Mon 20 Oct 2025 18:11:56 +0000
Files and hashes:         1: 326131343a373538313a393330303a3a2f34302d3438203d3e20323039313039.roa (hash: TWxboGw6/lxhoMiWiDnyOg4O9SxsEOXusyizWuah2wo=)
                          2: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (hash: 0nNVfH0UNkgevPAH9ITuwY5tE24LlYCDjFx46F3vtM0=)
                          3: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: 5IFSShC1J1DPKr9fgEjy0DHzTqmR8W17B+sGrWUb29Q=)
                          4: 326131343a373538313a393063303a3a2f34342d3438203d3e203134343437.roa (hash: 1KwjyQC5mQq96/1cZ1aeVWaWGIQIpF6Ei+ZSWIfd5WM=)
                          5: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: g9TWsQZsTWz7mSDp6Y61gNZDSwAn6dADsEyVm1AJtlU=)
                          6: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: vk76XSxqzrMVWTwtFZaO83jbtqLgeBiAJ2StbigjMdk=)
                          7: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (hash: coziJfcvV7NZzAVbts1JQ6BKxT5yxFwdbwzsra8WCDw=)
                          8: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (hash: a41Xyu+1QM63sJBLjRXDXCMByy5FuK1D59e4kuksRCE=)
                          9: 326131343a373538313a393066653a3a2f34382d3438203d3e20323135333634.roa (hash: MyeYfbLc0//rjwnR8ZJ3TnxqQq4JflTHlrUTLQvk3gU=)
                          10: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: JYfFIGSSsdhSc4V2wOJu9QFkSSC76MmCAjKsdTBmtQA=)
                          11: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: F9b5BNgK8TO7NWcYalz+qyjvcxyYqlq+/TYg6mk1sTI=)
                          12: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 2aDuD/D+lIpzPYcnGpfR3f4GvH7bzD6tXNlt4SzLv7s=)
                          13: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (hash: 34CzDRdWck3x5QdKwY21JLn4ljy5X8PbpWV6VL1UPl8=)
                          14: 326131343a373538313a393061303a3a2f34332d3438203d3e203134343437.roa (hash: jsviVwthOZBlV5+oRRFYDUvQF+OHc4iDYR8PVPHLwkA=)
                          15: 326131343a373538313a393062303a3a2f34342d3438203d3e203134343437.roa (hash: 0s1d24KMFu1kYJPCMrebtn4XcHECqVsweN9wGCszluU=)
                          16: 326131343a373538313a393230303a3a2f34302d3438203d3e20323039313039.roa (hash: pMn1lmNiSpZ9TgFB+IRiwlTd7+lbxKBF0vBWWTkkXYs=)
                          17: 326131343a373538313a393230303a3a2f34302d3438203d3e203134343437.roa (hash: kZ5VHXe1kAhX5tvSZsX77jhReBFDdvoZNrdYu896udw=)
                          18: 326131343a373538313a393230303a3a2f34302d3430203d3e203134343437.roa (hash: wCZcPZ1Lk7X2Qee1qTSfN0RGP0Z21kPGqT0D7sgtD64=)
                          19: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: TejNBoLvDqd6zzS1lptpFez+EdbwzXYJ6yM06vDQ9j0=)
                          20: 326131343a373538313a6666303a3a2f34382d3438203d3e20323135333634.roa (hash: nCwmmbP9gIjoEy95/v504iaQnyadcB1V8SB+J8/exJE=)
                          21: 326131343a373538313a393061303a3a2f34332d3438203d3e20323135333634.roa (hash: imEjvtvCCz1eqwuI8/eFHCFB+WwTlJEDfPXRombfVNU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 18:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b0:a9:66:ca:12:74:d5:33:92:71:1f:99:92:87:83:da:55:71:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
        Validity
            Not Before: Oct 19 14:54:56 2025 GMT
            Not After : Oct 20 18:11:56 2025 GMT
        Subject: CN=2339704153AE796F558A491AD8D8B946AD75C37F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:eb:77:dd:4a:ad:65:c5:34:de:da:75:49:4b:
                    2d:c6:61:19:b7:f9:e5:f9:d8:89:5f:25:69:ed:c4:
                    af:86:32:b7:17:e2:c3:e1:4b:92:7e:28:f3:5c:40:
                    19:ea:c9:75:a4:50:de:f0:41:af:f7:2e:71:d3:50:
                    07:dd:11:91:50:a9:2b:c9:6d:3d:33:01:9c:5f:0d:
                    0c:6b:be:ba:d4:2f:59:b4:ff:de:1a:db:b3:23:99:
                    11:d0:50:24:1d:0f:47:71:ed:cb:59:b8:c7:c5:9e:
                    df:e5:db:ca:db:4b:8e:4d:80:96:36:4a:7e:3a:23:
                    73:f2:8c:f1:8a:bb:aa:7b:15:a8:ae:6e:40:74:96:
                    ef:c0:8c:f1:eb:23:19:15:a8:f8:ab:53:2c:34:a5:
                    f7:16:bb:98:9e:ab:71:2e:e8:da:d4:94:88:f0:6a:
                    90:6d:30:b5:ae:a5:cb:19:f4:82:61:ee:78:53:ab:
                    68:7d:54:76:45:a5:80:50:5d:35:97:51:34:79:f6:
                    4f:a4:fa:f4:05:a0:8f:d4:c8:65:03:d5:4a:d7:d8:
                    ef:89:4d:5c:0e:15:e9:e3:0a:f8:4d:11:4d:9b:af:
                    27:fa:8a:83:c2:98:4e:3b:8f:5f:bd:19:df:29:73:
                    3d:d0:74:f2:6c:65:7f:86:16:ff:31:96:c4:d4:7d:
                    8d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:39:70:41:53:AE:79:6F:55:8A:49:1A:D8:D8:B9:46:AD:75:C3:7F
            X509v3 Authority Key Identifier:
                keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c1:5b:32:08:ba:49:0a:80:e8:92:d1:e2:0f:ff:8d:09:ae:
         0f:e0:a2:23:ef:7e:95:72:91:d3:d7:6d:c6:b6:d2:2d:e1:ad:
         4f:49:57:47:19:bb:45:f7:37:f6:a2:80:5d:e3:95:e8:c0:53:
         f9:73:e9:bf:b9:78:9e:87:ee:03:81:29:3e:27:c6:8d:8a:cd:
         b2:b4:cb:cc:30:df:4d:76:9c:f6:6b:6e:5c:dc:f0:0d:64:6f:
         1a:6b:b2:1c:ce:3e:0c:cd:e5:75:ea:fa:e6:e2:b2:52:12:9e:
         06:d3:f6:f4:b7:be:90:d2:a3:71:df:ef:97:d5:b7:c2:97:b2:
         ca:f8:e0:bf:5e:db:0f:f4:c1:fb:62:0e:b3:be:db:21:21:54:
         c9:1c:be:f8:f3:e2:ae:7b:6a:6d:83:50:de:e2:a5:ce:3d:43:
         58:6a:3c:c0:e5:91:4b:82:5a:81:06:a2:f8:af:ad:3a:53:c5:
         6b:f1:2a:dd:d2:69:bb:c4:fa:74:1c:d5:3c:ec:8e:2c:95:99:
         f1:2a:12:ba:13:92:5d:3d:82:3f:88:e6:f1:c4:c9:1a:66:54:
         69:a3:de:f9:af:c6:3c:01:ab:84:ac:f0:ab:4d:d5:ef:ea:5e:
         3b:74:bc:2f:7e:8a:05:45:ff:4a:80:a1:82:d7:ab:43:71:d1:
         bf:24:d8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:57:28 2025 by rpki-client