Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
File:                     2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft (raw, json)
Hash identifier:          SWb3dhmmDrrA58YR4AwB/8dVXzBi/xGP/Y2xfOi6BOE=
Subject key identifier:   B3:7D:AF:3C:33:B8:03:BF:42:CC:48:5F:E4:92:B0:5B:99:F7:06:73
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       16672D10DBF20EDBBC1D6678F22BAE0D3519E4B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
Manifest number:          0444
Signing time:             Sat 23 Aug 2025 02:06:17 +0000
Manifest this update:     Sat 23 Aug 2025 02:01:17 +0000
Manifest next update:     Sun 24 Aug 2025 04:25:17 +0000
Files and hashes:         1: 323630323a663939323a63303a3a2f34342d3438203d3e203236303432.roa (hash: Fgcu73F4DxRvaLksBuPTG0jHcKxfTvgmmVGQl4chyzs=)
                          2: 323630323a663939323a65303a3a2f34342d3438203d3e203333333837.roa (hash: JcXzbGu5aoqW4eGRLqUocgWZf+gjmi1jki466ucPd4g=)
                          3: 323630323a663939323a66373a3a2f34382d3438203d3e203236303432.roa (hash: fOgtYgLdoLv7e1AYu38TvXyvhQ1fkiq8zn2NcBleuBU=)
                          4: 323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa (hash: NUE/UX3oXJFnmyAE2FoTGPVQs404K4mf9BK/aBACO14=)
                          5: 323630323a663939323a36303a3a2f34342d3438203d3e20313532393030.roa (hash: HWpzvbc2LzEmXxoT+kul7X4owcauEKJHusM+Ir+9R/w=)
                          6: 32332e3137302e3231362e302f32342d3234203d3e203538323032.roa (hash: xsTimzkeTJXF4Nr71zJnv2bONR0iZSrLPJdDzaLfkdY=)
                          7: 323630323a663939323a39303a3a2f34342d3438203d3e2030.roa (hash: NC2ZhEPelpHdoSSljxfD6WpRWcBV8zPEY0f/OMUilVM=)
                          8: 323630323a663939323a66363a3a2f34382d3438203d3e203533363637.roa (hash: sENJdG2CAk2ncOxoRbfpkGE6oUC5cWz8NGXE5l1PbdQ=)
                          9: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl (hash: kdaO1t5ms/aoVrIBro4CXjPG88swR0EddYKuER+6Rk4=)
                          10: 323630323a663939323a66613a3a2f34382d3439203d3e203430363736.roa (hash: sRvK25+z4/XzVzRz/NRjDVLoeu4AhidYEGZ8Z4be+vU=)
                          11: 323630323a663939323a35303a3a2f34342d3438203d3e203430363736.roa (hash: izLerJCXQHRMj4EuHnpJKhCKBCsakjo+L9Seyo/D9Sg=)
                          12: 323630323a663939323a66633a3a2f34382d3438203d3e20343031383132.roa (hash: WWuZlGD19cauNNFGP8lkHygPrhsjx/40EDpoW/B2wUc=)
                          13: 323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa (hash: tl8M/rg4fzRj4HcLbXbMPjG2fJQE/fLu0oqk+/bvTJ4=)
                          14: 323630323a663939323a66323a3a2f34382d3438203d3e20323733323032.roa (hash: +regh0iXnX1+G7oho+N8MToCO88rnVaGwW232okUqZA=)
                          15: 323630323a663939323a61303a3a2f34342d3438203d3e2030.roa (hash: TsDzPexWiyW7o35YhRgMnmXGuAARZmgF1yTYqL8wkn4=)
                          16: 323630323a663939323a35303a3a2f34342d3438203d3e20313939393539.roa (hash: s0tjGNQz3a0IJwtqI+yV2w0ziifnk/CWeyQrn3w3/qg=)
                          17: 323630323a663939323a66313a3a2f34382d3438203d3e2030.roa (hash: YTwFmzgbdVgh5MV70gadVkuqTLHlIUY2ZnBOY6D4sbY=)
                          18: 323630323a663939323a66643a3a2f34382d3438203d3e20343031383132.roa (hash: 59uZAy7XXfBP2lTYymBUstkE3+Fixf8c03kHK/e8F/o=)
                          19: 323630323a663939323a66663a3a2f34382d3438203d3e203633333930.roa (hash: ofYyhY8QxgV7oA+K00vYAeRxc4dVjV27+J0ru1bGCjk=)
                          20: 323630323a663939323a62303a3a2f34342d3438203d3e20323039383734.roa (hash: M7868WXtqAKmg/2GcYPXHlqzGv673y1NrEBWzHOAn8s=)
                          21: 323630323a663939323a66353a3a2f34382d3438203d3e20323134323538.roa (hash: fIYxXr7UvbVyg5ErbGlT+osMThoxVt1juRlayE+Ah94=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:67:2d:10:db:f2:0e:db:bc:1d:66:78:f2:2b:ae:0d:35:19:e4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Aug 23 02:01:17 2025 GMT
            Not After : Aug 24 04:25:17 2025 GMT
        Subject: CN=B37DAF3C33B803BF42CC485FE492B05B99F70673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a4:02:28:30:51:a5:96:f3:49:09:21:82:a0:
                    20:88:37:c4:28:99:3b:8b:ee:07:b8:12:ee:55:9c:
                    90:dd:27:f8:6c:42:ba:f8:df:9f:69:f5:5c:e7:e7:
                    6c:45:00:22:02:42:4e:5b:d1:e7:af:5f:70:6d:2c:
                    4e:0f:2e:75:e1:4b:6a:bd:43:c7:80:1b:04:c4:2a:
                    ff:0a:ed:c1:1d:d5:02:1a:0d:de:b3:15:2b:b1:a0:
                    e2:42:cf:07:9b:69:45:33:a7:b3:3f:e2:7f:f0:c6:
                    54:18:99:cc:c8:17:1a:65:66:69:93:a2:7a:68:4e:
                    e5:9b:22:61:42:a3:9e:64:4f:f8:3d:86:04:f0:30:
                    32:bb:00:fc:fa:15:da:2d:ce:09:8a:89:86:b0:46:
                    4e:0c:45:d7:60:e9:16:40:7a:6c:6c:df:e6:72:02:
                    d5:df:5c:3a:5c:9e:d8:79:e6:e2:3f:b4:c0:de:ab:
                    85:4f:0c:fb:00:3f:91:73:8a:ca:a2:55:fc:7a:b7:
                    c2:39:98:cf:1c:0d:85:a7:d9:72:f6:0c:0d:56:95:
                    00:d9:10:e2:9d:fc:0f:14:c9:8f:e7:20:30:c8:bc:
                    3b:15:65:7e:4b:64:07:16:a6:ce:a8:f9:b1:aa:c1:
                    2b:35:bb:55:82:f6:29:98:9f:18:5a:8a:ce:34:dc:
                    8c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7D:AF:3C:33:B8:03:BF:42:CC:48:5F:E4:92:B0:5B:99:F7:06:73
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:de:85:1a:b6:a9:e3:72:d2:bf:cf:10:a9:03:0c:83:97:6b:
         7b:a2:29:7d:23:3e:e0:56:55:6c:c4:c9:21:1d:08:42:b7:29:
         c8:ff:90:8d:0e:05:98:94:66:a9:6d:aa:1b:4b:5f:5c:da:a5:
         51:14:7e:32:01:38:e5:c9:b6:09:94:6c:3b:08:67:4a:be:a5:
         b3:5e:cd:26:b1:a8:95:6c:fd:87:1d:a8:42:48:72:bd:fc:d7:
         f1:ed:ab:45:06:0a:df:45:2d:32:ee:1d:d4:7c:15:84:6f:9f:
         67:06:b3:7b:db:0e:83:02:e1:37:7a:34:53:ee:a4:7b:de:a1:
         c4:0d:45:bf:b8:84:6e:25:4d:b0:1f:9c:0e:c5:f6:5c:36:6e:
         40:ef:fe:26:15:87:ec:df:ec:0d:c2:1b:ef:8b:99:03:4a:71:
         bb:10:b1:8f:99:51:ec:07:60:6d:08:76:ea:66:4c:8e:ee:b6:
         d1:f5:fc:5b:27:d7:47:fe:10:61:04:ce:2b:39:3f:c7:a3:e8:
         01:c2:89:c2:ae:c6:b5:7f:76:f6:94:c0:3b:08:7f:73:27:1b:
         21:24:9a:22:6a:b6:7f:47:9c:a9:cd:c0:ba:d1:71:24:c7:54:
         85:07:37:11:a3:30:4b:db:62:82:eb:f3:7e:6c:9f:29:13:b2:
         3b:a5:78:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:23 2025 by rpki-client