Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
File:                     8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft (raw, json)
Hash identifier:          SNxV37qxu1iujnTWNUz1aAZNe3Xdpnazw5LlIfuYlyQ=
Subject key identifier:   36:1D:0E:0F:7D:38:8A:87:FB:35:26:D5:85:48:1C:AB:6D:45:D5:E2
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Certificate issuer:       /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial:       2307E7E4D43CFC1013BC8F78BEFAE151EC02AB5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
Manifest number:          02D8
Signing time:             Sun 19 Oct 2025 17:41:39 +0000
Manifest this update:     Sun 19 Oct 2025 17:36:39 +0000
Manifest next update:     Mon 20 Oct 2025 19:04:39 +0000
Files and hashes:         1: 34352e39352e38312e302f32342d3234203d3e20383334.roa (hash: CfCdj5k+Lj5zHQCoFXqC9dWCvLUmgOEX9Bq56Zw8pDc=)
                          2: 3231322e3130332e34342e302f32342d3234203d3e20323131343834.roa (hash: JBx8ym7JHWLmUGZKmy6bIQw3WR5rhPzAi99IbVvWGag=)
                          3: 3231322e3130332e34342e302f32342d3234203d3e20323133393138.roa (hash: qGJQiTgIvP4Ve1lRuA50bfURyANdu4X5JKcPosVvvQA=)
                          4: 3138352e3234302e3130372e302f32342d3234203d3e203230343733.roa (hash: JMPMOpLF1bcIvbG82aj+pie4xIbRE8z3aJEr+Ha5GDQ=)
                          5: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl (hash: Lk3OO0zvVGSKrTPC5P0TvA31bzQrc35FkefEmbLkUEI=)
                          6: 3231322e3130332e34362e302f32342d3234203d3e2039333034.roa (hash: ZiA8Cde6s2TKghms5u18G3ZVs8EUkbF+SgM6k/613IM=)
                          7: 3231322e3130332e34372e302f32342d3234203d3e20383334.roa (hash: 7EFeqqtN+B2ApgmMDDuqP2FR80lZRbeYex9btxUFGEc=)
                          8: 3139332e32342e3233342e302f32332d3234203d3e20383334.roa (hash: 3tE9vwLlFDIuslyefoYRrNlvD1gbmu6ntzeczb8Bts0=)
                          9: 34352e39352e38302e302f32342d3234203d3e203136323736.roa (hash: 3x0cRO+g1bZbRHut+QAG7pwDzd80m15dxHMNduCBIhg=)
                          10: 3138352e3234302e3130342e302f32342d3234203d3e20323130353338.roa (hash: T9Q1VqRTWLWUsHiQ8nGpX/B35ktvbCl8rYqsuD5dV38=)
                          11: 3231322e3130332e34352e302f32342d3234203d3e2038303735.roa (hash: fHVIMx8xlYqpN0AXQfWLm0vqOUAEGFXc3sBROHoQyYA=)
                          12: 3138352e3234302e3130362e302f32342d3234203d3e20323134343538.roa (hash: 1BInd1OedKcqXcFEvGswCnCL2u3VREZrv7xXz/oRjOg=)
                          13: 39312e3139302e3135372e302f32342d3234203d3e20323130383330.roa (hash: uxCs+vRLf89Iqe2Vg3VmQVaqgZcbd6t3ZZRDH3hDvaY=)
                          14: 3138352e3234302e3130352e302f32342d3234203d3e203431353634.roa (hash: TlWGN33+lROz/SyNNq5fptfqzBonbreTLNbM3qDOA4Q=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:07:e7:e4:d4:3c:fc:10:13:bc:8f:78:be:fa:e1:51:ec:02:ab:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
        Validity
            Not Before: Oct 19 17:36:39 2025 GMT
            Not After : Oct 20 19:04:39 2025 GMT
        Subject: CN=361D0E0F7D388A87FB3526D585481CAB6D45D5E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:77:ce:bd:49:b2:44:65:b7:b5:8c:a9:f6:48:
                    63:d5:25:87:a9:73:a7:fd:89:07:e2:88:c0:1a:7a:
                    57:b6:1f:1e:3c:c4:d6:f6:58:c8:60:b4:ba:00:ae:
                    b9:0c:9e:41:72:a4:e2:e0:50:bb:47:3b:1f:64:1f:
                    fa:33:62:eb:ed:52:0f:70:6c:42:a5:ad:4a:ab:bc:
                    be:6e:48:79:ba:96:f7:bc:49:5d:63:b5:f7:72:0e:
                    8a:c8:79:4a:98:03:3b:a1:c6:ea:63:c8:c5:15:84:
                    20:93:7b:d7:db:e7:da:c9:73:05:30:e2:95:d0:1c:
                    42:1f:4d:dd:7c:6f:ba:89:db:25:2a:70:22:9d:ab:
                    39:5a:43:6e:07:42:90:dd:a2:f4:25:08:44:03:16:
                    66:f8:e8:a5:1f:ab:a0:da:aa:22:8a:bd:ed:7e:0b:
                    b8:c3:71:5f:d9:ae:5c:dc:79:e1:ee:09:c7:1e:ab:
                    71:cc:af:50:db:91:3c:4e:56:32:ea:54:a1:50:4e:
                    75:0d:bb:7b:e1:35:72:5f:af:3f:41:76:e8:d6:dd:
                    0f:ed:2f:79:c7:48:6a:a0:c7:84:bf:7c:3e:73:ae:
                    01:11:7b:06:9f:18:c0:18:45:e1:aa:4e:83:61:15:
                    35:90:9d:ef:ed:a2:c5:66:f0:85:64:49:9e:04:bd:
                    d2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1D:0E:0F:7D:38:8A:87:FB:35:26:D5:85:48:1C:AB:6D:45:D5:E2
            X509v3 Authority Key Identifier:
                keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:fb:fa:4c:e7:fc:1a:34:23:6c:1d:3f:be:eb:da:11:13:3a:
         96:8a:c9:bf:d7:ca:5f:4b:6e:19:b8:5d:6f:9e:d5:a6:de:24:
         e4:b9:5f:32:e7:1d:39:fb:f7:71:52:6a:0c:fe:13:b5:bf:43:
         61:fe:7c:4f:cf:06:00:3a:85:26:32:17:2a:87:1b:9e:6c:dd:
         94:36:ae:a7:90:54:22:44:80:52:a6:e7:c4:30:cc:9b:05:2d:
         0d:7d:30:41:0a:d0:6a:3b:5c:cf:47:4d:03:37:24:d9:48:05:
         89:af:a2:97:2f:6a:7e:db:8e:6e:8e:97:c5:52:84:82:34:17:
         ad:4d:45:b4:a7:a2:26:b9:1f:e8:ed:87:69:4a:be:d2:cd:95:
         da:31:1b:af:35:11:5f:8a:a8:4b:9f:aa:37:04:ed:1e:40:6a:
         89:af:2a:5c:a6:e5:f9:06:d0:cc:31:2c:e9:5c:49:b8:8d:0b:
         0e:0c:44:f8:f7:80:2c:85:f0:a8:03:09:f2:76:5e:6c:bb:d4:
         ef:f6:fb:b9:90:9a:a6:0a:0f:32:23:0a:d8:4b:2b:fb:8f:91:
         b5:1e:9e:d9:fe:7f:d7:25:2c:23:a3:b5:6f:39:53:6f:86:0b:
         99:b4:95:b2:c9:25:d4:d7:eb:0f:97:f0:e3:1a:66:dc:20:4c:
         63:74:48:9b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUIwfn5NQ8/BATvI94vvrhUewCq18wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGMxMmI0MjczODMyYjQxNTZmZTAwOTJmNmFlN2U1YjNj
ZTIzYWQ4YjAeFw0yNTEwMTkxNzM2MzlaFw0yNTEwMjAxOTA0MzlaMDMxMTAvBgNV
BAMTKDM2MUQwRTBGN0QzODhBODdGQjM1MjZENTg1NDgxQ0FCNkQ0NUQ1RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBd869SbJEZbe1jKn2SGPVJYep
c6f9iQfiiMAaele2Hx48xNb2WMhgtLoArrkMnkFypOLgULtHOx9kH/ozYuvtUg9w
bEKlrUqrvL5uSHm6lve8SV1jtfdyDorIeUqYAzuhxupjyMUVhCCTe9fb59rJcwUw
4pXQHEIfTd18b7qJ2yUqcCKdqzlaQ24HQpDdovQlCEQDFmb46KUfq6DaqiKKve1+
C7jDcV/ZrlzceeHuCcceq3HMr1DbkTxOVjLqVKFQTnUNu3vhNXJfrz9BdujW3Q/t
L3nHSGqgx4S/fD5zrgERewafGMAYReGqToNhFTWQne/tosVm8IVkSZ4EvdIfAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUNh0OD304iof7NSbVhUgcq21F1eIwHwYDVR0j
BBgwFoAUjBK0JzgytBVv4Akvaufls84jrYswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGJmZDY4ODItZDZiMy00YWE4LWJjMGEtNzExZDY4YmQx
OThiLzAvOEMxMkI0MjczODMyQjQxNTZGRTAwOTJGNkFFN0U1QjNDRTIzQUQ4Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pCSzBKemd5dEJWdjRBa3ZhdWZsczg0
anJZcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YmZkNjg4Mi1k
NmIzLTRhYTgtYmMwYS03MTFkNjhiZDE5OGIvMC84QzEyQjQyNzM4MzJCNDE1NkZF
MDA5MkY2QUU3RTVCM0NFMjNBRDhCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvv6TOf8GjQjbB0/vuva
ERM6lorJv9fKX0tuGbhdb57Vpt4k5LlfMucdOfv3cVJqDP4Ttb9DYf58T88GADqF
JjIXKocbnmzdlDaup5BUIkSAUqbnxDDMmwUtDX0wQQrQajtcz0dNAzck2UgFia+i
ly9qftuObo6XxVKEgjQXrU1FtKeiJrkf6O2HaUq+0s2V2jEbrzURX4qoS5+qNwTt
HkBqia8qXKbl+QbQzDEs6VxJuI0LDgxE+PeALIXwqAMJ8nZebLvU7/b7uZCapgoP
MiMK2Esr+4+RtR6e2f5/1yUsI6O1bzlTb4YLmbSVsskl1NfrD5fw4xpm3CBMY3RI
mw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:11 2025 by rpki-client