Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
File:                     8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft (raw, json)
Hash identifier:          YI9FD/eWBa02lc6paBEi3A+1Nonf5LRuNHCBrkVAmiU=
Subject key identifier:   64:D7:AD:30:49:78:53:31:97:20:4C:AE:65:7E:28:C0:ED:5C:FE:F7
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Certificate issuer:       /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial:       3D8617DFA28B454F3205783E31B15B1A253F527F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
Manifest number:          02D7
Signing time:             Sun 19 Oct 2025 01:16:33 +0000
Manifest this update:     Sun 19 Oct 2025 01:11:33 +0000
Manifest next update:     Mon 20 Oct 2025 01:38:33 +0000
Files and hashes:         1: 3231322e3130332e34342e302f32342d3234203d3e20323133393138.roa (hash: qGJQiTgIvP4Ve1lRuA50bfURyANdu4X5JKcPosVvvQA=)
                          2: 39312e3139302e3135372e302f32342d3234203d3e20323130383330.roa (hash: uxCs+vRLf89Iqe2Vg3VmQVaqgZcbd6t3ZZRDH3hDvaY=)
                          3: 3138352e3234302e3130342e302f32342d3234203d3e20323130353338.roa (hash: T9Q1VqRTWLWUsHiQ8nGpX/B35ktvbCl8rYqsuD5dV38=)
                          4: 3139332e32342e3233342e302f32332d3234203d3e20383334.roa (hash: 3tE9vwLlFDIuslyefoYRrNlvD1gbmu6ntzeczb8Bts0=)
                          5: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl (hash: XKUtad9PTkcFx1hdK60xEm0+E27r2OUJ5sCDb15atyM=)
                          6: 3138352e3234302e3130362e302f32342d3234203d3e20323134343538.roa (hash: 1BInd1OedKcqXcFEvGswCnCL2u3VREZrv7xXz/oRjOg=)
                          7: 3231322e3130332e34352e302f32342d3234203d3e2038303735.roa (hash: fHVIMx8xlYqpN0AXQfWLm0vqOUAEGFXc3sBROHoQyYA=)
                          8: 3231322e3130332e34342e302f32342d3234203d3e20323131343834.roa (hash: JBx8ym7JHWLmUGZKmy6bIQw3WR5rhPzAi99IbVvWGag=)
                          9: 34352e39352e38312e302f32342d3234203d3e20383334.roa (hash: CfCdj5k+Lj5zHQCoFXqC9dWCvLUmgOEX9Bq56Zw8pDc=)
                          10: 3138352e3234302e3130372e302f32342d3234203d3e203230343733.roa (hash: JMPMOpLF1bcIvbG82aj+pie4xIbRE8z3aJEr+Ha5GDQ=)
                          11: 3231322e3130332e34372e302f32342d3234203d3e20383334.roa (hash: 7EFeqqtN+B2ApgmMDDuqP2FR80lZRbeYex9btxUFGEc=)
                          12: 3138352e3234302e3130352e302f32342d3234203d3e203431353634.roa (hash: TlWGN33+lROz/SyNNq5fptfqzBonbreTLNbM3qDOA4Q=)
                          13: 3231322e3130332e34362e302f32342d3234203d3e2039333034.roa (hash: ZiA8Cde6s2TKghms5u18G3ZVs8EUkbF+SgM6k/613IM=)
                          14: 34352e39352e38302e302f32342d3234203d3e203136323736.roa (hash: 3x0cRO+g1bZbRHut+QAG7pwDzd80m15dxHMNduCBIhg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 01:38:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:86:17:df:a2:8b:45:4f:32:05:78:3e:31:b1:5b:1a:25:3f:52:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
        Validity
            Not Before: Oct 19 01:11:33 2025 GMT
            Not After : Oct 20 01:38:33 2025 GMT
        Subject: CN=64D7AD304978533197204CAE657E28C0ED5CFEF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:74:61:76:03:66:75:95:5b:16:ca:02:d4:c4:
                    dc:10:5c:9f:75:5d:7b:ca:b5:e2:df:2d:71:22:93:
                    ef:fb:ef:68:4b:e8:7e:c8:6c:21:7a:82:7a:bb:f6:
                    b4:15:15:71:f9:83:57:ac:b0:90:ac:3a:62:60:4d:
                    b6:b1:d6:e0:d7:f5:a6:4c:c9:23:c9:e6:8c:0b:82:
                    59:fa:f7:77:b9:c5:ff:cf:56:44:16:3f:5e:81:78:
                    16:42:09:28:4f:a6:f3:a6:ab:3a:de:38:e2:a1:c3:
                    e6:3b:6a:ba:9b:be:a2:6f:2c:58:70:42:67:1b:51:
                    a6:79:d4:37:be:d6:04:67:62:15:31:1d:cd:43:04:
                    b7:7c:43:54:16:21:03:2d:b2:86:03:d8:8e:7b:35:
                    94:17:02:b0:e3:04:2a:c7:a6:2d:62:02:64:ca:84:
                    5a:1f:ba:b9:89:bb:e4:c3:95:0d:ff:32:87:e2:6d:
                    78:a7:57:24:a7:3d:35:5e:34:3a:ab:2e:67:b9:96:
                    43:e7:ae:f9:d6:7f:ba:77:3d:68:e4:1a:b2:ce:45:
                    5c:df:1f:62:cb:14:6f:3b:e1:02:e7:b7:ab:fe:01:
                    d4:58:51:71:63:43:2e:90:32:d2:6f:d6:17:48:c9:
                    44:12:92:5a:48:6c:09:55:35:14:da:6a:80:2f:e7:
                    a8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D7:AD:30:49:78:53:31:97:20:4C:AE:65:7E:28:C0:ED:5C:FE:F7
            X509v3 Authority Key Identifier:
                keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:76:82:13:e3:f7:3f:d9:83:81:8d:9e:8d:ee:1f:6e:43:1b:
         a0:8f:0b:36:0e:c3:fe:df:4c:4f:00:02:22:07:f7:c4:c1:81:
         73:c4:49:69:19:88:d6:bc:a6:ef:81:cc:18:78:97:b8:54:04:
         c6:f9:fd:12:20:c5:f1:50:90:92:0d:c0:48:3f:dd:42:5a:34:
         ec:b3:c4:53:7c:d8:6f:95:5a:19:63:3e:c0:59:6c:ab:17:f7:
         76:e6:f1:19:a4:1b:09:65:dc:ea:14:94:c2:63:f7:bd:a9:82:
         ed:f6:76:65:68:80:46:6e:7c:da:ae:48:e0:a5:aa:9e:ee:11:
         48:6d:ee:90:d7:01:26:c7:33:35:80:30:60:6e:7b:c6:31:d7:
         4c:56:30:6c:99:15:2b:87:71:1a:41:aa:21:dd:54:87:66:3c:
         41:d8:4e:25:75:97:0d:ff:59:d5:ab:22:03:cc:8d:be:5b:40:
         44:51:24:92:a1:44:4b:5d:12:97:8c:7c:ca:48:29:d5:03:7d:
         35:45:3c:22:89:5e:db:b0:b6:2b:29:b3:cb:8c:6a:72:a9:5c:
         66:42:2d:29:57:13:69:79:c8:89:8c:20:22:6c:f3:5e:03:2d:
         54:12:93:16:96:19:73:72:04:0b:a7:6a:ef:0c:ff:59:bb:dd:
         b6:ce:06:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:26 2025 by rpki-client