Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
File:                     38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json)
Hash identifier:          iLU0CoAgtNPd+nZ7gvKvHmRETJBWBV1cqjDnBymcQbI=
Subject key identifier:   81:9D:E9:E1:A9:21:8B:42:33:9E:99:49:C3:40:87:79:99:FA:0C:C5
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Certificate issuer:       /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial:       230D0C1D72A4AA176DD4FA841D31CCD6E488FDB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
Manifest number:          010C
Signing time:             Sat 28 Jun 2025 17:09:10 +0000
Manifest this update:     Sat 28 Jun 2025 17:04:10 +0000
Manifest next update:     Sun 29 Jun 2025 17:23:10 +0000
Files and hashes:         1: 34362e3138322e31382e302f32332d3233203d3e203433383437.roa (hash: 4Ns+nZIS59tdPTXyzEk/8ZsDfijKL83vY7HPlP7mVB0=)
                          2: 33312e3138352e3130352e302f32342d3234203d3e20313335333931.roa (hash: UHjaYZdaJB6lUIpYnqhxUJeEQvDh7dO7siLVcmgE1HM=)
                          3: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: DOt+xOMDogaXujbawrGL0U15zCSEQeK/RAeOdZ56ezk=)
                          4: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: YFUHOvZUTuDXo1v/ldHHqjI9VjtTCBbJBPcqOziNAKY=)
                          5: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: jK9tTJ3HWkDECaNJJZCeSwWGUPLGyK3Y5TeyBPZZ8ds=)
                          6: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: bxI8j0Q43fNYwFfEpnx3zZA+WfxxHOFpyLP15cwiRJc=)
                          7: 33312e3138352e3130372e302f32342d3234203d3e203231383539.roa (hash: qnu9sW/eXhzgLqcliqR873WFuo1En8erdPs6TqliSEg=)
                          8: 3138352e35382e3135372e302f32342d3234203d3e2032393134.roa (hash: lpWXt6uFvU2PZ1sNhgr10rMfQuglN6ZjbNveDXRK2tg=)
                          9: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: tjhKwoa/z/ms3eL96lf+MyeXfH8SFjq92hWldF9BNCA=)
                          10: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: 2aiAtkkpFlb5J4UKg3KwRnaG7ituhGEa6s/dcTUAgJQ=)
                          11: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: 01LOWf7MxhRX+2Op4rDN5W7ucn6FteIUTuCGEpIiXqg=)
                          12: 3138352e35382e3135382e302f32342d3234203d3e203432383331.roa (hash: H0/UOIDOPTZQG2jWBZUuvlV7qmEWppBmDmL+nyn9Jr4=)
                          13: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: Zxw7HANZ4fSS/h6IwZB62HG+NMCfSONfC+RPVG/FTSE=)
                          14: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: mN3Qu59H2oC79ZObPpdN6ubuCwdpq+KwMSfQr8+kwt4=)
                          15: 326130323a323937303a3a2f32392d3239203d3e203433383437.roa (hash: s2Lo9o3m7PNA+VTM8h6HfGJuLE7e0u+GGo764aM9FW4=)
                          16: 3138352e35382e3135372e302f32342d3234203d3e2039333034.roa (hash: ecPrVI69N/vnSd3FE9LMlI9j3yoUAyDEH+/p4MpTJaY=)
                          17: 34362e3138322e31362e302f32332d3233203d3e203433383437.roa (hash: 4YLzigbbgGBlj3P8KPCDpw+y1a9c2DAZLVBVu5lNf4E=)
                          18: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: jGy7NRXxpQ8Adk8KlwvLUXW9fgmGYykhrzR6k8tJHIg=)
                          19: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: LYeLRSyR2/FM8uZ2/tBIS6miZQIE2zl08o8wZaxLsv4=)
                          20: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: /UuXq/SkWF47gXFnW/T4vEllXZulBrt5hUqt6XmiJns=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0d:0c:1d:72:a4:aa:17:6d:d4:fa:84:1d:31:cc:d6:e4:88:fd:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
        Validity
            Not Before: Jun 28 17:04:10 2025 GMT
            Not After : Jun 29 17:23:10 2025 GMT
        Subject: CN=819DE9E1A9218B42339E9949C340877999FA0CC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:af:f8:dc:c8:10:ce:d2:72:e3:91:b9:43:
                    0a:1c:1f:fb:b9:45:ed:92:9b:ae:84:57:5f:56:a4:
                    18:ae:74:e5:45:fe:45:3c:05:3d:7d:cf:7e:a1:60:
                    65:6d:19:51:75:96:9e:1c:7f:22:25:17:45:0e:59:
                    81:6b:7b:7a:5a:e6:ea:13:8a:50:0e:14:62:61:bf:
                    4a:f2:be:d4:21:50:31:51:53:20:b2:68:81:2f:3f:
                    37:d9:4b:c1:5c:e4:62:49:7d:a1:e6:10:3e:af:e3:
                    d3:f2:44:80:eb:91:2a:0b:6e:92:50:ac:f5:43:2f:
                    68:1a:c4:24:4c:89:4b:7b:12:3f:80:1c:11:5b:f4:
                    77:42:b0:21:30:22:2d:c3:fd:fc:33:4f:15:d3:96:
                    78:5a:73:f5:7d:7b:f0:84:40:58:fe:57:cd:bc:e1:
                    b9:e3:7d:c5:9c:e7:14:52:a8:cc:52:80:46:f0:89:
                    e9:e6:af:f4:f1:29:1e:52:19:e7:14:8e:fc:a5:8a:
                    3c:63:93:82:fc:36:e4:66:8c:48:ab:e9:b7:e5:9c:
                    c1:61:f5:c6:b9:b5:19:7d:37:ea:e3:71:56:80:43:
                    8b:15:89:68:74:6c:77:a1:a2:1f:5a:23:e8:83:8d:
                    7a:b0:90:09:e8:e1:49:66:12:0a:c5:ed:39:50:f9:
                    6f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9D:E9:E1:A9:21:8B:42:33:9E:99:49:C3:40:87:79:99:FA:0C:C5
            X509v3 Authority Key Identifier:
                keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:40:9a:16:db:d1:30:82:8a:78:5b:bf:cb:75:4f:9c:09:55:
         a5:e4:7a:b9:ed:b3:08:b1:03:c8:34:65:48:ce:2d:e6:e5:92:
         1c:77:52:7c:5f:12:a9:c6:ee:22:a2:0c:61:ef:9d:ac:b2:06:
         58:ab:4f:af:90:e3:26:34:31:d0:e3:be:c7:aa:8a:d4:23:2d:
         77:03:97:15:f5:ec:4a:1a:75:25:28:c7:a6:e1:03:f3:fc:80:
         2e:06:fc:2c:f1:43:47:a6:60:00:42:a4:06:64:7b:6c:fe:80:
         fa:67:89:bf:e6:cc:91:9e:e7:7e:f5:d9:07:0f:c2:0b:04:c5:
         ed:11:1b:3a:e4:72:05:86:8b:e7:5e:52:10:0d:5f:18:53:56:
         1e:49:0f:45:f6:bd:57:a6:71:a9:0d:0d:48:4a:10:66:4e:e6:
         79:8a:b4:0d:c1:32:b8:92:fb:1e:4c:8e:6a:bc:a8:8d:06:cf:
         d9:03:1a:c3:a6:21:5c:de:ef:e8:ce:07:3f:c1:a1:17:46:69:
         27:18:76:cb:28:b7:f8:ba:47:51:1f:17:73:eb:5a:9c:f0:39:
         e7:d5:f1:e6:bc:59:d4:fc:55:b8:2b:53:29:99:85:87:61:9a:
         95:6e:1e:f8:03:98:b2:e6:4b:ee:18:0e:3f:75:1f:f5:97:9e:
         06:7d:41:37
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUIw0MHXKkqhdt1PqEHTHM1uSI/bYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx
NTAxMjBmODAeFw0yNTA2MjgxNzA0MTBaFw0yNTA2MjkxNzIzMTBaMDMxMTAvBgNV
BAMTKDgxOURFOUUxQTkyMThCNDIzMzlFOTk0OUMzNDA4Nzc5OTlGQTBDQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvd6/43MgQztJy45G5QwocH/u5
Re2Sm66EV19WpBiudOVF/kU8BT19z36hYGVtGVF1lp4cfyIlF0UOWYFre3pa5uoT
ilAOFGJhv0ryvtQhUDFRUyCyaIEvPzfZS8Fc5GJJfaHmED6v49PyRIDrkSoLbpJQ
rPVDL2gaxCRMiUt7Ej+AHBFb9HdCsCEwIi3D/fwzTxXTlnhac/V9e/CEQFj+V828
4bnjfcWc5xRSqMxSgEbwienmr/TxKR5SGecUjvylijxjk4L8NuRmjEir6bflnMFh
9ca5tRl9N+rjcVaAQ4sViWh0bHehoh9aI+iDjXqwkAno4UlmEgrF7TlQ+W/DAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUgZ3p4akhi0IznplJw0CHeZn6DMUwHwYDVR0j
BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm
OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV
QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03
MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2
MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekCaFtvRMIKKeFu/y3VP
nAlVpeR6ue2zCLEDyDRlSM4t5uWSHHdSfF8SqcbuIqIMYe+drLIGWKtPr5DjJjQx
0OO+x6qK1CMtdwOXFfXsShp1JSjHpuED8/yALgb8LPFDR6ZgAEKkBmR7bP6A+meJ
v+bMkZ7nfvXZBw/CCwTF7REbOuRyBYaL515SEA1fGFNWHkkPRfa9V6ZxqQ0NSEoQ
Zk7meYq0DcEyuJL7HkyOaryojQbP2QMaw6YhXN7v6M4HP8GhF0ZpJxh2yyi3+LpH
UR8Xc+tanPA559Xx5rxZ1PxVuCtTKZmFh2GalW4e+AOYsuZL7hgOP3Uf9ZeeBn1B
Nw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:37 2025 by rpki-client