Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
File:                     B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json)
Hash identifier:          mdxp8Jwyujl/cc8kCSQwfwspWP0+PUMohdYzW5Ki0iM=
Subject key identifier:   2C:1B:F6:C3:4A:C2:C6:D4:3C:7D:2A:7B:47:7A:4C:71:5A:1A:4F:03
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       10D916F103726B1013687C675C0A703FF5535414
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
Manifest number:          0619
Signing time:             Mon 20 Oct 2025 07:01:44 +0000
Manifest this update:     Mon 20 Oct 2025 06:56:44 +0000
Manifest next update:     Tue 21 Oct 2025 09:34:44 +0000
Files and hashes:         1: 3231332e3133392e37392e302f32342d3234203d3e2033333230.roa (hash: PtRMyKTdbfZGfPE5XdhdhFh3qhxKx8+kxVjMWXNcsWU=)
                          2: 3231332e3133392e39332e302f32342d3234203d3e2039303039.roa (hash: 9cktvEdh4jpik+wY0YHKxFgG9OCHki2tIjn/mKo9IKg=)
                          3: 3231332e3133392e37332e302f32342d3234203d3e20323132323338.roa (hash: Dtv0Rk3S6CYGgeyc9Utp8OCStFSnf/fyoGbb6uGogTI=)
                          4: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (hash: 4HobDf2IR5LvPu11gvXGRRjA/4KYDCBMeX1L5falDQI=)
                          5: 3231332e3133392e37372e302f32342d3234203d3e20333938323536.roa (hash: AAU8mMA/8qMP5OVFvU4ND40XGDRIHcFw5zTvG37HSds=)
                          6: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (hash: zOTGboIZBsrY2C4wOPiGbp4YdGPWL/CIf9OR+DPh8lw=)
                          7: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: r1pjD687zCx4FmCuXlGB5h73ScKoFYopGKhXlE6KUfY=)
                          8: 3231332e3133392e36372e302f32342d3234203d3e2039333034.roa (hash: 18Z/kr0BOMbrD7s6WTSNdpCR4gQ+ao7oXZdueQ4RROc=)
                          9: 3231332e3133392e37352e302f32342d3234203d3e20323731393837.roa (hash: qsm72iRYseRLkO/eaTDbU1ka1enp1cU6d6BLc+o+lFc=)
                          10: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: vs2b7sm3b3a6ih0FOLh30+kJAWgxfwtdRLZicKgW2iY=)
                          11: 3231332e3133392e39312e302f32342d3234203d3e2039303039.roa (hash: iHrVGYqO0jEnmhXvt0u+E3Fi7EyKrYFB7bEQzlX2suw=)
                          12: 3231332e3133392e36362e302f32342d3234203d3e203136353039.roa (hash: 1hlK3K+inj21DftfAPCqNx9Ur756v/RvYDQKchDD0RY=)
                          13: 3231332e3133392e36362e302f32342d3234203d3e203134363138.roa (hash: KfrtJjSrdaJP5uvqRj2CQapVnmUpyN82iN3vrd+6yjk=)
                          14: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (hash: FBtJ+MNYwdWO4In9hmlePFb198UWpspP65HhFA9Ht28=)
                          15: 3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa (hash: LCM/dunTFfsiENo1u3oy0PNFVtxRWwm9bEHFaBempdc=)
                          16: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (hash: pjnqIb4dxS7ohemcNICs3/5MSebDeHfZm+o3ScY7Wbs=)
                          17: 3231332e3133392e36392e302f32342d3234203d3e20313337353137.roa (hash: HH3jqYI0MpU2yLi9Hw8yJjtic3EBakXCP+g63lrfqjg=)
                          18: 3231332e3133392e39322e302f32342d3234203d3e20383334.roa (hash: v0tNFH1u/s9uww1+x0zLopoqAlrYrdWeRhsSzqaLV6I=)
                          19: 3231332e3133392e36352e302f32342d3234203d3e2039333034.roa (hash: IuHaapDzUgLoDmpk8BPvs+AnS5FkKTocszixLRbQ9pk=)
                          20: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: aplL4eWGO1854T22hYUsUkBTP8Rpw5inKqfwVoAi4uA=)
                          21: 3231332e3133392e38362e302f32342d3234203d3e2039303039.roa (hash: FfLZiCS8Nd3284OE5qfthGu+7ch+27qC/k5QS2NyeLA=)
                          22: 3231332e3133392e37392e302f32342d3234203d3e20323132313530.roa (hash: 0JPdHuSbHUk0VXaqk6MQ9H7eLXZuOQ1QZwBPgp3LcZ4=)
                          23: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: NjWmld7in/C2wyn6DXt7Xnv7mQPq1jiHpZcTZuGeBQ0=)
                          24: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (hash: CZYh6lYb4N4Hi46B2oVp46GIE/gWlkXTwUlUU+TKpIw=)
                          25: 3231332e3133392e38302e302f32332d3234203d3e20383334.roa (hash: qiWvZJxXyA1T8nIVbLoZ99OExdcS5mc15RZxXCZOFJM=)
                          26: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: M5KJEFx6ngzgWcWaswPQRo9lko/DzsisbWDI/JPapI0=)
                          27: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: 3sBgBPhXGekAATE8XJ410DzQWJqVxKjP0XKZZazqwjc=)
                          28: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (hash: euqkb79t1OVkqJLV4h0sY2Fb9LyHpO6FssRdPdeta2o=)
                          29: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: RHuW3V2J2OWNLRVtd3IFUZX5pSm4cIh9/j8ZHAR7fwY=)
                          30: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: +A7YZkvAN81rPDpTJkId3sZMflwrFWtwJvc3yTwbIVs=)
                          31: 3231332e3133392e37392e302f32342d3234203d3e20323037333838.roa (hash: ++GZ339S0KrF867J3TV0tr4TdthWz9Doq5ZUIyvykVE=)
                          32: 3231332e3133392e38342e302f32342d3234203d3e2039303039.roa (hash: recgwGLHRmHMtvRRJVUhe6BWHyw6Djaciag4FXuYftw=)
                          33: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (hash: IdSy9DI41okmJzC8kiYhvPIkxbhT29hGtDcstol94Gs=)
                          34: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (hash: CLzyfVEPAwKX3mhx3cFkDV2A+7c3eW1iEPnVFN3/un0=)
                          35: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (hash: m9VEyjC6AstkEvUHZu0nndWjDPejGmt2Un1d+bIvwNg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d9:16:f1:03:72:6b:10:13:68:7c:67:5c:0a:70:3f:f5:53:54:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Oct 20 06:56:44 2025 GMT
            Not After : Oct 21 09:34:44 2025 GMT
        Subject: CN=2C1BF6C34AC2C6D43C7D2A7B477A4C715A1A4F03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:78:7e:af:2e:07:de:c3:53:5e:9f:f1:8d:c6:
                    11:80:7a:82:e6:9d:cd:ec:f3:50:a0:1e:90:3b:14:
                    81:d1:f1:c8:8d:37:da:e6:6c:b0:ee:41:2d:c2:43:
                    e1:2c:8c:ab:66:aa:5e:be:22:ba:e5:10:d1:5b:3a:
                    50:9e:ac:c4:57:9b:7c:6e:c4:e6:d8:f1:95:4a:14:
                    5e:19:99:cb:da:0a:98:28:50:42:04:9a:2c:61:27:
                    f2:6b:a9:85:98:c3:a1:3a:b5:e1:e5:e5:ad:79:67:
                    ef:d5:7c:ad:92:d5:7f:fb:53:48:78:5d:86:a7:4d:
                    b5:bd:9f:06:66:48:9a:6d:55:6b:de:17:cb:5a:3a:
                    50:fd:28:59:7e:fb:75:bd:9d:1a:0b:bb:d2:8e:cd:
                    d9:e0:16:59:0c:42:6c:bb:06:db:39:08:b8:76:c5:
                    d6:c4:eb:7e:9a:ae:e8:df:37:e9:a0:62:c3:09:16:
                    08:17:0c:e3:e5:13:b3:15:51:72:a2:e5:67:5c:ac:
                    fc:5c:50:7d:0f:e0:dc:5b:32:7b:a1:36:b4:f0:7c:
                    4f:41:d0:bb:7a:6e:bf:c1:66:90:33:ec:bc:4f:2b:
                    e3:61:61:16:03:12:4e:cc:5b:33:f0:99:ee:c4:e7:
                    4e:c4:ce:25:f6:3a:69:25:a0:4c:ff:5c:9b:4f:12:
                    b5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1B:F6:C3:4A:C2:C6:D4:3C:7D:2A:7B:47:7A:4C:71:5A:1A:4F:03
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a6:f7:b0:b1:46:4b:40:33:a2:4d:90:1d:52:c8:10:81:c0:
         2e:67:3f:ae:a7:6f:0e:59:0d:9a:72:21:da:2a:da:ac:e3:58:
         2d:10:bd:42:cf:5f:71:30:c9:1a:02:6c:c0:19:00:72:30:c6:
         a4:e6:0b:10:37:4a:c2:e1:a2:b4:5a:a1:fb:a9:88:3f:e5:0a:
         d6:6a:d3:0f:c5:a0:c5:11:a5:26:f2:9b:71:ae:0f:67:74:c8:
         2c:b7:ee:f5:8e:95:76:03:92:df:c0:62:84:29:60:18:d3:01:
         20:5c:70:e5:1d:bc:cb:c8:39:98:8a:c6:61:4e:3c:db:0c:84:
         ba:94:25:17:bd:1d:61:fb:bb:61:63:6a:1f:fb:0d:ef:e1:82:
         09:55:90:a3:5b:5a:a9:bc:53:c0:86:76:f3:b8:67:15:04:df:
         77:b6:52:8d:15:ae:1d:1f:5c:26:ee:a0:29:c8:de:ba:23:dc:
         02:ab:ee:a8:17:8a:bc:88:4b:b6:6b:b8:0e:78:53:0b:21:39:
         63:41:ca:ec:86:f5:52:ad:60:36:32:1e:d6:b5:45:6b:22:f4:
         f2:3b:c1:9c:b1:20:05:7e:84:20:21:6f:cf:28:1e:4b:f9:84:
         2c:5c:81:2b:e0:62:73:e6:2f:90:44:2b:e7:96:88:87:fa:b1:
         09:76:34:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:46:58 2025 by rpki-client