Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
File:                     B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json)
Hash identifier:          zL4P/krGOooW2lIPOu3C7MMYTjuBrIOOmsRMz7LvasI=
Subject key identifier:   A3:49:6F:2B:99:C7:FF:43:06:36:4A:DE:DE:3F:B4:B1:F1:7D:50:55
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       07DBAE476C0CE20D04CAF7105CA41EF868722414
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
Manifest number:          05BF
Signing time:             Sat 23 Aug 2025 05:07:33 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:33 +0000
Manifest next update:     Sun 24 Aug 2025 06:29:33 +0000
Files and hashes:         1: 3231332e3133392e36362e302f32342d3234203d3e203134363138.roa (hash: KfrtJjSrdaJP5uvqRj2CQapVnmUpyN82iN3vrd+6yjk=)
                          2: 3231332e3133392e38362e302f32342d3234203d3e2039303039.roa (hash: FfLZiCS8Nd3284OE5qfthGu+7ch+27qC/k5QS2NyeLA=)
                          3: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: WT8oU83m5MHq6BrcB7aCI2Ag4byqQPdwZVdpA9EWlDc=)
                          4: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: aplL4eWGO1854T22hYUsUkBTP8Rpw5inKqfwVoAi4uA=)
                          5: 3231332e3133392e37392e302f32342d3234203d3e2033333230.roa (hash: PtRMyKTdbfZGfPE5XdhdhFh3qhxKx8+kxVjMWXNcsWU=)
                          6: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: vs2b7sm3b3a6ih0FOLh30+kJAWgxfwtdRLZicKgW2iY=)
                          7: 3231332e3133392e39332e302f32342d3234203d3e2039303039.roa (hash: 9cktvEdh4jpik+wY0YHKxFgG9OCHki2tIjn/mKo9IKg=)
                          8: 3231332e3133392e37392e302f32342d3234203d3e20323132313530.roa (hash: 0JPdHuSbHUk0VXaqk6MQ9H7eLXZuOQ1QZwBPgp3LcZ4=)
                          9: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: NjWmld7in/C2wyn6DXt7Xnv7mQPq1jiHpZcTZuGeBQ0=)
                          10: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: M5KJEFx6ngzgWcWaswPQRo9lko/DzsisbWDI/JPapI0=)
                          11: 3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa (hash: LCM/dunTFfsiENo1u3oy0PNFVtxRWwm9bEHFaBempdc=)
                          12: 3231332e3133392e39312e302f32342d3234203d3e2039303039.roa (hash: iHrVGYqO0jEnmhXvt0u+E3Fi7EyKrYFB7bEQzlX2suw=)
                          13: 3231332e3133392e37352e302f32342d3234203d3e20323731393837.roa (hash: qsm72iRYseRLkO/eaTDbU1ka1enp1cU6d6BLc+o+lFc=)
                          14: 3231332e3133392e36372e302f32342d3234203d3e2039333034.roa (hash: NYL9XU5NwRS1XCCFzhRBS0MjCGeQliFqSkH8RJOdlK4=)
                          15: 3231332e3133392e37332e302f32342d3234203d3e20333936333536.roa (hash: p9bl2cITeGqyDsp+qYa6XKu0+IBsfcA9I2MK2L2iu7Q=)
                          16: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (hash: 4HobDf2IR5LvPu11gvXGRRjA/4KYDCBMeX1L5falDQI=)
                          17: 3231332e3133392e38302e302f32332d3234203d3e20383334.roa (hash: qiWvZJxXyA1T8nIVbLoZ99OExdcS5mc15RZxXCZOFJM=)
                          18: 3231332e3133392e36352e302f32342d3234203d3e20383334.roa (hash: fEnIBTw+jRf0ERbu7SqJm25t6OgI5sbbUb8jDkTz+nQ=)
                          19: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (hash: m9VEyjC6AstkEvUHZu0nndWjDPejGmt2Un1d+bIvwNg=)
                          20: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (hash: CLzyfVEPAwKX3mhx3cFkDV2A+7c3eW1iEPnVFN3/un0=)
                          21: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: +A7YZkvAN81rPDpTJkId3sZMflwrFWtwJvc3yTwbIVs=)
                          22: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (hash: zOTGboIZBsrY2C4wOPiGbp4YdGPWL/CIf9OR+DPh8lw=)
                          23: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (hash: CZYh6lYb4N4Hi46B2oVp46GIE/gWlkXTwUlUU+TKpIw=)
                          24: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (hash: FBtJ+MNYwdWO4In9hmlePFb198UWpspP65HhFA9Ht28=)
                          25: 3231332e3133392e37392e302f32342d3234203d3e20323037333838.roa (hash: ++GZ339S0KrF867J3TV0tr4TdthWz9Doq5ZUIyvykVE=)
                          26: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (hash: IdSy9DI41okmJzC8kiYhvPIkxbhT29hGtDcstol94Gs=)
                          27: 3231332e3133392e36362e302f32342d3234203d3e203136353039.roa (hash: 1hlK3K+inj21DftfAPCqNx9Ur756v/RvYDQKchDD0RY=)
                          28: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (hash: pjnqIb4dxS7ohemcNICs3/5MSebDeHfZm+o3ScY7Wbs=)
                          29: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: 3sBgBPhXGekAATE8XJ410DzQWJqVxKjP0XKZZazqwjc=)
                          30: 3231332e3133392e38342e302f32342d3234203d3e2039303039.roa (hash: recgwGLHRmHMtvRRJVUhe6BWHyw6Djaciag4FXuYftw=)
                          31: 3231332e3133392e36392e302f32342d3234203d3e20313337353137.roa (hash: HH3jqYI0MpU2yLi9Hw8yJjtic3EBakXCP+g63lrfqjg=)
                          32: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (hash: euqkb79t1OVkqJLV4h0sY2Fb9LyHpO6FssRdPdeta2o=)
                          33: 3231332e3133392e39322e302f32342d3234203d3e20383334.roa (hash: v0tNFH1u/s9uww1+x0zLopoqAlrYrdWeRhsSzqaLV6I=)
                          34: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: pcqczpZd3N8rkxbwgnioI5KV9SeSdrdvwmseTG1EX1s=)
                          35: 3231332e3133392e37372e302f32342d3234203d3e20333938323536.roa (hash: AAU8mMA/8qMP5OVFvU4ND40XGDRIHcFw5zTvG37HSds=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:db:ae:47:6c:0c:e2:0d:04:ca:f7:10:5c:a4:1e:f8:68:72:24:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Aug 23 05:02:33 2025 GMT
            Not After : Aug 24 06:29:33 2025 GMT
        Subject: CN=A3496F2B99C7FF4306364ADEDE3FB4B1F17D5055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:98:7e:51:7a:29:f2:55:7c:53:bd:6e:12:32:
                    c7:af:ba:51:21:27:a3:ee:02:00:61:8f:e3:5e:c0:
                    63:c4:10:db:57:79:df:4e:4a:8b:35:15:7e:72:71:
                    56:2b:1c:61:7d:3f:2b:3b:75:ae:d3:ce:88:f3:01:
                    2d:4a:bd:58:59:66:7b:9f:a4:a4:2a:82:40:43:07:
                    e8:3f:87:39:aa:2b:44:24:db:08:a3:86:6a:f4:02:
                    1d:1f:d8:e7:52:fe:16:d1:10:32:53:3f:8d:72:5f:
                    28:c6:0f:55:f0:b7:1e:ff:aa:a2:2d:bb:15:e7:63:
                    0c:06:ad:a9:d1:27:a3:a4:02:59:9e:84:03:80:67:
                    1f:07:13:92:49:a5:0c:97:04:b4:bb:92:ab:ee:89:
                    64:9f:25:c7:1b:02:bc:5b:88:cc:61:12:a5:8e:f8:
                    7e:fa:b5:56:14:4e:a7:5e:98:b1:18:0f:9e:1f:bc:
                    9f:80:c1:84:49:a9:b0:01:be:88:f4:9c:72:6f:a4:
                    fe:17:44:31:72:54:32:af:bf:49:2b:26:2e:c4:17:
                    c1:3f:c1:0c:fd:bd:53:11:67:1e:70:a7:77:b3:59:
                    76:b7:d8:61:f9:20:b9:6c:38:db:40:45:d1:ac:70:
                    a8:3a:b6:82:0e:2d:ff:1d:84:77:df:3a:f2:6a:b0:
                    c0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:49:6F:2B:99:C7:FF:43:06:36:4A:DE:DE:3F:B4:B1:F1:7D:50:55
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:55:10:79:be:12:37:2e:19:5a:5c:51:5c:91:2d:8a:1e:ff:
         19:33:2d:a1:df:a5:f8:cb:22:00:66:5a:7b:4d:cd:f2:a3:15:
         94:20:eb:9c:cb:48:9c:fc:dd:b5:0d:35:f4:ae:49:91:73:72:
         c1:7a:d0:a8:28:56:ab:ab:36:62:91:c6:ff:79:13:a7:6b:4c:
         f0:25:5f:ef:81:9d:63:c6:4e:ea:66:e6:b5:ce:66:8e:0d:45:
         e1:1c:63:51:05:8b:ed:13:e3:c0:6d:2a:31:76:22:ef:a2:a5:
         22:c3:7c:ce:31:0c:b8:f4:5a:ef:95:13:d7:ea:cb:1b:9f:e9:
         a8:7b:4c:fe:d1:e6:1f:b9:15:d3:eb:dd:a4:bc:08:6e:39:40:
         ee:33:44:2a:2a:8c:40:8c:bd:6c:a3:9f:3d:0f:ca:ae:ed:52:
         1c:e0:c7:68:2d:e5:bc:41:1e:79:f3:24:ab:2d:51:f7:c4:e5:
         8c:62:9d:5a:27:c2:25:56:3a:9b:ea:0e:2b:8d:9f:20:ba:cb:
         ec:3e:1d:4b:93:9c:e1:97:c4:fe:6f:43:3e:c5:3d:27:d8:fd:
         79:31:e9:df:be:5e:6f:51:9a:e1:72:6a:3b:84:e9:dd:0d:dc:
         81:a0:d4:9c:1c:14:73:87:97:8a:37:98:55:f7:46:38:9a:ab:
         8e:26:86:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:20 2025 by rpki-client