Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft
File:                     D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft (raw, json)
Hash identifier:          RCToNG8cBWBKG/gqtti6xsCAdJAJEAl3DKK213JS1ZM=
Subject key identifier:   AC:37:2F:7E:05:5C:D7:61:88:BB:18:5D:5F:F2:EF:FC:F5:51:9A:03
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Certificate issuer:       /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial:       635D52E510237EF53B107353A76E5EA030A7B467
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft
Manifest number:          04F7
Signing time:             Sun 19 Oct 2025 16:36:39 +0000
Manifest this update:     Sun 19 Oct 2025 16:31:39 +0000
Manifest next update:     Mon 20 Oct 2025 17:31:39 +0000
Files and hashes:         1: 39332e39322e32312e302f32342d3234203d3e203631333137.roa (hash: fW+zXQmtdqPL01ivRHM0ry5dwDotUJmdzQHE3ZemyUE=)
                          2: 39332e39322e31392e302f32342d3234203d3e203631333137.roa (hash: bCly8plczaq5qd0H9MlQ1Z8xZKSunOI/jFWKgR1UqBg=)
                          3: 39332e39322e32322e302f32332d3234203d3e20343031383338.roa (hash: ZR3NimLfDuSVrHX3TIHZtfUL9Oft/y6YDT0lI8Ay4iU=)
                          4: 39332e39322e32322e302f32332d3234203d3e203534333339.roa (hash: 88A6WN8qi/A8Ut9i/zPgFdBiGIl+iAKvU5wxlPcUnB8=)
                          5: 37382e32342e3132332e302f32342d3234203d3e2037303138.roa (hash: yLm71OTqDFRdyl2jt+hmsZQmui0MjgACYd0QbV3wZ9U=)
                          6: 37382e32342e3132312e302f32342d3234203d3e203631333137.roa (hash: PNy4BBOReJ4B4LRwKHBjnzscIyK0n1F3JT7zrSI8uHw=)
                          7: 37382e32342e3132332e302f32342d3234203d3e20343031383338.roa (hash: XbX1Gid500oTFj6vAef29FZUEz5FTkMATGNQOQiD6pY=)
                          8: D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl (hash: XS/c3cGmKxjk985FhNSATIxgjPSar8RiU85o4ySS2mw=)
                          9: 37382e32342e3132362e302f32332d3234203d3e203131343236.roa (hash: daBRkHJPjnP4DyHn4IivnK1qaHgtIwZJtESS0iOn6Xk=)
                          10: 34352e38362e39342e302f32342d3234203d3e2039303039.roa (hash: gq03q2PZTenb5MfLZJOhv7nheUzD9xSGdvhncjMBFfc=)
                          11: 37382e32342e3132352e302f32342d3234203d3e203534333339.roa (hash: 8J7vWDZA6CwD0N0heCZfxarZkaHc987rZNDTEoRqJuw=)
                          12: 37382e32342e3132322e302f32342d3234203d3e20343031383338.roa (hash: QSDJ1+8SgpwSggscxtnEW0fE8nG/Mt5ZyXJ/C5BJhqQ=)
                          13: 37382e32342e3132322e302f32342d3234203d3e2037303138.roa (hash: RiGLyTpjx/lhYnZMR/g3INSwpo5JHGzbqqOnRRhQZa8=)
                          14: 37382e32342e3132342e302f32342d3234203d3e20343031383338.roa (hash: VrnH5tIT+SOLQ0xUmgz8lDea4v1K04gWY5bP4L4H/fY=)
                          15: 37382e32342e3132352e302f32342d3234203d3e20343031383338.roa (hash: qgaqtIbvWlmZK0f99yeifoHSkIPhxGYhski+5gJ4Rv4=)
                          16: 34352e38362e39322e302f32342d3234203d3e20323039313831.roa (hash: gFPXsCrn7VghMZpPQmlNius+Qe9koRj6iqpgIDQpOY8=)
                          17: 39332e39322e31382e302f32342d3234203d3e203534333339.roa (hash: WMxtcl2Ju6TLrgTtLUBAyAfGF8Gn9pZV9umXAbbzoJo=)
                          18: 39332e39322e32302e302f32342d3234203d3e2035353131.roa (hash: 7VcdQni9NXqci+IjZbxirF6Td9GD5nyYwAr4qpAAeg4=)
                          19: 39332e39322e31382e302f32342d3234203d3e20343031383338.roa (hash: UH0UP25o3U70TKOGCO5ZzwtVViIjPRoBTmf/0ZejDTc=)
                          20: 37382e32342e3132342e302f32342d3234203d3e203534333339.roa (hash: Jmas5KP8U8YtPnq0n93kzfbv6wwue5du0IC/hUNUQy4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:5d:52:e5:10:23:7e:f5:3b:10:73:53:a7:6e:5e:a0:30:a7:b4:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
        Validity
            Not Before: Oct 19 16:31:39 2025 GMT
            Not After : Oct 20 17:31:39 2025 GMT
        Subject: CN=AC372F7E055CD76188BB185D5FF2EFFCF5519A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:52:31:8e:cc:4d:f7:a5:16:6b:7f:4a:31:be:
                    5b:9d:ae:a8:41:fc:a1:0b:64:26:0e:43:ed:1b:02:
                    36:75:1f:92:cf:77:aa:10:bc:56:67:9d:c5:15:18:
                    71:41:2a:6e:cc:56:37:40:16:53:b6:c3:1c:98:4e:
                    93:8f:1a:14:43:a0:a7:e9:d7:55:b0:25:ec:be:2c:
                    01:5a:fd:be:d4:63:23:93:54:e5:f9:5c:1c:a8:dd:
                    19:fe:e5:af:0d:9a:18:8d:3d:ca:a6:c1:37:f1:3d:
                    15:ec:6b:e5:15:df:f3:c9:28:ac:02:f5:b9:fc:79:
                    28:27:bb:52:92:6d:7f:a4:6b:d5:e6:6e:75:e1:c2:
                    49:52:9e:f5:ba:cc:2b:8c:ca:71:46:9a:76:60:3f:
                    90:68:cc:c4:92:57:21:2e:b1:5d:7a:b0:bd:68:5e:
                    58:8b:3d:2e:ec:0d:52:14:24:83:f7:71:33:00:e8:
                    c6:09:f6:22:e4:65:5c:1f:75:a2:0a:ed:7a:a8:a4:
                    ea:aa:27:88:19:00:fa:aa:b6:14:31:39:32:c8:17:
                    3b:79:ed:d5:24:e6:2d:b3:a3:b8:82:e2:b4:4a:22:
                    50:b9:ed:d5:df:d2:d7:6c:a9:eb:82:f2:ac:5a:86:
                    ea:99:9f:d0:82:f9:07:c8:23:2c:1b:d6:6d:53:c6:
                    17:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:37:2F:7E:05:5C:D7:61:88:BB:18:5D:5F:F2:EF:FC:F5:51:9A:03
            X509v3 Authority Key Identifier:
                keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:c3:10:d6:3d:91:ef:35:8a:08:02:33:dd:15:31:45:fe:50:
         08:22:ae:71:27:02:d7:16:b9:e6:24:4c:06:05:4a:ec:a0:9d:
         5e:a0:65:20:6b:a2:ce:3f:9c:7c:30:30:4f:1c:c1:19:1d:56:
         44:86:f8:9e:26:d8:18:1b:92:53:dd:85:92:25:df:02:f5:da:
         0f:56:64:bf:1d:8b:4b:56:25:45:40:fa:49:14:cd:aa:f4:b7:
         10:bc:a7:e9:ed:b2:0a:c4:33:4c:dd:88:96:04:7b:3d:57:17:
         b6:2b:8a:f9:97:8b:52:ae:75:a5:72:51:4b:f4:d8:64:53:3d:
         8b:6c:20:5b:0a:56:35:41:c8:96:74:49:45:e8:52:53:f3:78:
         0f:66:b9:13:84:29:7e:e3:10:8f:91:75:9b:04:da:ba:0d:66:
         94:e3:67:57:16:ec:69:de:5b:73:a6:b0:60:ed:1a:1a:c2:b2:
         5b:fd:60:00:d3:e9:0a:d5:f6:ac:69:2a:7a:2e:90:b0:71:08:
         67:8f:4a:12:6a:f8:ac:1c:1b:30:7d:87:a9:60:14:04:76:50:
         db:d2:e4:f7:fd:82:7c:f2:17:cc:eb:11:20:ff:1c:7b:4e:b9:
         d4:b6:b8:c9:77:3c:c7:f1:6c:12:0b:11:84:3b:03:4c:b9:fe:
         95:57:7a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:04 2025 by rpki-client