Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
File:                     8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json)
Hash identifier:          Gj3rKsEkDlyNts/8DECeID7jVDMRb1Ov5Uey1cIn7+4=
Subject key identifier:   FA:19:81:BE:38:BF:F3:DD:37:DF:FB:5A:2E:91:B2:BB:1F:C7:31:21
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Certificate issuer:       /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial:       78ADC89D53D79A3B38E3829410325C81D8F57F7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
Manifest number:          04CD
Signing time:             Sun 29 Jun 2025 10:20:33 +0000
Manifest this update:     Sun 29 Jun 2025 10:15:33 +0000
Manifest next update:     Mon 30 Jun 2025 12:59:33 +0000
Files and hashes:         1: 3231322e3130322e3131342e302f32342d3234203d3e20323132363039.roa (hash: k4QPq18KIVcE3YfXs1geEObswKolsmORhNCPU0jWep8=)
                          2: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (hash: QDSk8x00L35RICmReakqpkA/56+KGgKX4susJmbToXY=)
                          3: 38352e3230392e31372e302f32342d3234203d3e203235363933.roa (hash: sfBR34BQfUnBG/Dfs9RgO4NWV6dIYQiGWUQLFQnMRUU=)
                          4: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (hash: CAxVMMWN+S6NlP/AsgS1tyjuFvGWAaxzAHmHeH0vGZY=)
                          5: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: AO/2wQxFVW1dCHNtgSdMO8qdA9TP6KJffP27Y2ywVzk=)
                          6: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (hash: ngHdoUxJymyOOTpWXLZA6HfqcGQkxKDww9uhl5L3bs4=)
                          7: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: j6aiC8hmqjNX8bvUvtzfL/WZD+CbfD2TNLTq4Vkaxb8=)
                          8: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: oAOTNgxw6bYQVCzHD93BNrqwf7e2+dYeRkUxzvhfYNE=)
                          9: 3138352e3138312e302e302f32342d3234203d3e2035303635.roa (hash: jKhLBm90tx+Wj64bfhAOaNtyd2IRsOIjohul50fMfmI=)
                          10: 36322e3139322e3137332e302f32342d3234203d3e203235363933.roa (hash: 7LxiUpW29bCJDw6ndbnVxwTHPen7XCpx03brWPSWNVo=)
                          11: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: yu4VS8d4SOotNR90wp+Yzh042rOQsTRk/ltNPBkKiBs=)
                          12: 37372e38332e3235322e302f32342d3234203d3e20323734383237.roa (hash: 1TkU9CuZNSKSA6n8CCEVJKfR3/eejFvKDG72x42fajA=)
                          13: 37372e38332e3235342e302f32342d3234203d3e20383334.roa (hash: n7HGm9aNflEvlbYpwCQ0DpByaNaxais/eapI0cuf1JU=)
                          14: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: L/SDcBdIOQpgifRxe/HUMlZ1SzwcVuUCspQIXzWpyig=)
                          15: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: kVRW91gUQQJKDevSNusyEaCMFEQt6idZ9U9pUTvlEwg=)
                          16: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: J4P/0pJKXXswWDL/U/aSyTpYbnb7RCTWwOsChVTVKX0=)
                          17: 36322e3139322e3137352e302f32342d3234203d3e203332313637.roa (hash: /WAm5dy4jlcwivOnkIFnMuEvBCc6QOLwRlkX4YTGCBc=)
                          18: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: p6Bk0gZf8IBhPL6y8ZeFGMDiI7CTICtCBqH+ui8UNPk=)
                          19: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: eWXMMSA0Rq5koOaRaaHhcbU4ocE3NTgDUdKA5XEeLVo=)
                          20: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: 1mKwdC2ZIiOIr7Rnoef/+fSq7c6umW7Rd7kmaMzPSt8=)
                          21: 36322e3139322e3137322e302f32342d3234203d3e20323733333438.roa (hash: qejB/WT5wFvC1QZ5g0XqTUenJgPd04W9SCAjldb8mgM=)
                          22: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: Jlofucguv+Def3PUKBrJxZOJZBY4eY6+vW3Y4ZeprSk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ad:c8:9d:53:d7:9a:3b:38:e3:82:94:10:32:5c:81:d8:f5:7f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
        Validity
            Not Before: Jun 29 10:15:33 2025 GMT
            Not After : Jun 30 12:59:33 2025 GMT
        Subject: CN=FA1981BE38BFF3DD37DFFB5A2E91B2BB1FC73121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d0:49:0b:ed:9d:27:9b:9c:51:b7:cd:c3:71:
                    db:76:8c:c4:e4:ef:6c:8d:e2:09:bd:58:ae:3c:9b:
                    75:5e:1c:fc:7c:9a:c8:24:30:96:08:8c:10:98:6e:
                    cd:2e:d5:93:7f:7b:a5:63:8b:28:70:44:01:a4:86:
                    f5:bf:58:43:23:06:e4:8f:96:d7:ac:83:0d:5d:f7:
                    05:85:71:a8:94:be:d5:07:91:fd:de:8a:9f:23:91:
                    b9:37:31:10:8d:b8:14:c3:ea:84:af:2c:80:de:4e:
                    89:ad:b8:bb:6c:e1:db:e6:00:d3:78:55:f2:c8:45:
                    e6:59:ad:b8:95:da:30:b8:cb:a4:22:00:eb:3d:ae:
                    12:34:ba:25:2d:c9:ff:65:a1:e1:e5:c2:0d:81:af:
                    31:7c:c1:68:3a:df:93:29:95:2e:85:d8:23:76:7c:
                    aa:0c:7f:0b:91:93:46:29:84:10:63:70:90:1e:34:
                    c7:0a:f9:48:89:4f:7b:17:ea:d9:1e:3b:4b:57:8a:
                    0f:0b:37:f3:c6:38:69:ee:f0:12:ee:0a:b4:5c:d5:
                    db:45:74:56:6c:b4:4c:74:22:a2:ae:86:a8:6c:0c:
                    49:52:35:c6:d9:95:29:80:8f:04:56:29:22:78:7c:
                    9c:84:2e:0d:f7:21:df:9c:4d:a9:87:13:8c:dd:0a:
                    10:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:19:81:BE:38:BF:F3:DD:37:DF:FB:5A:2E:91:B2:BB:1F:C7:31:21
            X509v3 Authority Key Identifier:
                keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:16:58:26:de:8d:0a:25:f1:fe:63:b9:ec:f1:b6:ac:a3:b6:
         07:1e:c9:c2:77:94:a0:2e:bf:6f:3a:5d:c6:d3:c4:20:3c:62:
         9f:9a:bd:1f:e5:18:c2:8c:22:b0:12:76:95:73:3c:d8:30:d1:
         77:e1:fd:ce:8e:e5:58:0a:bf:09:b8:37:8a:12:28:d4:e8:ac:
         48:52:ef:0c:44:20:27:3f:8e:71:c9:c7:84:b1:6a:c4:08:b1:
         e2:1f:80:c0:ee:9c:cb:be:92:1c:c1:9c:86:9e:ec:a9:b5:56:
         d8:43:df:66:52:08:39:88:bd:f9:d3:2a:f2:8e:e5:1d:e2:ee:
         4a:5d:22:2c:98:f2:33:0c:90:c1:dc:df:5e:f0:6d:b1:cf:55:
         b1:21:33:29:96:2c:19:a8:d7:42:40:e5:ea:72:a0:19:de:8e:
         c3:53:1d:12:e8:51:98:f4:66:4c:4c:3b:60:7f:e5:b8:37:ff:
         2d:3e:6a:58:8f:49:b6:22:b8:1b:d1:6a:84:2f:78:f8:3b:6d:
         ef:9c:0c:4a:ff:74:d1:92:2f:7f:7a:68:83:78:7c:db:23:46:
         60:e1:87:6e:91:71:5d:b4:ae:3c:00:60:17:f2:e8:93:3c:06:
         4e:6a:d1:81:a5:76:fe:96:3d:ec:b9:dd:af:ea:ae:3c:d8:4d:
         fb:6a:f6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:06:05 2025 by rpki-client