Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
File:                     8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json)
Hash identifier:          rOmgVUX/UcGOhNrecPTQeIWf4Bi0T8tZrmS4R4wwAIU=
Subject key identifier:   17:98:65:7A:50:C3:03:72:DF:F3:ED:9F:6C:45:8D:35:01:AA:FC:56
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Certificate issuer:       /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial:       6A53BA2AFF46D904D2D502606E1347AAAB80C0A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
Manifest number:          0521
Signing time:             Sat 23 Aug 2025 04:02:33 +0000
Manifest this update:     Sat 23 Aug 2025 03:57:33 +0000
Manifest next update:     Sun 24 Aug 2025 06:17:33 +0000
Files and hashes:         1: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: VR4JLJ2ZU8eUzCRER2JzBOvrizo3+I5iCEURL4jUDUs=)
                          2: 36322e3139322e3137332e302f32342d3234203d3e203235363933.roa (hash: 7LxiUpW29bCJDw6ndbnVxwTHPen7XCpx03brWPSWNVo=)
                          3: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: 1dKp6xe+eLRTQoCYGUtbaGkzNAIMlS65VuQGc12R6RA=)
                          4: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (hash: QDSk8x00L35RICmReakqpkA/56+KGgKX4susJmbToXY=)
                          5: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: EkjcjJ+omWhu9ET5qWyCX2lPu/xyPRGq35J8+ktSbYo=)
                          6: 36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa (hash: 2GimDrI+u19G9USJIxEoIwe+FIkjWzBTs+tdLgZWAyE=)
                          7: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: j6aiC8hmqjNX8bvUvtzfL/WZD+CbfD2TNLTq4Vkaxb8=)
                          8: 3138352e3138312e302e302f32342d3234203d3e2035303635.roa (hash: jKhLBm90tx+Wj64bfhAOaNtyd2IRsOIjohul50fMfmI=)
                          9: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: p6Bk0gZf8IBhPL6y8ZeFGMDiI7CTICtCBqH+ui8UNPk=)
                          10: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: AO/2wQxFVW1dCHNtgSdMO8qdA9TP6KJffP27Y2ywVzk=)
                          11: 37372e38332e3235342e302f32342d3234203d3e20313432313131.roa (hash: 5E5ubEnGmxuDRTB/crq4AEPdYVHLSryiOVVydmorIJQ=)
                          12: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (hash: Nx4wSG2k5MsgvkZE/SkqlmuALnm8blh30hh9Mbxj2MU=)
                          13: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: oAOTNgxw6bYQVCzHD93BNrqwf7e2+dYeRkUxzvhfYNE=)
                          14: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: J4P/0pJKXXswWDL/U/aSyTpYbnb7RCTWwOsChVTVKX0=)
                          15: 37372e38332e3235342e302f32342d3234203d3e203633303233.roa (hash: 5CqwgOjFFuFV2UfvvpLNhCLDO+4UZEU9TIi9LDwBTT8=)
                          16: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: yu4VS8d4SOotNR90wp+Yzh042rOQsTRk/ltNPBkKiBs=)
                          17: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (hash: 7SPDhEMWd1gl2XtQJzxrngcOVdYu9T7eD0t4enh6w+8=)
                          18: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: kVRW91gUQQJKDevSNusyEaCMFEQt6idZ9U9pUTvlEwg=)
                          19: 3231322e3130322e3131342e302f32342d3234203d3e20323132363039.roa (hash: k4QPq18KIVcE3YfXs1geEObswKolsmORhNCPU0jWep8=)
                          20: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: 1mKwdC2ZIiOIr7Rnoef/+fSq7c6umW7Rd7kmaMzPSt8=)
                          21: 37372e38332e3235322e302f32342d3234203d3e20323734383237.roa (hash: 1TkU9CuZNSKSA6n8CCEVJKfR3/eejFvKDG72x42fajA=)
                          22: 38352e3230392e31372e302f32342d3234203d3e203235363933.roa (hash: sfBR34BQfUnBG/Dfs9RgO4NWV6dIYQiGWUQLFQnMRUU=)
                          23: 36322e3139322e3137352e302f32342d3234203d3e203332313637.roa (hash: /WAm5dy4jlcwivOnkIFnMuEvBCc6QOLwRlkX4YTGCBc=)
                          24: 37372e38332e3235342e302f32342d3234203d3e20313532363732.roa (hash: OF3wSP3yuy0C/T5Z9SXU/JklI6k6e/1ZBs+Z/EFeASc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:53:ba:2a:ff:46:d9:04:d2:d5:02:60:6e:13:47:aa:ab:80:c0:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
        Validity
            Not Before: Aug 23 03:57:33 2025 GMT
            Not After : Aug 24 06:17:33 2025 GMT
        Subject: CN=1798657A50C30372DFF3ED9F6C458D3501AAFC56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:4d:d4:52:1d:92:4d:51:3b:ae:37:05:fb:b5:
                    24:8b:b1:b5:95:dd:83:91:36:b2:29:6a:97:ed:96:
                    58:26:99:46:e6:69:4c:d5:0b:95:8e:db:43:d3:4e:
                    48:7e:bd:ad:44:19:f4:16:70:3e:2f:78:c9:76:c1:
                    29:2b:fc:28:d6:03:dc:d0:7d:3a:58:fc:29:45:e2:
                    a7:11:da:48:cd:3f:3e:8c:4d:ec:a7:60:59:0d:aa:
                    8b:fa:2a:71:6b:2c:73:1c:fb:a8:d1:6d:38:1d:f3:
                    07:1a:a7:b7:e4:b0:06:0b:2b:8e:72:cc:c0:d6:9a:
                    ed:b5:8d:17:bc:e4:49:51:4d:f9:cf:ed:7a:d2:18:
                    3d:74:9c:e7:e6:d8:91:12:a5:24:a2:72:3b:92:59:
                    33:a4:a6:79:c7:b8:ce:bb:4f:a1:f2:5c:27:85:ff:
                    8c:be:3d:a8:47:0e:a5:4b:01:00:4e:23:3b:43:10:
                    a1:56:da:fa:f3:11:6f:e2:aa:8a:50:3d:f2:a4:66:
                    c2:57:36:7c:07:80:ee:ce:61:a1:71:aa:99:b1:0f:
                    1c:e8:0f:e5:34:73:3e:9b:66:d8:e3:bb:f9:ca:80:
                    83:fe:d2:4b:e6:86:f4:8c:0b:6b:81:55:35:10:23:
                    e7:b2:2d:21:d0:48:cb:08:13:7d:f3:96:06:86:d2:
                    20:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:98:65:7A:50:C3:03:72:DF:F3:ED:9F:6C:45:8D:35:01:AA:FC:56
            X509v3 Authority Key Identifier:
                keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b6:16:96:a8:b4:2e:8f:6f:f2:a9:54:b8:2d:a8:e8:8d:56:
         f6:bb:fd:69:1c:d1:b9:63:ee:db:08:52:a1:5a:45:10:1d:4a:
         80:81:e9:4d:83:66:5d:b2:62:d0:a2:3a:55:9f:e3:83:38:6e:
         17:cd:cd:17:7d:e0:02:07:8f:91:e8:8b:63:7b:28:21:f3:28:
         a7:19:2c:26:4d:83:a5:a4:2f:ce:ff:09:95:51:21:bd:b9:56:
         1d:2d:f5:4f:a7:56:5b:14:e1:c1:89:af:04:f5:36:99:a7:cd:
         66:a1:43:2a:4e:0a:38:55:c8:d4:91:2b:44:e4:71:46:4c:f8:
         78:75:05:d8:d3:97:e4:e1:cd:2a:43:ad:98:1b:2e:96:14:08:
         a0:1b:7c:99:94:b7:d5:09:ca:9c:59:cc:67:1d:29:b9:ee:03:
         2c:4e:75:84:f2:9d:5e:35:db:c7:f7:c7:ae:4a:39:75:8e:35:
         1a:0d:3f:74:f4:c8:11:00:06:a9:64:20:d2:d0:84:c4:85:7e:
         42:f1:54:47:03:ed:7c:34:b6:e0:ae:b1:db:50:76:1d:ed:6e:
         ed:52:82:68:08:69:5f:b5:8a:37:70:1d:40:62:5b:10:65:63:
         1d:5e:8b:36:3d:f3:6c:61:ad:ff:82:a6:cf:30:27:56:f9:98:
         9e:ef:01:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:59 2025 by rpki-client