Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft
File:                     BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json)
Hash identifier:          qLqBT0akW3YsKXZZStSMbHy2Sa/Up7zGakVPJ/z29eE=
Subject key identifier:   65:44:3D:5F:AA:C0:04:61:AA:44:F3:08:14:96:C0:02:31:EB:77:38
Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
Certificate issuer:       /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Certificate serial:       55662705C86F5C0671C7C2BA8D02386001245748
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft
Manifest number:          0102
Signing time:             Fri 22 Aug 2025 22:52:33 +0000
Manifest this update:     Fri 22 Aug 2025 22:47:33 +0000
Manifest next update:     Sun 24 Aug 2025 00:46:33 +0000
Files and hashes:         1: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: IZUL7zEfrS59nO5eqaFvUNxkfEHC3BRjyZY2ApRcoSg=)
                          2: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 0IUSu+qptfP2e6dJnAny9tG4Cb2xcvVtmtBD0i4piak=)
                          3: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: kb9L/tGAr46+rrzE9OxPmgePo3Tfy392U2ig8d2jQ/o=)
                          4: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: zMoHCJaZZ5vI4uszw9fV0p+6ygU9pfTnJ4jfa1DsJEg=)
                          5: 3137382e3234382e37362e302f32342d3234203d3e203336353330.roa (hash: h2oY8dMCuUJOV8h2ooYxtJO3njho899x4gMqGa23JNE=)
                          6: 3137382e3234382e37362e302f32342d3234203d3e20323134303234.roa (hash: JikbqnpKajZI2JuxlY+TTYmy6DToKoSov4y2Ga81BQg=)
                          7: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: aYbyRGpjGAy7pzSZSZu9mIeZ8V/FjY5/eUQvPy2nJ/Y=)
                          8: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 0e4l5EqcD9+SWWVL79QZba03Lu9mdjyR/TfDJr390dA=)
                          9: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: 0fCZnPcUR/TU0KGeDhdE4rzY8AMOIFMDCEwGzQYi3Zw=)
                          10: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: LnJ/05IgVINSSDv4l3ajCKuAD4mr9PXKyWCylRmwux0=)
                          11: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: 55oHxRvhLlFnFgVNA6T2hJ74AYC9yyl40HSKUWc/res=)
                          12: 3137382e3234382e37322e302f32342d3234203d3e20313531383732.roa (hash: 562I7wk8pDZNtdMzcEoC9Q7KQUjR9i2cYfXfdpaRXg8=)
                          13: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: nkla74pmgzof6BdGTx/D9Sn3aXq/+fT/xyCtH2Ux1lE=)
                          14: 3137382e3234382e37362e302f32342d3234203d3e20323135333034.roa (hash: XrWwPHt91qxXHQ0/kVWO42vo3gTicR3T1AogX5xX6FY=)
                          15: 3137382e3234382e37342e302f32342d3234203d3e20323039313831.roa (hash: JOjM4S47fNK82HVGI3kzft2889UH/2/CmD3owvdrCqM=)
                          16: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: i+j0/SqL92pXqr/Yt38MmbwZjTIQClt05q1Bhtl74qs=)
                          17: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: IDuy7mlGaLMOCgzEdx2/1ouXbZ90tr9UBkMDq0knNXg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:66:27:05:c8:6f:5c:06:71:c7:c2:ba:8d:02:38:60:01:24:57:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
        Validity
            Not Before: Aug 22 22:47:33 2025 GMT
            Not After : Aug 24 00:46:33 2025 GMT
        Subject: CN=65443D5FAAC00461AA44F3081496C00231EB7738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bb:c5:53:8e:76:42:35:a9:a5:c2:ec:73:e5:
                    44:17:e2:3a:38:02:3c:80:72:2a:60:3b:3f:c3:d5:
                    34:1f:ef:da:60:c0:12:58:b0:e7:ed:28:61:52:de:
                    85:68:2b:e2:ff:ef:c2:19:48:7a:9b:db:7e:2c:3d:
                    da:44:24:ba:d4:f9:16:92:b2:56:d9:de:51:57:15:
                    cb:93:10:33:5f:fc:06:36:17:b4:47:9a:af:a4:ef:
                    3b:f2:f7:33:45:b3:b2:75:58:23:ae:c9:e3:92:94:
                    2b:d3:52:b2:ed:e7:43:ef:85:a3:9b:ec:d6:7b:4c:
                    19:55:32:ca:72:f0:5a:3b:2b:2f:0d:6b:69:f3:de:
                    17:5d:dc:94:e3:6e:9a:14:bd:9f:fc:b7:e7:1e:a6:
                    d1:4d:9f:bb:76:03:9a:f2:d9:eb:c4:a1:7d:df:7f:
                    0a:18:51:ba:84:de:ba:e7:f3:43:81:0d:62:03:08:
                    00:13:66:a6:6d:9a:9b:b5:b4:ab:0d:fa:a8:bd:0d:
                    e6:ab:22:28:85:4d:31:e8:a5:b3:c9:e7:7b:45:b1:
                    1a:c3:2f:d7:92:3e:a5:2f:f9:3b:47:d4:43:01:36:
                    b3:31:f3:5c:2b:86:f5:69:9b:f0:a6:5f:5f:0b:0f:
                    c2:1b:01:57:89:a3:5a:11:84:6f:e8:91:14:89:77:
                    70:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:44:3D:5F:AA:C0:04:61:AA:44:F3:08:14:96:C0:02:31:EB:77:38
            X509v3 Authority Key Identifier:
                keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:de:be:ac:19:d0:4a:dd:5c:b1:bf:b0:2f:55:a6:bc:9b:49:
         c6:96:08:4b:0b:cc:37:8a:31:cf:0f:4f:62:68:a1:9d:c9:bd:
         d2:34:c6:47:fc:af:78:6c:98:c8:24:b1:e2:b4:cc:0d:2b:c1:
         38:17:c7:65:dc:63:37:4d:53:05:3f:36:2d:78:86:81:c4:99:
         6e:c3:46:85:c4:d2:82:e5:21:fe:15:7d:ef:ff:5e:eb:d8:fb:
         50:b4:25:ed:a8:a4:48:3f:11:26:2a:05:f1:f7:89:ed:46:b8:
         dd:1c:73:dc:49:26:0c:0b:84:61:3c:e5:6a:5c:64:3c:2b:0a:
         ca:69:2f:a2:a8:97:cb:59:a9:30:7b:0b:6d:94:95:e4:a5:8f:
         29:58:fa:b7:cb:19:8d:cf:b3:ca:ba:00:56:3f:15:a8:d6:55:
         16:28:9c:8a:d9:72:ad:73:11:1e:e2:15:d3:c7:4c:ef:9b:22:
         0e:a5:f7:d8:66:d8:c1:6c:e2:47:89:cc:50:87:e4:45:59:f1:
         21:84:fa:8c:f7:8c:e5:c5:e3:ba:fe:8f:03:1c:33:33:a8:ce:
         85:a5:be:07:a2:6c:a0:c2:21:e5:d4:87:1b:ee:cd:70:0c:ed:
         20:76:4f:70:65:19:f7:70:83:48:09:3a:af:ad:dd:1b:f2:46:
         c9:b4:80:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:51 2025 by rpki-client