Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
File:                     9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json)
Hash identifier:          dM6PShBcRPTvjrt2YwjBpE7IUMI0uCOYIXwuwnuEVS0=
Subject key identifier:   8D:CE:F3:D2:B0:8D:A1:88:D6:95:6D:E2:58:7A:8A:E7:EF:13:D9:A5
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Certificate issuer:       /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial:       77290A53A6A3BE989E93A2D65318A77B2462480D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
Manifest number:          049E
Signing time:             Sun 19 Oct 2025 05:51:35 +0000
Manifest this update:     Sun 19 Oct 2025 05:46:35 +0000
Manifest next update:     Mon 20 Oct 2025 07:45:35 +0000
Files and hashes:         1: 36322e3131322e3134342e302f32302d3234203d3e203230333236.roa (hash: PvFG9BZ+YdbKPRfUC/0dM3w7V209DRWmI/bk8VoBnFU=)
                          2: 36322e3131322e3134342e302f32302d3230203d3e203539363432.roa (hash: hNXCqst3dZC+Dp3skkO26cOwh1zWEwx2n+JeuoU1IgU=)
                          3: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: DuCHe81tO8TVOKBTNFQCS5fRuYDjbGZfxshPpJZXNzc=)
                          4: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: OKc3uZvr3kmY38TGv/j5cCd/d8TD6IBU2hGWJY9u+K0=)
                          5: 3138352e322e3136322e302f32332d3234203d3e20323135323639.roa (hash: sEO5Q+LtE+juFIMx1yqrmSkIjuvpVFxY8R1aiQqtGzs=)
                          6: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: qGNft1uCzkGwuPJH7iDQ4xUhWrhNnduWexIhT+DgvI8=)
                          7: 3138352e322e3136302e302f32332d3234203d3e2039333034.roa (hash: vl2Nht2rNjTXwCm1D2P9y8kdqhZOwgeZgf4gpkMvcp8=)
                          8: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: hY/iIpaGanxmxatebFYi3ijTkZjHjUc/Iwjsijc0S+E=)
                          9: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: W95e9h2ypKBcN51G9gRI82wozQL8rXCLvGb2mHpv6bk=)
                          10: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: qxlkfW/nLMV9I5WoI6HQ89q00naILT20Rguml63Zf0A=)
                          11: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: oQj2no095+LyjZGzWOfw+sSJOW/7fRxpgUOPswu5nqM=)
                          12: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: dPumV3w+l5K00Z5figZidyPpD2Xj/WObq95u77jhIK4=)
                          13: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: 0g5fdA4i6rYlqCuO4pt040lHmF/eErF425W5N4xq6J0=)
                          14: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: X+PLwzsRRQMgaM/TWKrSkseThdECGWKV7QbjrMlPn80=)
                          15: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: GCjCQc0vdu8E+NZi5emgx2vW0PKbTzGL5UYc+2R4voE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:29:0a:53:a6:a3:be:98:9e:93:a2:d6:53:18:a7:7b:24:62:48:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
        Validity
            Not Before: Oct 19 05:46:35 2025 GMT
            Not After : Oct 20 07:45:35 2025 GMT
        Subject: CN=8DCEF3D2B08DA188D6956DE2587A8AE7EF13D9A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:08:48:f0:70:6c:3e:2a:71:73:50:71:8e:ef:
                    d2:79:48:1d:c5:01:b2:bd:a4:d7:3d:f8:ea:e3:11:
                    e1:22:e1:6f:e2:c0:54:6e:d3:88:fb:a6:09:34:7a:
                    88:8d:25:69:11:02:59:a3:18:8f:cf:80:9f:55:d0:
                    ad:0a:88:d1:b5:55:a7:1a:6a:38:31:12:09:af:09:
                    90:19:df:86:65:06:d7:5e:b5:d4:96:3f:13:0e:e3:
                    9d:bc:e5:2a:b1:4d:3a:9f:ce:3a:d4:8c:3b:45:a3:
                    1c:6f:2a:b9:39:a1:fd:73:bb:ff:9b:f4:63:62:e6:
                    d7:de:b8:80:74:c3:9b:4a:2e:25:c4:18:12:fb:c2:
                    08:8d:5d:98:f0:da:ae:dc:1a:a7:10:64:42:9c:c2:
                    20:8a:7f:9a:f4:dd:81:96:4b:c5:f0:5b:60:a4:af:
                    10:b7:a3:2e:51:b9:10:8c:c7:2b:a7:49:34:c2:2b:
                    36:76:90:03:cc:31:92:ec:ab:4b:16:be:ad:18:2b:
                    d0:82:b7:67:d9:10:d1:c9:c8:00:1d:c7:46:6c:ea:
                    30:62:25:ea:d4:a8:15:11:20:96:21:5b:65:35:78:
                    f8:fc:80:14:81:e5:9f:fa:f2:cf:42:3e:37:d5:49:
                    f5:54:c1:27:7a:8d:d6:0e:20:a4:9f:5f:6d:df:8e:
                    d7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CE:F3:D2:B0:8D:A1:88:D6:95:6D:E2:58:7A:8A:E7:EF:13:D9:A5
            X509v3 Authority Key Identifier:
                keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b4:06:ed:5a:74:6e:f7:a3:8a:a6:3c:56:09:15:40:a0:f2:
         1e:d1:d0:1f:bd:f3:cc:80:87:df:6a:aa:0d:4a:73:9c:c5:81:
         03:b5:4b:0e:de:40:c8:f5:d5:25:67:32:fb:87:82:77:63:a8:
         33:77:1f:a8:10:43:2d:a3:85:19:89:ed:54:f9:5a:0c:f6:3f:
         53:ac:94:e5:a2:84:70:0a:9f:c2:24:50:6b:ac:15:f1:85:7d:
         21:ae:5d:a0:be:13:e2:48:35:ad:c1:19:b3:fb:78:bc:de:d0:
         10:20:d9:a4:dd:05:d6:6c:f6:15:28:c7:59:76:a3:b0:fd:17:
         40:6f:a4:52:2f:a6:2c:cc:4a:80:ad:32:07:69:37:7b:29:2c:
         4a:c2:7e:54:e4:c1:ff:11:aa:a0:ca:21:df:0c:10:53:47:47:
         5d:62:5c:ee:2b:52:1a:16:27:d7:eb:d0:93:a7:48:15:6f:1f:
         d5:77:3a:d3:f5:07:d3:bb:4f:c5:18:f9:eb:a2:d4:e0:00:69:
         8c:39:1e:8d:07:52:49:91:43:26:2b:b1:71:3c:d5:56:7f:8b:
         8b:db:2a:99:1c:37:e0:b7:02:9f:f6:26:02:8c:77:42:8a:a0:
         b3:88:35:d8:43:2b:83:8a:f0:a6:4e:1e:68:4c:72:bc:55:bf:
         d6:40:bf:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:32 2025 by rpki-client