Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
File:                     CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json)
Hash identifier:          uXueHR+hLp4m8pgD/PLk0srXeS3/rrVunpuvX3rSpa0=
Subject key identifier:   56:02:B0:25:A0:37:58:76:87:E4:9A:F4:CA:86:16:31:68:75:FF:83
Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
Certificate issuer:       /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Certificate serial:       3C5102C70447551A23B78BF67CBB05FEC4502C91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
Manifest number:          011F
Signing time:             Sun 19 Oct 2025 22:11:40 +0000
Manifest this update:     Sun 19 Oct 2025 22:06:40 +0000
Manifest next update:     Mon 20 Oct 2025 23:25:40 +0000
Files and hashes:         1: 3139342e3132342e3233342e302f32342d3234203d3e20393936.roa (hash: ZoxbCHQMtNZPfbUxrxLpOcXkuKUfw+Blft69mSm2oZk=)
                          2: 3139342e3132342e3233342e302f32342d3234203d3e203534333339.roa (hash: wdUsagydvVBIUao6PJHWRop4oPMEKXc9pJyNsG4SW9o=)
                          3: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: hZUNrJfyUHgUntGAqdSVlBaE4wglKTi9y0zmmly1bMY=)
                          4: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: Bvg0bczZRvr0hNeXj13n0Q8N1O34FXLeiihKmXvd96c=)
                          5: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: qgpa17rXBGEZyX0zTURKp2TS7HA9WA0LAdj3r9yq+jg=)
                          6: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: ad3eCylfdMfYW/Id31ooquQQLvZwumdWGj+lszfaEsA=)
                          7: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: sUFXVk5mJuzGXi+txvF0jHfWX/7COhdmW+wdhnGLLbA=)
                          8: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: MbX2Jo3+qNy9yJ51qumhhpSA5fjjpKXnL9+Ixdd7q/M=)
                          9: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: Wt7cVymDfWBwMzR8hqsJLmmyo1G55vHli1MG8ova8P4=)
                          10: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: E+WPtm+HS9AVsakqcLrBjACoAm/NbChhrd4PG4s+X5o=)
                          11: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: 0XA7loK9zcLZ4LH8gJRLIhKhFochpbrC40dXD0XEE/8=)
                          12: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: 4eRihxuyWrFmyrmWNHP+q80BiQuGj/+XTMKJH0kDcVI=)
                          13: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: bLMKUTu2LDh7TH4JEFo2TwGKCx3JiqqNy6hRd14etMM=)
                          14: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: yq+hWHhfyocRCOJbnYGyzdHlkfHxXD4gPxuVgEPCc0g=)
                          15: 3139342e3132342e3233342e302f32342d3234203d3e20343031383338.roa (hash: dg4srvpWF3uIRgfQMdk/wAV5BokR1veRJ6lDUvN1tY0=)
                          16: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: Vwqd9y65EYe3c7TZIeDmayvcpWynoPR5yAcBSpAooHg=)
                          17: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: lmVh0tkdqz2ZaktlfIJzzJLuyL6wItEcUEPI+PVNqdo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:51:02:c7:04:47:55:1a:23:b7:8b:f6:7c:bb:05:fe:c4:50:2c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
        Validity
            Not Before: Oct 19 22:06:40 2025 GMT
            Not After : Oct 20 23:25:40 2025 GMT
        Subject: CN=5602B025A037587687E49AF4CA8616316875FF83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ad:8b:93:45:b2:2c:12:38:bd:97:3b:df:c5:
                    66:bb:18:82:ac:4b:4e:e2:d2:91:59:c4:2b:fb:30:
                    3d:e5:0f:d7:37:69:3c:4a:b0:3b:78:b5:8b:58:25:
                    f8:ee:a0:ca:19:6a:92:c5:78:2c:99:7f:a3:a4:20:
                    33:1c:66:34:36:32:1e:b7:b6:b1:44:a1:c4:7a:91:
                    61:a7:3e:42:dd:06:d4:b3:79:89:2a:9e:e5:7d:75:
                    11:a1:74:3c:89:2b:1a:bc:54:6a:a2:c9:84:b8:8d:
                    7f:0c:e0:72:54:25:e7:72:8a:06:b9:7d:34:b4:1a:
                    1f:38:68:9f:86:93:0b:30:27:ba:02:07:be:b6:3e:
                    2e:4f:f6:1f:fb:4a:67:be:d0:84:a8:fd:33:d1:05:
                    ac:3e:a5:cd:ce:1e:96:7f:59:48:f2:c8:f9:37:88:
                    dd:a7:81:68:98:51:a5:3a:14:b3:69:c2:a0:00:8a:
                    b1:dd:98:61:22:04:1f:cf:84:87:1f:e4:20:1b:4e:
                    ad:97:87:15:fa:d9:59:ba:d1:9d:c9:f6:24:bd:7c:
                    12:a3:14:71:e6:e0:7c:b8:50:72:ad:01:7a:fe:68:
                    b0:02:10:d3:e6:94:2f:bb:96:46:89:14:c6:6b:39:
                    14:f1:13:b2:a9:5e:6f:25:90:9c:28:4b:eb:fb:1a:
                    7d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:02:B0:25:A0:37:58:76:87:E4:9A:F4:CA:86:16:31:68:75:FF:83
            X509v3 Authority Key Identifier:
                keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:3b:ea:ad:8a:12:9f:0f:69:45:c5:1b:41:87:0b:e0:52:fa:
         cb:c4:f8:7b:00:2b:69:5b:99:3a:54:c2:4c:53:b1:34:7e:75:
         be:7b:3a:39:c3:1b:06:99:4f:2e:52:a7:c8:00:47:7f:e9:90:
         04:0a:ff:33:51:b2:5c:6c:72:92:2d:67:6b:35:55:9e:d3:c4:
         57:23:a9:c1:08:24:31:39:f7:a0:a8:00:9f:6d:8f:97:a2:dd:
         b0:01:3a:86:95:fc:b9:f9:ef:24:33:5f:38:b6:cb:7e:54:09:
         ca:df:83:ed:c4:7f:f8:f2:a9:b9:f8:5a:02:05:c4:20:6a:01:
         b9:f8:79:92:19:e7:39:59:98:27:1c:86:d1:83:5d:f9:82:fa:
         ac:2c:10:63:7a:7d:f6:a5:5f:a7:9a:54:bc:b2:65:45:ad:9b:
         37:07:a7:b5:2a:12:29:18:f3:59:fe:86:4b:4f:86:cf:fc:72:
         2c:34:39:07:69:8f:93:4f:f5:c9:bd:e1:ba:b8:29:ab:d9:eb:
         e0:0b:10:ec:08:76:f4:6b:4f:fc:ee:5c:28:e5:13:ec:4a:ca:
         79:6c:19:66:aa:56:c8:b1:88:1c:77:d4:06:66:e8:db:c7:c7:
         38:c8:f5:19:5d:46:f4:cf:9a:41:9d:dd:91:12:25:9d:2d:62:
         9f:ea:a5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:31 2025 by rpki-client