Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft
File:                     2E2674263AECD572673F87614919CA492C79FAEA.mft (raw, json)
Hash identifier:          yeKIy+HWFDmn4aCYm3bUoHvtjpkJYZDM+2a5GrT8aKE=
Subject key identifier:   9A:C1:B9:61:2F:E4:D7:3E:7F:29:E1:F0:D9:C8:C5:28:0A:C2:6A:C9
Authority key identifier: 2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA
Certificate issuer:       /CN=2e2674263aecd572673f87614919ca492c79faea
Certificate serial:       3A09FCADC46F35CD158E0874D27B46B901A0128F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft
Manifest number:          0167
Signing time:             Mon 20 Oct 2025 05:16:42 +0000
Manifest this update:     Mon 20 Oct 2025 05:11:42 +0000
Manifest next update:     Tue 21 Oct 2025 05:40:42 +0000
Files and hashes:         1: 34352e36362e36332e302f32342d3234203d3e20323134343332.roa (hash: bZNP+wA40wAyACtbN5qUmpIVm/KoebsR0HiX5BeNfUM=)
                          2: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (hash: tU7tyCca1tIOx1hnSKjuKCDiTN546CQQQvHB6q/i7qk=)
                          3: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: imRIoujslgfIw1o5CZvn1r7w9Uct08AIqiMVjfiL8o4=)
                          4: 2E2674263AECD572673F87614919CA492C79FAEA.crl (hash: 3ium935FBlw9HOT3iN7rm5k+szTiQP4Jx3yKL4sEEVk=)
                          5: 34352e36362e36302e302f32342d3234203d3e203534323532.roa (hash: 07DX+W8TeroyGa5hcwYk2V3rpVrx11S+EMaM/klvGiM=)
                          6: 34352e36362e36302e302f32342d3234203d3e20333937363330.roa (hash: m0lx7gp/PL+dNLZxtVb3q5bMr/J2JBCQr1yWWiLZaNg=)
                          7: 34352e36362e36302e302f32342d3234203d3e203634323637.roa (hash: ZF32PAG53xWynbk01utLLBmDRxOU851zkR0rreW86uY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:09:fc:ad:c4:6f:35:cd:15:8e:08:74:d2:7b:46:b9:01:a0:12:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e2674263aecd572673f87614919ca492c79faea
        Validity
            Not Before: Oct 20 05:11:42 2025 GMT
            Not After : Oct 21 05:40:42 2025 GMT
        Subject: CN=9AC1B9612FE4D73E7F29E1F0D9C8C5280AC26AC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:64:af:1e:7c:90:5e:89:b7:57:38:db:2d:99:
                    6c:bb:d0:86:24:27:b3:2b:d8:85:77:52:b7:31:33:
                    00:6a:49:11:ce:f3:a3:48:3d:c9:08:c0:2c:d7:1c:
                    0a:ff:fc:67:75:a4:3d:20:eb:df:01:46:27:12:86:
                    5f:ef:ca:bd:37:14:b0:fd:9d:94:bd:94:38:d3:4b:
                    24:e1:2c:ad:85:5b:24:82:61:e5:af:1b:3e:ec:6a:
                    11:f7:3b:82:65:b7:30:5c:47:7c:a2:89:b2:bb:58:
                    6f:7e:e5:03:43:65:15:52:71:ea:5a:24:d6:f0:2e:
                    0b:62:98:6b:fb:71:16:83:9c:0e:61:3c:f8:05:39:
                    55:6a:84:3d:af:f9:95:5c:b7:7f:ec:73:94:17:b9:
                    2a:08:98:9a:5f:6c:6d:e6:71:4e:09:25:49:00:c7:
                    6e:fc:9d:75:f6:96:8d:27:13:52:d4:a4:35:1c:23:
                    30:c9:22:1a:2d:c9:83:ef:94:2c:1a:85:47:ae:c3:
                    c6:33:6d:f4:37:ce:95:59:b3:b6:d3:d6:09:5a:1d:
                    eb:98:b1:d9:7b:12:33:47:44:d8:7d:2d:cc:b0:58:
                    29:38:92:44:7b:bd:df:3e:4f:2a:1b:00:1e:12:53:
                    dc:cb:41:98:30:c0:cb:59:3c:aa:13:6a:b9:42:3f:
                    cf:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C1:B9:61:2F:E4:D7:3E:7F:29:E1:F0:D9:C8:C5:28:0A:C2:6A:C9
            X509v3 Authority Key Identifier:
                keyid:2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:53:f2:5c:12:5d:dd:36:6e:0e:93:1a:4f:98:e3:61:a0:60:
         16:34:70:70:09:39:09:64:f4:90:71:0b:b7:2f:1a:72:a5:a3:
         f4:be:d6:47:69:ea:bf:cc:0b:ed:07:6d:40:54:ae:79:e4:a0:
         bb:a0:6b:83:9c:77:1f:33:6b:fc:61:8f:35:28:34:1b:96:5a:
         b2:8f:de:a6:94:0d:56:27:3a:5b:eb:08:9d:cb:bf:d9:28:37:
         02:c7:51:ab:98:e2:ba:d6:59:aa:5f:bc:7e:3b:1f:95:bb:bd:
         ef:3e:a1:a8:51:a4:3f:6e:92:ba:11:8f:f3:5a:b4:04:52:19:
         e6:c3:65:21:08:7f:b4:6d:00:13:be:06:f0:b5:eb:62:65:3b:
         11:9a:e4:8e:41:64:e3:d2:a2:e0:0d:40:bb:28:0b:a7:9c:e2:
         d1:1b:67:ca:df:2c:08:35:4d:e6:da:1f:a1:6a:2b:f2:db:8c:
         5b:a6:cc:20:67:5c:b9:6f:79:bb:7a:bd:72:07:56:08:54:4b:
         92:7f:3d:fe:36:f7:c3:20:8f:cd:fd:38:50:76:b7:01:cc:a0:
         72:a5:32:44:3a:ab:2a:f6:6c:da:d6:c1:02:89:f7:d3:15:a1:
         be:5a:51:27:a1:ab:90:21:16:97:c6:50:6a:b5:2e:77:4f:d4:
         f0:65:fc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:06 2025 by rpki-client