Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
File:                     E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json)
Hash identifier:          UUuKDz7KPvkvVYUuwVpRjVAqnGGlaldn5LvtlBKg2Y8=
Subject key identifier:   ED:E4:BC:FE:31:A9:CD:01:3B:41:CF:60:E4:2F:9E:45:83:FD:A6:85
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Certificate issuer:       /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial:       65EEE656657F0E86E25DE3791475B42AB4193C74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
Manifest number:          0137
Signing time:             Sun 19 Oct 2025 19:41:39 +0000
Manifest this update:     Sun 19 Oct 2025 19:36:39 +0000
Manifest next update:     Mon 20 Oct 2025 22:33:39 +0000
Files and hashes:         1: 39312e3230392e34382e302f32342d3234203d3e2034363337.roa (hash: 4+D5jdmTDYB1GvCAU0z5GBGlSPW7Q/zpduO0wdWv8pU=)
                          2: 39312e3230392e35382e302f32342d3234203d3e203634323637.roa (hash: vVPhAwxMoGbJX95BZTqrmZCi086rlFMNDRhMBQEniYs=)
                          3: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: 57bcmCOL4I2xfpeferGv2PQJ5XEACitC+J1KouG0Meo=)
                          4: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: UjFw0WQQLm//XoiWgykA8VWz+amzh0YCKaelwGihPq4=)
                          5: 326130663a356663303a646561643a3a2f34382d3438203d3e203339363733.roa (hash: gO+lPcmBJ3b3FFlaD55CICvRL4LDSg56OGDANGd62H4=)
                          6: 326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa (hash: Qj8pflv8KszWoeUIqOpeKQUtZrsbyJDTmnxefpUjjlo=)
                          7: 39312e3230392e34302e302f32342d3234203d3e203232343237.roa (hash: na/qAaTdIJ7PT1YXsvaqUnpzD/nkfVV0HbNT3JlIn2w=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ee:e6:56:65:7f:0e:86:e2:5d:e3:79:14:75:b4:2a:b4:19:3c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
        Validity
            Not Before: Oct 19 19:36:39 2025 GMT
            Not After : Oct 20 22:33:39 2025 GMT
        Subject: CN=EDE4BCFE31A9CD013B41CF60E42F9E4583FDA685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3e:2d:c1:e8:f1:7a:70:35:7c:bc:e3:0e:ee:
                    92:e3:db:3a:a8:d4:70:1b:9f:ff:43:da:ea:d2:86:
                    4a:fb:56:f7:62:c9:d4:75:6f:98:2b:da:a4:49:65:
                    5c:4d:fe:70:06:a2:b3:d9:01:40:18:ce:e9:34:e1:
                    8f:f8:4a:ff:c1:cc:55:50:d7:c9:e1:8d:64:57:5f:
                    c3:df:bc:4b:32:0a:c3:3e:43:5f:42:30:a0:a8:8a:
                    cc:92:c6:be:e0:e0:4a:b4:10:4c:19:24:1d:5c:e5:
                    7d:e5:3a:1c:1f:ba:4b:f2:dd:ef:06:1f:35:24:4b:
                    fa:0f:56:88:df:4d:28:fb:8a:ea:7f:61:52:57:b8:
                    e8:19:04:ef:f1:dc:dd:7e:5f:61:ed:0d:5b:f7:9a:
                    66:ca:b0:b0:be:36:22:e8:35:d1:50:20:b8:90:6c:
                    62:f7:ce:a9:4b:da:96:a6:43:20:fa:66:69:0f:f9:
                    fc:d5:69:04:0b:bc:b7:7a:76:92:a4:dd:8f:86:16:
                    71:55:05:ca:b3:3f:cc:ca:3e:7d:f2:51:7c:60:7a:
                    3a:91:2c:77:ed:95:dd:10:05:49:1d:e9:a1:ce:88:
                    9d:fe:25:42:d0:91:45:55:c0:24:ae:f1:45:d5:7d:
                    81:c3:fb:b2:a1:5f:29:16:88:51:cf:f4:39:4e:67:
                    55:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E4:BC:FE:31:A9:CD:01:3B:41:CF:60:E4:2F:9E:45:83:FD:A6:85
            X509v3 Authority Key Identifier:
                keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c8:6e:55:21:25:c6:e5:bc:fd:d7:73:61:75:7a:ea:39:1b:
         17:13:eb:28:cc:cb:14:01:25:6d:fa:33:8f:18:24:02:05:50:
         40:e1:f3:fa:26:14:46:4d:58:1c:82:3b:c1:2a:af:4d:e1:91:
         b6:70:98:5c:d0:d8:4b:4a:7e:76:92:bc:3e:98:65:a4:b9:46:
         0f:f1:93:dc:08:fb:a1:27:74:80:66:93:41:49:0a:2c:2e:f0:
         2c:ab:d6:c6:fc:e1:23:d4:e6:52:b7:0a:94:1c:59:3e:81:15:
         7a:6f:e2:77:e2:34:7d:26:81:66:56:60:28:63:d0:49:bf:20:
         12:d0:79:54:43:2e:f2:ad:0e:10:c9:af:d0:b0:3e:28:e8:04:
         66:63:9f:e5:ea:2d:a6:8c:18:8b:42:0a:06:0b:b7:34:db:b6:
         55:6f:c2:20:bf:57:b0:f3:51:b3:3d:97:15:9d:d8:7d:82:c0:
         c9:c6:9d:23:e7:64:94:cd:bd:1b:fa:85:d2:6b:3c:d5:34:a8:
         3a:b1:f1:84:2c:37:9f:d7:e7:70:71:27:f2:53:20:b9:5f:df:
         5b:b8:65:57:95:0e:f6:2b:6b:58:ca:7a:10:69:51:a4:88:08:
         ea:1b:ca:67:20:33:d9:6e:b0:cd:0f:b6:30:7c:29:d5:87:76:
         82:11:0c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:22:52 2025 by rpki-client