Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
File:                     6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft (raw, json)
Hash identifier:          baJRKbcqUdZJnh4nSgnAP5fWBRuMHdwriGO33pd63TY=
Subject key identifier:   92:F6:02:3E:46:5A:37:28:1A:B3:5E:D6:CC:CE:38:8E:5A:2F:7C:2F
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Certificate issuer:       /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial:       0CCC291732EF9B8CEDC4ADB21229A828678BAF04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
Manifest number:          51
Signing time:             Sat 18 Oct 2025 21:31:32 +0000
Manifest this update:     Sat 18 Oct 2025 21:26:32 +0000
Manifest next update:     Sun 19 Oct 2025 22:29:32 +0000
Files and hashes:         1: 3134372e3132352e3230382e302f32312d3234203d3e20383334.roa (hash: i1MlYDyZthDox3t9GTaYfp478joSZhMXf8NBAusdJGg=)
                          2: 3134372e3132352e3235302e302f32332d3234203d3e2034373636.roa (hash: JnjdW5zSEHH9cRKXo+YrZ+m75+isMdzrTHr55fls/hw=)
                          3: 323030313a3637633a316237303a3a2f34382d3438203d3e2032343838.roa (hash: nLc6b+BJhcWqteWvSt4lz7/51CfameMyZ399v4d2P0c=)
                          4: 3134372e3132352e3139322e302f32302d3234203d3e20383334.roa (hash: rjNs1Jt7KoXHdQmCwWkcrv/x4cVvHgt5YSgbu9nSOh4=)
                          5: 3134372e3132352e3232382e302f32322d3234203d3e2034373636.roa (hash: PVVcyUK2P5//ata0jnwAz9lNNY70RdkLtJoVoUxLuN0=)
                          6: 3134372e3132352e3234302e302f32312d3234203d3e20383334.roa (hash: OoUWHK5xvCABOaBvM6HEbEVMz9pa7+erl9UsCKdOsbg=)
                          7: 6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl (hash: iI888KKwY+sBaIvQiNeJyxeSWV0rCqlMNP6oYsVhtzI=)
                          8: 3134372e3132352e3231362e302f32312d3231203d3e2035363530.roa (hash: wmk3ncAGwLgiz5ppWQMR8PFphqaJJeyXyrPsI6t4nFA=)
                          9: 3134372e3132352e3235322e302f32322d3234203d3e2039333034.roa (hash: wwM7msdsmMce3oyKxvkFjbbmSXFi9/hXksyPGF1mwBM=)
                          10: 3134372e3132352e3132382e302f31382d3234203d3e20383334.roa (hash: MXQQAdZ8/q0SSX+7EZEMmeULL4t51ObUNh0wwFo4T1Y=)
                          11: 3134372e3132352e302e302f31372d3137203d3e2032343838.roa (hash: EoI+/sdnscPf0nnBKFSXR5qMiqWVqm1nNdIQnTkhnSs=)
                          12: 3134372e3132352e3233322e302f32312d3231203d3e2035363530.roa (hash: BrRlkcgHyo7KgPTsVzr+D2SwT/C7jGoqSUs+OVNb7/c=)
                          13: 3134372e3132352e3234382e302f32332d3234203d3e20383334.roa (hash: 8ZZYgwjWYnNaXh1Q31FdOyqv7hmIasPhcyhTN5Y23Ho=)
                          14: 3134372e3132352e3232342e302f32322d3234203d3e2039333034.roa (hash: 8Z3LBjCByz8UmwQIsv3CpEH0tNat1d4UiO1DzKSClUE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Oct 2025 22:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:cc:29:17:32:ef:9b:8c:ed:c4:ad:b2:12:29:a8:28:67:8b:af:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
        Validity
            Not Before: Oct 18 21:26:32 2025 GMT
            Not After : Oct 19 22:29:32 2025 GMT
        Subject: CN=92F6023E465A37281AB35ED6CCCE388E5A2F7C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f8:82:9a:bc:4a:d4:ef:b1:3e:86:5d:ec:fe:
                    fd:58:88:79:ec:0c:0a:0c:2f:f2:a4:6e:a5:f7:b6:
                    2e:12:3e:7b:31:43:6f:65:1e:fd:d4:31:62:47:d9:
                    0f:54:6e:e9:fd:c2:3b:71:80:91:fe:28:fb:ac:6e:
                    87:2d:fe:9c:01:ad:a8:bb:a2:aa:ee:dc:0c:34:c1:
                    43:9a:d7:c1:f2:95:c4:ec:81:bc:74:76:21:94:27:
                    37:32:a0:c1:e2:db:94:16:4d:f4:45:6c:c2:bc:d3:
                    57:ac:c5:5d:74:b3:07:c4:4f:4c:ad:ab:9c:8f:de:
                    fe:d8:fd:53:dd:72:35:b4:a0:5c:d4:1f:76:17:6f:
                    b0:d9:52:fa:5a:ef:10:90:5d:c4:92:81:ee:2b:6a:
                    56:27:38:57:a6:3e:82:fd:75:50:71:28:72:11:72:
                    0a:4a:a2:af:5f:5c:0d:b1:dc:71:16:2e:14:70:3e:
                    6a:be:8e:64:2e:58:60:22:c8:be:c8:e5:ed:a9:dc:
                    99:51:c2:7c:8a:99:ff:42:45:12:18:63:92:56:80:
                    6a:50:64:2a:1e:a3:ae:46:91:a6:a8:88:a2:ce:8d:
                    99:b4:89:4b:01:bc:4c:3d:c7:af:36:c3:64:36:ea:
                    b9:b5:19:7a:e7:3c:01:42:aa:9d:6c:51:bc:81:98:
                    f2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F6:02:3E:46:5A:37:28:1A:B3:5E:D6:CC:CE:38:8E:5A:2F:7C:2F
            X509v3 Authority Key Identifier:
                keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:7d:42:34:b6:ff:d7:3d:84:66:90:00:a2:9d:cb:61:c0:96:
         3f:b8:43:d0:6e:12:19:81:aa:f4:7b:7d:36:ae:35:4b:2d:99:
         6f:a0:92:b3:aa:fc:0f:f8:df:3b:b8:52:01:e8:b3:53:92:37:
         d1:07:72:21:70:5c:6e:8c:84:33:8a:f7:88:f5:51:cc:df:dd:
         51:95:73:c1:39:5f:51:28:d1:4b:88:cc:00:51:eb:d5:26:a5:
         98:14:a1:09:c5:a3:3c:b0:38:61:69:9b:14:69:75:98:3e:eb:
         91:2b:2f:96:4c:5f:b6:d2:d2:87:e8:1a:87:78:aa:81:a2:32:
         01:39:d3:f5:94:6c:5e:cc:69:f2:54:cf:17:9e:48:a5:fc:4d:
         07:6c:af:06:81:e3:2c:3e:9e:de:f9:97:c5:62:15:98:8f:3d:
         7f:f4:01:8a:7f:99:ef:6b:f1:67:2b:e7:bd:69:07:d3:58:43:
         c7:21:9b:d9:20:c9:25:53:9d:68:fe:49:16:07:f4:89:8b:cc:
         57:ce:37:b2:f5:64:cb:fe:da:26:af:89:22:d4:b3:7b:52:00:
         f0:66:39:e6:04:eb:59:07:c9:37:c0:95:b9:27:04:ec:b8:5c:
         2c:45:47:1e:ec:40:a5:f4:4c:c4:6f:d7:2d:64:4f:20:57:71:
         19:6f:4b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:36 2025 by rpki-client