Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
File:                     5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json)
Hash identifier:          k5+W5nsTInIKHwc+qtXT9US2LUke0C2kCeJ4ALcGq/U=
Subject key identifier:   1C:A5:16:D0:11:A7:60:74:99:67:F9:BE:88:39:65:E3:5D:EB:2E:4F
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Certificate issuer:       /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial:       48F83B6C4E015556A08F5A5C93B997F954B73BC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
Manifest number:          017F
Signing time:             Mon 20 Oct 2025 06:58:56 +0000
Manifest this update:     Mon 20 Oct 2025 06:53:56 +0000
Manifest next update:     Tue 21 Oct 2025 07:42:56 +0000
Files and hashes:         1: 3139342e3131372e36392e302f32342d3234203d3e20323135323438.roa (hash: EqbKHazBpNo/bx4pclFyuqidomfYzdI+MjCRoDSagrM=)
                          2: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: M972A2zux5bp2vtM/yV/ifXNBlJMRB7g6qDIDzpgNsU=)
                          3: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: RQOZ0GeuB2hc8N96mezhBhXKeCrh7X17R4TSsdmASyE=)
                          4: AS215248.asa (hash: nrWnsup/MJIC3SMKp1zza61PlhYs/6Ueoc+foma4Qbc=)
                          5: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: PtEZiduV7qIQYYjQZnKX/GcL63I52HGfTDumgtuA1n4=)
                          6: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: b3AvMY9Sl1B0jVsJOJivHhqGlksNlQ/JV9muHKrGSGQ=)
                          7: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: e6DNGKmUmYh4KhA4h67tF7nM55oym+8oQ84yYdEmy64=)
                          8: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: rQvL6z8yuqUS7v24/Ra9en3S8KmIgkMtv1rcn8o1sfA=)
                          9: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: RPFyh+9f4VeLKwhSKFsibkww2V1WrimAJUdSq1OTL10=)
                          10: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: QZeJi0O4ini6QNF1syA5gZ8HehGzsGo0INWd9T4WodA=)
                          11: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: uQC+ycpajw6LG1MwmEH2bQGDaDjqft9mY/Ula5mB0Rs=)
                          12: 3139342e3131372e36392e302f32342d3234203d3e20333936303634.roa (hash: uPzNQdfiTlC1R9B5J33ZDfQAHE+DMHweR/VNt7ogg2k=)
                          13: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: +yFHbjFdcl3OkH9bM82B/wbQvRBlEBGqJ0LTOyulC0Q=)
                          14: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: izH2bRAdoHB65ZOfP1RgM/881EkkTABDPPywFSiQ9f4=)
                          15: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: aQBGW4UwEpZw1viUGTiicR7R7bF3eHxKluau3FSxHVQ=)
                          16: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: hT2vS1KxZCIrrbIeX36lXo5PB7z3bFiXrMszQcpSghE=)
                          17: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: hYvWm7RFlZS1l2LX8NsvpkNf0MsxvPiQn7slmgwssck=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:42:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f8:3b:6c:4e:01:55:56:a0:8f:5a:5c:93:b9:97:f9:54:b7:3b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
        Validity
            Not Before: Oct 20 06:53:56 2025 GMT
            Not After : Oct 21 07:42:56 2025 GMT
        Subject: CN=1CA516D011A760749967F9BE883965E35DEB2E4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3e:f1:af:fa:e4:b3:b3:6b:7b:49:35:47:25:
                    a0:ff:1c:41:80:a3:e9:2a:87:95:02:82:e3:08:bf:
                    12:ec:ca:39:e5:e5:7d:2b:c2:9a:b1:cc:37:1e:b8:
                    34:e7:da:e7:c3:f8:c3:30:a7:22:50:3c:6e:1f:b7:
                    5f:e1:d8:39:65:84:34:23:ef:07:72:80:1b:18:53:
                    a4:1a:e8:f1:92:fb:71:0f:77:21:86:9c:d2:92:29:
                    9b:92:36:e6:64:19:41:aa:de:cd:35:d2:a1:e2:c4:
                    a9:0c:cc:8f:ac:b7:b0:cf:b2:3e:14:0b:93:dc:38:
                    d5:c5:99:89:69:c9:37:68:55:12:d5:3b:41:47:c1:
                    2c:fe:b4:55:2a:d3:df:b8:bd:40:b5:b3:59:84:b8:
                    04:a5:b6:3b:9a:be:d3:67:65:0d:d0:a7:58:23:d3:
                    59:b2:b1:47:a9:c1:ad:0b:6d:56:3a:ad:16:34:3b:
                    8b:88:43:a1:d8:41:30:95:e6:d2:49:94:fb:cb:83:
                    ff:b5:37:1b:c5:af:b1:dc:b8:c2:d2:a5:a5:99:44:
                    c5:e4:88:64:e3:20:b0:fa:38:16:5c:f1:f2:2c:e3:
                    11:fd:1f:63:3e:9f:a0:ce:6e:55:0f:57:77:4e:aa:
                    c7:fe:e1:6b:0e:1f:d8:99:27:fe:6a:fc:cd:d2:b8:
                    84:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A5:16:D0:11:A7:60:74:99:67:F9:BE:88:39:65:E3:5D:EB:2E:4F
            X509v3 Authority Key Identifier:
                keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:70:95:f5:c2:7f:cc:71:2a:12:3c:1d:38:4c:16:c8:67:76:
         ef:ac:a4:cc:0d:c6:2b:1a:cd:74:41:fd:df:cb:93:3b:b2:cc:
         6f:3f:70:20:5c:c8:c5:37:ef:df:68:a2:6a:76:1c:b5:d0:4d:
         af:5a:f2:c1:f9:4f:81:1d:c4:a0:51:87:10:32:2d:94:25:33:
         b6:5b:08:33:d8:86:40:0f:06:d9:7a:31:94:5c:1d:fa:96:a0:
         77:d2:15:ab:86:1e:b0:33:2a:fb:61:fe:b8:57:63:1e:2d:5c:
         e3:a4:05:6b:14:bd:37:b3:85:5b:2d:b8:47:b2:67:6f:bb:12:
         bd:8b:d7:df:fa:46:9a:e7:6a:c6:c8:cb:45:b9:70:2f:d2:dc:
         8f:f8:cd:b2:48:f2:45:8e:9a:da:6d:a3:fd:4b:c4:20:4d:8f:
         dc:54:4a:dd:aa:0a:27:78:b6:40:c1:2b:f2:c3:c0:7f:85:63:
         86:60:82:66:74:74:cb:79:f5:5c:5f:bb:6e:0c:9f:ce:78:24:
         de:62:82:78:e7:e3:0e:a9:23:e7:f9:42:53:de:a6:21:49:6c:
         ad:29:bb:bb:82:9c:d8:64:44:54:89:c1:ac:cb:23:de:3e:39:
         ec:43:4d:43:ea:f8:99:6b:2a:a8:40:6b:f6:29:21:18:85:41:
         41:9d:5a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:45 2025 by rpki-client