Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
File:                     98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json)
Hash identifier:          5msca2L6zEFtMHgKxiZx9ZmXAsYJJR/H3UMvz+1aJx4=
Subject key identifier:   7F:F5:EC:18:66:40:43:94:13:C6:C6:0B:B0:30:FA:3E:E8:B4:E8:88
Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
Certificate issuer:       /CN=98a87cad5b710890a9528f166f4202393824e6b8
Certificate serial:       4F66E08EE4D4F4ACFBF16A34A68EACBFEE1D4343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
Manifest number:          037E
Signing time:             Wed 07 May 2025 02:09:21 +0000
Manifest this update:     Wed 07 May 2025 02:04:21 +0000
Manifest next update:     Thu 08 May 2025 02:45:21 +0000
Files and hashes:         1: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: OiF9NTgLIvpgOtsU+ET8v0G7trHw/6kgGm+sQfii6jA=)
                          2: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: GzEfYNi6/vde9duBI4GoacY9I1ImrO0osp4FqLdS6w0=)
                          3: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: abkTgvFhAoj4f+KMDGBQF/dpnMqoiBMVzOOia/8N82A=)
                          4: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: XD3V5dJXTVRCxQzxxC2QHwrcf2NvhNrbOoV/LwRhC+0=)
                          5: 326131313a353730353a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: abdx96bGasEt79nv1n4PdtuPD35/cpm50ioY9tC3qus=)
                          6: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: U7ZpZq92KRjLluBChNmcNbVK0yuDCFIu2VYYNCvyYhE=)
                          7: 326131313a353730323a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: jpJvrreRDifLrtBDiVkCHa/ih9KUqNO+TXds5XFOzYA=)
                          8: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: TMlytZ8X0slW9x4jJKyuBdUnUnMpROm7M/wSYhg+WrM=)
                          9: 326131313a353730343a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: vfJJza7tgDeLAPDMVyN5V6KQIqwick9H3Cppm/e5D7Y=)
                          10: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: QSf1f4sZpmKAqesOD+5GkB0Z3X1d4jZecHW/qgpOz7c=)
                          11: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: IFyvsoq3z/J9/cI4jGpNFspmigX877VkVcAd34RtDGc=)
                          12: 326131313a353730313a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 8rSYC/rmOaG6QMucx38lab+ttuAxpdA8gF20Sx392S0=)
                          13: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: 2t1rBhnp/nx2NbYLLBT6459cj12qNkxF/Y+7pwb3JUg=)
                          14: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: 6xKp24gU5DBAB1Kw+WWXfVQhj34i1+UyseAfrABT8A8=)
                          15: 326131313a353730373a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: yXrlXEmbJ+W468Anpz8E2TYdQ5p48eYhmRv8EWEFWss=)
                          16: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: M1W/UI7nVvcG5IlyKmaYpsnNndD+L3rNJ9g8XuVAe1c=)
                          17: AS48070.asa (hash: YsK0/rV2BmXeHeRJ0VrNqX7Hbez3e33zUXMrV6bup5Y=)
                          18: 326131313a353730333a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 4u/gNCBvytd7eZSyyMh6T2KiCJ3m+wg7l3GvlAdV7y4=)
                          19: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: P6VpVcg2APhRrCeqSdvJWAeWYuUD0ufb44Yi4WeNSS4=)
                          20: 326131313a353730363a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: AfUd0g6EM08gdKu3gWYFuswqhaPb+uAVwfADq4dSUAA=)
                          21: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: WtMw6gTmYTWCmtNsyMU8znGs+9TK96TMgDW07igAViw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 02:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:66:e0:8e:e4:d4:f4:ac:fb:f1:6a:34:a6:8e:ac:bf:ee:1d:43:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8
        Validity
            Not Before: May  7 02:04:21 2025 GMT
            Not After : May  8 02:45:21 2025 GMT
        Subject: CN=7FF5EC186640439413C6C60BB030FA3EE8B4E888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a6:dc:fd:fc:a3:3b:74:40:0a:3f:e3:21:f3:
                    8e:bd:40:c6:9f:81:1b:6d:34:c2:94:cb:c2:80:45:
                    84:93:51:63:c0:d8:ea:6c:01:a8:01:ba:52:37:f1:
                    1e:8b:c3:a1:db:dd:a9:3e:2b:54:c0:ef:2b:70:43:
                    0c:b5:eb:35:5e:79:9a:4f:43:62:8c:1d:bb:23:47:
                    4f:fa:59:04:83:ec:61:c8:eb:97:54:80:08:5e:4e:
                    1f:a4:4f:39:30:e6:26:09:a7:43:9c:0d:9f:5e:94:
                    35:5a:32:73:07:0f:76:3d:3b:32:f9:78:88:a5:d9:
                    4f:e6:bd:f7:9b:b9:b1:e5:5a:0b:b1:64:c4:af:39:
                    fa:c1:18:4e:8f:f9:f6:12:85:0c:22:19:31:60:25:
                    b8:9a:66:69:fe:85:c3:cd:ba:6e:a1:4c:2b:30:65:
                    6b:28:f3:d1:d2:54:6d:4e:2d:2a:45:c3:ee:b3:b5:
                    79:4c:9a:3e:f3:00:e3:11:56:37:51:99:25:ab:f2:
                    6a:18:d5:9d:00:f3:06:63:89:0b:cf:00:e1:8d:c2:
                    18:89:87:fb:57:27:52:73:a6:70:27:fe:75:a1:be:
                    5f:55:ea:2f:4c:9a:00:dc:63:e8:64:e3:1c:e6:83:
                    72:c4:14:b2:b5:b6:4c:57:08:d4:56:04:54:8e:45:
                    f4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F5:EC:18:66:40:43:94:13:C6:C6:0B:B0:30:FA:3E:E8:B4:E8:88
            X509v3 Authority Key Identifier:
                keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b2:8d:18:94:26:50:1e:e2:fe:e3:0a:0f:f0:11:c4:a8:30:
         03:3e:0f:2a:62:fc:d1:77:1d:53:cb:2a:a3:d5:83:ba:99:c5:
         17:3c:4a:18:4d:35:c1:cf:f3:83:19:81:8d:60:db:8e:ec:f5:
         58:40:c0:92:3b:eb:74:53:22:d7:a9:f3:bb:9d:81:92:84:3c:
         65:54:70:79:3e:1b:0b:a4:7f:7a:24:0b:4f:a3:cc:50:57:1e:
         db:1c:a3:f3:bc:b4:80:fe:25:be:35:bd:0e:02:91:08:ec:0a:
         bc:39:6d:79:08:2c:fa:f5:27:4d:e8:4d:7c:fe:5a:1c:6f:fd:
         5d:0e:93:a7:b2:68:87:b7:1d:3f:04:08:fb:f8:a6:d2:56:f8:
         4c:a2:ea:b0:66:4a:62:75:fd:a9:13:8a:a4:1b:60:65:48:58:
         d5:51:26:15:f2:48:6b:ad:a0:86:93:ed:44:1b:b8:a2:7a:19:
         a9:e4:c3:15:01:99:08:7c:94:e5:b7:d9:10:63:8e:59:17:0d:
         74:f8:d3:9c:dc:7d:e6:a2:23:f6:cd:ed:90:63:3f:d9:5d:bc:
         06:8a:02:4d:42:f5:48:12:30:e9:50:68:0a:17:88:02:51:28:
         2e:ac:60:df:18:42:85:fb:71:49:96:ea:a3:02:a9:eb:1e:69:
         0d:5c:b4:31
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUT2bgjuTU9Kz78Wo0po6sv+4dQ0MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz
ODI0ZTZiODAeFw0yNTA1MDcwMjA0MjFaFw0yNTA1MDgwMjQ1MjFaMDMxMTAvBgNV
BAMTKDdGRjVFQzE4NjY0MDQzOTQxM0M2QzYwQkIwMzBGQTNFRThCNEU4ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ptz9/KM7dEAKP+Mh8469QMaf
gRttNMKUy8KARYSTUWPA2OpsAagBulI38R6Lw6Hb3ak+K1TA7ytwQwy16zVeeZpP
Q2KMHbsjR0/6WQSD7GHI65dUgAheTh+kTzkw5iYJp0OcDZ9elDVaMnMHD3Y9OzL5
eIil2U/mvfebubHlWguxZMSvOfrBGE6P+fYShQwiGTFgJbiaZmn+hcPNum6hTCsw
ZWso89HSVG1OLSpFw+6ztXlMmj7zAOMRVjdRmSWr8moY1Z0A8wZjiQvPAOGNwhiJ
h/tXJ1JzpnAn/nWhvl9V6i9MmgDcY+hk4xzmg3LEFLK1tkxXCNRWBFSORfRrAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUf/XsGGZAQ5QTxsYLsDD6Pui06IgwHwYDVR0j
BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh
NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn
azVyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00
YjFhLTQ2ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC85OEE4N0NBRDVCNzEwODkwQTk1
MjhGMTY2RjQyMDIzOTM4MjRFNkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhLKNGJQmUB7i/uMKD/AR
xKgwAz4PKmL80XcdU8sqo9WDupnFFzxKGE01wc/zgxmBjWDbjuz1WEDAkjvrdFMi
16nzu52BkoQ8ZVRweT4bC6R/eiQLT6PMUFce2xyj87y0gP4lvjW9DgKRCOwKvDlt
eQgs+vUnTehNfP5aHG/9XQ6Tp7Joh7cdPwQI+/im0lb4TKLqsGZKYnX9qROKpBtg
ZUhY1VEmFfJIa62ghpPtRBu4onoZqeTDFQGZCHyU5bfZEGOOWRcNdPjTnNx95qIj
9s3tkGM/2V28BooCTUL1SBIw6VBoCheIAlEoLqxg3xhChftxSZbqowKp6x5pDVy0
MQ==
-----END CERTIFICATE-----
Generated at Wed May 7 15:03:57 2025 by rpki-client