Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
File:                     ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json)
Hash identifier:          uzvhmrFPaYvj6U4rEed55wSqbQAsvfGKtdz9WdPVoHk=
Subject key identifier:   2A:BD:34:46:20:A2:D2:A2:BE:A2:06:18:11:D3:5C:22:29:E6:14:3C
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Certificate issuer:       /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial:       11571340A25137CC0729A694BD64142E7301406A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
Manifest number:          040A
Signing time:             Sat 23 Aug 2025 10:27:33 +0000
Manifest this update:     Sat 23 Aug 2025 10:22:33 +0000
Manifest next update:     Sun 24 Aug 2025 11:15:33 +0000
Files and hashes:         1: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: 67hzJ7+qEviKc+JKiq3KV4OqZ4fSU1BU+NXzASboCBg=)
                          2: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: Mffmj9tigk0AvK8qUYEb5eCtUKaC20yQi7QyJq/JmDA=)
                          3: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: VsyHwXGnPa9jTtnErp0xUSN9uxae8b2L7otiSzP7S2M=)
                          4: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: YyMBgTPVms4MPnbkUVc7TpGwl6ukB7kzc/uAePl3SRA=)
                          5: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: 8TO+ve7jJct708TXqqhBBn3/6oawjMzmGtHcbVylQVE=)
                          6: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: nmhaoLhqUBAnDccEuteaqmwjmYCIqjMWJmqWnwMVbc8=)
                          7: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: OZBNVOvtp3V7O1L8kF6JcTp/niAHFDMwWI3RV/AoyZY=)
                          8: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: T+9QQX64dOYanRzHKI9rhWnUyaZt9GgRQXrvhvIBrgs=)
                          9: 39332e3131332e32352e302f32342d3234203d3e20323134323039.roa (hash: 2/naNLsZWsKbctisH+91/rgvttkXh//515D4Dxt3bfg=)
                          10: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: g8GfxZyUsq5sAHB2Ct+7Z9GS7IIVHVNG2gaO8plmjSA=)
                          11: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: yDRyc1h8O+mXAEgAFoITsNpFI2VU0vygznR0PJDNh0M=)
                          12: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: NZcAKMAEu2FS5Zqz0hBFL7Zpu38dDC8QIhg4PJE0Lh4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:57:13:40:a2:51:37:cc:07:29:a6:94:bd:64:14:2e:73:01:40:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
        Validity
            Not Before: Aug 23 10:22:33 2025 GMT
            Not After : Aug 24 11:15:33 2025 GMT
        Subject: CN=2ABD344620A2D2A2BEA2061811D35C2229E6143C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:71:79:40:d7:8f:50:d0:65:d0:0a:47:e0:94:
                    ab:1f:23:08:4b:2d:c3:dd:88:da:6c:72:a6:86:e7:
                    82:a7:cc:22:48:2e:ee:ef:3a:0b:91:9d:2e:27:23:
                    ae:59:82:47:e3:1c:86:2b:eb:0d:59:b4:44:3f:55:
                    9f:70:cb:52:4a:51:5e:07:b1:ae:25:81:a1:f4:91:
                    83:e7:6c:cf:e4:b9:ea:39:cf:da:d3:56:d1:2d:74:
                    bb:50:8b:15:9a:79:d8:b7:7a:c0:c5:30:a2:01:d0:
                    15:99:a9:a7:28:59:c7:46:df:ba:ca:9d:99:aa:e2:
                    94:77:32:aa:68:5c:3c:6f:94:85:66:8b:ef:9d:dd:
                    58:76:7d:a9:0c:da:a0:17:ed:fa:0d:7b:bc:09:57:
                    15:07:9b:24:bd:78:09:54:06:67:bb:c4:09:1f:60:
                    73:fc:dc:29:a9:13:98:d5:a8:a2:ef:d4:08:f1:48:
                    19:ba:4a:7b:33:e5:eb:68:5f:66:5d:2e:89:ce:2f:
                    42:ca:7d:da:53:0d:21:d3:28:5f:ff:ff:e6:84:25:
                    91:44:7d:a2:ba:56:57:45:2b:9d:ca:78:6a:5b:ff:
                    66:ae:35:ca:d7:32:e9:3f:5d:da:38:0c:17:61:41:
                    80:3b:24:35:86:c3:75:0d:7c:66:44:44:5b:19:da:
                    6e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BD:34:46:20:A2:D2:A2:BE:A2:06:18:11:D3:5C:22:29:E6:14:3C
            X509v3 Authority Key Identifier:
                keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e2:8d:52:15:be:6f:cc:dc:72:63:27:c7:8e:bc:34:20:e9:
         9b:2e:51:81:79:1f:91:33:71:d8:cb:e7:53:54:97:ed:bd:1b:
         44:8b:b0:87:2a:39:95:a1:ea:6d:7f:42:01:f0:d6:a8:c0:d7:
         b7:be:de:c6:5a:4d:5d:e7:aa:6b:2c:ec:9e:c9:24:75:b7:0d:
         2c:81:c8:2b:a7:bc:2b:23:66:ec:5b:82:c4:29:b7:08:fb:55:
         2f:bf:44:e9:f1:41:09:2f:7d:8e:88:e5:84:7d:9b:73:b2:24:
         f8:4e:3d:d3:50:01:af:fd:17:3b:89:d2:d2:26:29:58:1b:7b:
         5f:3c:c0:3c:61:b6:ae:44:3b:1a:33:67:ac:ef:c7:ab:13:1e:
         44:ab:ba:71:32:1f:71:f4:63:0f:a4:4b:f2:fc:9c:20:48:75:
         92:b2:eb:d5:1a:97:d1:b7:7b:99:ac:ea:17:ea:22:2c:40:5f:
         7e:2d:26:ab:4a:e4:dd:97:03:b4:71:f8:a8:85:75:c8:7b:20:
         37:fc:c2:21:6f:ba:27:a9:ec:4e:ab:81:37:38:38:e7:7d:5d:
         cf:89:29:d9:87:cc:98:af:ff:c4:0d:32:e4:4d:4e:70:72:63:
         8e:fb:88:9c:bb:33:73:ed:f7:1b:67:bd:0e:6c:cf:1e:e6:5a:
         99:ce:54:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:38 2025 by rpki-client