Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
File:                     C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json)
Hash identifier:          m/1x3P5xBAxQSziM47yVbKYXGhOscmR4NW7WLgfB8gg=
Subject key identifier:   18:CD:FC:F4:8C:53:D6:18:28:75:6F:68:39:AD:B3:AA:11:B1:D9:56
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Certificate issuer:       /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial:       5B679F0B4FC2F91D5F9D1151E6E0BF9827FD8311
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
Manifest number:          01DB
Signing time:             Sun 19 Oct 2025 04:46:46 +0000
Manifest this update:     Sun 19 Oct 2025 04:41:46 +0000
Manifest next update:     Mon 20 Oct 2025 07:31:46 +0000
Files and hashes:         1: 33312e32322e3130352e302f32342d3234203d3e20323135303236.roa (hash: 4XlIN+3Y2uvivj3jKKbdxnHiR3dRqeJ7/xmTE8uipj8=)
                          2: 33312e32322e3131312e302f32342d3234203d3e20323135333535.roa (hash: brok2XUOzC0OAQs7efh1lP/TIOrHW70pJohRfs3tgEM=)
                          3: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: iK+yx/VtDctRGDFOE/NGNWTyR4u7o2tFGRI6U0bUYZU=)
                          4: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: y9uevaBeLo1M0NZi4w3HJOyvLkMWIaZEJFCi8snsYYY=)
                          5: 33312e32322e3131302e302f32342d3234203d3e2039333034.roa (hash: 4/DyfQef3JM+QDXadF+flhTmwriSDAeEuVFVt/FGtTg=)
                          6: 3130332e34392e3132392e302f32342d3234203d3e20313530363534.roa (hash: ZmNqb6SQ04nrnt7KP4kUO8EO/zoOBhgAf3oJbSFf7Ys=)
                          7: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: hoZQSGqkvoyh+Fwe28UicpO6RAJD80P7rklT/Di/mQU=)
                          8: 3130332e34392e3132392e302f32342d3234203d3e20313437323631.roa (hash: OkLNRr7sKDDa5HQaSwaNeYF6CO01e+JHe9kYR/VqYg4=)
                          9: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (hash: gI3QMk1nxnVJ3ar9nDADeDjafrF5rxSYgoW75rlLkBk=)
                          10: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: BqbUmbythNNYP4WqssroNY2sOPvoyuRgXIRAVuIytpA=)
                          11: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: yHVodRBAsBlx/8p8lQvX33hmgwPZB9Uj6k/5yqbIyfs=)
                          12: 3130332e34392e3132382e302f32342d3234203d3e20313534303439.roa (hash: RP7fF4ljaFnG1QBw6wHJTYmQiSzsC+UtOPXQULgrH/c=)
                          13: 34332e3233302e38342e302f32342d3234203d3e203235313938.roa (hash: D5rxpe/mz9cZbwkoouLs3Io8a9VjYwAhmSHGosd1BJQ=)
                          14: 33312e32322e3130372e302f32342d3234203d3e20313337353137.roa (hash: zucU5bamNfYRw/esvivyzaXHMAl8N0xQ+Q3coI+3JvA=)
                          15: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: jNzQvK975k0nFSky/OYcsFfueNL1XvYeIp3mtR/7WPY=)
                          16: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: nITjK4ne7EeC8QTRLKH6MNdHStySoWw9ugRR+I2Xzvs=)
                          17: 3130332e34392e3133302e302f32342d3234203d3e20323036303333.roa (hash: v7D054EN2gERBe7aLvFn0V17UtLvh1fmGSVfmRoK+KQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:67:9f:0b:4f:c2:f9:1d:5f:9d:11:51:e6:e0:bf:98:27:fd:83:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
        Validity
            Not Before: Oct 19 04:41:46 2025 GMT
            Not After : Oct 20 07:31:46 2025 GMT
        Subject: CN=18CDFCF48C53D61828756F6839ADB3AA11B1D956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a6:55:61:16:4b:d3:3f:2b:a3:2e:97:7e:25:
                    fd:09:e9:64:20:b9:dc:6c:49:09:1e:11:ac:81:8e:
                    41:e6:a3:02:b5:19:59:84:ae:9a:4d:f3:62:ef:90:
                    6c:ac:c0:a0:f3:86:74:8c:58:27:5b:d6:60:e2:09:
                    5c:7e:6e:b8:6b:90:79:e9:bf:e2:f2:fe:b7:3f:c1:
                    a7:70:2e:91:1a:09:b3:3b:3d:fa:1b:94:8e:46:24:
                    21:52:80:11:3f:7a:b5:bf:0e:50:3b:2d:cc:97:c4:
                    e8:c9:6e:81:86:80:b7:ee:42:85:88:6a:7e:7b:52:
                    6b:bc:08:ce:d0:72:cc:af:60:df:b0:3d:03:90:58:
                    32:76:de:e2:5a:db:f7:61:db:70:5e:1d:77:0b:74:
                    d9:ec:ef:88:f6:6c:81:c9:2e:f4:b4:d0:4a:93:64:
                    b0:fe:1b:e9:92:8b:44:7e:cd:51:05:6d:91:94:e6:
                    a4:68:2f:ea:ee:08:1e:d1:da:4b:7b:4d:61:b0:27:
                    ff:c1:b6:38:17:93:03:bb:4c:24:87:6d:18:81:ef:
                    98:bd:fc:ee:8e:3f:1e:f2:51:49:08:82:c3:62:02:
                    0e:7e:bb:ec:e3:55:59:2f:5f:5f:f5:d4:a9:a4:3c:
                    38:cb:39:c2:29:21:a8:1c:c7:2f:bb:cb:02:a4:8f:
                    5d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CD:FC:F4:8C:53:D6:18:28:75:6F:68:39:AD:B3:AA:11:B1:D9:56
            X509v3 Authority Key Identifier:
                keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:7c:ee:ec:23:5c:b4:a6:0b:7c:53:22:34:55:ce:75:32:ed:
         78:97:06:b4:4c:59:a1:d6:c1:c6:2c:85:d0:ee:ec:c0:cc:07:
         c8:78:61:20:1f:8f:7e:cb:95:b7:3c:02:93:c0:96:59:fe:86:
         ab:df:32:ce:cd:22:38:b2:8f:f0:6d:5e:39:f3:54:13:d4:e8:
         cb:2d:d9:a7:b8:e8:6f:2e:d2:29:2d:6d:07:a6:b6:32:b8:9f:
         0c:ac:ca:b9:8b:f7:79:c7:c2:43:54:09:8c:61:cd:96:00:5d:
         ce:55:3e:fb:1b:cf:43:57:df:3d:f5:70:6f:8a:1b:e5:41:58:
         31:87:9f:dc:43:dd:cc:c1:1d:a9:47:2a:94:7a:36:d6:fe:d1:
         8d:23:23:55:1a:37:7b:02:e3:26:a7:a8:bf:ec:b1:bd:f4:3b:
         a4:8e:3c:1c:62:3c:9f:9e:67:bd:85:5c:61:d0:58:a5:01:06:
         bd:a9:00:78:e4:7e:84:38:9b:37:08:3a:1a:10:3d:f9:b3:4a:
         01:67:de:59:bc:6f:97:96:49:a3:d5:36:9b:f3:5f:16:55:b9:
         df:60:dc:b8:84:b7:95:6d:d6:5e:02:4d:24:69:02:6f:9d:c2:
         ee:a1:d1:3d:6b:c4:da:05:fa:40:bd:74:d7:d7:f8:92:e1:cf:
         d7:ba:44:bd
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUW2efC0/C+R1fnRFR5uC/mCf9gxEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw
YWVhYjI5ZDAeFw0yNTEwMTkwNDQxNDZaFw0yNTEwMjAwNzMxNDZaMDMxMTAvBgNV
BAMTKDE4Q0RGQ0Y0OEM1M0Q2MTgyODc1NkY2ODM5QURCM0FBMTFCMUQ5NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRplVhFkvTPyujLpd+Jf0J6WQg
udxsSQkeEayBjkHmowK1GVmErppN82LvkGyswKDzhnSMWCdb1mDiCVx+brhrkHnp
v+Ly/rc/wadwLpEaCbM7PfoblI5GJCFSgBE/erW/DlA7LcyXxOjJboGGgLfuQoWI
an57Umu8CM7QcsyvYN+wPQOQWDJ23uJa2/dh23BeHXcLdNns74j2bIHJLvS00EqT
ZLD+G+mSi0R+zVEFbZGU5qRoL+ruCB7R2kt7TWGwJ//BtjgXkwO7TCSHbRiB75i9
/O6OPx7yUUkIgsNiAg5+u+zjVVkvX1/11KmkPDjLOcIpIagcxy+7ywKkj10jAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUGM389IxT1hgodW9oOa2zqhGx2VYwHwYDVR0j
BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2
NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy
cXNwMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYWZlYmRiNC02
ZjBiLTQwNGItOThlMi1hMjZiZTk0YTY2MjAvMC9DNzcwRjQzMzU4Qjk3QkEwQUE5
QkRDNjJCQkQ1MTFFOTBBRUFCMjlELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3zu7CNctKYLfFMiNFXO
dTLteJcGtExZodbBxiyF0O7swMwHyHhhIB+PfsuVtzwCk8CWWf6Gq98yzs0iOLKP
8G1eOfNUE9Toyy3Zp7joby7SKS1tB6a2MrifDKzKuYv3ecfCQ1QJjGHNlgBdzlU+
+xvPQ1ffPfVwb4ob5UFYMYef3EPdzMEdqUcqlHo21v7RjSMjVRo3ewLjJqeov+yx
vfQ7pI48HGI8n55nvYVcYdBYpQEGvakAeOR+hDibNwg6GhA9+bNKAWfeWbxvl5ZJ
o9U2m/NfFlW532DcuIS3lW3WXgJNJGkCb53C7qHRPWvE2gX6QL1019f4kuHP17pE
vQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:05 2025 by rpki-client