Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft
File:                     9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft (raw, json)
Hash identifier:          h5hZaQwDHuR7ros9nrfE8rlDoUXYSRfpXMAqhaYUea8=
Subject key identifier:   33:57:20:37:D0:FC:CA:59:4C:83:EB:68:DE:73:79:D0:8D:80:D6:F6
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       298294E12EF4351F4C79CBF860004918E074FFF0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft
Manifest number:          F2
Signing time:             Sun 29 Jun 2025 10:44:48 +0000
Manifest this update:     Sun 29 Jun 2025 10:39:48 +0000
Manifest next update:     Mon 30 Jun 2025 11:39:48 +0000
Files and hashes:         1: 326131343a373538303a656436323a3a2f34372d3438203d3e20323135393536.roa (hash: Kqzub2qIs1qegd52eIRw8Wsd7KmqqBpaDbntybnXZCs=)
                          2: 326131343a373538303a656530373a3a2f34382d3438203d3e20323135393536.roa (hash: bqdtJDZQwxUjECeVo6N8GUkB5746aKVjv0QuvYc/NYQ=)
                          3: 326131343a373538303a656435303a3a2f34372d3438203d3e20323135393536.roa (hash: Cs5v+EHMVs1uB3jH8D/T4zhbWWfpstLcChPc3QvIDNE=)
                          4: 326131343a373538303a656438303a3a2f34362d3438203d3e20323135393536.roa (hash: 2zDy/eUziglFV/9EItor0la5XQ2kOtjIFeGeY68GANA=)
                          5: 326131343a373538303a656530383a3a2f34382d3438203d3e20323135393536.roa (hash: IrzDtIj0AlXPRTO7R/Sx9Wz1/g3+OlKqFRdo5p5WK/A=)
                          6: 326131343a373538303a656435343a3a2f34362d3438203d3e20323135393536.roa (hash: QPcM5CYzg+4kDoEfgn4tUu3mxl08r9G9K5BzbV3OQh8=)
                          7: 326131343a373538303a656435633a3a2f34362d3438203d3e20323135393536.roa (hash: jevL3d6TTOzkxi3ZNaZX4Cgq0RHHKBz0nBQrG1EMVtQ=)
                          8: 326131343a373538303a656463303a3a2f34372d3438203d3e20323135393536.roa (hash: AQQOMxbyHdi/QRQwL8IjR0uC20BOBfCMyVbTLYDkWm4=)
                          9: 326131343a373538303a656430343a3a2f34362d3438203d3e20323135393536.roa (hash: bw9S1eMCnw29L7OTLArgKdi2e2OitODsDGRD23O0zyY=)
                          10: 326131343a373538303a656463363a3a2f34372d3438203d3e20323135393536.roa (hash: JSDpVii8cPD9PH2htYFwGmiTRIE/E6Wxu1gOrcqOqVg=)
                          11: 326131343a373538303a656530303a3a2f34382d3438203d3e20323135393536.roa (hash: 5a8j2++17nNiorsFJpHeqHz8EMAsvxoBsPo3lbx1QS4=)
                          12: 326131343a373538303a656530653a3a2f34382d3438203d3e20323135393536.roa (hash: t1I1YGclSpS6Mc1lFLIUUNxsXHlp5Dw9WA27iG8gymY=)
                          13: 326131343a373538303a656463343a3a2f34372d3438203d3e20323135393536.roa (hash: uF3B4COq4JueAHRk0xeq+DbXlEsmruob4xno4tjyV2A=)
                          14: 326131343a373538303a656436343a3a2f34372d3438203d3e20323135393536.roa (hash: dtCHKVVK8KAOqV/eycsypDEDUcEZAIfXsuNiLq8uz9U=)
                          15: 326131343a373538303a656530393a3a2f34382d3438203d3e20323135393536.roa (hash: 6v7YHQEBoQVfuwMJAl/sJlUgUSOmCeYgNy1gAXazKI0=)
                          16: 326131343a373538303a656530353a3a2f34382d3438203d3e20323135393536.roa (hash: XEeNqK7YkE14OYGoH5IsFHLKrbY3feuKy7Y5ww9fcA0=)
                          17: 326131343a373538303a656530643a3a2f34382d3438203d3e20323135393536.roa (hash: Yglg8daeU2hAxM3XItVdogeWekww8KWX8sDlBZCw59o=)
                          18: 326131343a373538303a656530363a3a2f34382d3438203d3e20323135393536.roa (hash: DADECdZALi0f7ONgD1nprji2pqSTaZzjrgXbBlogfFU=)
                          19: 326131343a373538303a656430633a3a2f34362d3438203d3e20323135393536.roa (hash: u7gTttqORBo29W+oz6FOrgQ5172Bt6aucgfpDK6NB04=)
                          20: 326131343a373538303a656530623a3a2f34382d3438203d3e20323135393536.roa (hash: Q/t+wpX8bpFQ1sbt2j5mtLHaFTWrRLaj576adhqyqTA=)
                          21: 326131343a373538303a656530323a3a2f34382d3438203d3e20323135393536.roa (hash: 17K75gKk9Ptw+4fExoXjv2d3NaK5okRRH4N3S2O0I68=)
                          22: 326131343a373538303a656463323a3a2f34372d3438203d3e20323135393536.roa (hash: weXm8nO8TO7MXHOO3qaQurJDPDalcthS0p6HQKsPmdk=)
                          23: 326131343a373538303a656434303a3a2f34372d3438203d3e20323135393536.roa (hash: cpW5X2LGDWGO3Mq6IWFoKq0AVmcqV72j0ReYB8HWc6A=)
                          24: 326131343a373538303a656530313a3a2f34382d3438203d3e20323135393536.roa (hash: vBl7IXwFBo4Sxmx2SsyJCIVYCQUo0Q3xRTpMUdJLInY=)
                          25: 326131343a373538303a656530343a3a2f34382d3438203d3e20323135393536.roa (hash: qFn0d4vgZpr42MvH9npN3Ed4JlO5bGVpqsApKnKzWjc=)
                          26: 326131343a373538303a656430303a3a2f34362d3438203d3e20323135393536.roa (hash: wwVj8rYahKvRa2bjr5SEejJS2mzXRm6g0mjeKu/juV8=)
                          27: 326131343a373538303a656466303a3a2f34362d3438203d3e20323135393536.roa (hash: OX+uoS1yp+rW3TsSQocPE/tAx5xbT/G4myRYz2g/VXI=)
                          28: 326131343a373538303a656566633a3a2f34372d3438203d3e20323134383138.roa (hash: US56dZR1qg2QIsnKlWMaAYdRfGahXOn5eBs2iKqc1/Q=)
                          29: 326131343a373538303a656530613a3a2f34382d3438203d3e20323135393536.roa (hash: +SA63M4t2p5PSAK68qo4IVJ7i06uxXDj7zto4yxokOI=)
                          30: 326131343a373538303a656431303a3a2f34362d3438203d3e20323135393536.roa (hash: excrlDWSPl4YwX4GrZXWpcrM9BUCiV9b1rbaeAdMSnQ=)
                          31: 326131343a373538303a656530663a3a2f34382d3438203d3e20323135393536.roa (hash: xQQdjDkSH738D1uz/GkR+yuqVH7Jd7OCJyN7cr6AbfI=)
                          32: 326131343a373538303a656530333a3a2f34382d3438203d3e20323135393536.roa (hash: fOqLl9BSQ8Slcj2C1mlf1IGa+BOV0eLtADVCtmkqld8=)
                          33: 326131343a373538303a656435323a3a2f34372d3438203d3e20323135393536.roa (hash: 5LBsCAzjASb6G1ME+AJzOffwvS3wGMpN+GN7+FO3R7Q=)
                          34: 326131343a373538303a656566653a3a2f34372d3438203d3e20323134383138.roa (hash: or3U3p+naZTN1+AtddZ98ojKl4BAXyP/qX22IanYkN0=)
                          35: 326131343a373538303a656434343a3a2f34362d3438203d3e20323135393536.roa (hash: JOuETj6IQbn1/Yf+ST0Be/5xwsZNFtW+uQt+p/VtXZU=)
                          36: 326131343a373538303a656436303a3a2f34372d3438203d3e20323135393536.roa (hash: +zrkRc4SP6XK6z0xpBXHsDy1K0yT8abi4wuY0JsuQJk=)
                          37: 326131343a373538303a656466373a3a2f34382d3438203d3e20323135393536.roa (hash: pHloe8YosfoBBrVMhHLgUb2VMCQe36k5f7JvBPjf+4g=)
                          38: 326131343a373538303a656430383a3a2f34362d3438203d3e20323135393536.roa (hash: I7/hoAr63LhpXqLplSqJknUsgybSvD4+7U40EM7iCdw=)
                          39: 326131343a373538303a656435383a3a2f34362d3438203d3e20323135393536.roa (hash: cBH3LTS+IF8Xg01eC4ixkemiC8JAxRnXSOo6XaCV/HE=)
                          40: 326131343a373538303a656530633a3a2f34382d3438203d3e20323135393536.roa (hash: 8Ho4a/h5k6HD70wRgTpnAhcqVaHGnLwaDUMIf/W6wmk=)
                          41: 9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl (hash: p2nXeVEQxdtoBjAHHuH81MVRqRWocF/ZcyQKYhbUUbA=)
                          42: 326131343a373538303a656431343a3a2f34362d3438203d3e20323135393536.roa (hash: CBinVNP14p3fJKjz8cJdLh4NiErv8Lc4GRjI4Fj+49U=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:82:94:e1:2e:f4:35:1f:4c:79:cb:f8:60:00:49:18:e0:74:ff:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Jun 29 10:39:48 2025 GMT
            Not After : Jun 30 11:39:48 2025 GMT
        Subject: CN=33572037D0FCCA594C83EB68DE7379D08D80D6F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f3:81:d5:49:1a:ac:a8:cf:86:be:bc:1d:35:
                    90:2c:52:97:ad:14:47:7e:18:29:bb:1b:ed:24:40:
                    05:e5:f0:d0:7d:8a:cc:24:23:c8:d1:64:e1:dc:79:
                    86:d7:4b:a7:69:95:3d:25:21:48:af:35:26:e7:8d:
                    e9:3f:a4:cb:60:19:67:1f:78:3a:95:e7:82:7e:00:
                    67:af:ca:55:1c:87:23:0e:7e:04:cf:b2:a6:fe:2f:
                    0f:5c:7d:71:45:0e:6a:51:c9:57:e7:a8:6b:95:a9:
                    00:b8:a0:44:4c:ad:d2:a1:0d:f2:8d:4f:08:ab:df:
                    45:42:69:c6:ae:a6:7c:8b:fe:5d:47:76:17:0f:24:
                    d8:9d:21:75:2f:a7:3f:3b:68:be:92:d2:e9:aa:48:
                    97:4c:7d:10:4e:f1:51:e0:11:1c:cb:f0:6a:67:f4:
                    f6:18:12:3a:d7:49:1c:ac:64:c8:1a:00:b7:1b:b1:
                    dc:da:b7:77:af:61:4d:71:1e:14:78:a3:a7:fb:06:
                    01:a7:57:ef:fe:63:55:67:f5:35:8c:f4:13:20:94:
                    76:f9:5d:2d:58:a4:ec:21:b5:27:ab:2e:bd:00:81:
                    5d:35:75:5c:c4:36:f4:2f:ef:40:ab:b8:db:c3:72:
                    4e:67:a8:4f:0e:a1:3b:c6:a9:08:75:6d:37:04:1f:
                    5a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:57:20:37:D0:FC:CA:59:4C:83:EB:68:DE:73:79:D0:8D:80:D6:F6
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:99:dc:30:be:a0:0e:0f:2d:cc:9f:d8:8d:60:58:7d:d8:fc:
         07:ca:8d:6a:8b:a2:d7:ca:6d:e2:2d:02:8a:6c:d2:c2:87:92:
         27:68:8d:63:24:59:60:35:2f:13:47:57:8a:52:79:91:13:4e:
         16:be:30:5a:59:c9:00:b3:c2:5f:88:ff:5a:25:25:f7:e8:b2:
         24:5d:4d:05:98:a4:1e:0f:44:01:70:6a:eb:9e:7b:e0:48:1c:
         42:ed:64:e1:e6:0c:3d:39:9f:fd:b2:8a:3d:1a:b2:2f:cd:bd:
         57:9f:bd:af:44:cb:e8:b1:fd:89:f1:47:cf:52:6b:78:a8:7c:
         2b:21:72:ef:82:85:5a:58:c3:f5:0f:5a:7d:a1:5b:36:58:a0:
         b2:0f:c2:8e:30:29:e0:85:95:df:d7:dc:97:bc:bb:92:c6:76:
         aa:58:4b:f9:29:e4:76:8f:2d:1c:be:59:b6:77:28:b2:98:ef:
         5a:84:5e:66:96:42:11:cd:c5:61:ff:1e:56:9e:72:e2:a0:3d:
         cc:90:c2:29:7d:d3:ec:90:30:8a:a6:88:db:80:98:91:f7:ca:
         22:f9:0b:d7:27:ee:0a:8f:a2:79:d2:eb:92:3f:d7:07:96:27:
         5e:6e:b4:b2:c1:81:f2:f2:74:25:0e:c5:8f:6f:98:be:cd:cd:
         ba:60:b0:46
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUKYKU4S70NR9Mecv4YABJGOB0//AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5
QjhEOTAyQjAeFw0yNTA2MjkxMDM5NDhaFw0yNTA2MzAxMTM5NDhaMDMxMTAvBgNV
BAMTKDMzNTcyMDM3RDBGQ0NBNTk0QzgzRUI2OERFNzM3OUQwOEQ4MEQ2RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi84HVSRqsqM+GvrwdNZAsUpet
FEd+GCm7G+0kQAXl8NB9iswkI8jRZOHceYbXS6dplT0lIUivNSbnjek/pMtgGWcf
eDqV54J+AGevylUchyMOfgTPsqb+Lw9cfXFFDmpRyVfnqGuVqQC4oERMrdKhDfKN
Twir30VCacaupnyL/l1HdhcPJNidIXUvpz87aL6S0umqSJdMfRBO8VHgERzL8Gpn
9PYYEjrXSRysZMgaALcbsdzat3evYU1xHhR4o6f7BgGnV+/+Y1Vn9TWM9BMglHb5
XS1YpOwhtSerLr0AgV01dVzENvQv70CruNvDck5nqE8OoTvGqQh1bTcEH1r/AgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUM1cgN9D8yllMg+to3nN50I2A1vYwHwYDVR0j
BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz
REFCODQyRDlCOEQ5MDJCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2ViZjA0YzdjLWY4MmQtNDcxZC04NWFkLTk4YzY1ZGUxYzkxMi8zLzlDODIxMkM1
RDFEREU4NEI1NTczRUZDNzNEQUI4NDJEOUI4RDkwMkIubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCymdww
vqAODy3Mn9iNYFh92PwHyo1qi6LXym3iLQKKbNLCh5InaI1jJFlgNS8TR1eKUnmR
E04WvjBaWckAs8JfiP9aJSX36LIkXU0FmKQeD0QBcGrrnnvgSBxC7WTh5gw9OZ/9
soo9GrIvzb1Xn72vRMvosf2J8UfPUmt4qHwrIXLvgoVaWMP1D1p9oVs2WKCyD8KO
MCnghZXf19yXvLuSxnaqWEv5KeR2jy0cvlm2dyiymO9ahF5mlkIRzcVh/x5WnnLi
oD3MkMIpfdPskDCKpojbgJiR98oi+QvXJ+4Kj6J50uuSP9cHlidebrSywYHy8nQl
DsWPb5i+zc26YLBG
-----END CERTIFICATE-----
Generated at Sun Jun 29 12:10:19 2025 by rpki-client