Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
File:                     9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft (raw, json)
Hash identifier:          P4lqbnyyFV3shK5Cc1eKCVRTupUn+3jThu21bTM4t1w=
Subject key identifier:   08:A4:E7:1B:14:E5:8F:D5:98:41:EC:2F:53:94:B8:17:3C:D9:C2:83
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Certificate issuer:       /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial:       22D3E24C27E89C66FE93DB7F047699CFBD7653CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
Manifest number:          026D
Signing time:             Sat 28 Jun 2025 17:29:10 +0000
Manifest this update:     Sat 28 Jun 2025 17:24:10 +0000
Manifest next update:     Sun 29 Jun 2025 19:46:10 +0000
Files and hashes:         1: 9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl (hash: GQFvSi1knSd8KpL47vndFA41AECauUNfZni02yd70Qg=)
                          2: 39352e3136392e3138332e302f32342d3234203d3e203331313033.roa (hash: 14BjJABvK45hEO1MTADvUJ8/9d09FCU82zdQ6aYQXvA=)
                          3: 39352e3136392e3138342e302f32322d3232203d3e203331313033.roa (hash: 2fESKlF0+csH+bkbWbTv3oOmUla4DBnBrtpXwsB8xtg=)
                          4: 39352e3136392e3137372e302f32342d3234203d3e20323133323530.roa (hash: M5z9Sux3PcsEPFPTOYmSmjuZyXZMxe8g6i7N2xLS1OI=)
                          5: 39352e3136392e3138312e302f32342d3234203d3e203331313033.roa (hash: vHIdBAX8vax4LMkHyZBnhxzL225O0XLYlxEPXB9FDh8=)
                          6: 39352e3136392e3137332e302f32342d3234203d3e203235313938.roa (hash: fkawI9b1ILPJMvJMynM/vyjbeh99S5fold5V4PtTzUA=)
                          7: 39352e3136392e3138362e302f32342d3234203d3e203331313033.roa (hash: az9XmcJkBqWPeM9SkwIUOpvQgtsOMzMmDzHJH6fuDM0=)
                          8: 39352e3136392e3138382e302f32342d3234203d3e203331313033.roa (hash: 226MZdY+a2f6nMwQHLZZRp09daRbMnARjilQ0DMiCn8=)
                          9: 36322e3134312e36302e302f32332d3234203d3e203331313033.roa (hash: 7hC/7buJ7T5t4OgZLWTNq+9WScksNQKydBgZ1vBlVgM=)
                          10: 39352e3136392e3136372e302f32342d3234203d3e203239383032.roa (hash: qly1Jd5CoWKjMKUUuUOiYM/Zs/B2R5A4Q72Ibqsr/4o=)
                          11: 39352e3136392e3136322e302f32342d3234203d3e203136323736.roa (hash: G1kdCGTSUOwnfRZQYq0i/0wxHKbpQYDdINBFkzmlRsw=)
                          12: 39352e3136392e3136382e302f32342d3234203d3e20313432313436.roa (hash: /RLbW4auKS2K3rv8HhDP+gP154Hco62R6zxtZ7i34qM=)
                          13: 39352e3136392e3136332e302f32342d3234203d3e2035303635.roa (hash: 3xqnEjRyTSra4EruGtCCDXREoEbIM2WrXuK5JAJ8sEo=)
                          14: 39352e3136392e3136302e302f32342d3234203d3e203331313033.roa (hash: 8vr1ZciHAkne0/U9xo8m/EZoMXPqvddsbCNMYo8K6Lc=)
                          15: 39352e3136392e3137302e302f32342d3234203d3e203239303134.roa (hash: 2241pWO+OaijNOXHiReQmtgqIszge6N3EI0Rcc6SvX0=)
                          16: 323030313a316236303a3a2f32392d3239203d3e203331313033.roa (hash: 43AsOxL4a9I10GSthDJXGbWZWADf4GGnRt4Iz5iDl5w=)
                          17: 39352e3136392e3138372e302f32342d3234203d3e203331313033.roa (hash: dHsnX5zrNfbVbo8Cz+W65wQOwbUxto43yjszc9VCH0Y=)
                          18: 38372e3131382e36342e302f31382d3234203d3e203331313033.roa (hash: 5FgGKvGyM0+sTnRzeGibD3YbS14Xm/BeG3m9Kf1UjW8=)
                          19: 39352e3136392e3137382e302f32342d3234203d3e203239383032.roa (hash: M1zdBr3dkuSPfBlr5N8fCga3HKwLGAVwQfjNqW+G7yU=)
                          20: 39352e3136392e3137392e302f32342d3234203d3e203239303636.roa (hash: yywcvcHzn7dSwO3+wHqBp+CW/a8ZhBlrFbEf1UnM8Hk=)
                          21: 3231372e3131342e3230382e302f32302d3234203d3e203331313033.roa (hash: gr03GWP2J+mWH8BIdz3eIQefsBxaCm+3XV9JFI2iBPA=)
                          22: 39352e3136392e3136312e302f32342d3234203d3e203331313033.roa (hash: rRQabZUtw+9d+Hzia7uZvMYxU4nKdcUZLHQ401GlyDU=)
                          23: 39352e3136392e3137312e302f32342d3234203d3e203239303636.roa (hash: 21lAGTMtlp02tGYNtgPFkN8EZsIZjuO0nYo5r8q+krI=)
                          24: 39352e3136392e3139302e302f32332d3233203d3e203331313033.roa (hash: 2jXLpNlhiNv8gkIUwXJmLyEMC56nKRQgI4gcz2G4bN0=)
                          25: 36322e3134312e35362e302f32322d3234203d3e203331313033.roa (hash: f2uzGttju8CJhu3pIUGxsulMOt6+VibQadUSWlj55ZA=)
                          26: 39352e3136392e3136372e302f32342d3234203d3e203631333137.roa (hash: o1Z1gv8qcijmlxmof6KbMPtO3/EITyA/CsYVvnx8Ko0=)
                          27: 39352e3136392e3136352e302f32342d3234203d3e20323032363536.roa (hash: MwcWvE4WCmvGMd3cq5xCPLkZoVatjpgb3XxyMDoeg3E=)
                          28: 39352e3136392e3136392e302f32342d3234203d3e203331313033.roa (hash: I82uo/QE6Wy3PHz0iuior83bbmdz5PrUnUTfAbS8VFk=)
                          29: 39352e3136392e3136362e302f32342d3234203d3e203633313530.roa (hash: ljBCipU/L6umRbNZL3Yvl01GVvFtdwKZQEQ9yUdxVd4=)
                          30: 39352e3136392e3136342e302f32342d3234203d3e203136313235.roa (hash: XtnU9KDRGcbexVufC4oH8FT4TIzcC+lGx8G64PxSKos=)
                          31: 39352e3136392e3137362e302f32342d3234203d3e203631333137.roa (hash: LF3Qt516rCvmBJenhsc1+JrkzXOx4CnXdZEvvGLMG0Q=)
                          32: 38342e31392e3136372e302f32342d3234203d3e203234363736.roa (hash: FYEhChjAyd1UkfUwByrWyN0Prn/fBZBaiIbFOq50qRA=)
                          33: 39352e3136392e3138322e302f32342d3234203d3e203331313033.roa (hash: MIFV8cJ9qNpMecIFeReLvKdqknaaeAVxdEuriaz+uNo=)
                          34: 38342e31392e3136302e302f31392d3234203d3e203331313033.roa (hash: mmfL5qVgg4KaXtsVE7F7YcQcdDAu4pHAKwG2SsIvh8s=)
                          35: 39352e3136392e3138302e302f32342d3234203d3e20323632323837.roa (hash: 1SALJGfmF6NqHKmUbt17HuIUKoud9YuQsBDbKhdURqw=)
                          36: 36322e3134312e36332e302f32342d3234203d3e2039333034.roa (hash: 8UNVBIgCV5RhXsK6cBrETcMUrb8ewxJdVYkatZFSQ+A=)
                          37: 36322e3134312e36322e302f32342d3234203d3e20323132323338.roa (hash: PPNA7P9CiS8XJH4Q/EvsAC++fdcMz/hUQFup/n6n6/8=)
                          38: 39352e3136392e3137322e302f32342d3234203d3e203239303134.roa (hash: fu5YPIcFLuW37Io8xo7nb5mt6DlCGs1UK7Hlj43JIf4=)
                          39: 39352e3136392e3137342e302f32342d3234203d3e203233383635.roa (hash: 6C7EpoIa4qwrnIHVXpHOXoM5luAbkYvf9J9q1AYwG/E=)
                          40: 39352e3136392e3138392e302f32342d3234203d3e203331313033.roa (hash: GOon70I5uhhs/nnQp16QL9ir1jKCr0nAP5fOjpanC0o=)
                          41: 39352e3136392e3137352e302f32342d3234203d3e20323133333139.roa (hash: 0RBZ/mU01xCDKSKWtmVbzc8O8NAjvYbVNwan87PBgvk=)
                          42: 36322e3134312e34382e302f32312d3234203d3e203331313033.roa (hash: Eoqc9k3Yv1UQaUFZuo0jARSDnM1xTkUtiaDPuATQups=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d3:e2:4c:27:e8:9c:66:fe:93:db:7f:04:76:99:cf:bd:76:53:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
        Validity
            Not Before: Jun 28 17:24:10 2025 GMT
            Not After : Jun 29 19:46:10 2025 GMT
        Subject: CN=08A4E71B14E58FD59841EC2F5394B8173CD9C283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:85:1c:2a:1b:1f:44:2e:a8:00:73:5f:97:35:
                    d8:43:05:38:ff:e3:40:08:6f:0f:bc:56:e1:e2:79:
                    e7:d6:b2:4d:49:5e:45:15:6e:1d:1d:51:d6:ab:94:
                    c2:38:8d:a8:d4:a0:14:cd:35:9e:a1:a3:6e:5a:b2:
                    bc:54:61:7a:a2:43:60:5b:8a:6f:d4:0d:bf:77:6a:
                    2a:34:30:37:5f:a5:c5:48:91:0b:c7:95:cf:bb:3a:
                    94:0a:d8:56:0d:74:37:e8:2f:52:66:1f:60:96:62:
                    2b:0e:e5:c5:cd:bf:27:41:7f:84:b9:a6:52:33:46:
                    c0:ab:b8:6c:6c:93:53:4d:43:3c:fe:cd:13:88:00:
                    fc:9a:d3:22:ba:11:2e:97:69:f6:57:72:be:8a:15:
                    fd:a6:a3:ac:f9:e8:86:e9:de:c0:08:a1:b4:94:81:
                    ae:49:92:35:76:87:2c:3b:d3:99:3f:5a:15:84:13:
                    0d:48:51:d8:e1:6c:77:f4:03:01:75:fe:8b:5a:06:
                    b6:f4:94:ee:ae:d6:36:42:ee:bc:9b:72:b3:ec:28:
                    a5:47:92:f7:91:78:7e:14:17:05:a3:ff:21:73:41:
                    88:67:5e:35:1c:02:7a:65:f3:73:8a:d1:ce:d1:44:
                    d6:c7:73:b0:8f:2c:08:10:a0:b4:ef:2f:1b:9a:77:
                    0e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A4:E7:1B:14:E5:8F:D5:98:41:EC:2F:53:94:B8:17:3C:D9:C2:83
            X509v3 Authority Key Identifier:
                keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ad:95:1e:2b:36:96:cc:be:d5:63:7f:5b:7b:3d:fc:87:ac:
         d0:06:af:ff:a2:65:40:e0:c9:9a:43:20:62:6d:45:9b:c6:c3:
         28:b2:92:af:bb:54:eb:29:aa:5e:31:d3:fe:0c:ae:b7:2b:a6:
         b3:a6:09:3c:61:98:90:74:0d:fd:f0:fc:01:ca:f6:13:c6:18:
         42:74:76:e0:e4:2c:9c:99:fd:4d:9c:b8:5f:04:4d:8d:8b:5d:
         48:8c:56:53:9e:34:75:93:ba:25:92:69:75:72:40:a9:96:cf:
         b3:ae:45:16:8d:e1:22:f4:8c:68:d4:46:28:7f:28:26:92:fc:
         7d:42:6c:3a:f7:22:32:56:70:78:7c:02:df:92:3c:f8:a8:37:
         f9:58:98:40:5e:54:c1:62:55:a0:23:65:1c:52:00:fd:83:12:
         35:f4:63:2c:56:43:84:cb:11:fb:88:e1:f3:5e:8b:ad:2e:a1:
         67:e5:bd:20:0f:7b:27:72:95:56:1e:8b:9c:74:68:13:c0:16:
         9b:2e:f8:c7:5a:af:13:ac:18:18:5c:ed:5b:d3:a4:cb:cb:d3:
         6e:c4:c0:74:98:35:e5:b8:b5:7c:f0:63:58:f5:31:61:a8:f4:
         eb:02:94:62:be:f2:25:d9:d2:9e:ad:d1:36:73:4e:e1:c4:e0:
         45:8d:d8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:13:50 2025 by rpki-client