Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
File:                     A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json)
Hash identifier:          oYvnGIFdD4PyOcDcf0zQ1NkKWx1xfgdbxR8OKms/4Do=
Subject key identifier:   B0:B8:96:69:C4:14:73:A4:FF:C9:C0:66:00:08:78:AF:1B:1E:3F:51
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Certificate issuer:       /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial:       4B58CE7A72AFD1DFB3DFBB6F291C9BEA833E5E5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
Manifest number:          04CC
Signing time:             Mon 21 Jul 2025 19:51:54 +0000
Manifest this update:     Mon 21 Jul 2025 19:46:54 +0000
Manifest next update:     Tue 22 Jul 2025 21:07:54 +0000
Files and hashes:         1: 3134362e3234372e35312e302f32342d3234203d3e203234383531.roa (hash: zRn95fZoa98Dxgk18rTQZPg3Vz861tTnSVUdcy0yTb0=)
                          2: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: y4OGbSGooI8V9euRtHx6jpjRwWGZstdSARXhTQ70Yxg=)
                          3: 3134362e3234372e34382e302f32332d3234203d3e203234383531.roa (hash: CYrx2Q8+pBHAyk1lGd5Mg9MkvR7v5zfpX8Vn/ABu+6Q=)
                          4: 3134362e3234372e35392e302f32342d3234203d3e203234383531.roa (hash: cISB3c/lX6ECxkwGaCM313qUlrkmfGXNHg9Sn5Duu/E=)
                          5: 3134362e3234372e36322e302f32342d3234203d3e203234383531.roa (hash: 3irJhAGcE48vEZNOxKTwKsy4d69RVyIL6ZEClAmlLA0=)
                          6: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: u2d8suvN2Fqva5Wa65KvUkBqwwdtX5ol8XqDkjM3k6M=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Jul 2025 21:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:58:ce:7a:72:af:d1:df:b3:df:bb:6f:29:1c:9b:ea:83:3e:5e:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
        Validity
            Not Before: Jul 21 19:46:54 2025 GMT
            Not After : Jul 22 21:07:54 2025 GMT
        Subject: CN=B0B89669C41473A4FFC9C066000878AF1B1E3F51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0c:76:34:ea:69:5a:cd:9a:ab:49:bb:05:da:
                    51:2f:ff:24:cc:19:e6:21:1d:67:72:c9:46:05:5c:
                    f5:41:28:ad:58:1a:c0:db:ec:1f:72:c5:db:44:69:
                    45:02:b9:4a:94:25:0c:df:1e:f0:f3:b8:62:47:55:
                    6c:5f:28:f6:b4:7f:32:40:00:3a:39:9d:11:90:82:
                    70:bf:54:d2:03:ee:d2:d8:50:fc:4f:42:75:01:13:
                    99:54:c0:20:02:65:fd:02:18:91:fb:c4:b3:b4:ac:
                    8f:f5:ae:ec:64:2b:d1:34:4e:29:e7:ab:61:9a:d0:
                    da:c9:c0:95:a8:4a:fc:77:1e:1a:33:0c:03:c7:58:
                    8c:4a:53:15:5b:1b:da:71:33:e7:56:18:77:88:16:
                    b7:93:e3:9b:7b:6f:84:91:bd:65:17:e2:2d:9f:fa:
                    de:c9:d7:47:cf:6a:51:5a:98:57:ab:d6:8d:c0:e3:
                    07:0f:f9:02:ac:98:11:97:19:0b:63:99:4b:17:9b:
                    9e:d5:51:f1:62:4a:03:4a:bb:28:b1:eb:94:7b:dc:
                    04:80:22:0e:bd:8a:4c:4f:f6:d7:2b:d0:c1:ce:68:
                    48:72:cb:39:cf:46:9b:f0:2c:d0:f3:98:d1:c7:8f:
                    8d:30:71:c9:7e:36:72:05:d7:4a:a7:a7:d9:3c:9e:
                    70:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B8:96:69:C4:14:73:A4:FF:C9:C0:66:00:08:78:AF:1B:1E:3F:51
            X509v3 Authority Key Identifier:
                keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:d1:ed:19:de:ee:28:7a:cd:69:89:2b:3c:bf:e4:b8:3d:14:
         3c:d3:4f:94:64:5d:49:46:74:2f:39:84:4c:d2:06:fd:b8:bd:
         f4:9d:4c:12:2c:78:25:81:85:ec:1f:3b:29:21:74:c4:91:cc:
         5f:b9:5e:4c:13:31:80:ce:8e:68:37:8f:fd:f8:ae:c6:30:68:
         41:26:3e:18:80:79:93:69:84:74:12:20:60:d8:bb:1d:c8:07:
         b4:e1:42:e4:85:3b:8d:b3:77:c6:5e:c5:29:db:07:46:86:3f:
         62:1e:c6:6f:0f:3b:26:d2:49:06:30:b2:a5:57:67:f2:a5:6e:
         74:f5:cc:89:b0:ac:d8:8e:e2:94:aa:07:cf:ff:c3:e9:1d:ab:
         e0:bf:58:57:2a:b0:f2:f8:66:ca:f4:55:f1:d0:5f:f2:18:13:
         b7:34:9d:62:98:65:fe:96:ef:4a:d3:f5:14:39:42:1d:b8:df:
         6c:c2:7f:a2:2f:9d:0a:3e:5e:6d:61:6c:d1:c1:0e:61:af:10:
         12:05:7a:33:73:87:d4:b0:43:32:1f:49:ab:56:43:b4:87:a5:
         48:08:da:20:5d:6b:72:b6:c0:d4:e0:a6:34:a0:b5:f4:28:5e:
         85:8d:90:2f:f0:b0:05:80:ca:78:26:a4:c7:e1:99:78:b6:09:
         f1:ab:cd:71
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUS1jOenKv0d+z37tvKRyb6oM+XlowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZjNTA5YmE0OGU1YjUwNDk0NTcyZTA1YzQ1YzU4ZTdl
MTZkODdmYjAeFw0yNTA3MjExOTQ2NTRaFw0yNTA3MjIyMTA3NTRaMDMxMTAvBgNV
BAMTKEIwQjg5NjY5QzQxNDczQTRGRkM5QzA2NjAwMDg3OEFGMUIxRTNGNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDHY06mlazZqrSbsF2lEv/yTM
GeYhHWdyyUYFXPVBKK1YGsDb7B9yxdtEaUUCuUqUJQzfHvDzuGJHVWxfKPa0fzJA
ADo5nRGQgnC/VNID7tLYUPxPQnUBE5lUwCACZf0CGJH7xLO0rI/1ruxkK9E0Tinn
q2Ga0NrJwJWoSvx3HhozDAPHWIxKUxVbG9pxM+dWGHeIFreT45t7b4SRvWUX4i2f
+t7J10fPalFamFer1o3A4wcP+QKsmBGXGQtjmUsXm57VUfFiSgNKuyix65R73ASA
Ig69ikxP9tcr0MHOaEhyyznPRpvwLNDzmNHHj40wccl+NnIF10qnp9k8nnAtAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUsLiWacQUc6T/ycBmAAh4rxseP1EwHwYDVR0j
BBgwFoAUpsUJukjltQSUVy4FxFxY5+Fth/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYtOTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1
NWM1LzEvQTZDNTA5QkE0OEU1QjUwNDk0NTcyRTA1QzQ1QzU4RTdFMTZEODdGQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3BzVUp1a2psdFFTVVZ5NEZ4RnhZNS1G
dGhfcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzhiYjQ0Ni05
MWMwLTQxMzgtYTMzYS1iNDc4NjVkZTU1YzUvMS9BNkM1MDlCQTQ4RTVCNTA0OTQ1
NzJFMDVDNDVDNThFN0UxNkQ4N0ZCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtHtGd7uKHrNaYkrPL/k
uD0UPNNPlGRdSUZ0LzmETNIG/bi99J1MEix4JYGF7B87KSF0xJHMX7leTBMxgM6O
aDeP/fiuxjBoQSY+GIB5k2mEdBIgYNi7HcgHtOFC5IU7jbN3xl7FKdsHRoY/Yh7G
bw87JtJJBjCypVdn8qVudPXMibCs2I7ilKoHz//D6R2r4L9YVyqw8vhmyvRV8dBf
8hgTtzSdYphl/pbvStP1FDlCHbjfbMJ/oi+dCj5ebWFs0cEOYa8QEgV6M3OH1LBD
Mh9Jq1ZDtIelSAjaIF1rcrbA1OCmNKC19ChehY2QL/CwBYDKeCakx+GZeLYJ8avN
cQ==
-----END CERTIFICATE-----
Generated at Tue Jul 22 11:48:52 2025 by rpki-client