Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
File:                     F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json)
Hash identifier:          nLA3p/NugwAn1hcUlqoBlcMLWP+D62+b0pI8LBoiJhY=
Subject key identifier:   29:8B:38:FD:D4:C8:AD:BC:DF:9A:B6:78:88:DC:B7:27:86:70:2E:C4
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Certificate issuer:       /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial:       4AC7FE79FCFF9362D836266513E032E3B7E86618
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
Manifest number:          011C
Signing time:             Fri 25 Jul 2025 00:00:03 +0000
Manifest this update:     Thu 24 Jul 2025 23:55:03 +0000
Manifest next update:     Sat 26 Jul 2025 01:11:03 +0000
Files and hashes:         1: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: Ej1HuQzuhYe60A2HNErPZLUdfpH5EaYPpZ+PpBEwVxY=)
                          2: 3130392e3233342e3230382e302f32342d3234203d3e2039323332.roa (hash: 5NSQUssnpHxq31TditVRCOjbCirLEcMHfF76GuFM7co=)
                          3: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: 6TrR9eiRNzBfJRrubefTFudn86wqW7t6u+0cIxHNR5g=)
                          4: 352e3232362e3138362e302f32342d3234203d3e203633303233.roa (hash: kysMqqfL+cxQFiZ9hx+MYhVVLOWVsGxNP3RzuLn0/y4=)
                          5: 3137382e3133322e3139362e302f32342d3234203d3e203432383331.roa (hash: rMB7/8cyQIx/9c3HD2ZadKHLx3HKQvyXwwaVPb+xesA=)
                          6: 3137382e3133322e3139352e302f32342d3234203d3e20313335333931.roa (hash: RVvsf+GbQ+gvRF/WRSFeBmTdyh0atmXnd8DAVmdlYaw=)
                          7: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: g03b1IthT7R6emRcKoovUUAfL6xJm+JexZ6oxCLs8E4=)
                          8: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: nP11m2D/zuxQGU9mMFEkv28oFMcCungg83CCu/a4KbE=)
                          9: 3130392e3233342e3231322e302f32342d3234203d3e2039333034.roa (hash: E1rTwoIvXUNDaM0STfVaIqf1sVvsAgpb9o5+zj/sF4M=)
                          10: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: 7XlPdZ+5k5dznfPMoT3Ni5uRfyL41Likgo5fplEaDTA=)
                          11: 352e3232362e3139302e302f32342d3234203d3e203239383032.roa (hash: IcG7713dyebDFbZHRU+x1BJJOLqYlSEgaSMS202odCw=)
                          12: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: xGDSj9rMMdhGkci1rj9QS/c2p6IRznTgPF56svMZjZY=)
                          13: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: 4qmNKGx6VCIK53hbSqHwJPgKKMACqFJu608tkfoDU90=)
                          14: 3130392e3233342e3231342e302f32342d3234203d3e203632323430.roa (hash: yJVBSNvtQsHe0PNYzL5JRIv242s6ICu9PWhfIuLAOZQ=)
                          15: 3137382e3133322e3139342e302f32342d3234203d3e2033333230.roa (hash: fQsEWjsrThcFlJLP0H4ir/IvOeNDAQWZ1RZpyw7wV08=)
                          16: 3137382e3133322e3139332e302f32342d3234203d3e2033333230.roa (hash: oI+z5B0JaicbPoA0ktNCShJBGRgRTGuhGcC7A8+Ru9U=)
                          17: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: UAeHXbW3QhFNKys+iIRYQQp2rK+CbLJVmAbT44zmQ1k=)
                          18: 352e3232362e3138372e302f32342d3234203d3e2039323332.roa (hash: L10rHUQX4TGH4LKEy8+xW98uNY8br3AyCv26QQGltu4=)
                          19: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: UgtgsSF4DmUx+FqAs5WV6TWI9fyKhqfkEeJgaHpzYEc=)
                          20: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: XdAkV6zbkuI1AZDLksTC73fyYmD1RaBTy+I3AGFuaxA=)
                          21: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: uhM+/0v8HioS/qE+KkDqR673YS11oQr5aznZkyp/yx4=)
                          22: 352e3232362e3138392e302f32342d3234203d3e2039333034.roa (hash: KMYDoKnPWH3TUSOlAA/wzDsC66Y3O5PlUt+i9WMB8YA=)
                          23: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: 0XlqzvD5WZeVhzrMIb+ArV6j60KVoqxW88qIB/mg2yk=)
                          24: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 5LOGXsAFfY8MpN+3dgrjf5uTyIh00nk/J0/MSXxVmy4=)
                          25: 3137382e3133322e3139372e302f32342d3234203d3e2033333230.roa (hash: MuzLKtyseOT68ju0FOjjeN3pxilqG43fi3IvFyF1hyA=)
                          26: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: pWCIuSrDYwp+tan25QY6TeO9jMNRWP/W0zj94P0620Y=)
                          27: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: nFzeEleWTSIYtIbjgNdPg9c+CwbgHF8u+W2VGtxEBpQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 22:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c7:fe:79:fc:ff:93:62:d8:36:26:65:13:e0:32:e3:b7:e8:66:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
        Validity
            Not Before: Jul 24 23:55:03 2025 GMT
            Not After : Jul 26 01:11:03 2025 GMT
        Subject: CN=298B38FDD4C8ADBCDF9AB67888DCB72786702EC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8c:64:0b:e7:0e:2a:31:ca:2b:db:43:0e:ce:
                    95:bc:f1:3f:4f:f7:87:9e:91:65:d5:06:7f:bf:36:
                    17:eb:a0:9b:5a:f7:37:e7:b3:23:38:8f:6c:d9:8a:
                    dc:49:c0:82:08:9b:07:00:31:f9:74:a1:74:0d:ae:
                    f3:b7:7f:1d:77:7a:58:67:97:8f:c5:7f:be:ba:90:
                    26:6e:17:53:4b:d1:35:ad:ae:78:1d:e2:ed:bb:a2:
                    86:40:ca:21:78:af:07:9a:5f:4c:c6:b5:46:fb:39:
                    b3:bc:90:8a:36:d4:30:ce:fb:54:ca:70:a4:98:40:
                    f8:55:3b:02:ef:52:04:04:82:22:af:61:d4:ca:9c:
                    fb:23:84:fe:57:fd:af:1f:0a:8b:c6:3b:86:41:71:
                    4f:32:d9:01:e7:22:37:9f:fc:19:10:55:62:17:c0:
                    0c:09:4e:9d:16:c5:e1:c8:21:2d:e9:a9:6a:95:ba:
                    57:e7:10:ba:77:6a:91:29:26:6e:af:ae:28:dd:ff:
                    d9:10:e8:67:de:1d:6f:e3:f4:a0:3b:f7:7e:7a:a7:
                    89:05:3e:13:21:ff:ce:d4:70:c7:37:09:aa:fb:c5:
                    81:e5:fc:ea:71:24:5e:29:f2:3a:35:35:a8:67:96:
                    46:73:b9:6b:74:fa:21:c8:6f:b6:f9:c0:07:50:58:
                    aa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8B:38:FD:D4:C8:AD:BC:DF:9A:B6:78:88:DC:B7:27:86:70:2E:C4
            X509v3 Authority Key Identifier:
                keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:53:63:d0:a2:69:7d:5b:de:cd:7d:df:ec:2b:ac:9a:96:40:
         16:2a:82:a2:ae:d7:3f:eb:e2:ab:fc:e4:e0:83:55:4d:e9:6a:
         10:79:cf:ad:27:d4:f7:fe:a3:d7:28:19:af:6f:d7:ca:ce:85:
         b6:27:24:a1:0b:20:00:9d:cd:16:4d:bf:30:32:08:b6:f7:eb:
         09:36:b8:35:f2:b1:c0:20:01:a8:d4:40:2c:d2:f0:77:86:49:
         85:1c:51:3a:a0:c8:61:a6:14:55:52:e9:ee:ad:00:cf:f4:bb:
         0f:cf:6c:a0:9d:6d:ae:85:68:b5:95:ab:37:a1:5b:b1:65:b0:
         5f:7b:8b:f3:fe:7c:65:e7:6e:d7:6e:dc:a9:49:10:a9:c3:f2:
         42:94:69:1c:ff:af:49:09:b8:dd:64:f8:fa:a9:38:6b:2f:81:
         33:6a:31:f3:86:20:94:24:d5:36:e6:6b:80:b0:42:5a:db:a0:
         fa:1d:03:36:db:00:51:25:78:c9:8c:6c:9e:45:16:3a:dd:cb:
         ca:fe:92:f4:27:5e:eb:b8:98:22:92:85:dd:89:c6:c5:8d:61:
         d3:6a:fb:11:53:a9:cf:95:9f:60:99:e9:fd:e6:af:06:d4:18:
         57:92:c2:e2:af:41:71:65:cc:53:51:00:af:e2:37:8b:06:21:
         22:e6:a9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 04:37:33 2025 by rpki-client