Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
File:                     20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json)
Hash identifier:          XzTuQWKUgZxsZdX7ldtmW5w4O+S5Ku+/C1zEpe/ovVQ=
Subject key identifier:   81:F3:F6:E2:9C:45:78:B6:6C:EE:F5:D6:F3:46:9A:45:AD:65:B7:86
Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6
Certificate issuer:       /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
Certificate serial:       445DBB831D47857725439857FFFFC1C4B50015A9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
Manifest number:          01CE
Signing time:             Wed 23 Jul 2025 19:47:59 +0000
Manifest this update:     Wed 23 Jul 2025 19:42:59 +0000
Manifest next update:     Thu 24 Jul 2025 21:44:59 +0000
Files and hashes:         1: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: TNC4zrNVSYq6rg1HfzOLsFNL5cW5pcjjIopBseDA51Y=)
                          2: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: DO5U+zbxAW9dCHHkG8v0O5pLZTi9rHV+80EYsqI00GY=)
                          3: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: U8fXRRyT8emRE+fVUuy2ekIUYzd/0os3T2/COS8ejYg=)
                          4: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: OQ7t66qqSQJePEMuqhE9NaZdRZDZ+/nL8NC0nJy2djA=)
                          5: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: SsdW0YpcJfef7CtWvRhhfCUEgjAhSHqFG1h0ACBR214=)
                          6: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: LZc2AksEahD5rzoxMFxve6nJwmwqwYYZ+BLhaadaDDA=)
                          7: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: ZnCFtDlyKKIKHxL+mnWSwMiKEny7fbonjbSjngpcz7c=)
                          8: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: xL09RaMvNnk3zcTxJYCpyR11r2WfajekNMt0OPCzbqM=)
                          9: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: NfdCiPZo2V7z2IR8DOEcP9s1WlT0wPdEK10WCc6hh18=)
                          10: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: R+o6n+RjWkxiRu/ckQJHanWEp0DumqtvHG3oGP82QQ8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5d:bb:83:1d:47:85:77:25:43:98:57:ff:ff:c1:c4:b5:00:15:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
        Validity
            Not Before: Jul 23 19:42:59 2025 GMT
            Not After : Jul 24 21:44:59 2025 GMT
        Subject: CN=81F3F6E29C4578B66CEEF5D6F3469A45AD65B786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:78:f8:22:25:8a:d6:c3:b2:f6:29:3f:f4:
                    64:9c:5b:3a:0f:19:47:53:98:f2:d9:20:f2:e2:3a:
                    6f:0e:a6:4a:01:0f:46:bc:2d:20:3f:c6:3a:bb:77:
                    2d:04:68:31:89:b9:2e:7f:68:83:c6:34:fe:81:b2:
                    7b:06:08:dc:25:ec:a0:bb:47:2f:f1:51:a3:5e:35:
                    44:fd:9c:cc:75:af:4d:de:5e:aa:e1:54:23:d3:e1:
                    15:a8:7a:c3:9c:95:6e:d3:9a:0c:a0:7e:59:1e:27:
                    9a:0e:14:99:bd:9a:37:7e:ed:ff:39:da:5f:39:2e:
                    54:de:86:c2:c8:2b:dc:77:be:df:8c:e4:f3:94:3d:
                    8d:a6:49:94:e5:dc:9b:da:6d:ba:b7:62:d4:d8:1e:
                    ba:97:f2:57:24:2a:8d:dd:01:14:79:00:dc:7c:06:
                    b8:71:b0:aa:0b:92:82:ba:68:36:c0:c5:c6:0c:12:
                    b8:66:26:f0:ff:18:50:f5:77:0e:07:a2:05:06:a4:
                    59:ec:70:65:e0:da:5d:c5:e4:b9:aa:dd:b0:81:09:
                    91:f4:71:0e:df:4d:96:60:b7:76:03:b7:3b:99:61:
                    2d:ac:0a:91:84:72:c1:58:fc:6d:45:73:2c:5c:06:
                    98:0c:fe:08:22:b7:b9:ca:11:e8:f9:61:c6:19:e5:
                    69:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F3:F6:E2:9C:45:78:B6:6C:EE:F5:D6:F3:46:9A:45:AD:65:B7:86
            X509v3 Authority Key Identifier:
                keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:43:fd:e9:0d:5d:cc:8d:8f:cf:c5:65:d1:df:8b:c0:fa:b8:
         41:49:d9:2d:af:f7:63:21:77:6a:5f:ca:d7:0f:cf:39:8b:ab:
         de:63:26:e7:97:ee:d2:5f:ca:92:b7:f1:4d:c4:ba:e6:ea:39:
         90:19:3a:59:91:47:88:1c:f5:6f:cd:d1:bc:22:98:12:9f:2b:
         92:ef:37:c0:fe:d4:22:61:87:51:13:8a:67:e2:fd:e9:bc:a6:
         c2:a2:cf:b1:69:33:90:a3:6d:ba:47:30:08:c9:55:b8:bf:31:
         44:03:35:7a:51:fc:f2:f8:8f:c8:6b:6a:d3:12:40:8e:bf:e5:
         02:ed:4e:bf:95:7a:08:50:0c:86:83:40:4a:30:05:d4:1b:c6:
         b7:49:61:67:be:06:9d:6a:7c:6b:78:d7:e0:7e:80:e3:54:d5:
         f4:a0:b8:19:14:2c:a4:9f:14:94:e1:b1:1f:f7:df:cf:75:33:
         da:08:e6:fd:ac:b4:d2:59:97:4d:53:0e:92:3f:c7:d6:6c:f4:
         1d:bb:f4:26:9c:c6:ef:cb:5d:6a:89:a9:0a:57:7f:f7:8d:15:
         70:60:af:a0:c9:87:a1:5c:bb:26:40:c6:12:6e:c5:3e:68:31:
         58:81:c6:bf:0c:0d:9d:6d:a7:19:17:85:3b:fc:6f:99:6a:9f:
         df:bd:e4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 04:54:23 2025 by rpki-client