Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
File:                     20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json)
Hash identifier:          9lD7Q9BwN+qLU3cV/6f60YxgpXpQFqWuBpqVyq9T/cc=
Subject key identifier:   25:9C:CB:DB:75:79:77:DD:36:5C:F8:3B:C3:16:B8:34:42:B6:69:21
Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6
Certificate issuer:       /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
Certificate serial:       09C3F38AC46F4CB345EE4E09D44C521D3EE56520
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
Manifest number:          01CC
Signing time:             Tue 22 Jul 2025 04:42:57 +0000
Manifest this update:     Tue 22 Jul 2025 04:37:57 +0000
Manifest next update:     Wed 23 Jul 2025 07:58:57 +0000
Files and hashes:         1: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: Mt6SLcuCLozr5KAoxUySd8TTGWSW/ZQIIH+jhZWFm4A=)
                          2: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: NfdCiPZo2V7z2IR8DOEcP9s1WlT0wPdEK10WCc6hh18=)
                          3: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: LZc2AksEahD5rzoxMFxve6nJwmwqwYYZ+BLhaadaDDA=)
                          4: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: TNC4zrNVSYq6rg1HfzOLsFNL5cW5pcjjIopBseDA51Y=)
                          5: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: DO5U+zbxAW9dCHHkG8v0O5pLZTi9rHV+80EYsqI00GY=)
                          6: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: xL09RaMvNnk3zcTxJYCpyR11r2WfajekNMt0OPCzbqM=)
                          7: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: R+o6n+RjWkxiRu/ckQJHanWEp0DumqtvHG3oGP82QQ8=)
                          8: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: ZnCFtDlyKKIKHxL+mnWSwMiKEny7fbonjbSjngpcz7c=)
                          9: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: U8fXRRyT8emRE+fVUuy2ekIUYzd/0os3T2/COS8ejYg=)
                          10: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: SsdW0YpcJfef7CtWvRhhfCUEgjAhSHqFG1h0ACBR214=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 07:58:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c3:f3:8a:c4:6f:4c:b3:45:ee:4e:09:d4:4c:52:1d:3e:e5:65:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
        Validity
            Not Before: Jul 22 04:37:57 2025 GMT
            Not After : Jul 23 07:58:57 2025 GMT
        Subject: CN=259CCBDB757977DD365CF83BC316B83442B66921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:03:a3:ec:a3:01:5a:ce:fc:03:6b:a7:14:95:
                    82:4f:b7:e2:a1:4b:6b:9a:c6:2f:54:85:47:75:d0:
                    3a:f5:5a:d8:ae:f5:90:d4:bf:1b:71:d0:a2:e3:27:
                    95:3e:a6:78:a9:3f:e1:db:c4:f8:17:82:38:cf:ed:
                    17:93:64:36:66:e3:aa:9a:d4:ad:84:a9:66:35:4f:
                    c9:7c:1a:9b:71:8f:d3:d0:99:48:7a:ce:d5:2d:40:
                    32:5c:21:9a:62:28:ef:85:83:da:3f:b9:2a:12:bf:
                    cf:1e:34:4e:9d:86:2a:87:8b:34:94:70:be:f6:3c:
                    45:f3:89:33:03:d8:c6:eb:e2:bd:07:32:4c:08:e5:
                    51:81:cf:bc:25:3c:d6:d1:e8:08:34:2a:46:13:12:
                    df:f2:5f:1a:58:df:6d:b9:e3:d9:b1:69:dd:7a:1a:
                    aa:19:2c:2c:65:4e:07:76:70:af:ae:89:71:19:a2:
                    2f:2d:68:af:63:61:cf:cf:08:bc:57:c0:cc:44:0a:
                    b5:0c:5b:5a:bc:9e:67:32:b1:59:91:45:06:48:80:
                    e1:f9:a5:2c:c5:34:e4:cb:8a:4d:d4:0d:5c:d6:62:
                    32:ce:bf:85:6c:72:fb:c3:17:79:7d:f2:f1:33:b6:
                    cb:4f:d0:14:70:0a:9b:4a:76:aa:21:ed:b7:14:a3:
                    83:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9C:CB:DB:75:79:77:DD:36:5C:F8:3B:C3:16:B8:34:42:B6:69:21
            X509v3 Authority Key Identifier:
                keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f9:eb:ab:f3:31:66:82:5b:56:42:b4:f0:e5:77:28:c2:43:
         f7:bc:3f:b2:e9:11:fc:5a:12:d2:d2:b5:0f:a5:26:cd:37:b6:
         a4:55:55:23:d4:27:fe:51:f8:f6:8f:f8:12:e7:97:2b:61:85:
         3b:eb:fc:77:08:f6:c1:33:49:b4:0d:79:62:ac:6c:1c:bc:ab:
         28:76:62:42:5c:19:19:19:b9:62:85:df:04:54:26:f7:ab:5c:
         d7:cc:1f:ea:80:9c:01:26:6c:12:ce:c1:ce:aa:00:b5:db:a9:
         fc:90:c7:ed:96:a2:f1:48:81:91:4e:39:0c:db:77:e9:df:1c:
         b7:cd:6c:e7:fb:91:39:d5:a6:ed:8e:1d:47:4d:18:a9:8f:34:
         fa:b6:1c:5a:fd:de:db:41:de:d0:d1:c6:8b:4b:ff:c2:71:d8:
         be:49:34:8d:c4:96:16:d7:3a:eb:5d:bf:bc:d8:33:04:37:97:
         5b:70:f3:03:d8:d4:89:93:4f:ed:09:ae:b8:97:90:9a:48:c9:
         50:dd:1c:1e:2e:97:ac:65:06:22:6d:08:34:10:14:5f:0e:42:
         aa:30:22:40:6d:46:86:76:3c:9c:aa:6c:47:58:4a:f4:28:54:
         ce:e6:ce:29:40:7d:bb:de:92:fd:f4:a9:12:c5:8f:75:62:13:
         50:8d:2b:e4
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUCcPzisRvTLNF7k4J1ExSHT7lZSAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG
NEFCREVDNjAeFw0yNTA3MjIwNDM3NTdaFw0yNTA3MjMwNzU4NTdaMDMxMTAvBgNV
BAMTKDI1OUNDQkRCNzU3OTc3REQzNjVDRjgzQkMzMTZCODM0NDJCNjY5MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeA6PsowFazvwDa6cUlYJPt+Kh
S2uaxi9UhUd10Dr1Wtiu9ZDUvxtx0KLjJ5U+pnipP+HbxPgXgjjP7ReTZDZm46qa
1K2EqWY1T8l8Gptxj9PQmUh6ztUtQDJcIZpiKO+Fg9o/uSoSv88eNE6dhiqHizSU
cL72PEXziTMD2Mbr4r0HMkwI5VGBz7wlPNbR6Ag0KkYTEt/yXxpY322549mxad16
GqoZLCxlTgd2cK+uiXEZoi8taK9jYc/PCLxXwMxECrUMW1q8nmcysVmRRQZIgOH5
pSzFNOTLik3UDVzWYjLOv4VscvvDF3l98vEztstP0BRwCptKdqoh7bcUo4MBAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUJZzL23V5d902XPg7wxa4NEK2aSEwHwYDVR0j
BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm
NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj
N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD
QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD
MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZ+eur
8zFmgltWQrTw5XcowkP3vD+y6RH8WhLS0rUPpSbNN7akVVUj1Cf+Ufj2j/gS55cr
YYU76/x3CPbBM0m0DXlirGwcvKsodmJCXBkZGblihd8EVCb3q1zXzB/qgJwBJmwS
zsHOqgC126n8kMftlqLxSIGRTjkM23fp3xy3zWzn+5E51abtjh1HTRipjzT6thxa
/d7bQd7Q0caLS//Ccdi+STSNxJYW1zrrXb+82DMEN5dbcPMD2NSJk0/tCa64l5Ca
SMlQ3RweLpesZQYibQg0EBRfDkKqMCJAbUaGdjycqmxHWEr0KFTO5s4pQH273pL9
9KkSxY91YhNQjSvk
-----END CERTIFICATE-----
Generated at Tue Jul 22 11:52:51 2025 by rpki-client