Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft
File:                     0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json)
Hash identifier:          suiEJToV+ARpMwl9xiPiKiEP4Z6RM6kHf90CHWh3x8k=
Subject key identifier:   CA:EA:E7:B1:ED:4F:B3:AA:CE:7E:2B:56:DC:CE:BE:81:58:FE:3E:11
Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9
Certificate issuer:       /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9
Certificate serial:       0F7F975E31C0A4369A2930C51763EE34A75016C2
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft
Manifest number:          18
Signing time:             Mon 21 Jul 2025 22:58:05 +0000
Manifest this update:     Mon 21 Jul 2025 22:53:05 +0000
Manifest next update:     Wed 23 Jul 2025 00:18:05 +0000
Files and hashes:         1: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: PoxwFIHy8kdey2mlHnL1hmx4hhF1/GhCPxY1mv6kDWE=)
                          2: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: mDLJOsWqCdeSFfrLOqO3IAvw+mSsPERsFGDnd4QsqGI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:18:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:7f:97:5e:31:c0:a4:36:9a:29:30:c5:17:63:ee:34:a7:50:16:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9
        Validity
            Not Before: Jul 21 22:53:05 2025 GMT
            Not After : Jul 23 00:18:05 2025 GMT
        Subject: CN=CAEAE7B1ED4FB3AACE7E2B56DCCEBE8158FE3E11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:1a:65:6c:e3:5d:b8:32:54:46:b2:3e:0d:5c:
                    73:7a:1b:1a:5c:86:73:0f:f3:86:95:fa:9a:05:f3:
                    86:21:1e:96:1c:f9:c0:40:91:25:c5:e0:fc:1c:02:
                    e7:38:c3:df:b8:51:91:53:8e:b5:14:6d:56:de:8d:
                    43:dd:1d:c6:96:35:4c:e9:72:56:a4:01:2c:5d:0e:
                    4a:a5:4b:f8:ef:98:6a:b8:dd:25:5e:da:a1:c3:52:
                    7d:8a:5c:cd:c8:c6:12:63:64:72:95:fc:3a:d9:39:
                    1d:46:e2:09:af:13:b2:e4:ef:e4:ba:0b:06:94:e8:
                    07:58:37:24:fc:f8:bc:fd:d9:0a:95:76:10:43:81:
                    2f:e3:79:ec:aa:b8:69:4e:02:d8:dd:f7:96:6f:b8:
                    e7:82:d1:1c:c1:ae:6a:1e:bb:c1:fa:60:15:78:95:
                    eb:a3:3c:69:31:71:f1:81:e6:7e:00:83:10:37:32:
                    89:4e:36:ff:c6:cc:9b:73:0c:34:9e:90:f2:36:56:
                    11:09:9f:5a:16:98:ae:ed:e7:1c:75:1a:6e:73:d1:
                    e6:0e:a9:3d:3e:88:17:de:11:e5:88:f4:93:25:84:
                    f4:7b:9e:31:13:17:d1:17:9d:bc:49:18:fa:be:58:
                    38:43:ee:91:3f:25:ca:f9:61:d2:31:73:42:b1:fe:
                    78:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EA:E7:B1:ED:4F:B3:AA:CE:7E:2B:56:DC:CE:BE:81:58:FE:3E:11
            X509v3 Authority Key Identifier:
                keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:2a:a6:21:80:10:a3:6c:66:83:d1:4e:4e:e7:55:91:9d:5b:
         38:43:e5:b8:da:00:27:54:9a:44:fe:ab:c6:89:25:ed:75:8e:
         e3:8f:3a:98:03:5a:c4:29:9c:12:fe:10:ea:74:e0:e9:d4:f1:
         c3:67:3e:94:1f:00:b7:7f:99:d2:c9:49:45:5a:2f:52:c6:8b:
         f0:d7:5f:4b:9d:98:09:e4:ac:0b:bf:65:c9:4d:81:bf:9b:ce:
         d2:8d:ab:10:f6:59:a9:2d:04:05:da:86:bc:3d:3f:2a:f5:cb:
         c6:af:a7:df:e9:13:29:7d:d8:fa:74:b1:0e:dd:bb:6b:1b:6f:
         21:9d:55:cd:38:32:64:f4:c6:09:0c:53:a2:1e:bb:2d:04:3b:
         5d:2f:6f:60:bb:da:5d:a9:9f:e1:c5:9d:0b:fb:6d:00:16:4f:
         e9:e1:ac:d5:9a:99:34:7a:0f:1f:c3:8b:a0:71:44:71:74:83:
         0c:ea:6a:87:2f:3b:17:3c:f6:70:e2:49:22:2c:a3:84:83:a0:
         2f:24:7d:6f:49:d4:6e:7d:94:c5:04:03:3b:5a:b3:80:a2:4c:
         cb:6a:28:5e:cd:aa:56:13:30:43:2c:19:6f:6a:02:98:b7:3d:
         e3:24:75:22:b6:7f:d0:36:19:33:17:f3:65:fd:45:08:93:bd:
         f2:70:27:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:52:23 2025 by rpki-client