Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
File:                     0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft (raw, json)
Hash identifier:          wDCocVK+azZ/4brnwdL9PpcIGLK8AuSOgDCuE6Cca/Q=
Subject key identifier:   A7:F4:8F:A7:A7:43:60:E1:71:E8:F1:3F:25:D0:1A:73:DF:CC:9C:E3
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Certificate issuer:       /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial:       463C2E15D16F95BCE8E57AB40FDEEC0A678FCA16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
Manifest number:          0140
Signing time:             Fri 25 Jul 2025 09:12:06 +0000
Manifest this update:     Fri 25 Jul 2025 09:07:06 +0000
Manifest next update:     Sat 26 Jul 2025 11:12:06 +0000
Files and hashes:         1: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl (hash: WSscCCguLIM1euW37i9IbV4Hm6fDR/8JdCtokt9HRVs=)
                          2: 38352e3131372e3233302e302f32342d3234203d3e2035303635.roa (hash: 8/mMTd8OI6hx+rEazKaA5i9flVTt9So8wwSfFF6xpVo=)
                          3: 38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa (hash: ohyXGo6Fwg3029u2hdROae+jQf4VI2skgvLUXH3jI8w=)
                          4: 3139342e33342e3235342e302f32342d3234203d3e20313532363732.roa (hash: hKPfS0qlA4vPTLhw9nwXVGJzFe2/vcx6+01rQ/Eesqo=)
                          5: 3138352e3231332e3235312e302f32342d3234203d3e203632323430.roa (hash: r8RD1SHQl6OybEgdZXTaDzaRDBKJoFWuS6Yc77FVHmo=)
                          6: 3139342e33342e3235352e302f32342d3234203d3e20383334.roa (hash: 9Nay8jCVOB7MKBbd6t/oX++dJQIYhzLuqo54ZgkMc3E=)
                          7: 38352e3131372e3232382e302f32342d3234203d3e20323135303236.roa (hash: WUrbTcKV2+qO0uflme+Vda37GmhrcRAgBhkN6Ok9SGQ=)
                          8: 3138352e3231332e3235302e302f32342d3234203d3e20323132323338.roa (hash: ygSJr7gJnzCgddZdASy6lFYbTZobnImgktqUZvda03k=)
                          9: 3139342e33342e3235332e302f32342d3234203d3e2035303635.roa (hash: tD+eYvXQsGkCcpnz6s7EBRYpOf8Iu4vdb3Qy27wUI6g=)
                          10: 3138352e3231332e3234382e302f32342d3234203d3e203136323736.roa (hash: YVFopn7jbA0T8pFEsoI9hYTL9xS+8ZrOGuFkjL/rBgk=)
                          11: 3138352e3231332e3234392e302f32342d3234203d3e20343030393039.roa (hash: 4O3foUV7f18NUYJQaeBYgK+aW1lr+7o+ea8CcQjVzCw=)
                          12: 38352e3131372e3232392e302f32342d3234203d3e20323132323338.roa (hash: qWG9h0hKE/+rc67V6b0QtNqJKNBV/dmrN+3owun/5GY=)
                          13: 3139342e33342e3235322e302f32342d3234203d3e20313335343032.roa (hash: PzY2ZjUPUkaqIDtZu9fHD0rPK6Exx+TMbdxcEJS1upA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 11:12:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:3c:2e:15:d1:6f:95:bc:e8:e5:7a:b4:0f:de:ec:0a:67:8f:ca:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
        Validity
            Not Before: Jul 25 09:07:06 2025 GMT
            Not After : Jul 26 11:12:06 2025 GMT
        Subject: CN=A7F48FA7A74360E171E8F13F25D01A73DFCC9CE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3e:1d:96:b8:0d:ba:a5:ac:71:45:ea:43:1b:
                    cb:10:86:c3:6a:88:8c:0f:5d:6f:2b:22:7c:df:c4:
                    2b:5a:d9:c3:7d:92:96:54:74:f4:4f:dd:92:e7:b2:
                    8d:ac:ca:5b:e6:fc:c8:24:a4:98:65:43:03:64:c8:
                    93:f8:05:96:25:67:61:05:b2:6e:e4:05:99:0f:47:
                    12:30:8b:3f:5d:50:de:ff:bd:63:73:09:22:52:2d:
                    ca:f2:38:ba:87:52:e1:81:2a:e1:96:37:66:f1:38:
                    19:79:90:e6:9b:06:1a:c7:c9:8a:d1:4d:61:86:bb:
                    47:4c:b7:1d:3a:c6:7b:c1:2f:be:c5:22:28:76:70:
                    fa:b1:25:f8:37:34:06:b9:13:f6:5a:aa:d9:52:fa:
                    bf:e6:37:36:f1:72:af:7e:4b:d4:d9:19:32:ac:2c:
                    06:65:a1:f3:65:b4:cd:35:55:88:f2:60:d1:86:3e:
                    62:6c:20:d8:a5:cd:ca:7f:15:23:8f:74:04:2e:a2:
                    56:d3:98:2f:a0:0b:68:d8:0c:5b:ab:44:f7:ba:67:
                    48:ba:26:fd:53:fb:70:2f:1c:52:17:b9:6e:b3:51:
                    d8:4a:71:d3:ff:21:a7:45:f9:f9:71:35:87:3f:24:
                    4f:62:a1:00:79:24:03:de:ef:a5:50:94:31:64:14:
                    71:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F4:8F:A7:A7:43:60:E1:71:E8:F1:3F:25:D0:1A:73:DF:CC:9C:E3
            X509v3 Authority Key Identifier:
                keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e4:1d:f3:6f:20:07:ee:d7:22:e9:02:f5:40:65:06:15:4e:
         b6:ea:80:d6:7d:49:4c:bc:2b:7f:fc:12:ee:cb:f2:80:fe:cb:
         3c:fe:ed:3d:fb:4e:99:c7:66:be:1d:75:45:29:ea:ea:7d:03:
         b1:60:47:7c:99:4b:b2:a6:47:55:f4:e2:39:e1:ac:e5:1d:52:
         2f:31:39:7d:d6:23:e5:f4:92:6f:f1:dc:09:8c:29:11:07:a1:
         29:a1:2d:fe:4f:d4:91:1c:e6:44:52:b5:84:09:7f:ba:e5:09:
         35:2d:1f:28:b1:74:d4:76:5b:d0:6b:15:79:87:fd:fe:0d:fb:
         ed:c2:37:24:2f:d0:e3:fa:1c:c9:f4:f6:34:6c:0c:7f:20:b5:
         8b:db:29:8d:b9:e4:6c:51:04:9d:89:97:b8:4e:04:64:2b:6b:
         70:5a:e4:a7:91:a6:56:93:09:a3:51:24:83:28:19:23:e9:01:
         b9:60:60:aa:d6:a8:a3:5b:4c:e8:fa:31:21:7b:19:42:9e:07:
         c8:4f:68:d9:fc:0c:8c:b6:d0:26:1d:d9:d4:97:b4:7c:d7:01:
         8a:29:e6:e6:ea:68:8d:58:86:36:7f:7a:1b:8d:55:4a:62:bd:
         68:36:b1:95:cd:a0:9e:83:76:bf:6a:c0:8b:3e:f0:0d:46:07:
         db:07:19:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:50:35 2025 by rpki-client