Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
File:                     8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft (raw, json)
Hash identifier:          31AD7NF5TBkSE5T7urxyMUN57DSmxEISM/PsEiULebg=
Subject key identifier:   4F:E5:75:38:13:F5:53:9B:76:C4:D4:3A:60:9F:47:44:64:6B:04:CE
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Certificate issuer:       /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial:       30384EBB69CDF4D3AA35716B71FB3FE990EA5661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
Manifest number:          0259
Signing time:             Thu 24 Jul 2025 19:32:06 +0000
Manifest this update:     Thu 24 Jul 2025 19:27:06 +0000
Manifest next update:     Fri 25 Jul 2025 20:26:06 +0000
Files and hashes:         1: 34352e39352e38322e302f32332d3234203d3e20313734.roa (hash: j5uBx1ZwzePSy8f9EGQJPGu8wElQLvhVLCemoigNpZM=)
                          2: 3138352e3234302e3130362e302f32342d3234203d3e20323134343538.roa (hash: 1BInd1OedKcqXcFEvGswCnCL2u3VREZrv7xXz/oRjOg=)
                          3: 34352e39352e38302e302f32342d3234203d3e203136323736.roa (hash: 3x0cRO+g1bZbRHut+QAG7pwDzd80m15dxHMNduCBIhg=)
                          4: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl (hash: 7EZhl/jPjZND1rWUcrVepK78SbLBX5jwP4GSEcrERXE=)
                          5: 3138352e3234302e3130342e302f32342d3234203d3e20323130353338.roa (hash: T9Q1VqRTWLWUsHiQ8nGpX/B35ktvbCl8rYqsuD5dV38=)
                          6: 3138352e3234302e3130352e302f32342d3234203d3e203431353634.roa (hash: TlWGN33+lROz/SyNNq5fptfqzBonbreTLNbM3qDOA4Q=)
                          7: 3231322e3130332e34342e302f32342d3234203d3e20323133393138.roa (hash: qGJQiTgIvP4Ve1lRuA50bfURyANdu4X5JKcPosVvvQA=)
                          8: 3139332e32342e3233352e302f32342d3234203d3e203630373831.roa (hash: 3IIPnO8jnB/C9bfC+8H124jFOjjxVU8ltj/gUK5jsA4=)
                          9: 3231322e3130332e34342e302f32342d3234203d3e20323131343834.roa (hash: JBx8ym7JHWLmUGZKmy6bIQw3WR5rhPzAi99IbVvWGag=)
                          10: 3139332e32342e3233342e302f32342d3234203d3e20383334.roa (hash: wDn4WvWEnl0ktIwomfuSX0xxTMgnjS6eS37UfP6tuk8=)
                          11: 3138352e3234302e3130372e302f32342d3234203d3e20383334.roa (hash: leKcza5Qs/RyDeK2ErrnhwnHbLnSq2LOSorSLAW6m5c=)
                          12: 3231322e3130332e34352e302f32342d3234203d3e2038303735.roa (hash: fHVIMx8xlYqpN0AXQfWLm0vqOUAEGFXc3sBROHoQyYA=)
                          13: 3231322e3130332e34362e302f32342d3234203d3e203531303832.roa (hash: 2F+hMcxUeRbuMZ154QcBZjgDbx0tCTkT+4d5LpArwfo=)
                          14: 34352e39352e38312e302f32342d3234203d3e203239383032.roa (hash: RSLVUL+AislPXW7KHmpbzgP/rzQAkGuHFrgP4qIPD94=)
                          15: 3231322e3130332e34372e302f32342d3234203d3e203630313137.roa (hash: YdIRouunEJ7v7O6adrWSPqBia6eTO11BexNozDCWbfw=)
                          16: 39312e3139302e3135372e302f32342d3234203d3e20323130383330.roa (hash: uxCs+vRLf89Iqe2Vg3VmQVaqgZcbd6t3ZZRDH3hDvaY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 20:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:38:4e:bb:69:cd:f4:d3:aa:35:71:6b:71:fb:3f:e9:90:ea:56:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
        Validity
            Not Before: Jul 24 19:27:06 2025 GMT
            Not After : Jul 25 20:26:06 2025 GMT
        Subject: CN=4FE5753813F5539B76C4D43A609F4744646B04CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:94:7c:5c:2e:0f:24:7f:de:40:74:85:91:
                    fe:cb:c0:3d:bd:b5:08:67:2d:2d:89:c3:58:78:85:
                    36:50:d4:81:86:27:e4:cd:6e:bb:fb:c5:23:4e:59:
                    2a:c4:87:86:cd:7c:f8:98:c9:d3:94:bb:63:d1:49:
                    b3:db:55:d9:6c:87:c8:93:aa:4c:39:80:a0:4f:19:
                    d2:a0:f7:b5:79:4a:81:83:da:c5:85:65:a4:17:6f:
                    a6:41:7a:d7:c9:a6:36:74:e2:90:18:f3:eb:8a:b7:
                    3a:30:2f:5f:29:7e:75:49:60:0d:71:5b:34:bd:dd:
                    4e:b8:1a:b0:cd:44:6f:71:89:b1:45:25:28:50:c3:
                    b0:d0:75:87:bd:d8:f2:12:d0:4a:2e:d8:77:15:f4:
                    ca:64:d4:0f:92:c2:28:4d:b5:e1:db:cb:3a:56:24:
                    5a:75:d7:2c:cb:fa:6c:e0:21:41:50:e2:80:32:f8:
                    8f:49:8d:f9:18:3c:3c:ff:3a:49:5a:41:4f:3f:3f:
                    1b:9a:ed:d3:6a:b4:32:c8:50:c3:2e:f8:7a:f1:f6:
                    69:fa:10:ad:62:ae:0f:f2:15:b3:36:c8:c2:d9:c1:
                    8f:c2:85:d3:11:70:f8:40:d6:cc:dd:a9:30:dd:0a:
                    10:fd:83:11:fd:3f:d3:2e:17:b0:72:35:ed:45:b6:
                    dc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E5:75:38:13:F5:53:9B:76:C4:D4:3A:60:9F:47:44:64:6B:04:CE
            X509v3 Authority Key Identifier:
                keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:2f:c8:86:73:af:d1:c7:60:68:49:a9:d8:38:40:0c:95:be:
         8d:ad:d3:0b:f8:4e:3b:fa:7b:1f:1e:6e:6f:e9:ea:ea:e1:e3:
         5d:14:3b:44:44:b1:61:db:24:0d:f9:3a:d4:6c:4b:9b:ba:2a:
         62:bf:96:ac:a6:f7:15:7a:47:cd:c3:0c:5f:54:d3:8b:b1:e7:
         a0:7b:41:66:a6:4d:0c:a4:c7:4f:24:96:23:4c:46:9e:5c:44:
         23:69:41:16:31:88:b2:10:a8:b9:2b:b8:8b:5c:e5:2e:e3:b3:
         14:da:5c:4e:aa:4a:de:72:83:bf:7a:11:d1:aa:1a:61:39:34:
         25:3f:cd:50:8d:2d:d0:fa:b3:8f:3f:4b:a2:62:7c:46:11:ec:
         fb:66:d0:15:09:9d:7a:ba:73:91:8b:fa:58:cb:d2:87:ce:72:
         5b:db:fd:e9:89:2f:20:d3:ec:24:bc:b3:2b:da:d3:5f:39:14:
         9f:fa:64:42:39:5a:ca:fd:ce:33:2b:46:26:f5:e9:10:2d:75:
         f1:1c:0a:05:db:9d:ec:da:74:91:5b:13:3d:7f:be:3f:f4:b8:
         1c:4d:6d:1b:0d:28:ed:dc:69:18:4e:2d:99:22:61:55:77:e8:
         4f:f2:37:15:48:40:e0:b2:1a:81:da:16:de:23:81:d2:7a:08:
         fd:3b:4f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 04:31:09 2025 by rpki-client