Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
File:                     8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft (raw, json)
Hash identifier:          qvAVSldQFQ+3MV+Rqcg40vXim5zh00kGqiQlAGFW79Y=
Subject key identifier:   19:15:C2:19:32:E8:54:41:8C:CE:09:20:65:75:76:F5:78:14:8D:99
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Certificate issuer:       /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial:       25601B419552E13B752445D4F0D5F194B396FF1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
Manifest number:          025A
Signing time:             Fri 25 Jul 2025 12:27:06 +0000
Manifest this update:     Fri 25 Jul 2025 12:22:06 +0000
Manifest next update:     Sat 26 Jul 2025 15:36:06 +0000
Files and hashes:         1: 34352e39352e38322e302f32332d3234203d3e20313734.roa (hash: j5uBx1ZwzePSy8f9EGQJPGu8wElQLvhVLCemoigNpZM=)
                          2: 3231322e3130332e34372e302f32342d3234203d3e203630313137.roa (hash: YdIRouunEJ7v7O6adrWSPqBia6eTO11BexNozDCWbfw=)
                          3: 3231322e3130332e34342e302f32342d3234203d3e20323133393138.roa (hash: qGJQiTgIvP4Ve1lRuA50bfURyANdu4X5JKcPosVvvQA=)
                          4: 34352e39352e38312e302f32342d3234203d3e203239383032.roa (hash: RSLVUL+AislPXW7KHmpbzgP/rzQAkGuHFrgP4qIPD94=)
                          5: 39312e3139302e3135372e302f32342d3234203d3e20323130383330.roa (hash: uxCs+vRLf89Iqe2Vg3VmQVaqgZcbd6t3ZZRDH3hDvaY=)
                          6: 3231322e3130332e34352e302f32342d3234203d3e2038303735.roa (hash: fHVIMx8xlYqpN0AXQfWLm0vqOUAEGFXc3sBROHoQyYA=)
                          7: 3139332e32342e3233352e302f32342d3234203d3e203630373831.roa (hash: 3IIPnO8jnB/C9bfC+8H124jFOjjxVU8ltj/gUK5jsA4=)
                          8: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl (hash: wmK6Tx/LJ4phni+DJ++LS5Hby8YJhDMks3f7LGD87rg=)
                          9: 3231322e3130332e34342e302f32342d3234203d3e20323131343834.roa (hash: JBx8ym7JHWLmUGZKmy6bIQw3WR5rhPzAi99IbVvWGag=)
                          10: 34352e39352e38302e302f32342d3234203d3e203136323736.roa (hash: 3x0cRO+g1bZbRHut+QAG7pwDzd80m15dxHMNduCBIhg=)
                          11: 3138352e3234302e3130352e302f32342d3234203d3e203431353634.roa (hash: TlWGN33+lROz/SyNNq5fptfqzBonbreTLNbM3qDOA4Q=)
                          12: 3139332e32342e3233342e302f32342d3234203d3e20383334.roa (hash: wDn4WvWEnl0ktIwomfuSX0xxTMgnjS6eS37UfP6tuk8=)
                          13: 3138352e3234302e3130372e302f32342d3234203d3e20383334.roa (hash: leKcza5Qs/RyDeK2ErrnhwnHbLnSq2LOSorSLAW6m5c=)
                          14: 3138352e3234302e3130342e302f32342d3234203d3e20323130353338.roa (hash: T9Q1VqRTWLWUsHiQ8nGpX/B35ktvbCl8rYqsuD5dV38=)
                          15: 3231322e3130332e34362e302f32342d3234203d3e203531303832.roa (hash: 2F+hMcxUeRbuMZ154QcBZjgDbx0tCTkT+4d5LpArwfo=)
                          16: 3138352e3234302e3130362e302f32342d3234203d3e20323134343538.roa (hash: 1BInd1OedKcqXcFEvGswCnCL2u3VREZrv7xXz/oRjOg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 15:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:60:1b:41:95:52:e1:3b:75:24:45:d4:f0:d5:f1:94:b3:96:ff:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
        Validity
            Not Before: Jul 25 12:22:06 2025 GMT
            Not After : Jul 26 15:36:06 2025 GMT
        Subject: CN=1915C21932E854418CCE0920657576F578148D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:96:27:2d:b8:99:66:c9:8f:e0:98:e9:df:b1:
                    a6:d7:a0:4f:a4:19:88:b5:8f:7f:cc:d8:d0:dc:38:
                    b4:b0:f2:d6:56:9c:e8:2a:e5:5a:60:59:69:17:a6:
                    62:cb:d6:6d:08:12:25:41:e0:b8:90:56:10:21:36:
                    6d:8b:20:27:65:c6:0f:17:03:6b:d4:7c:ee:87:02:
                    2c:b9:3f:4e:7f:20:47:98:a8:c2:f9:b8:bd:04:7b:
                    36:11:42:5b:51:82:d4:20:4d:90:4e:db:26:13:2b:
                    db:4d:f0:b4:2a:a7:e1:ce:07:42:53:78:30:56:55:
                    29:cc:53:e8:e6:c0:a0:ef:19:9b:ec:7c:7b:ad:69:
                    60:95:2e:62:87:dd:f5:16:66:50:2f:6c:93:85:15:
                    dc:13:6c:13:4f:00:01:ef:c8:fc:5e:df:12:df:a7:
                    e1:a3:2d:3f:06:fb:f0:23:86:a0:25:f6:45:44:86:
                    92:cb:73:99:37:12:f6:c8:a3:eb:7f:04:70:5b:f6:
                    c7:05:ac:1b:4a:2f:9d:ce:e2:f3:b9:24:be:87:56:
                    34:fe:9d:cb:b0:56:ab:97:a2:a2:ae:d7:33:b5:a3:
                    b4:eb:0e:49:b8:c6:6f:fe:7a:f5:28:36:e3:14:84:
                    fc:70:0a:47:a0:94:72:5c:cc:57:f3:4e:fa:20:9e:
                    0d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:15:C2:19:32:E8:54:41:8C:CE:09:20:65:75:76:F5:78:14:8D:99
            X509v3 Authority Key Identifier:
                keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b4:27:30:21:71:56:f6:61:ba:a0:8b:f5:af:27:87:56:fe:
         96:e2:cf:56:3c:f4:ab:ec:48:06:58:89:1b:ac:61:8c:b0:7f:
         7c:5c:c5:0d:93:2b:25:4b:4c:20:a0:68:42:35:fb:7c:2a:c5:
         38:c6:c4:5d:9e:6d:0b:e2:9c:27:77:86:6e:c2:68:df:12:54:
         c8:bf:bb:20:a1:29:63:60:22:0e:92:f6:5d:45:82:b9:f7:a0:
         e7:92:c1:eb:0a:a2:74:93:81:75:ba:b8:42:f6:b2:21:5e:23:
         45:1e:20:0b:65:13:d3:84:33:bd:f9:c4:4a:d3:3c:7c:cf:07:
         e5:d0:f5:b2:79:ad:65:a1:f2:59:80:f4:e5:db:14:ad:fa:c8:
         8c:8a:b9:e6:b5:95:51:a2:fa:93:53:86:33:b3:5a:c7:dd:f4:
         7d:12:b0:a2:76:af:b0:a2:bf:0b:a0:a2:66:0b:3c:dc:0e:a2:
         bd:67:b1:bd:c3:2a:c1:06:1b:35:7a:6a:a8:05:bc:0b:2c:cb:
         61:b8:41:95:ea:1c:26:be:f8:24:33:b5:ac:18:7a:f6:85:08:
         45:e9:07:78:ce:64:f3:28:08:f2:a8:f3:de:43:76:ca:7f:53:
         77:f5:31:d5:8e:00:14:d2:9b:22:49:fc:90:b2:ee:6f:a3:f4:
         50:76:ae:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:50:44 2025 by rpki-client