Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
File:                     38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json)
Hash identifier:          LvnQHQQJ9Cqqd3ZBAlx3tlbeG8lstN2v/3dnK33WZqA=
Subject key identifier:   F2:9F:19:5C:7A:75:30:DE:91:AD:2C:7C:7C:B4:CE:C5:7E:20:69:59
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Certificate issuer:       /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial:       6240797F61739D5E44F206E7BADE2F9C3163546E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
Manifest number:          0132
Signing time:             Fri 25 Jul 2025 19:27:06 +0000
Manifest this update:     Fri 25 Jul 2025 19:22:06 +0000
Manifest next update:     Sat 26 Jul 2025 20:37:06 +0000
Files and hashes:         1: 34362e3138322e31382e302f32332d3233203d3e203433383437.roa (hash: 4Ns+nZIS59tdPTXyzEk/8ZsDfijKL83vY7HPlP7mVB0=)
                          2: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: jGy7NRXxpQ8Adk8KlwvLUXW9fgmGYykhrzR6k8tJHIg=)
                          3: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: 2aiAtkkpFlb5J4UKg3KwRnaG7ituhGEa6s/dcTUAgJQ=)
                          4: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: bxI8j0Q43fNYwFfEpnx3zZA+WfxxHOFpyLP15cwiRJc=)
                          5: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: mN3Qu59H2oC79ZObPpdN6ubuCwdpq+KwMSfQr8+kwt4=)
                          6: 3138352e35382e3135372e302f32342d3234203d3e2032393134.roa (hash: lpWXt6uFvU2PZ1sNhgr10rMfQuglN6ZjbNveDXRK2tg=)
                          7: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: 01LOWf7MxhRX+2Op4rDN5W7ucn6FteIUTuCGEpIiXqg=)
                          8: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: tjhKwoa/z/ms3eL96lf+MyeXfH8SFjq92hWldF9BNCA=)
                          9: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: /UuXq/SkWF47gXFnW/T4vEllXZulBrt5hUqt6XmiJns=)
                          10: 326130323a323937303a3a2f32392d3239203d3e203433383437.roa (hash: s2Lo9o3m7PNA+VTM8h6HfGJuLE7e0u+GGo764aM9FW4=)
                          11: 34362e3138322e31362e302f32332d3233203d3e203433383437.roa (hash: 4YLzigbbgGBlj3P8KPCDpw+y1a9c2DAZLVBVu5lNf4E=)
                          12: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: iqiKl6+YIrHEBq6ZgXjEwpHNvYPhUvsfMc60LM1HGfk=)
                          13: 33312e3138352e3130352e302f32342d3234203d3e20313335333931.roa (hash: UHjaYZdaJB6lUIpYnqhxUJeEQvDh7dO7siLVcmgE1HM=)
                          14: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: jK9tTJ3HWkDECaNJJZCeSwWGUPLGyK3Y5TeyBPZZ8ds=)
                          15: 3138352e35382e3135382e302f32342d3234203d3e203432383331.roa (hash: H0/UOIDOPTZQG2jWBZUuvlV7qmEWppBmDmL+nyn9Jr4=)
                          16: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: DOt+xOMDogaXujbawrGL0U15zCSEQeK/RAeOdZ56ezk=)
                          17: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: YFUHOvZUTuDXo1v/ldHHqjI9VjtTCBbJBPcqOziNAKY=)
                          18: 3138352e35382e3135372e302f32342d3234203d3e2039333034.roa (hash: ecPrVI69N/vnSd3FE9LMlI9j3yoUAyDEH+/p4MpTJaY=)
                          19: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: Zxw7HANZ4fSS/h6IwZB62HG+NMCfSONfC+RPVG/FTSE=)
                          20: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: rUt741OwSQqnIFCp6FVKtnmlZAUTPWlMqDSfdOvf1zI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 17:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:40:79:7f:61:73:9d:5e:44:f2:06:e7:ba:de:2f:9c:31:63:54:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
        Validity
            Not Before: Jul 25 19:22:06 2025 GMT
            Not After : Jul 26 20:37:06 2025 GMT
        Subject: CN=F29F195C7A7530DE91AD2C7C7CB4CEC57E206959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:df:b9:70:a8:66:ee:ea:87:fe:05:ec:15:ab:
                    9f:da:3e:c4:d5:e3:78:56:fb:0a:b8:a0:79:17:be:
                    06:b6:75:bb:f4:15:5e:d9:a6:69:e2:51:b0:34:3d:
                    be:76:8c:eb:49:c8:40:07:3f:42:3a:d0:08:33:4a:
                    ca:04:44:ed:a1:31:a4:f3:52:d0:a4:bc:6c:88:7d:
                    8f:ed:b4:5f:c2:f6:70:56:a8:22:1b:12:7c:7e:32:
                    e3:fd:b4:8e:a0:c8:09:59:fe:1d:b0:9d:bb:a5:30:
                    b1:7e:9e:c5:17:06:0a:69:7a:9f:05:a1:0c:6d:ff:
                    88:b8:eb:14:62:9e:22:40:08:f5:84:af:a3:83:48:
                    6d:7b:fe:49:34:c9:e5:74:08:f2:71:5e:0d:8d:44:
                    c9:63:79:5a:24:c5:c1:25:b0:3d:59:ff:a9:4c:82:
                    dd:13:54:db:eb:2b:f8:bd:56:50:3c:c4:d0:9b:17:
                    19:9c:c7:e5:d6:aa:ec:07:61:da:2f:e2:f2:29:83:
                    5a:9e:9c:48:c7:7e:bd:f3:20:19:3c:22:cb:ac:43:
                    6f:a5:5a:ce:fb:2b:89:4c:f6:6d:a9:69:90:45:59:
                    87:73:9d:2d:48:ef:b9:a6:d2:c0:14:04:5e:03:dd:
                    07:dd:19:6d:18:5b:2a:4c:c3:3b:4e:95:87:b3:cf:
                    19:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9F:19:5C:7A:75:30:DE:91:AD:2C:7C:7C:B4:CE:C5:7E:20:69:59
            X509v3 Authority Key Identifier:
                keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:52:81:f9:f9:f3:25:a5:c0:fb:f5:fa:bf:a5:39:97:e5:aa:
         b0:a5:07:82:2f:51:50:8e:7a:af:1b:f2:08:7e:19:21:91:2a:
         c3:ae:27:be:2c:1c:48:f2:12:63:1c:d4:78:9d:b3:dd:50:7a:
         48:56:ae:ac:d7:03:a6:1f:20:17:30:d8:25:e6:2f:b6:fc:94:
         8f:db:92:d7:91:79:0f:62:b9:3c:6d:86:11:dd:f2:4f:74:2a:
         b2:0c:8e:3a:cc:25:3a:e5:4c:55:1f:68:87:bd:a3:f0:13:d9:
         f9:22:21:3c:75:e7:59:a4:7c:bc:2e:81:99:62:1d:7a:71:ea:
         69:0e:24:ea:8c:ec:88:5c:09:12:ae:4d:c0:de:63:3d:71:7a:
         87:e2:1c:06:4d:52:04:2a:1f:eb:db:b2:b9:89:d0:63:41:a9:
         84:a5:40:1c:92:6c:bc:bd:2c:4e:3b:35:0f:3c:89:4b:e9:f4:
         b2:ae:79:22:34:35:2a:fd:f9:19:d8:41:d5:bc:74:5b:50:15:
         51:ce:77:f9:64:3e:92:66:7e:37:c0:6a:b0:9c:a0:d2:99:df:
         3f:c5:26:b4:1d:c4:b6:e7:8e:55:60:ba:99:bd:9a:9a:c1:18:
         40:18:24:8e:09:b2:3d:d6:f2:87:e3:3a:18:73:69:ee:0e:aa:
         1b:78:6e:60
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUYkB5f2FznV5E8gbnut4vnDFjVG4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx
NTAxMjBmODAeFw0yNTA3MjUxOTIyMDZaFw0yNTA3MjYyMDM3MDZaMDMxMTAvBgNV
BAMTKEYyOUYxOTVDN0E3NTMwREU5MUFEMkM3QzdDQjRDRUM1N0UyMDY5NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ37lwqGbu6of+BewVq5/aPsTV
43hW+wq4oHkXvga2dbv0FV7ZpmniUbA0Pb52jOtJyEAHP0I60AgzSsoERO2hMaTz
UtCkvGyIfY/ttF/C9nBWqCIbEnx+MuP9tI6gyAlZ/h2wnbulMLF+nsUXBgppep8F
oQxt/4i46xRiniJACPWEr6ODSG17/kk0yeV0CPJxXg2NRMljeVokxcElsD1Z/6lM
gt0TVNvrK/i9VlA8xNCbFxmcx+XWquwHYdov4vIpg1qenEjHfr3zIBk8IsusQ2+l
Ws77K4lM9m2paZBFWYdznS1I77mm0sAUBF4D3QfdGW0YWypMwztOlYezzxlxAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU8p8ZXHp1MN6RrSx8fLTOxX4gaVkwHwYDVR0j
BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm
OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV
QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03
MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2
MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVKB+fnzJaXA+/X6v6U5
l+WqsKUHgi9RUI56rxvyCH4ZIZEqw64nviwcSPISYxzUeJ2z3VB6SFaurNcDph8g
FzDYJeYvtvyUj9uS15F5D2K5PG2GEd3yT3QqsgyOOswlOuVMVR9oh72j8BPZ+SIh
PHXnWaR8vC6BmWIdenHqaQ4k6ozsiFwJEq5NwN5jPXF6h+IcBk1SBCof69uyuYnQ
Y0GphKVAHJJsvL0sTjs1DzyJS+n0sq55IjQ1Kv35GdhB1bx0W1AVUc53+WQ+kmZ+
N8BqsJyg0pnfP8UmtB3EtueOVWC6mb2amsEYQBgkjgmyPdbyh+M6GHNp7g6qG3hu
YA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 01:53:49 2025 by rpki-client