Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
File:                     38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json)
Hash identifier:          1Ku93laruGbN9u4fhHqLWx0Lz+dzloY39GwnOeKBqo8=
Subject key identifier:   43:E9:A0:A6:37:A0:AA:60:76:75:5C:8B:F9:AB:DC:7A:58:EA:3D:A2
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Certificate issuer:       /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial:       3EE1FE1F2096D7B9477DFB293C23CA086989CEFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
Manifest number:          012E
Signing time:             Tue 22 Jul 2025 17:31:55 +0000
Manifest this update:     Tue 22 Jul 2025 17:26:55 +0000
Manifest next update:     Wed 23 Jul 2025 21:21:55 +0000
Files and hashes:         1: 34362e3138322e31362e302f32332d3233203d3e203433383437.roa (hash: 4YLzigbbgGBlj3P8KPCDpw+y1a9c2DAZLVBVu5lNf4E=)
                          2: 34362e3138322e31382e302f32332d3233203d3e203433383437.roa (hash: 4Ns+nZIS59tdPTXyzEk/8ZsDfijKL83vY7HPlP7mVB0=)
                          3: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: DOt+xOMDogaXujbawrGL0U15zCSEQeK/RAeOdZ56ezk=)
                          4: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: jGy7NRXxpQ8Adk8KlwvLUXW9fgmGYykhrzR6k8tJHIg=)
                          5: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: jK9tTJ3HWkDECaNJJZCeSwWGUPLGyK3Y5TeyBPZZ8ds=)
                          6: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: 01LOWf7MxhRX+2Op4rDN5W7ucn6FteIUTuCGEpIiXqg=)
                          7: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: 2aiAtkkpFlb5J4UKg3KwRnaG7ituhGEa6s/dcTUAgJQ=)
                          8: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: Zxw7HANZ4fSS/h6IwZB62HG+NMCfSONfC+RPVG/FTSE=)
                          9: 3138352e35382e3135372e302f32342d3234203d3e2032393134.roa (hash: lpWXt6uFvU2PZ1sNhgr10rMfQuglN6ZjbNveDXRK2tg=)
                          10: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: /A+6l1CkzoEI4UiGrTC8iL9Wkw3kgHVEoCcczPuzTvk=)
                          11: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: /UuXq/SkWF47gXFnW/T4vEllXZulBrt5hUqt6XmiJns=)
                          12: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: iqiKl6+YIrHEBq6ZgXjEwpHNvYPhUvsfMc60LM1HGfk=)
                          13: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: YFUHOvZUTuDXo1v/ldHHqjI9VjtTCBbJBPcqOziNAKY=)
                          14: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: mN3Qu59H2oC79ZObPpdN6ubuCwdpq+KwMSfQr8+kwt4=)
                          15: 3138352e35382e3135382e302f32342d3234203d3e203432383331.roa (hash: H0/UOIDOPTZQG2jWBZUuvlV7qmEWppBmDmL+nyn9Jr4=)
                          16: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: tjhKwoa/z/ms3eL96lf+MyeXfH8SFjq92hWldF9BNCA=)
                          17: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: bxI8j0Q43fNYwFfEpnx3zZA+WfxxHOFpyLP15cwiRJc=)
                          18: 3138352e35382e3135372e302f32342d3234203d3e2039333034.roa (hash: ecPrVI69N/vnSd3FE9LMlI9j3yoUAyDEH+/p4MpTJaY=)
                          19: 326130323a323937303a3a2f32392d3239203d3e203433383437.roa (hash: s2Lo9o3m7PNA+VTM8h6HfGJuLE7e0u+GGo764aM9FW4=)
                          20: 33312e3138352e3130352e302f32342d3234203d3e20313335333931.roa (hash: UHjaYZdaJB6lUIpYnqhxUJeEQvDh7dO7siLVcmgE1HM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 21:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e1:fe:1f:20:96:d7:b9:47:7d:fb:29:3c:23:ca:08:69:89:ce:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
        Validity
            Not Before: Jul 22 17:26:55 2025 GMT
            Not After : Jul 23 21:21:55 2025 GMT
        Subject: CN=43E9A0A637A0AA6076755C8BF9ABDC7A58EA3DA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3c:59:55:5e:8d:5f:90:2e:43:b2:a0:80:2d:
                    41:2e:cb:e6:29:fe:86:28:bc:85:e1:eb:e9:a6:4d:
                    ad:21:0d:07:fd:9e:6a:b8:64:81:9d:0f:56:da:64:
                    91:24:12:43:f1:34:53:43:02:1c:8a:eb:df:41:e9:
                    31:44:eb:68:4c:6c:a5:95:65:e3:04:69:ee:e3:eb:
                    34:f7:12:a6:49:c1:73:7f:6c:29:b8:3f:27:3e:3b:
                    57:79:19:a9:d2:71:39:b4:b6:7d:61:fe:96:9e:b6:
                    c0:8b:e6:82:39:08:7b:0f:21:7c:f8:35:6c:87:64:
                    2d:dc:e1:84:1c:77:8e:8b:ad:d3:56:8c:95:f2:44:
                    02:0d:d6:18:89:08:c2:31:57:25:c6:b3:3c:6a:da:
                    8a:a9:57:7b:bc:3b:bb:e3:b7:d9:e6:be:d5:2c:53:
                    cd:04:8d:59:e6:17:db:6b:17:00:7f:44:95:eb:db:
                    b9:a3:54:56:2f:44:ca:ad:75:6f:ff:93:ed:1a:cd:
                    63:ca:51:70:d6:2a:47:39:ef:2c:a6:38:56:3a:78:
                    b2:61:79:a7:7c:05:5a:07:56:5d:ca:3a:fe:5a:6e:
                    36:36:c9:8a:96:2f:9a:52:bb:64:7d:b6:c0:92:3c:
                    f5:61:bf:72:64:fb:7a:57:1a:03:2e:6e:ca:4e:60:
                    46:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E9:A0:A6:37:A0:AA:60:76:75:5C:8B:F9:AB:DC:7A:58:EA:3D:A2
            X509v3 Authority Key Identifier:
                keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:29:d2:53:69:b8:2a:14:1a:36:85:c2:89:43:6a:69:45:dc:
         73:5a:c6:26:30:8e:4a:3f:3d:9d:81:42:bd:94:7b:f3:24:0a:
         73:90:7b:76:db:82:ae:b5:51:04:3c:6a:e5:42:58:50:5f:cb:
         49:d1:a0:51:a2:db:8a:bc:ac:ae:e1:40:2f:89:76:39:4c:18:
         d1:81:d3:6d:c2:f7:59:85:07:7d:89:81:c5:10:6a:ab:53:b6:
         83:81:82:8b:c1:5f:dd:bf:52:c5:a1:55:f1:cc:65:9d:1b:92:
         3f:74:39:a4:a8:c7:41:95:76:b8:08:16:23:a8:60:d3:1e:05:
         f4:3b:61:3d:c1:f9:2d:4b:3b:0a:95:65:37:55:7f:43:71:7b:
         59:8c:f7:1e:53:af:40:4e:97:76:9f:37:30:b7:20:1c:46:04:
         1e:05:5b:10:33:f4:74:b5:98:72:d3:72:42:e3:aa:b0:5e:de:
         1f:68:b1:0f:58:a5:61:36:db:46:e4:14:e2:45:d1:12:57:60:
         05:48:42:ec:e1:a2:2e:14:0d:5f:96:df:a5:1d:18:c2:be:cc:
         f2:82:0d:5c:82:b1:cb:bb:64:f5:75:05:3a:b0:74:09:6a:02:
         81:a9:4b:58:c8:88:27:ec:5d:8c:0c:54:1b:4c:a3:50:ed:5b:
         f4:9f:13:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 08:13:19 2025 by rpki-client