Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
File:                     38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json)
Hash identifier:          fm7OJ45N26IkNOs2E+OPtLRzxl6vCOUSXAu2sv9sQU8=
Subject key identifier:   CB:D1:2B:53:0F:D0:C7:FE:E6:AB:34:F3:59:5C:FA:15:A2:C5:A4:55
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Certificate issuer:       /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial:       759DE9A15B6AA6F94330E33D1F8091B2C7088CF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
Manifest number:          012F
Signing time:             Wed 23 Jul 2025 13:22:05 +0000
Manifest this update:     Wed 23 Jul 2025 13:17:05 +0000
Manifest next update:     Thu 24 Jul 2025 16:31:05 +0000
Files and hashes:         1: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: DOt+xOMDogaXujbawrGL0U15zCSEQeK/RAeOdZ56ezk=)
                          2: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: jK9tTJ3HWkDECaNJJZCeSwWGUPLGyK3Y5TeyBPZZ8ds=)
                          3: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: Zxw7HANZ4fSS/h6IwZB62HG+NMCfSONfC+RPVG/FTSE=)
                          4: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: 01LOWf7MxhRX+2Op4rDN5W7ucn6FteIUTuCGEpIiXqg=)
                          5: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: tjhKwoa/z/ms3eL96lf+MyeXfH8SFjq92hWldF9BNCA=)
                          6: 3138352e35382e3135382e302f32342d3234203d3e203432383331.roa (hash: H0/UOIDOPTZQG2jWBZUuvlV7qmEWppBmDmL+nyn9Jr4=)
                          7: 34362e3138322e31362e302f32332d3233203d3e203433383437.roa (hash: 4YLzigbbgGBlj3P8KPCDpw+y1a9c2DAZLVBVu5lNf4E=)
                          8: 3138352e35382e3135372e302f32342d3234203d3e2032393134.roa (hash: lpWXt6uFvU2PZ1sNhgr10rMfQuglN6ZjbNveDXRK2tg=)
                          9: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: iqiKl6+YIrHEBq6ZgXjEwpHNvYPhUvsfMc60LM1HGfk=)
                          10: 34362e3138322e31382e302f32332d3233203d3e203433383437.roa (hash: 4Ns+nZIS59tdPTXyzEk/8ZsDfijKL83vY7HPlP7mVB0=)
                          11: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: 2aiAtkkpFlb5J4UKg3KwRnaG7ituhGEa6s/dcTUAgJQ=)
                          12: 326130323a323937303a3a2f32392d3239203d3e203433383437.roa (hash: s2Lo9o3m7PNA+VTM8h6HfGJuLE7e0u+GGo764aM9FW4=)
                          13: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: /UuXq/SkWF47gXFnW/T4vEllXZulBrt5hUqt6XmiJns=)
                          14: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: bxI8j0Q43fNYwFfEpnx3zZA+WfxxHOFpyLP15cwiRJc=)
                          15: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: jGy7NRXxpQ8Adk8KlwvLUXW9fgmGYykhrzR6k8tJHIg=)
                          16: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: YFUHOvZUTuDXo1v/ldHHqjI9VjtTCBbJBPcqOziNAKY=)
                          17: 3138352e35382e3135372e302f32342d3234203d3e2039333034.roa (hash: ecPrVI69N/vnSd3FE9LMlI9j3yoUAyDEH+/p4MpTJaY=)
                          18: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: F9kKqNHAYNbfLQI+u/5J8QY7Z3Hzl/w/cw99p8CJbIE=)
                          19: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: mN3Qu59H2oC79ZObPpdN6ubuCwdpq+KwMSfQr8+kwt4=)
                          20: 33312e3138352e3130352e302f32342d3234203d3e20313335333931.roa (hash: UHjaYZdaJB6lUIpYnqhxUJeEQvDh7dO7siLVcmgE1HM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 16:31:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:9d:e9:a1:5b:6a:a6:f9:43:30:e3:3d:1f:80:91:b2:c7:08:8c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
        Validity
            Not Before: Jul 23 13:17:05 2025 GMT
            Not After : Jul 24 16:31:05 2025 GMT
        Subject: CN=CBD12B530FD0C7FEE6AB34F3595CFA15A2C5A455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:21:26:fb:52:64:a2:b2:9b:7e:5a:00:90:c8:
                    41:94:01:47:46:c0:02:83:89:e0:f6:c2:a9:54:a8:
                    15:4c:74:50:ba:6f:37:02:23:27:a3:42:9d:27:d7:
                    71:04:0f:80:9f:56:a1:94:db:1b:27:e5:93:7a:79:
                    4b:9a:cf:37:e6:fd:a9:e6:3c:11:2c:c0:d5:75:e7:
                    34:0d:6f:db:72:aa:06:51:e0:95:f9:2c:10:d6:b8:
                    fc:f4:f2:4c:b0:16:65:f9:a7:49:b8:cc:80:cc:e7:
                    dc:8a:da:86:23:88:e9:a9:c7:6a:7b:40:8e:89:ad:
                    ea:69:cc:5b:21:f0:8e:e8:cd:0c:2f:4e:89:51:6d:
                    cf:27:62:f7:05:f3:a0:23:ba:5f:e3:ac:62:27:e6:
                    c0:7d:a7:ce:75:8d:d0:e4:b6:bd:12:36:d4:ff:65:
                    ff:ae:40:b8:58:66:99:a8:6a:fc:dd:3a:4a:34:90:
                    4b:bd:21:61:3d:ca:48:e8:9d:55:e7:cb:99:4e:c5:
                    ba:19:9e:3b:ae:ce:84:ee:77:18:2e:96:fd:51:40:
                    24:b4:66:1c:0d:70:7b:98:bb:33:d9:7a:8a:c9:58:
                    c0:b4:42:d8:e1:3d:aa:1b:6c:37:3a:5d:c6:5f:9b:
                    12:ae:ae:6b:3b:ea:19:8d:8a:f0:bc:11:bb:cb:c6:
                    5e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D1:2B:53:0F:D0:C7:FE:E6:AB:34:F3:59:5C:FA:15:A2:C5:A4:55
            X509v3 Authority Key Identifier:
                keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:09:51:6f:86:f6:3f:79:70:6e:6a:11:c8:56:67:06:de:1e:
         b8:f0:1f:c3:ed:90:ea:fd:e2:0b:57:00:35:9d:c9:51:ff:b7:
         40:89:8a:4e:8b:da:10:11:34:dd:25:89:84:b9:0e:16:e9:44:
         21:88:1e:dd:1d:8f:45:74:69:9e:a8:70:7e:93:46:66:c3:76:
         84:80:4a:6a:60:fc:8a:17:81:4f:ab:a2:f0:3a:39:c6:62:75:
         a9:0d:fd:31:49:73:3c:25:ce:16:db:48:05:69:be:cb:af:25:
         ae:45:e4:30:75:4b:1a:77:4d:51:07:a7:22:71:8f:ab:5f:6d:
         2f:34:61:f8:6e:ea:77:76:af:87:30:0c:61:e5:75:64:e2:7b:
         12:48:4f:33:a2:cb:c5:70:4c:8f:66:c3:28:f4:f9:7f:15:56:
         9e:c8:76:1b:ab:84:97:5b:dc:44:74:e8:31:6a:1a:43:b0:02:
         88:93:f7:c6:a7:0e:fb:1c:cc:c9:84:d1:0e:4e:a9:a9:86:f8:
         92:18:20:a6:8f:1e:7a:3b:e3:18:4f:3e:fc:88:30:f3:96:ca:
         b9:92:d0:7e:3f:f9:93:9c:73:3a:b8:a3:8e:b1:fb:a4:c5:f4:
         a7:70:51:08:f7:ae:fd:31:dd:4b:7a:c3:40:29:40:f6:c7:16:
         7a:7f:e5:bd
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUdZ3poVtqpvlDMOM9H4CRsscIjPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx
NTAxMjBmODAeFw0yNTA3MjMxMzE3MDVaFw0yNTA3MjQxNjMxMDVaMDMxMTAvBgNV
BAMTKENCRDEyQjUzMEZEMEM3RkVFNkFCMzRGMzU5NUNGQTE1QTJDNUE0NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTISb7UmSispt+WgCQyEGUAUdG
wAKDieD2wqlUqBVMdFC6bzcCIyejQp0n13EED4CfVqGU2xsn5ZN6eUuazzfm/anm
PBEswNV15zQNb9tyqgZR4JX5LBDWuPz08kywFmX5p0m4zIDM59yK2oYjiOmpx2p7
QI6JreppzFsh8I7ozQwvTolRbc8nYvcF86Ajul/jrGIn5sB9p851jdDktr0SNtT/
Zf+uQLhYZpmoavzdOko0kEu9IWE9ykjonVXny5lOxboZnjuuzoTudxgulv1RQCS0
ZhwNcHuYuzPZeorJWMC0QtjhPaobbDc6XcZfmxKurms76hmNivC8EbvLxl5pAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUy9ErUw/Qx/7mqzTzWVz6FaLFpFUwHwYDVR0j
BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm
OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV
QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03
MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2
MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwlRb4b2P3lwbmoRyFZn
Bt4euPAfw+2Q6v3iC1cANZ3JUf+3QImKTovaEBE03SWJhLkOFulEIYge3R2PRXRp
nqhwfpNGZsN2hIBKamD8iheBT6ui8Do5xmJ1qQ39MUlzPCXOFttIBWm+y68lrkXk
MHVLGndNUQenInGPq19tLzRh+G7qd3avhzAMYeV1ZOJ7EkhPM6LLxXBMj2bDKPT5
fxVWnsh2G6uEl1vcRHToMWoaQ7ACiJP3xqcO+xzMyYTRDk6pqYb4khggpo8eejvj
GE8+/Igw85bKuZLQfj/5k5xzOrijjrH7pMX0p3BRCPeu/THdS3rDQClA9scWen/l
vQ==
-----END CERTIFICATE-----
Generated at Thu Jul 24 04:57:12 2025 by rpki-client