Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
File:                     8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json)
Hash identifier:          WAop/f0dlJ6Fm7soOlPBNwnt9hhjjfaxfYMnvm6k+EM=
Subject key identifier:   34:4D:38:98:E8:EA:28:E5:AF:EE:57:0A:47:78:7E:84:77:73:AF:C0
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Certificate issuer:       /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial:       78B1CEC83E47697DD98BE1E2EF27B2E6B6463993
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
Manifest number:          04F5
Signing time:             Wed 23 Jul 2025 08:57:04 +0000
Manifest this update:     Wed 23 Jul 2025 08:52:04 +0000
Manifest next update:     Thu 24 Jul 2025 09:23:04 +0000
Files and hashes:         1: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: J4P/0pJKXXswWDL/U/aSyTpYbnb7RCTWwOsChVTVKX0=)
                          2: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: VR4JLJ2ZU8eUzCRER2JzBOvrizo3+I5iCEURL4jUDUs=)
                          3: 37372e38332e3235322e302f32342d3234203d3e20323734383237.roa (hash: 1TkU9CuZNSKSA6n8CCEVJKfR3/eejFvKDG72x42fajA=)
                          4: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: 1mKwdC2ZIiOIr7Rnoef/+fSq7c6umW7Rd7kmaMzPSt8=)
                          5: 37372e38332e3235342e302f32342d3234203d3e20313432313131.roa (hash: 5E5ubEnGmxuDRTB/crq4AEPdYVHLSryiOVVydmorIJQ=)
                          6: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: eWXMMSA0Rq5koOaRaaHhcbU4ocE3NTgDUdKA5XEeLVo=)
                          7: 37372e38332e3235342e302f32342d3234203d3e20313532363732.roa (hash: OF3wSP3yuy0C/T5Z9SXU/JklI6k6e/1ZBs+Z/EFeASc=)
                          8: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (hash: ngHdoUxJymyOOTpWXLZA6HfqcGQkxKDww9uhl5L3bs4=)
                          9: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: AO/2wQxFVW1dCHNtgSdMO8qdA9TP6KJffP27Y2ywVzk=)
                          10: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: j6aiC8hmqjNX8bvUvtzfL/WZD+CbfD2TNLTq4Vkaxb8=)
                          11: 3231322e3130322e3131342e302f32342d3234203d3e20323132363039.roa (hash: k4QPq18KIVcE3YfXs1geEObswKolsmORhNCPU0jWep8=)
                          12: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: kVRW91gUQQJKDevSNusyEaCMFEQt6idZ9U9pUTvlEwg=)
                          13: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: yu4VS8d4SOotNR90wp+Yzh042rOQsTRk/ltNPBkKiBs=)
                          14: 36322e3139322e3137322e302f32342d3234203d3e20383334.roa (hash: Uv6OxLHfherQgDvnenTKJPkP+iYFP89HU/TsZn3Z2Z0=)
                          15: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (hash: Nx4wSG2k5MsgvkZE/SkqlmuALnm8blh30hh9Mbxj2MU=)
                          16: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: /8SxKRCjrbD1A6kty65PmoHRGSQkyZyRYMErTS2n7q4=)
                          17: 36322e3139322e3137352e302f32342d3234203d3e203332313637.roa (hash: /WAm5dy4jlcwivOnkIFnMuEvBCc6QOLwRlkX4YTGCBc=)
                          18: 37372e38332e3235342e302f32342d3234203d3e203633303233.roa (hash: 5CqwgOjFFuFV2UfvvpLNhCLDO+4UZEU9TIi9LDwBTT8=)
                          19: 38352e3230392e31372e302f32342d3234203d3e203235363933.roa (hash: sfBR34BQfUnBG/Dfs9RgO4NWV6dIYQiGWUQLFQnMRUU=)
                          20: 36322e3139322e3137332e302f32342d3234203d3e203235363933.roa (hash: 7LxiUpW29bCJDw6ndbnVxwTHPen7XCpx03brWPSWNVo=)
                          21: 3138352e3138312e302e302f32342d3234203d3e2035303635.roa (hash: jKhLBm90tx+Wj64bfhAOaNtyd2IRsOIjohul50fMfmI=)
                          22: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: oAOTNgxw6bYQVCzHD93BNrqwf7e2+dYeRkUxzvhfYNE=)
                          23: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (hash: QDSk8x00L35RICmReakqpkA/56+KGgKX4susJmbToXY=)
                          24: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: p6Bk0gZf8IBhPL6y8ZeFGMDiI7CTICtCBqH+ui8UNPk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b1:ce:c8:3e:47:69:7d:d9:8b:e1:e2:ef:27:b2:e6:b6:46:39:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
        Validity
            Not Before: Jul 23 08:52:04 2025 GMT
            Not After : Jul 24 09:23:04 2025 GMT
        Subject: CN=344D3898E8EA28E5AFEE570A47787E847773AFC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a0:ea:97:e5:d1:12:89:9b:1b:d1:06:db:fb:
                    86:86:ce:8b:61:f4:08:72:8d:16:09:48:9a:be:47:
                    a9:3f:62:74:d7:b8:76:a7:1a:85:1b:39:7b:42:d6:
                    f1:f4:54:a3:40:0f:59:48:5e:2b:0a:16:4f:a8:e9:
                    9c:c1:95:ee:27:a1:0a:b9:f2:1a:80:8e:c7:70:6a:
                    41:6a:da:89:ce:c1:c1:e8:fc:0f:0b:17:cf:35:06:
                    e7:70:7d:9c:ab:a5:c0:ed:2a:b3:3c:97:5d:84:62:
                    1e:d3:c6:11:ed:de:92:97:72:82:da:7c:e0:ca:41:
                    41:c3:9e:93:d9:d2:ac:6d:ad:f9:32:4b:4c:4b:8c:
                    89:e0:8d:17:8f:06:56:b7:e4:ed:1a:8e:02:af:28:
                    41:48:da:d4:19:df:41:8e:2e:1c:e7:c9:bf:d0:ec:
                    35:87:61:eb:74:34:6b:51:2a:07:fb:7c:0e:4b:82:
                    c2:c3:46:22:b9:ce:8c:ce:bd:09:95:41:83:4f:4d:
                    51:89:eb:61:82:30:12:af:7c:1e:06:2d:60:af:5d:
                    7d:8b:43:0c:2f:3b:99:26:07:1c:dc:e5:86:82:ce:
                    b5:e7:54:cd:c9:7f:b4:42:00:26:64:1d:cb:3d:79:
                    8d:1f:e9:70:e0:ce:e2:af:f9:0b:11:7e:03:87:2d:
                    f1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4D:38:98:E8:EA:28:E5:AF:EE:57:0A:47:78:7E:84:77:73:AF:C0
            X509v3 Authority Key Identifier:
                keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:57:8f:06:3a:1c:ab:03:37:01:c1:4c:76:34:08:f5:a9:ac:
         b9:d7:12:c1:c9:21:25:be:3b:95:90:2d:05:c8:76:d1:69:b1:
         7f:0a:61:b4:4a:f1:82:90:5e:79:c8:ad:8c:19:f8:a0:8a:df:
         71:98:b0:35:df:fb:ec:72:45:0c:c0:a0:58:9e:d9:6c:c3:a1:
         90:29:31:66:fb:29:12:f7:42:02:94:a9:1d:79:0e:bf:da:c5:
         4b:27:69:63:50:94:06:a6:80:d6:80:4d:02:1b:c3:50:b2:90:
         a0:94:e4:ce:d4:59:c3:27:cd:4f:d4:a4:07:11:f5:14:6e:b2:
         ba:1c:bc:24:1c:85:c2:5f:f5:71:7a:a0:bb:b3:de:93:4d:62:
         bf:f6:d5:b6:02:d6:35:35:11:3b:6a:dc:d5:7e:2e:2b:d5:eb:
         2b:88:13:c8:ea:14:85:47:9f:cd:be:69:b5:2e:51:60:26:78:
         2e:0d:31:3b:82:cb:13:6b:cb:a2:45:0e:a2:43:58:6f:af:27:
         24:f0:d7:4b:c4:d4:e6:cb:25:60:bc:fe:02:2d:d6:e0:95:82:
         df:d3:65:5b:5e:ee:0e:75:bd:ed:62:b0:2d:af:59:c4:a3:88:
         a2:66:28:6b:0a:32:b6:92:cf:78:90:9b:bc:68:ad:60:4a:80:
         af:c9:35:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:13:55 2025 by rpki-client