Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
File:                     CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json)
Hash identifier:          pQ0F6pIHXWhyb2hF2vyi1tDhLLFVmZ1jrE4VakygQos=
Subject key identifier:   A7:42:29:2C:24:87:34:78:25:E8:45:39:8B:F1:7B:36:F8:29:E9:42
Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
Certificate issuer:       /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Certificate serial:       535B87A463BE283631DF9034B7B454E7E7AF8E2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
Manifest number:          AA
Signing time:             Thu 24 Jul 2025 10:57:05 +0000
Manifest this update:     Thu 24 Jul 2025 10:52:05 +0000
Manifest next update:     Fri 25 Jul 2025 12:43:05 +0000
Files and hashes:         1: 3139342e3132342e3233342e302f32342d3234203d3e203534333339.roa (hash: wdUsagydvVBIUao6PJHWRop4oPMEKXc9pJyNsG4SW9o=)
                          2: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: lmVh0tkdqz2ZaktlfIJzzJLuyL6wItEcUEPI+PVNqdo=)
                          3: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: Wt7cVymDfWBwMzR8hqsJLmmyo1G55vHli1MG8ova8P4=)
                          4: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: E+WPtm+HS9AVsakqcLrBjACoAm/NbChhrd4PG4s+X5o=)
                          5: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: ZRC2mXIzKI/nfE6a/vPp5O6Luu/iGvnONXPkh9NgU3c=)
                          6: 3139342e3132342e3233342e302f32342d3234203d3e20393936.roa (hash: ZoxbCHQMtNZPfbUxrxLpOcXkuKUfw+Blft69mSm2oZk=)
                          7: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: hZUNrJfyUHgUntGAqdSVlBaE4wglKTi9y0zmmly1bMY=)
                          8: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: bLMKUTu2LDh7TH4JEFo2TwGKCx3JiqqNy6hRd14etMM=)
                          9: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: sUFXVk5mJuzGXi+txvF0jHfWX/7COhdmW+wdhnGLLbA=)
                          10: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: yq+hWHhfyocRCOJbnYGyzdHlkfHxXD4gPxuVgEPCc0g=)
                          11: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: Bvg0bczZRvr0hNeXj13n0Q8N1O34FXLeiihKmXvd96c=)
                          12: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: 0XA7loK9zcLZ4LH8gJRLIhKhFochpbrC40dXD0XEE/8=)
                          13: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: 4eRihxuyWrFmyrmWNHP+q80BiQuGj/+XTMKJH0kDcVI=)
                          14: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: MbX2Jo3+qNy9yJ51qumhhpSA5fjjpKXnL9+Ixdd7q/M=)
                          15: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: ad3eCylfdMfYW/Id31ooquQQLvZwumdWGj+lszfaEsA=)
                          16: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: qgpa17rXBGEZyX0zTURKp2TS7HA9WA0LAdj3r9yq+jg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 12:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5b:87:a4:63:be:28:36:31:df:90:34:b7:b4:54:e7:e7:af:8e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
        Validity
            Not Before: Jul 24 10:52:05 2025 GMT
            Not After : Jul 25 12:43:05 2025 GMT
        Subject: CN=A742292C2487347825E845398BF17B36F829E942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:09:49:9f:31:71:77:36:32:3b:44:45:35:bc:
                    08:8f:b9:e0:31:f5:d5:76:eb:65:c7:91:d7:ca:b8:
                    da:4c:61:c1:d3:89:5a:67:63:31:06:41:c3:0b:71:
                    81:62:02:74:c3:b5:07:86:04:2c:b0:3e:d4:16:ec:
                    88:ab:1b:a7:a7:b0:70:65:61:84:5f:00:53:4c:16:
                    e4:cf:37:11:6b:67:0e:3e:58:82:93:84:0c:1a:5a:
                    12:b0:7b:65:91:8f:bb:8f:5f:fb:23:51:c2:3f:07:
                    54:e0:6c:4d:3e:49:ab:b4:ab:ca:c3:a2:ca:dd:7a:
                    44:86:b4:41:dc:94:0d:ce:88:84:e7:b0:a0:a7:ac:
                    9a:78:6f:8d:74:13:be:7b:c3:4e:9d:fb:ca:78:ae:
                    ac:4e:7d:b2:b1:fd:c7:86:cf:d6:06:a3:36:7d:ba:
                    79:cf:05:da:ac:5a:0a:18:04:99:e9:15:fc:69:ef:
                    ff:9c:f8:35:02:66:e4:ec:91:33:bd:57:21:63:6d:
                    0a:e3:02:01:9c:ea:dc:f8:19:92:90:0b:7a:36:d4:
                    25:2d:5a:a3:28:dc:5b:2b:5f:52:b7:2c:ad:6f:6f:
                    ec:ed:39:5e:e1:90:01:f3:65:d9:42:56:5a:49:dd:
                    0a:97:7f:dc:59:b8:d5:e9:0f:54:a4:4a:0b:f4:16:
                    c3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:42:29:2C:24:87:34:78:25:E8:45:39:8B:F1:7B:36:F8:29:E9:42
            X509v3 Authority Key Identifier:
                keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:7f:5b:0a:c3:99:13:a3:14:6c:4f:cb:0e:6c:de:01:62:1c:
         ee:8a:c3:c6:ff:b9:8e:b5:bc:d8:91:fe:a9:3c:a5:f3:ac:57:
         8d:76:01:96:8a:70:f0:59:86:2d:75:f1:74:2c:ee:a0:09:93:
         e9:96:36:b2:f1:a2:ce:f4:a6:0a:fe:79:fa:5b:1e:7a:65:b8:
         79:d8:d2:55:f8:30:50:f9:29:56:04:c8:b7:76:ac:d1:b3:af:
         ee:31:33:b6:5c:41:9f:7a:c9:8a:0a:2f:24:17:55:a7:c3:fa:
         0b:fc:98:0d:56:77:71:75:8d:35:e8:d2:cc:1e:bd:3d:6c:09:
         47:63:96:35:96:d0:bc:c2:ee:86:0f:cd:6f:2a:68:2b:95:f6:
         6f:72:70:14:a6:f7:6f:85:80:49:2b:e8:4c:51:7d:22:f4:f3:
         ad:1a:a4:63:65:bc:f7:20:ec:d6:81:7d:dd:70:04:bb:0d:9d:
         8f:f2:20:07:6f:df:d6:b3:a1:0c:aa:cf:84:1b:a6:4e:e4:74:
         dc:86:01:3c:59:3a:a1:4d:9e:5f:1c:07:1e:15:a9:86:39:6b:
         7d:96:ae:ac:11:ba:68:d5:86:f3:91:aa:4e:04:9b:c1:ff:2d:
         5d:af:0d:67:cd:90:89:a9:ec:8e:77:87:09:a6:2d:c9:34:c0:
         1f:90:70:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 04:35:35 2025 by rpki-client