Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
File:                     CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json)
Hash identifier:          6pw1bom5/MGL47jl0J7Q1SbFVw7f+IumuzADcomE5Kk=
Subject key identifier:   6F:05:44:CA:6D:0B:2E:B4:12:D2:F3:45:1D:B6:D6:B4:54:E1:F6:0F
Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
Certificate issuer:       /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Certificate serial:       752E97C099D8C20D2C1062B8BA9FF75E156D38AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
Manifest number:          A7
Signing time:             Tue 22 Jul 2025 05:41:54 +0000
Manifest this update:     Tue 22 Jul 2025 05:36:54 +0000
Manifest next update:     Wed 23 Jul 2025 06:24:54 +0000
Files and hashes:         1: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: uS9gEtZh/ZMXQ+qjbrJxjdhnMbgdt1/2M3Fm3ckm0o4=)
                          2: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: ad3eCylfdMfYW/Id31ooquQQLvZwumdWGj+lszfaEsA=)
                          3: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: Wt7cVymDfWBwMzR8hqsJLmmyo1G55vHli1MG8ova8P4=)
                          4: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: bLMKUTu2LDh7TH4JEFo2TwGKCx3JiqqNy6hRd14etMM=)
                          5: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: sUFXVk5mJuzGXi+txvF0jHfWX/7COhdmW+wdhnGLLbA=)
                          6: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: 4eRihxuyWrFmyrmWNHP+q80BiQuGj/+XTMKJH0kDcVI=)
                          7: 3139342e3132342e3233342e302f32342d3234203d3e20393936.roa (hash: ZoxbCHQMtNZPfbUxrxLpOcXkuKUfw+Blft69mSm2oZk=)
                          8: 3139342e3132342e3233342e302f32342d3234203d3e203534333339.roa (hash: wdUsagydvVBIUao6PJHWRop4oPMEKXc9pJyNsG4SW9o=)
                          9: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: hZUNrJfyUHgUntGAqdSVlBaE4wglKTi9y0zmmly1bMY=)
                          10: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: yq+hWHhfyocRCOJbnYGyzdHlkfHxXD4gPxuVgEPCc0g=)
                          11: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: 0XA7loK9zcLZ4LH8gJRLIhKhFochpbrC40dXD0XEE/8=)
                          12: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: qgpa17rXBGEZyX0zTURKp2TS7HA9WA0LAdj3r9yq+jg=)
                          13: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: lmVh0tkdqz2ZaktlfIJzzJLuyL6wItEcUEPI+PVNqdo=)
                          14: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: E+WPtm+HS9AVsakqcLrBjACoAm/NbChhrd4PG4s+X5o=)
                          15: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: Bvg0bczZRvr0hNeXj13n0Q8N1O34FXLeiihKmXvd96c=)
                          16: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: MbX2Jo3+qNy9yJ51qumhhpSA5fjjpKXnL9+Ixdd7q/M=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:2e:97:c0:99:d8:c2:0d:2c:10:62:b8:ba:9f:f7:5e:15:6d:38:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
        Validity
            Not Before: Jul 22 05:36:54 2025 GMT
            Not After : Jul 23 06:24:54 2025 GMT
        Subject: CN=6F0544CA6D0B2EB412D2F3451DB6D6B454E1F60F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:48:5c:25:42:ca:83:0b:e1:cb:97:4f:f2:63:
                    03:72:e8:0f:06:58:7e:9e:40:d2:a0:df:48:c5:e8:
                    ef:98:bc:08:da:a4:6d:11:92:78:ed:e8:89:0b:d8:
                    9b:d6:b9:61:0f:cd:ea:f1:10:35:43:c1:2c:eb:42:
                    8f:c7:3d:df:16:21:19:db:9c:cb:2e:48:1a:78:32:
                    ed:fb:44:56:45:f0:32:fe:21:31:cf:23:84:11:c3:
                    d2:27:8c:14:39:a2:b2:84:43:38:97:90:a9:f4:53:
                    4a:fc:e0:00:4f:f4:c5:5f:c0:20:2a:44:d7:ba:1e:
                    8b:6e:ea:ff:4f:83:07:9d:5e:49:25:d3:3e:61:2c:
                    59:f9:a6:19:9c:47:a5:4a:64:30:93:a8:80:ca:4e:
                    2e:b6:e9:2c:b5:1e:90:c6:a0:4e:9c:dd:ef:d5:58:
                    a8:d4:b4:0e:5c:96:80:7c:57:2b:2e:11:d1:89:9e:
                    45:74:24:bd:8e:ff:d3:7d:1e:6e:45:35:37:81:42:
                    07:92:3b:bf:4c:40:45:6b:79:c5:7f:71:3e:af:39:
                    5b:34:68:05:b1:06:cb:aa:1f:c3:59:81:de:3f:2d:
                    f7:c3:c2:7b:ef:73:0a:85:97:50:34:dd:62:e1:84:
                    64:95:6f:59:1e:86:b5:a6:70:c8:5b:13:6c:77:3d:
                    86:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:05:44:CA:6D:0B:2E:B4:12:D2:F3:45:1D:B6:D6:B4:54:E1:F6:0F
            X509v3 Authority Key Identifier:
                keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:68:20:7c:e6:2b:5c:3d:51:c7:89:52:15:8c:73:52:02:4c:
         b0:b3:4d:19:62:cb:91:f4:8d:01:ba:6a:9e:5d:40:ca:7a:96:
         21:d5:62:c7:50:41:5d:e6:2f:ca:a6:1a:6d:d6:85:5a:39:00:
         29:30:4a:5c:c1:b0:b8:e0:72:4e:6e:f2:51:8c:5f:5a:b7:44:
         63:09:4f:a9:86:08:bc:f8:d4:da:dd:2a:ce:a6:f5:cd:c8:89:
         6b:52:8b:6b:5f:1a:83:d3:ce:bf:76:b5:a2:d9:a5:6e:8e:df:
         73:1d:7a:e2:9a:ca:e3:b8:44:99:0a:43:ef:9c:d4:5e:aa:e6:
         7c:3c:1f:eb:cc:22:9b:d8:c1:6d:30:56:c7:90:25:c1:ca:d4:
         e7:65:1c:52:53:e3:26:51:f3:48:88:1b:00:83:ef:b4:24:ec:
         c9:40:ae:1c:65:b5:0f:4b:83:70:2b:2f:07:15:46:09:a5:5f:
         54:e9:02:0d:c0:23:e9:ad:8a:3f:99:be:58:3c:d0:93:86:5d:
         b6:76:46:99:1e:64:79:2a:d4:fc:86:82:4a:f0:48:da:8a:4c:
         09:56:02:1f:ab:23:2a:f5:cf:5b:6d:13:ed:f2:99:d5:69:38:
         bb:d8:a1:13:f1:57:db:b5:aa:d4:25:7c:a0:f7:01:0c:cb:fe:
         9b:27:c3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:50:19 2025 by rpki-client