Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
File:                     3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json)
Hash identifier:          kzX7FDy/Kzehe04VcuEMzTfv4MMg7Q1+fAX6e+zzjpY=
Subject key identifier:   3C:C3:12:CC:88:CE:02:BC:E4:9B:19:7B:A1:23:CB:A3:6D:C1:B3:85
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Certificate issuer:       /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial:       1DD71CC868FAC38144CCBBD9DBF75CECF87300
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
Manifest number:          053E
Signing time:             Tue 22 Jul 2025 22:01:56 +0000
Manifest this update:     Tue 22 Jul 2025 21:56:56 +0000
Manifest next update:     Thu 24 Jul 2025 00:55:56 +0000
Files and hashes:         1: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: fyEm36B55a1pd4HLESzxtTjALoxzu4leetK2j/pzqHY=)
                          2: 33362e3235352e39322e302f32332d3234203d3e203139333138.roa (hash: FthEwpOIKT5rKWCqEXY9gMB5simU3azPQORqXvTeqVo=)
                          3: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: krs6rxjGgkgxIC0XFsSJIDbJbJTaOxRVYKdhwP98j0o=)
                          4: 33362e3235352e39342e302f32332d3233203d3e203632323430.roa (hash: cEllpKs9D7QXOnlcaRDylPTaKGxvLoUwJx/hEnrKHPU=)
                          5: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: W9NdT6aoX4s9PghUA97T0GAxnEF0Q0u3VMj+QX70R5Y=)
                          6: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: +zgqg7oCfaFMqowtNn81ipaj3irDs5wSCtc6B41Oes8=)
                          7: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: ezbmX/yRe+yRvkLs/8FFZoupwCiBI67aZ+0JqkrMl4Q=)
                          8: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: RdOuxQjMUqkQryMcrXonWYYeJva5RY8rohAdG2ITJdw=)
                          9: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: pRlGSmEJ40IwDMD2uxXSuUeJVfCTqo1ZFsNBIV/+3zQ=)
                          10: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: nzc+7vTx0fxusJ8QBUU0nZ0s/13eeYO5i8RfnoHHUhc=)
                          11: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: NTiGjgrJWtlD9Roa9FRQtbjOAAcPR35U4Ayfj8SpKuI=)
                          12: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: 7MRl2ndToXr+/Nwpi0fWFQSP/EKXsP73R/4IMWd5dgM=)
                          13: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: /OGL5Xocpa/mA4GEutGuQoiWc4p3DBj9VM0kpmdQZxo=)
                          14: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: L+rO+MXrQK3tGBKkhTiQd3Pp/oT0n0nJ8NfAxPcZ/Ik=)
                          15: 3138352e3234342e39352e302f32342d3234203d3e203230343733.roa (hash: wcPx+O7KmTHA1Z17UF9VIIdo6IS06Ij+d7NLeipHdoU=)
                          16: 3138352e3232392e3230332e302f32342d3234203d3e20323036373335.roa (hash: +12elja/TRgK8YWG00PTJRaGaFKqfWK9R0yIngktuC8=)
                          17: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: KhYwWjM/5tZMAc1Ys2Qi/Z3IxKzkYaHG79mNsaA679A=)
                          18: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: aTFuiZRKSKlOcP1bFw/QEJGr9kwsAqFvqfR62oNQfMc=)
                          19: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: 2mJFb3j98iS3WwOyYDzT/44zu56P1Mt1+w22nAIK9Eo=)
                          20: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: 5U9kh/Q1+pD8ktgLTSH2rTlmtF2qNT/hbi1XnCHITmo=)
                          21: 3138352e3133302e36322e302f32342d3234203d3e203239303636.roa (hash: mH/CiZmwU0yIfVsdjhTMAG/KAtonINfckXbmsVpawiw=)
                          22: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: BX+afd5v4CnQw1Csb+gERO9bOUf9cjiesQkq05EVznU=)
                          23: 3138352e3232392e3230302e302f32342d3234203d3e203139343337.roa (hash: EP6RD+ZuD8/aeGRdu5DeM51xsrxE2M7oAfAneTY5Btg=)
                          24: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: O475B5YNr+mk4vbByMFVmoqbRTenx4kmx66C3HIfdsg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 00:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d7:1c:c8:68:fa:c3:81:44:cc:bb:d9:db:f7:5c:ec:f8:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
        Validity
            Not Before: Jul 22 21:56:56 2025 GMT
            Not After : Jul 24 00:55:56 2025 GMT
        Subject: CN=3CC312CC88CE02BCE49B197BA123CBA36DC1B385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d3:3b:3f:9c:cb:63:19:99:b5:51:54:fb:65:
                    4e:0a:7d:d0:1f:3b:86:2f:2f:7d:61:d0:5d:2a:56:
                    c7:2e:1a:9a:73:a8:44:cc:e4:b9:da:f2:f1:57:08:
                    f3:a1:28:48:d3:d8:74:e7:98:ab:82:52:ba:59:6c:
                    37:60:d9:a8:23:25:1f:c9:69:d7:63:0e:f8:09:b5:
                    e4:df:ba:e0:4e:3c:ef:c4:51:a2:dd:c4:e2:e9:89:
                    10:60:af:a5:dd:87:35:5d:82:79:22:46:b9:43:53:
                    87:1d:9e:59:72:e8:e6:81:29:40:3e:5d:f9:da:ec:
                    76:51:ce:1d:e0:92:b6:5a:9c:dc:83:ab:36:13:f0:
                    d0:06:46:09:c0:84:fa:a7:e6:9c:c6:f8:26:0b:da:
                    69:61:fa:15:9a:43:3c:80:19:b8:16:e2:82:d7:8f:
                    e6:72:3a:e8:88:23:c5:0d:95:34:8f:ea:6d:85:21:
                    34:64:bc:12:46:45:4b:1d:0e:ed:56:1e:4b:19:25:
                    a5:ae:32:05:b5:a6:9f:9f:ad:e2:d2:e8:6a:b9:2f:
                    06:32:63:49:d1:aa:6e:a8:e1:0a:83:13:41:60:91:
                    c6:3d:39:92:0c:a0:29:f9:8e:5c:1f:21:7e:14:d5:
                    a7:5f:3d:be:e4:4e:bf:b3:fb:67:63:19:b7:c1:5a:
                    af:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C3:12:CC:88:CE:02:BC:E4:9B:19:7B:A1:23:CB:A3:6D:C1:B3:85
            X509v3 Authority Key Identifier:
                keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e9:bf:02:d4:cf:ca:72:bb:07:33:55:fe:d1:0b:00:2f:a6:
         cc:a8:bb:81:fc:3a:d5:24:94:ae:72:52:17:a2:6a:6b:44:3a:
         41:a9:f3:b3:80:47:af:99:d7:e5:b9:92:96:29:5e:d8:94:7f:
         37:31:3b:c0:42:8d:3c:13:15:06:3a:8b:6a:1a:42:42:73:3c:
         af:8d:b7:e3:72:19:df:e0:d9:13:6d:20:68:81:f0:5b:90:d7:
         1b:b4:6c:0f:fc:3a:29:82:37:89:9c:63:05:f6:ee:5a:85:d5:
         47:12:ec:e9:fa:e2:99:62:28:bd:12:e7:2f:df:e1:b4:7b:df:
         96:53:e1:0f:f8:cd:01:90:11:1b:e1:74:66:5e:74:00:3a:22:
         40:c4:79:96:fd:1e:22:d1:09:80:0c:9f:39:e1:0f:d8:96:54:
         a4:99:12:3c:96:5b:84:a6:77:6b:bd:cd:ba:61:51:6e:32:b4:
         b2:6e:93:f2:95:07:f2:6e:4b:81:e4:e3:50:32:06:2d:7e:e3:
         ba:3e:a5:e5:90:3f:48:19:d2:7a:1b:60:3a:49:95:30:aa:62:
         ad:06:97:30:10:c5:2b:d8:5a:17:61:06:b4:02:47:74:f9:81:
         cd:04:11:6d:ce:c1:40:bd:84:bf:ca:3a:41:3f:72:c8:14:de:
         7d:fd:d2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:58:12 2025 by rpki-client