Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
File:                     3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json)
Hash identifier:          VlFYjeRKgGkwywM2jDhOz2Rqxdjaoii9ZiIPTsycfQc=
Subject key identifier:   8E:25:89:20:41:E4:3D:26:4B:BB:F4:1B:9A:F6:AF:75:1B:7F:52:94
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Certificate issuer:       /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial:       6F2D0F9E1962988D63EC82B963C5261369C74BA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
Manifest number:          0540
Signing time:             Thu 24 Jul 2025 11:12:05 +0000
Manifest this update:     Thu 24 Jul 2025 11:07:05 +0000
Manifest next update:     Fri 25 Jul 2025 14:38:05 +0000
Files and hashes:         1: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: O475B5YNr+mk4vbByMFVmoqbRTenx4kmx66C3HIfdsg=)
                          2: 3138352e3234342e39352e302f32342d3234203d3e203230343733.roa (hash: wcPx+O7KmTHA1Z17UF9VIIdo6IS06Ij+d7NLeipHdoU=)
                          3: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: +zgqg7oCfaFMqowtNn81ipaj3irDs5wSCtc6B41Oes8=)
                          4: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: L+rO+MXrQK3tGBKkhTiQd3Pp/oT0n0nJ8NfAxPcZ/Ik=)
                          5: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: 5U9kh/Q1+pD8ktgLTSH2rTlmtF2qNT/hbi1XnCHITmo=)
                          6: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: KhYwWjM/5tZMAc1Ys2Qi/Z3IxKzkYaHG79mNsaA679A=)
                          7: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: RdOuxQjMUqkQryMcrXonWYYeJva5RY8rohAdG2ITJdw=)
                          8: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: NTiGjgrJWtlD9Roa9FRQtbjOAAcPR35U4Ayfj8SpKuI=)
                          9: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: BX+afd5v4CnQw1Csb+gERO9bOUf9cjiesQkq05EVznU=)
                          10: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: W9NdT6aoX4s9PghUA97T0GAxnEF0Q0u3VMj+QX70R5Y=)
                          11: 3138352e3133302e36322e302f32342d3234203d3e203239303636.roa (hash: mH/CiZmwU0yIfVsdjhTMAG/KAtonINfckXbmsVpawiw=)
                          12: 3138352e3232392e3230332e302f32342d3234203d3e20323036373335.roa (hash: +12elja/TRgK8YWG00PTJRaGaFKqfWK9R0yIngktuC8=)
                          13: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: 2mJFb3j98iS3WwOyYDzT/44zu56P1Mt1+w22nAIK9Eo=)
                          14: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: nzc+7vTx0fxusJ8QBUU0nZ0s/13eeYO5i8RfnoHHUhc=)
                          15: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: krs6rxjGgkgxIC0XFsSJIDbJbJTaOxRVYKdhwP98j0o=)
                          16: 33362e3235352e39342e302f32332d3233203d3e203632323430.roa (hash: cEllpKs9D7QXOnlcaRDylPTaKGxvLoUwJx/hEnrKHPU=)
                          17: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: /OGL5Xocpa/mA4GEutGuQoiWc4p3DBj9VM0kpmdQZxo=)
                          18: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: aTFuiZRKSKlOcP1bFw/QEJGr9kwsAqFvqfR62oNQfMc=)
                          19: 3138352e3232392e3230302e302f32342d3234203d3e203139343337.roa (hash: EP6RD+ZuD8/aeGRdu5DeM51xsrxE2M7oAfAneTY5Btg=)
                          20: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: 7MRl2ndToXr+/Nwpi0fWFQSP/EKXsP73R/4IMWd5dgM=)
                          21: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: fyEm36B55a1pd4HLESzxtTjALoxzu4leetK2j/pzqHY=)
                          22: 33362e3235352e39322e302f32332d3234203d3e203139333138.roa (hash: FthEwpOIKT5rKWCqEXY9gMB5simU3azPQORqXvTeqVo=)
                          23: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: pZ5orJfPM2Swty8pViUFi+3AU9F8dWfI/4RA51dT4rY=)
                          24: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: ezbmX/yRe+yRvkLs/8FFZoupwCiBI67aZ+0JqkrMl4Q=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:2d:0f:9e:19:62:98:8d:63:ec:82:b9:63:c5:26:13:69:c7:4b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
        Validity
            Not Before: Jul 24 11:07:05 2025 GMT
            Not After : Jul 25 14:38:05 2025 GMT
        Subject: CN=8E25892041E43D264BBBF41B9AF6AF751B7F5294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4d:89:da:1d:75:4d:14:9b:a6:6f:66:8c:f6:
                    9a:2f:e0:86:7e:dc:49:81:d5:22:3a:51:56:68:b8:
                    8b:49:fc:99:de:d6:c3:f8:bf:0f:3c:08:09:a2:aa:
                    74:3c:99:bc:90:f6:e7:b5:1e:e1:9f:37:13:2d:93:
                    ab:2c:9e:65:ec:f5:7a:9c:48:f4:96:f5:63:db:36:
                    9e:aa:be:75:1c:e5:69:3d:c5:2e:e6:e1:0e:31:62:
                    66:36:31:5b:05:50:4d:64:e7:70:18:98:ac:69:0e:
                    c9:7f:4f:e5:1f:ac:07:15:ee:c6:3b:80:06:77:3d:
                    70:f2:98:0f:84:70:a6:04:a7:93:10:b9:0c:2c:5f:
                    7f:6f:38:32:67:70:30:cd:79:bb:4f:70:e5:5b:18:
                    80:bd:e3:1b:23:e7:f3:50:92:8f:bc:41:76:17:f6:
                    ec:02:5f:6d:65:cb:77:d2:27:3b:2c:11:cb:fd:8d:
                    ac:74:6d:50:51:b6:16:3f:60:e4:a7:9d:13:70:51:
                    9a:a4:19:61:3c:8f:df:7a:d6:45:91:26:51:d2:1d:
                    19:70:75:f6:7d:ad:8b:c2:be:fd:b1:b3:33:a1:64:
                    80:4b:0e:62:60:3c:7b:90:21:77:dd:ec:6c:bf:13:
                    20:f2:9f:61:b0:a5:07:93:7c:de:47:d5:25:bb:66:
                    e3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:25:89:20:41:E4:3D:26:4B:BB:F4:1B:9A:F6:AF:75:1B:7F:52:94
            X509v3 Authority Key Identifier:
                keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:49:71:d8:eb:cc:1b:f4:3c:25:0a:6e:e6:55:8a:24:81:ce:
         56:1f:7a:0a:84:85:5f:0b:b0:c7:74:89:11:d0:72:3b:7d:e6:
         4f:7a:fc:20:4e:a6:19:55:10:47:49:3f:58:b0:5c:a9:e0:b8:
         cb:6f:ea:5f:1c:08:3f:b5:bd:ea:51:fe:80:79:59:ef:4b:71:
         69:e9:3a:34:18:72:24:4b:24:b4:24:3b:34:c5:aa:50:11:b7:
         b7:63:6f:e0:8b:38:38:41:71:47:e5:d4:cd:15:7d:68:8b:7a:
         74:fd:8f:2d:e4:a3:6d:64:51:3c:f3:b6:ca:de:a4:3e:45:f0:
         bb:56:76:95:c0:6a:98:f3:d5:2f:c6:b5:59:79:e0:7d:c9:c4:
         38:c3:b8:e1:71:38:d1:f8:26:c1:7f:46:bf:62:73:29:6a:1d:
         7b:2b:95:1f:1f:da:d2:dd:f7:71:7f:94:73:28:d7:e7:f4:1b:
         5a:96:cb:ac:14:92:cf:c6:0f:4a:7e:2a:44:7c:c2:46:5b:d5:
         c2:a6:b1:83:63:78:8b:82:62:5a:d9:36:7d:8c:4e:fe:38:97:
         68:c4:4a:a4:34:ba:25:e0:f7:13:de:92:a6:19:10:67:c2:7d:
         ba:31:85:6d:ae:34:df:3f:f1:3c:1b:c2:03:a8:6f:31:10:d7:
         63:ab:c4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 20:47:02 2025 by rpki-client