Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
File:                     0839A93DAB544C296FFA143456844A8B2818B1D0.mft (raw, json)
Hash identifier:          YwM+onpGSbLinSoB6PJVGmT9P/hKsDofVwLiy/i4wIQ=
Subject key identifier:   D1:9C:04:93:1F:31:4E:E0:BD:C5:4D:FB:F1:FD:16:FC:87:85:EA:57
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       34DB09151E70539FEB6BD0A68DEB7E19FA997CC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
Manifest number:          0287
Signing time:             Sun 20 Jul 2025 15:29:46 +0000
Manifest this update:     Sun 20 Jul 2025 15:24:46 +0000
Manifest next update:     Mon 21 Jul 2025 18:21:46 +0000
Files and hashes:         1: 326131313a663263303a323a3a2f34382d3438203d3e20323032333539.roa (hash: SlyimbxFLoCHsFWWpUZjHgmLHKv7rmMtitzOtZT7wdo=)
                          2: 1D570B984E9C5E382B0A879AA21F6518621F059F.cer (hash: w4LlrRiZpjCqpbWEegKCJHPhvyvwSjODOuNEEV+R23o=)
                          3: F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer (hash: xVngRZoqmU3ug9ZE0lvPtcRq8CjSyQiMIGiV8ww3DYk=)
                          4: 6482EA67DB858D1440DD67B955223E4341BA4E97.cer (hash: lKlfGm9oX8e/vMr1ifVDL2vFahUuPFOtcD1F8uJvy/E=)
                          5: B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer (hash: 8IYDJ2eIDos7JCscqio8m4CtvsMZIm87tSAcUKKXKKg=)
                          6: 326131313a663263303a333a3a2f34382d3438203d3e20323032333539.roa (hash: XIj+fw+vRgYTpRxwvO3XvTkfLsFczQo4AujMyz3iud4=)
                          7: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer (hash: yTl2Qe0zE7utVIXFFzinc49BbSbwlbqpMj5PC0Y9RLc=)
                          8: 326131313a663263303a666635303a3a2f34382d3438203d3e20323032333539.roa (hash: RTtc7kvQY4mgVpXb0OGaj3d8CGbqE+rrAFaJtMYV3Gw=)
                          9: F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer (hash: +U9s3nk3zcGTMVxdfeeaoEIEhjnpyi2zUiI59YfVir8=)
                          10: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer (hash: fNICkLgDOQLQyXcYC+Mx7zWPSiGBhLSE5Btg3FNYCrk=)
                          11: E02C2B37910DB974089166C0D244DE386B5762C2.cer (hash: NQL7Q+vPifLFy80HHQ35NSOJH0JVOxv33NgrFx9SMgU=)
                          12: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer (hash: 1nhiF+DUP666qHgL0W5CdOzUBH6sH332zL1MCTVIgUk=)
                          13: B50D92304CA867525C648A07380EA065FD352DEC.cer (hash: jeLezi/e/tiKuflcEffKB+Cet8nw848xqf2VW1otgMA=)
                          14: DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer (hash: 3vaivSKVhBLosaem2QlCMLHyP8nE7HqRRCEcYWTaKv0=)
                          15: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer (hash: xWjJR6Nxgh4wTbQyfSpM8roZ9e57XZ5G/Wz+HfAB8Qw=)
                          16: 326131313a663263303a313a3a2f34382d3438203d3e20323032333539.roa (hash: ZivrOJ7iiOCUg/HqF4j2xuXr75dIBf1hdqQTAxY+xwU=)
                          17: 970AD94C83244100A97F9186D53DADAB07995EE9.cer (hash: RWBnNEK86OTd+EsaiL4tRRo/ytLMfihyN/KLzSQWa5Y=)
                          18: 09F041F60B21B649820D0FEE0D7654D63DDD080D.cer (hash: YD4L9bqvaUV95bBh8Ju1YuFHRvMJfo/DkcF98/HxW9I=)
                          19: 1A889E0950A8B6489E67E7C7189539FB887EAD71.cer (hash: QvMFt41RXdcJq7gp5tnRNXaXgfSmaaXZCupMATLSYFk=)
                          20: 326131313a663263303a3a2f34382d3438203d3e20323037393630.roa (hash: 3TxnMdPT5hHYItzRe6t9ErU/wv40unaDW97hsOh3H4M=)
                          21: 323030313a3637383a6663383a3a2f34382d3438203d3e20323037393630.roa (hash: UNIFWQcfDb9TIYM9mTcmUs06i4tbcfV6n3m2ESGFPVM=)
                          22: B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer (hash: zKaN08cZjSwmv4VxKubYdVn/CoX70Fn+0x6DYvBEbBM=)
                          23: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer (hash: Zmzv7fBFqGLxjYc480gPrSI5W4OUPciQIi5quu5IaLg=)
                          24: 3139332e332e3136352e302f32342d3234203d3e203434333535.roa (hash: 8+PpyJbtCrTrR5hMXklV6jn0Gbpl8JRn1mZ/sbUihXw=)
                          25: AS202359.asa (hash: 6VIFnTZlZo7nQ/fI9Z3+DaeUn3Y1Zv+vHdQ94mzfXkg=)
                          26: 0839A93DAB544C296FFA143456844A8B2818B1D0.crl (hash: vtHPBVpzjsJNgyLU/OE8ATlj0aapIu23cavZHfcYRu0=)
                          27: 3139332e332e3136352e302f32342d3234203d3e20323032333539.roa (hash: PN7OPw6x8T4uLhMmLkm8sVVlgwZlpPub1GieXN4o6dQ=)
                          28: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer (hash: CEGJbTLl4BFPIQu0BkXUdZ1K35M3vSyHeqh8rVvhUfc=)
                          29: 4742E76772F118A935D69FD40F69858085C80999.cer (hash: PXNlleSIOJFtms7j+EwWK+dQ4coJG0uvhI3LcgkFsFw=)
                          30: C2724A29EF989A4340933B8130B402DD4627A501.cer (hash: 984ckCJkp1VtRhMMUPKyUG2Uubk2ftZ4dLd3NzPeeY0=)
                          31: 326131313a663263303a666630303a3a2f34382d3438203d3e20323037393630.roa (hash: 6+o/SVChTjHbiYUJ03zyc6Ju+ZkXcW4hDy3lbeRRz+k=)
                          32: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer (hash: gW5/r+rTqmiwY5x1Qtx3z5ezWcBU9AkoYGR7QTJTGt8=)
                          33: 31586760843F668A816117EA02F6F30FE8F9C359.cer (hash: sdjQP12grMA84wrOD8soDanrM9KsCHOhQQgZ6YwFl/w=)
                          34: 326131313a663263303a343a3a2f34382d3438203d3e20323032333539.roa (hash: B4MACJgrYv8gOFyM+OgYWOFeMkOQBLykzkdPSnyxEgo=)
                          35: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer (hash: e/9HYgp/mohWVL/xi7PmXFlHj2B3IcMqES1nyxAUKjo=)
                          36: 326131313a663263303a3a2f32392d3239203d3e2030.roa (hash: SFi79UqiX3kS2cuHdwRtphv59FDPSt5CMOnrnul0UdU=)
                          37: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer (hash: NscCIMsZ2yU9wFViqqUFMP9l2GG+IJImIYDZVt1y4cg=)
                          38: 62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.cer (hash: L9VSFOsG4sCFFaXWcNTMiKK4PkL1oeVJZtfXUCMq90Y=)
                          39: BBED14E9793905EC1EA5CE10AA03C497D737B115.cer (hash: m+ztv5UmtHgdFMzFwqLzYGsJqAw/AeqFEUgffywu2Zc=)
                          40: 6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.cer (hash: 6I8CkH37Y+2qxrW8WAlVcQiiukOkkakJShyNFWsBV3k=)
                          41: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer (hash: jH9R6EtyMHUcM8XcpEu+SmgJb0fp9TQ+h2bdy0JKm8s=)
                          42: AS207960.asa (hash: RBx5PyqAoDrY5adMVJOexhNWG9/6VgBD3egnyXHlPHY=)
                          43: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer (hash: Z+xIm/9vNqFKmLWBcsaGK8BJ1alQ9TOcEU4cwskAlyE=)
                          44: 44C4C913D58F5EF847996241E969B60A1E3F1389.cer (hash: E3ak7egeb7oLQq4pNOV672llzd9VjZ7X1tZw4IAYLms=)
                          45: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer (hash: EluTWf0GQ95lG3mbjIrTeS+cckdmvkzXIoud3lIjd+s=)
                          46: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer (hash: fBqC9ryjQi6+GMXhqT8gchFPNagFwAwTKLhvHv66WwQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:db:09:15:1e:70:53:9f:eb:6b:d0:a6:8d:eb:7e:19:fa:99:7c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Jul 20 15:24:46 2025 GMT
            Not After : Jul 21 18:21:46 2025 GMT
        Subject: CN=D19C04931F314EE0BDC54DFBF1FD16FC8785EA57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cf:25:58:1a:db:c9:69:27:07:08:c8:fc:6c:
                    02:6c:97:ff:e7:47:55:21:a0:95:e9:97:58:06:4b:
                    57:80:8a:c1:1f:16:11:c6:01:fb:fe:6a:15:79:19:
                    95:1e:2f:5c:24:53:92:ce:80:45:fa:87:09:c7:82:
                    95:e9:b1:77:82:b3:dc:0e:1c:5b:a9:5c:34:50:72:
                    61:b2:f7:73:81:6b:3c:f8:9c:ac:55:f3:74:13:18:
                    c1:76:39:5d:44:bd:75:f5:05:10:3f:22:89:5f:5f:
                    d1:cf:2f:4d:ac:bb:17:db:8e:32:cc:3a:6b:c7:cf:
                    af:c4:51:a9:48:38:0c:15:15:b0:4d:c1:28:f1:43:
                    9f:0d:3f:9f:84:e9:27:12:8e:74:4f:9b:34:34:1f:
                    db:ac:28:52:75:d0:28:62:bc:dd:bd:9e:b6:3c:f3:
                    f6:19:f2:83:76:f2:65:0c:21:50:50:77:a1:f1:44:
                    3f:14:1f:78:47:54:d0:d9:83:48:aa:cd:77:fc:69:
                    22:62:d6:6e:d1:7c:ae:46:cd:ed:76:c5:24:f2:4c:
                    a8:13:e7:fe:9a:30:a9:a6:6b:88:ff:45:3c:f3:4b:
                    8e:d2:5b:20:25:81:f0:e3:24:c4:89:f7:6e:57:2e:
                    01:2d:0e:ac:0b:52:fd:0c:14:fb:2c:de:ef:af:fd:
                    ae:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9C:04:93:1F:31:4E:E0:BD:C5:4D:FB:F1:FD:16:FC:87:85:EA:57
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:43:0b:a4:2b:ee:79:ef:ea:d3:6a:e0:ab:cc:42:59:46:a3:
         75:56:c4:f5:db:cf:04:3b:39:bf:3c:e4:ba:8a:ae:d9:6b:96:
         6c:ce:bf:bb:ae:18:1a:be:9f:d3:76:0f:a8:5d:6b:e8:ed:91:
         56:5c:f5:f2:54:db:79:4f:be:a4:48:42:13:c0:c4:c2:07:4f:
         5b:2e:af:bc:0c:4f:5f:cd:4f:dc:1f:3e:6a:d6:4c:0a:3a:d6:
         24:f7:33:8f:fb:df:64:26:9e:4d:c6:d2:30:83:4e:ec:26:11:
         a0:c3:72:4d:da:fd:60:23:69:50:fa:c6:60:af:d9:9d:cc:c3:
         00:96:e2:a5:21:40:97:48:fe:e3:7a:7c:41:df:0c:33:63:08:
         79:62:dd:6e:d8:8f:7c:43:62:a0:18:e3:81:67:9a:2c:48:63:
         7c:a9:9a:d4:85:23:b0:2e:1a:29:8a:5c:13:0d:31:d1:90:b4:
         fc:94:a1:62:7e:87:09:0b:58:e6:28:54:dc:85:84:fe:3e:ab:
         2b:95:86:a5:6d:9a:e1:5f:b2:cb:e5:b8:84:f8:9f:4d:72:8e:
         5c:c9:00:0c:bb:eb:b8:b9:4e:d3:7f:80:26:22:16:69:16:50:
         b3:93:11:e8:e8:ec:52:37:8e:c6:88:cf:91:26:e9:3d:16:cc:
         85:fe:a1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----