Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
File:                     3134EE987E08D8B5583FEEF621A03150C4F35434.mft (raw, json)
Hash identifier:          6lmocavnCa3VMVBMVTRW4qGJ1l+G0iESLBumybgNMlw=
Subject key identifier:   F6:3D:80:4A:A6:B6:D9:54:DD:8C:F7:BC:28:86:5E:D3:ED:51:D9:8B
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Certificate issuer:       /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial:       27A6AE28EC2E03EBBDE66FA2226958FE0E9265B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
Manifest number:          0281
Signing time:             Fri 06 Jun 2025 07:26:20 +0000
Manifest this update:     Fri 06 Jun 2025 07:21:20 +0000
Manifest next update:     Sat 07 Jun 2025 09:17:20 +0000
Files and hashes:         1: 326131343a316563373a666666633a3a2f34382d3438203d3e20323136333339.roa (hash: Xpu7YHsE9Uu/Z34+AM32q6wFmIndeEkcOzm4kV29gZU=)
                          2: 326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa (hash: Kuq/T5/58120SUpTorsr1ML70JXySqoRjipE0Min4z0=)
                          3: 326131343a316563373a323030303a3a2f34302d3438203d3e20323133353135.roa (hash: ei7uKbr21cStunIFD4/+QnxpXX+lUv4yRtUBnFqqQIw=)
                          4: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer (hash: BF/TWOjb2Ii4r0osOdYS/rUG+zOQPpS2tAXbzEo5Wzo=)
                          5: 3134EE987E08D8B5583FEEF621A03150C4F35434.crl (hash: xE2aKoA+PjMlAEBhpzsVPh08xjfBgWKRlP4BEqwbCbU=)
                          6: 326131343a316563373a313130303a3a2f34302d3438203d3e20323135343337.roa (hash: LSZWA34YwCO9D6JtWEG8LpUQ1o3Anb+MGXWPU43gT4A=)
                          7: 326131343a316563373a666666643a3a2f34382d3438203d3e20323038343533.roa (hash: cQGzH58GG/5AlClFkvMjXXZFAsalmfdZS0xTjTmJx5Q=)
                          8: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer (hash: jLV89odZdgTYzYRcumFoTReP+gmmk+raXpcoYf0+wxA=)
                          9: 326131343a316563373a666666663a3a2f34382d3438203d3e20323030313739.roa (hash: jxX5jejatt6POI8r69/OIdC4tpqjlqDh7/l5cMHt1Lc=)
                          10: 326131343a316563373a313030303a3a2f33362d3438203d3e20323134343831.roa (hash: mAC3tE41nQDojIaT/TKY9BuNdhC77RQ6VPm5O+XWCIE=)
                          11: 2AFACA7F316DBE0CFF394F9D5952E52992F185F1.cer (hash: TzD6pGlBEMmZI/OlLFvK4Q5nKNXovDA7wOkDjfwohQo=)
                          12: 326131343a316563373a666661303a3a2f34382d3438203d3e20323133353135.roa (hash: uw8e5+V55rs+wlENeJdGRICWtffz7xQmePuL+3U/nIU=)
                          13: 326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa (hash: svJE9s6z+thIvIbk0ivLw3r/3W8HiAYka1FWVnsnFgw=)
                          14: 326131343a316563373a666666653a3a2f34382d3438203d3e20323135343733.roa (hash: tXMEYMrTa38uR0L+SQ9LimzmDrpxo8zhMIaTp0PKkR0=)
                          15: 326131343a316563373a666230303a3a2f34302d3438203d3e20323134373435.roa (hash: nezQHcq4MVb+lW9u+9DC3TKuGQsy0c5l+5+DxrvsPzo=)
                          16: 326131343a316563373a666530303a3a2f34302d3438203d3e20323135343637.roa (hash: 8asU86WRYRMPRuHXiCGWb31YsN6wlyGCHOUyjPq08QE=)
                          17: 326131343a316563373a666130303a3a2f34302d3438203d3e20323134333635.roa (hash: mfRAEfAM/Ik+prWgDH92jLkjVIcmPRfzo1kMxVmUq4c=)
                          18: 326131343a316563373a663130303a3a2f34302d3438203d3e20323134313838.roa (hash: gXY2AMFw8/+rSlIvUcyO+0lq7UArJ6lUsKRFR48Pbdc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a6:ae:28:ec:2e:03:eb:bd:e6:6f:a2:22:69:58:fe:0e:92:65:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
        Validity
            Not Before: Jun  6 07:21:20 2025 GMT
            Not After : Jun  7 09:17:20 2025 GMT
        Subject: CN=F63D804AA6B6D954DD8CF7BC28865ED3ED51D98B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:42:15:71:42:7b:cb:69:30:05:c5:51:2b:80:
                    29:36:e5:0b:e2:cd:16:05:05:72:e6:3c:b0:d8:99:
                    72:fb:ca:76:10:4a:e7:6c:fb:66:fb:26:b9:b4:8e:
                    29:e9:fc:54:3f:a1:48:a3:a7:e4:63:80:33:76:9b:
                    88:70:5b:4c:d3:ca:68:b0:de:17:74:eb:f5:f2:34:
                    c4:b9:b6:60:48:ba:1d:6d:8a:d8:66:cb:8d:8b:8f:
                    31:f6:b4:37:e1:01:f0:a7:ba:1e:06:5a:69:b8:a3:
                    95:f7:b9:43:4c:2c:21:a5:72:57:c6:5f:ae:a1:9e:
                    73:b0:20:92:f8:91:9a:60:c9:3b:b6:df:03:da:9b:
                    ad:03:e9:35:10:22:39:13:0c:c6:d7:5c:a2:1e:7f:
                    dd:fd:57:a0:0f:9a:84:86:f5:ac:1a:5b:b8:ea:53:
                    5e:59:29:2a:1c:ef:88:01:33:a5:6b:f5:ca:92:a7:
                    19:42:bb:64:23:78:23:61:5f:29:47:2e:bd:14:2a:
                    ec:81:b5:f4:42:9b:61:5a:1e:1a:d7:f9:0f:f5:40:
                    47:38:24:31:be:5d:d3:68:1f:10:78:3c:43:84:7e:
                    f0:b5:2c:d6:5f:0a:c8:cd:30:28:87:a2:b6:9f:68:
                    83:d8:d9:0e:03:7f:9b:42:c9:b1:b5:61:31:5a:a5:
                    78:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3D:80:4A:A6:B6:D9:54:DD:8C:F7:BC:28:86:5E:D3:ED:51:D9:8B
            X509v3 Authority Key Identifier:
                keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:49:10:b1:5c:b9:d2:05:8a:07:a1:2d:e9:c0:68:b2:3c:7f:
         0a:71:75:f6:6f:e5:75:48:fa:f7:46:be:c4:0c:9d:bf:2c:c1:
         5f:75:d2:b2:1f:4d:33:b7:1d:0b:a7:d3:04:5d:ce:e5:93:55:
         d0:68:88:a5:50:7a:a8:28:6b:97:91:1e:5b:03:b6:b5:a5:60:
         5f:5a:49:bc:f5:3e:6d:37:56:1d:b6:e7:49:2d:29:cd:c6:13:
         58:88:03:40:8d:08:22:69:85:88:ae:55:4c:b2:f5:4c:ce:69:
         31:37:82:30:ae:e7:f2:84:45:cf:b0:2b:b1:a1:05:44:cd:08:
         fc:0b:fe:a3:62:f2:7c:67:e2:5a:01:b3:51:55:d3:1d:cd:d4:
         c4:1a:62:f1:92:7b:21:cc:b9:6b:c2:86:76:7e:9e:04:46:d8:
         fe:34:c8:7d:dd:07:1e:93:1f:c0:1c:20:fe:52:80:5e:67:e9:
         9d:03:65:5c:3f:d7:25:b0:5c:fe:5c:cc:36:61:66:b7:80:a5:
         56:3a:09:94:04:75:7b:43:d5:17:ee:1b:24:9a:01:e1:7c:1b:
         86:b8:fa:3c:ca:52:00:38:a6:f9:48:08:73:60:b4:e8:70:ee:
         3e:dc:02:6e:a3:90:bb:b0:f4:8a:3d:4a:d2:65:c2:e6:ff:b1:
         aa:12:36:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 10:59:57 2025 by rpki-client