Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft
File:                     CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft (raw, json)
Hash identifier:          KK2F7VH+Z0FaLRu96CIUdbo4DARCJwlcHVTCgGzzLMA=
Subject key identifier:   32:9A:0D:DB:60:5B:74:22:C0:79:DA:86:D8:09:C5:0D:66:3F:B4:D5
Authority key identifier: CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD
Certificate issuer:       /CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD
Certificate serial:       74F3290764825E4D07513176D61554998806FA48
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft
Manifest number:          018B
Signing time:             Wed 02 Jul 2025 15:14:07 +0000
Manifest this update:     Wed 02 Jul 2025 15:09:07 +0000
Manifest next update:     Thu 03 Jul 2025 17:17:07 +0000
Files and hashes:         1: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: vFXjegY0vnmzgiKwFkv4TNQvgCv0y7neNveGux2ZS+w=)
                          2: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: Nyn9oM7uD3t9zeyaIzVAMa0fIXr9id1B4aigY0eVgwU=)
                          3: CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl (hash: AA8HWEVdkDM9y6Pf6kN3fz2Z91ODOHvQbVq175xJUfk=)
                          4: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: ahz6gPUt4YrcLpOD9Ozfm8bYrgH1OTsLIpfe4cqXpMc=)
                          5: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: 4NAkvNhOgG+FdQOl5H1HgnY8A0ca/GD2rGJr4GFMtSI=)
                          6: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: Q5gjl44KzFA6g8+tW8lygBoA3oaZ4qvSEamF1iUuuio=)
                          7: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: wTqD67Uqf1W/idPthA4sHinaJ2FPLZ88IN640ixPrCU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f3:29:07:64:82:5e:4d:07:51:31:76:d6:15:54:99:88:06:fa:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD
        Validity
            Not Before: Jul  2 15:09:07 2025 GMT
            Not After : Jul  3 17:17:07 2025 GMT
        Subject: CN=329A0DDB605B7422C079DA86D809C50D663FB4D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e8:e9:86:02:15:7d:e2:2f:8e:30:c4:b7:0a:
                    28:12:d1:2a:d1:23:3b:bf:b0:1d:d5:74:67:ba:9e:
                    1a:9b:46:47:f0:ce:99:99:c8:f7:32:9b:d4:55:2d:
                    71:ee:72:5b:e4:a4:93:57:01:6d:53:81:31:bc:b1:
                    6f:ff:b9:fb:cc:7f:06:84:0f:76:b6:0c:9c:21:2e:
                    86:15:fa:96:8a:a8:02:55:33:c8:4d:9c:be:c0:29:
                    b0:30:c9:e2:33:1f:49:9c:01:95:89:97:57:d3:49:
                    6e:ef:3b:0b:31:0d:b6:85:a1:ae:28:15:cf:e4:a7:
                    94:f7:a7:fb:eb:cc:3e:1b:cf:d5:16:f2:42:a0:98:
                    34:93:cf:37:61:48:9e:47:82:16:02:2a:b6:7c:e6:
                    34:17:2d:3e:9e:69:db:13:fa:33:35:f8:7c:91:60:
                    9c:8e:f7:54:b0:4b:47:29:10:01:fc:04:aa:af:d2:
                    b2:be:86:33:b8:12:d4:78:c0:ac:33:c3:89:46:a3:
                    48:21:b7:79:a0:8e:a6:45:72:7b:16:be:54:ed:2a:
                    33:de:d7:38:2b:4a:e0:91:b5:b7:64:9f:db:8f:70:
                    82:d0:29:4f:ab:55:bf:a1:4d:4d:79:5d:01:81:18:
                    db:36:7e:f8:19:50:a8:aa:7e:0a:a6:90:f8:72:cf:
                    da:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9A:0D:DB:60:5B:74:22:C0:79:DA:86:D8:09:C5:0D:66:3F:B4:D5
            X509v3 Authority Key Identifier:
                keyid:CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:30:8e:e6:df:cd:50:0e:d9:4b:a5:c5:e8:ea:af:0e:1f:e0:
         08:a1:59:ce:f1:f4:c0:a9:5c:ce:29:11:69:6c:fc:eb:e6:2c:
         13:d1:23:c0:d2:d2:b3:73:3e:9c:06:ac:e8:71:94:23:bc:6f:
         3b:fe:b4:cd:53:08:7b:be:5f:fa:9d:f3:7e:07:39:f2:52:f1:
         38:1d:63:8f:4e:fd:7a:b0:c9:83:d9:f8:b9:02:02:9e:4d:fa:
         af:26:a5:f2:2f:32:1f:85:04:58:b1:b8:8a:16:76:db:9d:4f:
         02:a0:52:a2:15:28:bf:2a:ea:f0:22:c9:ec:a5:e5:92:07:d2:
         e7:9c:27:8b:33:4f:93:8c:18:5b:54:f8:43:f2:3f:92:2a:91:
         63:d5:f5:21:32:83:4d:94:94:cf:05:0e:06:85:58:0a:b9:31:
         ee:d8:db:fd:dd:56:5e:7f:7d:10:1f:8e:f0:0f:a0:7f:bf:e4:
         aa:33:15:de:26:e1:bc:4a:0e:50:02:dc:07:9e:b2:e0:59:58:
         59:84:cb:83:29:21:91:18:a1:08:a7:b2:54:a2:7a:dd:28:f8:
         8c:6e:3e:ca:3f:84:22:8a:0c:05:99:22:37:75:25:0d:87:25:
         f0:66:82:69:63:14:e0:28:11:b9:85:1d:07:4e:9d:7a:2e:99:
         49:66:4a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:24:58 2025 by rpki-client