Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
File:                     8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json)
Hash identifier:          nobHnclbewjIBMghmNRSVvUDh2WQYoadima+8awqjPY=
Subject key identifier:   2C:10:67:59:EA:84:90:56:8B:C6:3D:76:DC:89:AA:07:25:D8:20:77
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Certificate issuer:       /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial:       15C0FF47B2EAA9A46D4304A5D8574E1EAA7070BC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
Manifest number:          0273
Signing time:             Sat 25 Oct 2025 13:25:47 +0000
Manifest this update:     Sat 25 Oct 2025 13:20:47 +0000
Manifest next update:     Sun 26 Oct 2025 15:53:47 +0000
Files and hashes:         1: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: LiQaiw5undZF8O9ZPrbB+SuBZXPDpvcvnNafAQKgteo=)
                          2: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (hash: rLVUcUxyRgJtw6VSAGlKyA8uqmBel4P5gDB+BMhpgCc=)
                          3: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: gQv5NI8fa+cTBzk0tpepQG6QGKXWkVIlxityrSNAUjQ=)
                          4: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 8fwqZHGyIJyFYdJn0gwpv+qKZFLFFwexw2Z/QOknvfY=)
                          5: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: HscFYsQcMtvjpDQJk86+k68Lr7MoMlx0VU02QHyOcGk=)
                          6: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: IeK6ZG/g9V25xfR3xKZZdyq5xuMwonnHdhMMCLRMWBo=)
                          7: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: JVdP0q01IdpmOHNHM/8N7QIeZGO9fY1B0zhs290wioo=)
                          8: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: mgbh+id7sfJxNC8FBIA9w2AVClblyfoF7d8LLx0Ph9g=)
                          9: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: isp+v1bbWY3zX+eoFLAf4eK3r9/zMrMmocZ2PNCW2Rw=)
                          10: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: z2fbMMdTRhRUpcDHMD2rvY/J1s4P2i8N3FhzYltODNc=)
                          11: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: QP4KPs363lKNvbDMC91nWR64EDb9a5wYXaiiUC4k7Hs=)
                          12: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: 06Oq8kkXsOv0rKoRYz/dx2UXUSYf9kyOjrjjxWn2c2o=)
                          13: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: j14pv+Fih0N85ic38d12TDY0uRhDLdNY7cvkmnI17jw=)
                          14: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: 33Hc4k2qb/SFtHgCtF148ZPS40TPUk0mIWne3Kl1fjs=)
                          15: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: XJo8jS2djpRteJlKSIzBy0GSOcq3Jj/2wBDjV1PmcuQ=)
                          16: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: 9VIFUmaELJ+SuXK7+C+ONAUKoDB5ufOLiduhS88tcKE=)
                          17: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: 3t/0qmEuc7HUJ6jbuOuPnmd3ve4/XpcLhj4VdVBS4pk=)
                          18: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 7nhFTtPjQhKd1Ac2yjZIA1kYzFwc8dF19rkGkZd+QFk=)
                          19: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: lL21MUDpM3YDFXY+VNPjMEqMt9/EFafQb01ArsWLAjk=)
                          20: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: AeMZRZSwZsx5KC2jxQNtMbF43IhF83DtvCiG0im1qdU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 11:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c0:ff:47:b2:ea:a9:a4:6d:43:04:a5:d8:57:4e:1e:aa:70:70:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
        Validity
            Not Before: Oct 25 13:20:47 2025 GMT
            Not After : Oct 26 15:53:47 2025 GMT
        Subject: CN=2C106759EA8490568BC63D76DC89AA0725D82077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a7:18:10:ba:34:ac:4a:e4:99:5a:12:c9:fa:
                    99:c5:92:a4:e0:1a:d3:c2:09:16:6b:10:bb:03:ac:
                    b9:9b:ea:b3:82:2c:cc:3d:c2:ab:02:e2:11:1b:1a:
                    2d:3f:28:1d:eb:37:c9:41:79:0b:bc:24:10:a0:46:
                    75:ff:6a:8d:bd:31:32:20:e0:35:34:14:5b:6a:15:
                    1a:3b:f8:47:82:aa:d4:40:1f:df:98:89:bd:ca:67:
                    cc:e6:40:49:32:f9:90:b2:68:59:26:2e:eb:6e:d5:
                    4b:88:17:3f:1f:a4:22:9a:dd:86:cb:2c:0e:10:86:
                    01:cf:a7:62:9e:3f:99:1d:87:c3:82:26:5b:54:4e:
                    28:5f:39:cd:1e:59:97:d0:02:5a:b3:2d:53:74:53:
                    68:aa:f8:38:03:d9:07:a3:a1:54:e6:50:d6:3c:d6:
                    2c:e8:72:34:16:49:fc:61:a6:0a:e6:eb:f7:65:ae:
                    0c:02:fa:dd:2e:15:82:00:da:f6:d6:28:60:22:92:
                    c0:34:c5:b2:8d:0c:08:8a:f6:14:a4:c3:47:b3:1a:
                    dd:aa:49:c4:5b:5c:c2:5d:14:c9:27:2d:a9:a0:1e:
                    0b:d4:c0:d2:e8:5c:6c:75:c0:35:3b:bf:91:c6:be:
                    c3:6a:31:57:94:bc:38:4a:d2:0d:73:1e:15:78:31:
                    dd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:10:67:59:EA:84:90:56:8B:C6:3D:76:DC:89:AA:07:25:D8:20:77
            X509v3 Authority Key Identifier:
                keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:9f:2c:98:3a:30:af:af:26:56:7b:13:70:29:c1:84:4e:75:
         73:09:c6:3a:1c:29:29:8a:c6:a4:aa:c5:75:03:c6:25:a0:0c:
         ad:6d:70:5f:76:c2:63:50:d0:21:9d:eb:85:b6:f6:24:c0:f6:
         fe:6a:d7:3a:25:db:be:e6:59:28:e4:6d:ea:c4:62:41:64:33:
         74:67:b0:97:24:fa:80:d0:3f:cf:8d:36:b3:69:0b:1b:02:e5:
         d2:34:98:2e:98:34:50:a5:a9:54:60:c9:51:e9:ae:35:89:b7:
         96:d5:64:91:f1:60:13:bf:93:c4:ae:71:b4:48:14:fc:3f:7d:
         5e:4a:0f:4c:80:1c:88:a0:34:ac:35:95:d6:20:54:52:34:77:
         4c:52:f2:a4:b1:d6:d0:0a:4d:4d:b0:c8:c3:8a:82:17:a5:c0:
         13:6d:7c:76:77:fd:78:d3:76:7d:1c:b7:23:9e:e5:dd:1c:6e:
         00:9d:98:5f:80:6e:2f:a0:bd:59:e7:ef:76:7e:3c:0b:47:35:
         c4:90:0d:72:f8:85:75:22:87:83:54:9f:90:ef:ff:b8:b1:4e:
         d8:c8:f6:92:11:80:41:8f:64:fd:0d:e4:e9:83:fd:92:58:3d:
         9b:96:ff:7a:30:36:9e:33:77:b6:15:ff:80:77:03:56:a1:e0:
         62:4d:b6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 21:14:16 2025 by rpki-client