Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
File:                     92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft (raw, json)
Hash identifier:          dfOhPgd3W7yL/0XIe3hfYs8TpyvnKV+94zJfKGcPyZQ=
Subject key identifier:   0E:1F:FD:24:57:B9:D4:EC:7E:B3:1C:D1:0C:EE:39:2D:88:61:2A:91
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Certificate issuer:       /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial:       637AEC8773E6045470F2EDEB18B12BA78E22AFCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
Manifest number:          0100
Signing time:             Tue 21 Oct 2025 16:07:39 +0000
Manifest this update:     Tue 21 Oct 2025 16:02:39 +0000
Manifest next update:     Wed 22 Oct 2025 19:24:39 +0000
Files and hashes:         1: 39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa (hash: P3AXSCPo5qCcqJ/tF9UnDRiSqmNKJoNVWYccPe9dv1w=)
                          2: 39352e3231342e3138302e302f32342d3234203d3e20323033373538.roa (hash: yeHT2siMw+46e40lrxlb+yyyQe2+Rk/4CH0GwC6laEg=)
                          3: 39352e3231342e3138322e302f32342d3234203d3e20323132333834.roa (hash: ahvCpQCYKDC5UmCWINUE1+9+R3CEuxDs9xpt+/mHGMc=)
                          4: 39352e3231342e3138332e302f32342d3234203d3e20323039313831.roa (hash: lTsB3YA1lHFbSl1Cmaufvak87ZyxIaRmoFdP+J/wwxc=)
                          5: 3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa (hash: yFl38PxDDUPllDewnZ7MEFH9Z5qJaOTL0zY/pvxRoUY=)
                          6: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl (hash: LvsA8Gwr1FTwCxLQi2s3kJagjLqf2xZ+8bPrGvdxcEQ=)
                          7: 34352e3135362e35322e302f32322d3234203d3e2039303039.roa (hash: Bs9P6MukVIk3Mqg2bASja42eYp9YV11upUqwTKj8Pqc=)
                          8: 39352e3231342e3137322e302f32342d3234203d3e20313937343737.roa (hash: y8hcJrulcRceTx871qhtDNBcbMxDEQZoJON7Dc+UpGA=)
                          9: 34352e3133392e3139382e302f32342d3234203d3e20323134343636.roa (hash: 9KX5zC7UuI47N7heL//vNyLO3x7YEi1CucEhFX8SUR0=)
                          10: 39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa (hash: EnyfxlxrEZoOAQu439Mhaj0MSgN4o3Cr584mhVLUCgw=)
                          11: 34352e3135362e35322e302f32342d3234203d3e2039303039.roa (hash: TVTxbW5Hn/uwBDAOJAxsysgEid6g/rYwKpFkj0KhHLI=)
                          12: 39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa (hash: 7RDjli52ea3Y5rIxOBi7CoAOYzObgN76cF1oNhGaH/0=)
                          13: 39352e3231342e3137332e302f32342d3234203d3e20323035383836.roa (hash: hlOWlwYDh27EwXxqncP4qruI2Plo8gnGCk/gZpUDCgY=)
                          14: 34352e3135362e35322e302f32322d3232203d3e2039303039.roa (hash: eK18gsMy8+wzgYZmaz7TkcO08JcfPTkHAWlv0aJXuz0=)
                          15: 39352e3231342e3137352e302f32342d3234203d3e20313335333931.roa (hash: dZLABnxKpTxFiKmt1/yK20i3zGqpWgZ6NnQoPD/883U=)
                          16: 34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa (hash: JaeJstE2poR1Rlm8a7RHcBFfHeeu7vNkxKzYr0p4Jc8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 14:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7a:ec:87:73:e6:04:54:70:f2:ed:eb:18:b1:2b:a7:8e:22:af:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
        Validity
            Not Before: Oct 21 16:02:39 2025 GMT
            Not After : Oct 22 19:24:39 2025 GMT
        Subject: CN=0E1FFD2457B9D4EC7EB31CD10CEE392D88612A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:25:e2:7b:24:23:e2:4b:e4:4c:be:7b:9f:3c:
                    30:39:1b:41:cd:b5:03:60:5e:85:2a:0a:f3:9c:4d:
                    f8:0e:78:93:c9:2a:ad:11:f2:bc:2d:d6:14:6a:74:
                    42:3f:ff:cd:ed:ce:10:c2:ec:df:f4:85:3a:78:72:
                    72:fe:15:6a:65:ec:f5:29:e9:8b:38:37:b3:71:fd:
                    12:34:42:f6:c3:6b:9f:41:00:39:f0:15:cf:f6:62:
                    8e:95:d3:62:12:71:d1:29:fb:0d:44:27:c7:33:fc:
                    6e:c0:ed:7d:99:76:cc:f2:d6:5d:d0:84:fe:45:ec:
                    bf:f3:db:31:65:14:53:ce:70:f9:64:29:2d:2c:ce:
                    61:90:11:b0:56:0f:3b:72:14:08:4f:83:75:ae:af:
                    0b:d1:bd:99:5e:8f:7a:7c:4d:19:b9:98:8f:27:9c:
                    f4:78:c5:63:40:23:1a:ef:27:0d:1b:6e:89:83:f0:
                    14:04:b4:da:76:12:d0:9d:04:8b:60:da:70:a5:ff:
                    04:02:9b:52:bd:23:34:3c:06:02:36:c8:36:46:b2:
                    ee:24:a3:16:8e:16:c2:99:91:ea:04:ca:4e:cc:db:
                    6f:00:f0:1b:13:92:4c:22:0e:42:20:48:61:57:ca:
                    c8:b9:ef:da:de:5b:fa:9b:b0:b3:ca:0f:61:07:ee:
                    a7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1F:FD:24:57:B9:D4:EC:7E:B3:1C:D1:0C:EE:39:2D:88:61:2A:91
            X509v3 Authority Key Identifier:
                keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:96:e6:fc:b4:a7:b5:ce:2c:c5:65:f4:e9:22:69:c6:65:16:
         a3:3d:88:0d:18:20:f7:76:69:4a:52:b4:fe:97:a4:a7:ae:13:
         a8:61:fa:8c:ce:d6:de:52:67:22:97:06:16:90:c5:2d:7a:dd:
         c3:46:db:ce:5a:13:e5:d3:c8:58:8f:eb:69:7d:bc:0b:55:08:
         52:e2:6f:d1:f0:a9:c6:58:24:d6:9e:ee:cc:84:6c:72:58:eb:
         82:73:e5:bc:08:38:98:4b:85:2f:0b:68:ea:38:5a:da:62:f9:
         9f:a8:c1:97:38:ce:51:ae:db:25:31:ab:b0:2c:7a:41:4c:a3:
         f5:53:48:d2:e3:23:7b:5d:24:b2:d8:75:03:10:8d:03:a7:58:
         17:ec:9c:f7:30:2d:7c:18:3a:ce:f1:65:0f:19:a2:e4:af:ec:
         12:2c:57:34:50:ba:2a:32:fa:b5:b4:a9:02:65:c8:97:92:71:
         3d:04:72:b3:b2:de:a9:39:cf:7e:22:18:16:25:81:0a:1b:de:
         e6:95:d5:32:b2:a3:f9:17:08:a7:74:f4:7e:dc:79:ac:ed:4d:
         2f:69:0e:a0:d2:a4:24:c0:ff:d6:07:53:1c:5b:f9:5e:b9:50:
         8e:81:fb:58:c9:69:1e:aa:dd:eb:85:8b:34:b4:5e:26:5e:e4:
         31:b7:86:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:56:43 2025 by rpki-client