Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
File:                     92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft (raw, json)
Hash identifier:          FElRqrXivAXsCXBWFbcGjCGYNLsvoJKvyKrFzcmeT5Y=
Subject key identifier:   1A:17:6A:5F:F0:A2:E5:56:51:70:EB:06:F8:99:17:0C:CF:A4:9B:31
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Certificate issuer:       /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial:       3B1D6C1DC47592E259B1BB41D2E836AD61B329AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
Manifest number:          BD
Signing time:             Fri 05 Sep 2025 19:28:53 +0000
Manifest this update:     Fri 05 Sep 2025 19:23:53 +0000
Manifest next update:     Sat 06 Sep 2025 19:55:53 +0000
Files and hashes:         1: 39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa (hash: EnyfxlxrEZoOAQu439Mhaj0MSgN4o3Cr584mhVLUCgw=)
                          2: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl (hash: wkUMa3cKoRXxLmPZU7vI0BkKdJPetoFy4WHtktNZlHw=)
                          3: 39352e3231342e3137352e302f32342d3234203d3e20313335333931.roa (hash: dZLABnxKpTxFiKmt1/yK20i3zGqpWgZ6NnQoPD/883U=)
                          4: 39352e3231342e3137322e302f32342d3234203d3e20313937343737.roa (hash: PxR9Gj8WOc/7LwGO5t67j8SuO3iXayzi64SIiemjFkw=)
                          5: 39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa (hash: 7RDjli52ea3Y5rIxOBi7CoAOYzObgN76cF1oNhGaH/0=)
                          6: 39352e3231342e3138322e302f32342d3234203d3e20323132333834.roa (hash: ahvCpQCYKDC5UmCWINUE1+9+R3CEuxDs9xpt+/mHGMc=)
                          7: 39352e3231342e3137332e302f32342d3234203d3e20323135333034.roa (hash: ykvLLS6Z6kV/o/cgRwX1ZEaK41JubO1IO21DEk7RF6E=)
                          8: 3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa (hash: yFl38PxDDUPllDewnZ7MEFH9Z5qJaOTL0zY/pvxRoUY=)
                          9: 39352e3231342e3137332e302f32342d3234203d3e20323134363534.roa (hash: mFOzhyAh9tCioAD9KNfnMzhX/ZruiFJExBt3hGxBMhs=)
                          10: 34352e3133392e3139382e302f32342d3234203d3e20323134343636.roa (hash: 9KX5zC7UuI47N7heL//vNyLO3x7YEi1CucEhFX8SUR0=)
                          11: 34352e3135362e35322e302f32322d3232203d3e2039303039.roa (hash: eK18gsMy8+wzgYZmaz7TkcO08JcfPTkHAWlv0aJXuz0=)
                          12: 39352e3231342e3138332e302f32342d3234203d3e20323039313831.roa (hash: lTsB3YA1lHFbSl1Cmaufvak87ZyxIaRmoFdP+J/wwxc=)
                          13: 39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa (hash: P3AXSCPo5qCcqJ/tF9UnDRiSqmNKJoNVWYccPe9dv1w=)
                          14: 39352e3231342e3137332e302f32342d3234203d3e203336353330.roa (hash: ZX0rYuyfoePX3zdEt8vwc7JgQs5NsAAOyIzAnAQ42ko=)
                          15: 39352e3231342e3138302e302f32342d3234203d3e20323033373538.roa (hash: yeHT2siMw+46e40lrxlb+yyyQe2+Rk/4CH0GwC6laEg=)
                          16: 34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa (hash: JaeJstE2poR1Rlm8a7RHcBFfHeeu7vNkxKzYr0p4Jc8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 19:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:1d:6c:1d:c4:75:92:e2:59:b1:bb:41:d2:e8:36:ad:61:b3:29:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
        Validity
            Not Before: Sep  5 19:23:53 2025 GMT
            Not After : Sep  6 19:55:53 2025 GMT
        Subject: CN=1A176A5FF0A2E5565170EB06F899170CCFA49B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a3:d6:28:ef:c7:8b:a2:d9:4e:40:42:d5:f0:
                    ba:9d:f5:ef:fe:f6:52:c8:5b:a4:33:1d:06:43:10:
                    ca:e7:5c:45:e5:ea:c1:16:85:3f:bb:0a:63:bc:9d:
                    8b:44:fd:bd:3e:29:6b:89:ad:74:c6:64:78:27:be:
                    c4:07:8a:74:72:7d:79:b5:4d:73:a9:cc:f9:e6:dc:
                    65:33:1c:d9:c4:90:2f:43:86:11:a0:20:62:d2:3f:
                    24:32:f7:2f:05:06:98:d0:52:ce:0a:21:5b:0b:d9:
                    a0:69:b1:ea:33:75:90:f7:92:9c:30:48:e7:0c:aa:
                    4f:0e:f6:34:45:22:82:b5:e9:ac:10:52:de:6b:6b:
                    b0:20:70:dd:b4:d9:e0:b3:49:09:4b:c2:f6:0c:b1:
                    ee:27:ae:41:98:a9:3c:a0:85:43:1a:a5:95:97:25:
                    a1:7f:a8:ba:6d:16:65:6b:44:b5:48:9a:10:10:51:
                    ef:df:2a:c5:18:f2:1f:ef:e3:1e:b0:0e:b0:a4:ad:
                    a1:8c:d4:fa:87:3c:28:ed:83:3f:b3:60:85:9a:16:
                    1d:66:b3:6f:f2:42:a5:d3:5f:24:b0:3c:7d:16:8e:
                    5a:a6:8e:cf:0a:30:4b:79:6a:e7:91:bd:ba:85:08:
                    e0:40:f5:7b:a5:6f:55:f2:a9:13:73:9f:2d:e3:4b:
                    75:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:17:6A:5F:F0:A2:E5:56:51:70:EB:06:F8:99:17:0C:CF:A4:9B:31
            X509v3 Authority Key Identifier:
                keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:54:ce:93:62:42:6e:22:bf:a8:c6:62:f8:33:f8:03:8d:88:
         3f:9c:ab:4f:9a:fb:10:56:62:34:3a:93:69:60:7f:37:95:4c:
         29:af:21:0c:ca:13:48:c3:fd:47:6e:02:7c:2f:da:88:db:62:
         dc:71:20:59:17:ff:c2:f4:a6:ff:42:b1:88:15:9a:eb:37:bd:
         38:41:bb:c1:6a:af:e5:39:29:2c:e5:37:92:83:7d:75:41:57:
         5b:70:cf:d1:bb:28:5d:7d:d3:91:df:ea:7f:fb:df:6c:e0:69:
         b3:03:89:c2:1d:68:23:99:5d:1c:69:44:f7:89:98:13:0b:90:
         a8:5c:6f:91:64:bf:7c:fe:87:7b:96:33:f2:71:44:e5:fc:ec:
         b1:a3:a8:21:f3:39:5f:4e:d7:2b:b1:74:da:7d:01:0b:39:71:
         f5:dd:b4:72:d1:ce:bb:24:21:09:12:c9:1f:c1:6b:5a:9e:b4:
         cb:17:16:aa:bf:fe:01:aa:55:1e:c4:5d:43:15:96:5d:47:74:
         5e:71:64:e4:3a:ba:90:78:8e:c4:d6:48:17:1f:e1:61:e8:ca:
         b8:19:bf:59:d7:c0:03:65:91:70:cd:a9:2b:22:c6:a4:86:11:
         60:a0:a0:89:31:37:5a:83:10:13:59:f4:c4:d5:96:a2:26:19:
         a3:3d:e2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 06:01:51 2025 by rpki-client