Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
File:                     B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft (raw, json)
Hash identifier:          KhGCVbC74TIfyzrHzX00pvaczj9Ft+Yv2DpD0sI9k70=
Subject key identifier:   3B:84:CB:65:61:A7:DF:08:67:2D:AC:7F:CC:75:83:D8:AE:A3:2E:70
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Certificate issuer:       /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial:       16C1DDF0978EFD5C8D2E09EB8CC40D3FC9B1FD8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
Manifest number:          03E9
Signing time:             Wed 04 Jun 2025 07:40:04 +0000
Manifest this update:     Wed 04 Jun 2025 07:35:04 +0000
Manifest next update:     Thu 05 Jun 2025 08:42:04 +0000
Files and hashes:         1: 3138352e33372e3232382e302f32332d3233203d3e203630343538.roa (hash: vZ0xeNj44WIw/+zpqjsYVz/OQXDqqT3PO1sgTbLjyjI=)
                          2: 3138352e3230322e3134362e302f32342d3234203d3e203630343538.roa (hash: RGdxLEzytt0V9LWy9RSfzKHfvGrjEh/8BhnnQWUWyk0=)
                          3: 3139352e382e34392e302f32342d3234203d3e203630343538.roa (hash: 4nPeE4WDot0aQzE1E2AL4UC2dMhv5fMNvAbvgkN5zUQ=)
                          4: 3138352e3132352e37372e302f32342d3234203d3e203630343538.roa (hash: iBX/+QeuXYuSCTlJT7cmF+tQX/4HCmniMjyG8lOqUWA=)
                          5: 3138352e33372e3232382e302f32342d3234203d3e203630343538.roa (hash: mw435AXz9xHWhN238pBrnHfvo9tx+w0yMNZcNgIAnFw=)
                          6: 3139352e382e34382e302f32342d3234203d3e203630343538.roa (hash: 0QQ/atSVhgxbxnMmZi2CZaSsjgioOzPYv64es6L7MGQ=)
                          7: 33312e3231372e3235302e302f32342d3234203d3e2039303039.roa (hash: L+538BnpKcoPw9UMvgnBDsovbAC1nWxPwoO/WNMOxrE=)
                          8: 39312e3139392e39302e302f32342d3234203d3e203630343538.roa (hash: 24Wi6BO1o+rN9DTXADpFgbBkLMPIwcsuYBHhIDkNNJk=)
                          9: 3138352e3230322e3134352e302f32342d3234203d3e203630343538.roa (hash: W83bzJQhGHobYnfM1tmulNDtSSyNf73jimSZ1AGOpI0=)
                          10: 3138352e3135362e3231372e302f32342d3234203d3e203630343538.roa (hash: rjDp5tr7Ibp1svXb6aTy1VUyxTkkVlR9zj5PgrnqiGs=)
                          11: 34352e3133312e38302e302f32322d3232203d3e203630343538.roa (hash: oqXmbxyjeaOX95W9eJVEUG/807pdk0CrvL0gbJu3djk=)
                          12: 3138352e3136372e32342e302f32342d3234203d3e203630343538.roa (hash: bOe+V/bSkHZWJOaV1Qj2XTs/2xeIT/LkKzSKku71Icc=)
                          13: 3139342e35392e3232332e302f32342d3234203d3e20313939363134.roa (hash: Q+aTRZ6Bj34jlOI880qva89jcDljlnRfljW0rbqvKUM=)
                          14: 3138352e3232362e3135352e302f32342d3234203d3e203634323637.roa (hash: BphaL/Q+MmU9qXxX06J/d3Yz3MPwKV/7sGiY2uy2MYY=)
                          15: 36322e3132322e3138392e302f32342d3234203d3e2033313730.roa (hash: mbpZXZK/fM7vaFZ5y82xMnQ6rCPjr7XSXm9Q6bD78C4=)
                          16: 34352e3134332e3134382e302f32322d3232203d3e203630343538.roa (hash: Sww7+LIBcy25xOjBNTHS8houn90nQJV29QTFkg33x0A=)
                          17: 3138352e3232362e3135322e302f32342d3234203d3e203432383331.roa (hash: 2iZuFtoo8q53yETNgCmRHTR4lUa6RiA7X1J8o6k1GHg=)
                          18: 3138352e3135362e3231382e302f32342d3234203d3e203630343538.roa (hash: IhLfWMdp3wfBoJIgMf1dZQYIiVjH+IC6uyZDFZApUo0=)
                          19: 3138352e3136372e32352e302f32342d3234203d3e203630343538.roa (hash: PR56mJAfACxvVOTWCWLvFZ+zDPcod8MGy8q5KeWDe1I=)
                          20: 3138352e3230322e3134342e302f32342d3234203d3e203630343538.roa (hash: wz4+Z748yPCelmg+RPJx6JGtTSzenzKPpdD84rUDauM=)
                          21: 3138352e33372e3233312e302f32342d3234203d3e203630343538.roa (hash: fMMz/NMrWe4m6FBXtQw+qCDaXqsRssd0JOLvgwTj808=)
                          22: 39312e3139392e3132332e302f32342d3234203d3e203630343538.roa (hash: BatNReK7gXNaqXPa5VRtj5h++zM7ew2F8IoAg/I/2U8=)
                          23: 3138352e3136322e3137312e302f32342d3234203d3e203630343538.roa (hash: dIPcyVrIf7ut3mplg6I+FaMP77/taZ1uyGrgWAEtw1I=)
                          24: 3138352e3136372e32362e302f32342d3234203d3e203630343538.roa (hash: AU1XTzixRsIIk2ZdZN58IrYKd8IFItgt7vU8fJub8+o=)
                          25: 3138352e3232362e3135332e302f32342d3234203d3e20323131343430.roa (hash: rGW7/8GB609/SHNrTEWoAaTI5dQHouhe15jjA9R2QwM=)
                          26: 34352e3134362e3138382e302f32322d3232203d3e203630343538.roa (hash: oKJ0nojLfMNgIC0ZVHO9adCFA5GxNLUlSGYZ+ppZl7U=)
                          27: 3138352e33372e3233302e302f32342d3234203d3e203630343538.roa (hash: IY6mHaJKET6LoAapCaxdFKM5n9LWTpQVBjwiMh+lOuI=)
                          28: 3138352e3232362e3135342e302f32342d3234203d3e20323030303139.roa (hash: 96QSwOxwyYqTqJ3XjUWn9gHjbPepDDirLYFilwesJ0U=)
                          29: 39312e3139392e3130322e302f32342d3234203d3e203630343538.roa (hash: RopopLlJOVRjGz4avSxfYPvo0OC9G/eDY75KWGAV/aw=)
                          30: 3138352e3231352e3131342e302f32342d3234203d3e203631333137.roa (hash: R9WhNu2MdPr1NOFjMmZeGBiIE2nwtlE4Jo64OX4u4HA=)
                          31: 3138352e3136322e3136382e302f32332d3233203d3e203630343538.roa (hash: FhpX/C9zk9FVjj10PImD/wKS/RfpAC0kUdP0bDZAwyg=)
                          32: 3139352e3231312e35312e302f32342d3234203d3e20343030393039.roa (hash: 0gSBq8V9lU7SHxebbh3UieoZZ+QMrAfR0WkkimNMOGY=)
                          33: 34352e3135312e3139322e302f32322d3232203d3e203630343538.roa (hash: MsQjsESlTuEcbjS9mONurH+MDUvuc4E1Aq8WiShITro=)
                          34: 3138352e3132352e37392e302f32342d3234203d3e203630343538.roa (hash: chFrGzVrsGDgHbR9U302S1vgNYtyu8hjjwKJPtAYWHA=)
                          35: 3138352e3135362e3231392e302f32342d3234203d3e203630343538.roa (hash: 8XkoDAvNeGNoBWLohtYrD/bWj0oa0HEtFyjdhTJh8rk=)
                          36: 3138352e3132352e37382e302f32342d3234203d3e203630343538.roa (hash: p8VAezPiQ82kk+zpMKLkJeAo6bWXq8DJwyiOE3M0QAE=)
                          37: 3138352e3136372e32372e302f32342d3234203d3e203630343538.roa (hash: qmcJVcdT4rmfgLdWbchNjQUjUr84q4fznJ3O5A3Ac6k=)
                          38: 39312e3139392e3130382e302f32342d3234203d3e203630343538.roa (hash: Ltqzgt94mzKk47x8Q+jGxz5JrNySG/Y0tzlAfjYhG0M=)
                          39: 3138352e3135362e3231362e302f32342d3234203d3e203630343538.roa (hash: EvCO85+TEFrCa3fyF2Hvn+tlr4Nv9RYk07bI6yFMPvw=)
                          40: B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl (hash: wizX8vyOUIrMPST4xHJg42WAmhJQV2cuy7IcgiD0CTM=)
                          41: 3138352e3230322e3134372e302f32342d3234203d3e203630343538.roa (hash: 4WWLNzVcecuIV7DQH3TBRPk5m1a8bolBgWM4/XkK+mA=)
                          42: 3138352e33372e3232392e302f32342d3234203d3e203630343538.roa (hash: HYaWDlREHWbcyxGyqKTrHitDp9vR4XbaPjWC/NS6hv0=)
                          43: 3138352e3136322e3137302e302f32342d3234203d3e203630343538.roa (hash: v9yukWrQuv+5l5wy9/dUA6cYOeUvX0B8QwsY9W2Wlgk=)
                          44: 3138352e3130302e37322e302f32322d3232203d3e203630343538.roa (hash: tt+7v33pgcfL/OR4IEoj2XRjnG0uMYFwUsQyGd/wSJQ=)
                          45: 3139352e382e3131392e302f32342d3234203d3e203630343538.roa (hash: uYf/vuY3IMzkKnywh+WrIJi9K5kM4HORH0NByn4xLTY=)
                          46: 3138352e3132352e37362e302f32342d3234203d3e203630343538.roa (hash: E1EBzi/x9bAqWwU2+c2DtydupdQVlQih+ZQ9KG5XJM8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 08:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c1:dd:f0:97:8e:fd:5c:8d:2e:09:eb:8c:c4:0d:3f:c9:b1:fd:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
        Validity
            Not Before: Jun  4 07:35:04 2025 GMT
            Not After : Jun  5 08:42:04 2025 GMT
        Subject: CN=3B84CB6561A7DF08672DAC7FCC7583D8AEA32E70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a5:9e:0c:51:a4:5b:7d:5f:e9:ac:f8:1f:25:
                    42:0d:15:33:f1:88:6c:98:04:03:b9:6e:fe:3d:48:
                    4d:a6:f8:9a:ee:19:fd:21:66:f9:17:ff:66:7f:16:
                    c7:f7:45:eb:ea:2d:0b:a6:05:9f:0b:cf:9a:1d:cc:
                    51:2f:d8:2f:24:9f:70:6d:3e:de:35:3e:13:1e:b3:
                    56:19:d0:82:fa:fa:96:dd:28:da:5e:da:de:9b:3f:
                    c0:6d:6b:47:e1:d0:76:61:00:50:7b:ab:2b:df:6d:
                    4f:fc:c4:a2:f8:a2:f6:ea:7e:ce:b5:48:fe:ef:03:
                    7a:17:41:16:27:b1:ee:f2:ec:90:61:12:30:c5:9e:
                    fc:28:ce:c3:5d:d8:76:b1:b2:09:8e:f6:b6:24:fa:
                    ab:b9:4a:ac:03:70:97:7d:9e:58:e7:c5:c2:a0:fd:
                    3c:1c:a8:6f:c8:b8:9e:96:41:01:4f:be:fa:cf:4c:
                    21:10:a4:88:0f:59:10:89:3a:9c:29:cc:ac:5e:18:
                    86:c6:1b:79:a7:25:3d:52:62:d7:c9:b6:aa:6f:36:
                    b2:7b:0a:46:97:43:e0:26:2a:18:bc:64:f1:72:9a:
                    93:fb:af:8d:91:ce:71:10:84:ee:46:45:f8:fa:9d:
                    93:31:ef:08:98:41:fc:27:ee:93:a7:c2:80:2b:ed:
                    66:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:84:CB:65:61:A7:DF:08:67:2D:AC:7F:CC:75:83:D8:AE:A3:2E:70
            X509v3 Authority Key Identifier:
                keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:23:89:18:5a:8a:3e:fc:a1:5a:1f:9c:6a:54:35:3a:a4:fa:
         a0:51:ad:f7:dc:61:83:1a:72:d6:19:0a:80:ed:53:96:b1:44:
         ed:cb:10:03:04:7a:5a:f0:34:bc:76:5c:35:e2:91:94:c3:69:
         76:d5:f2:31:1f:03:25:e3:40:22:8c:2c:e6:e0:7a:a3:76:f7:
         1a:9d:1e:c8:cf:cd:43:0a:a8:73:98:8e:53:62:07:44:14:ed:
         2a:a5:84:6d:64:00:f8:de:a1:3f:52:75:0f:09:e2:a7:c8:20:
         7e:22:3f:55:95:5d:2a:dc:2a:ff:42:73:ec:08:18:05:b7:83:
         cd:ee:97:c7:f4:1e:f6:62:94:53:f8:f1:9a:fb:82:f1:9e:17:
         cf:73:54:75:85:5e:64:77:51:cb:b6:87:72:a3:01:28:c9:4d:
         25:0c:c1:dd:6c:e4:02:f5:31:78:22:33:58:e4:02:ed:19:94:
         d7:13:c9:1d:bb:d0:2c:a2:14:bd:92:53:c4:c2:d2:1e:f3:e3:
         32:8e:21:cb:53:08:8e:5d:0f:36:be:d7:51:9c:14:ae:36:4c:
         0e:0f:cf:fc:88:37:3f:8e:7d:66:cf:f9:b6:44:80:90:03:e3:
         a1:04:93:e8:6b:6e:34:5e:87:09:db:c3:31:4b:53:0f:ef:27:
         c1:cb:d0:36
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUFsHd8JeO/VyNLgnrjMQNP8mx/YswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjAxNzBhYmRjOTU1YWExNzZiZTJhZjI2Mjk5Njc4ZjJm
N2M5YWNhMDAeFw0yNTA2MDQwNzM1MDRaFw0yNTA2MDUwODQyMDRaMDMxMTAvBgNV
BAMTKDNCODRDQjY1NjFBN0RGMDg2NzJEQUM3RkNDNzU4M0Q4QUVBMzJFNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLpZ4MUaRbfV/prPgfJUINFTPx
iGyYBAO5bv49SE2m+JruGf0hZvkX/2Z/Fsf3RevqLQumBZ8Lz5odzFEv2C8kn3Bt
Pt41PhMes1YZ0IL6+pbdKNpe2t6bP8Bta0fh0HZhAFB7qyvfbU/8xKL4ovbqfs61
SP7vA3oXQRYnse7y7JBhEjDFnvwozsNd2HaxsgmO9rYk+qu5SqwDcJd9nljnxcKg
/TwcqG/IuJ6WQQFPvvrPTCEQpIgPWRCJOpwpzKxeGIbGG3mnJT1SYtfJtqpvNrJ7
CkaXQ+AmKhi8ZPFympP7r42RznEQhO5GRfj6nZMx7wiYQfwn7pOnwoAr7WZRAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUO4TLZWGn3whnLax/zHWD2K6jLnAwHwYDVR0j
BBgwFoAUsBcKvclVqhdr4q8mKZZ48vfJrKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2E3ODllODctZjQ4NC00MjNkLWExZDctMmMyZDU4NjBk
MmVjLzAvQjAxNzBBQkRDOTU1QUExNzZCRTJBRjI2Mjk5Njc4RjJGN0M5QUNBMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NCY0t2Y2xWcWhkcjRxOG1LWlo0OHZm
SnJLQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83YTc4OWU4Ny1m
NDg0LTQyM2QtYTFkNy0yYzJkNTg2MGQyZWMvMC9CMDE3MEFCREM5NTVBQTE3NkJF
MkFGMjYyOTk2NzhGMkY3QzlBQ0EwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSOJGFqKPvyhWh+calQ1
OqT6oFGt99xhgxpy1hkKgO1TlrFE7csQAwR6WvA0vHZcNeKRlMNpdtXyMR8DJeNA
Iows5uB6o3b3Gp0eyM/NQwqoc5iOU2IHRBTtKqWEbWQA+N6hP1J1Dwnip8ggfiI/
VZVdKtwq/0Jz7AgYBbeDze6Xx/Qe9mKUU/jxmvuC8Z4Xz3NUdYVeZHdRy7aHcqMB
KMlNJQzB3WzkAvUxeCIzWOQC7RmU1xPJHbvQLKIUvZJTxMLSHvPjMo4hy1MIjl0P
Nr7XUZwUrjZMDg/P/Ig3P459Zs/5tkSAkAPjoQST6GtuNF6HCdvDMUtTD+8nwcvQ
Ng==
-----END CERTIFICATE-----
Generated at Wed Jun 4 10:33:21 2025 by rpki-client