Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft
File:                     AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft (raw, json)
Hash identifier:          uhKY0E1o63UJ1GYJiH1b2oAl7I7WkcTI81AJdXDk0sk=
Subject key identifier:   04:A9:41:80:CC:89:F2:C1:74:5B:E1:35:BB:84:9B:9D:D3:B4:A1:DF
Authority key identifier: AF:F4:C2:C7:54:3A:73:C4:2D:FA:94:F9:95:0C:37:BD:C8:59:D2:80
Certificate issuer:       /CN=AFF4C2C7543A73C42DFA94F9950C37BDC859D280
Certificate serial:       7660382F7C516F1F3DFB51A57B8943F26C14C924
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft
Manifest number:          49
Signing time:             Sun 14 Dec 2025 09:46:02 +0000
Manifest this update:     Sun 14 Dec 2025 09:41:02 +0000
Manifest next update:     Mon 15 Dec 2025 12:46:02 +0000
Files and hashes:         1: 326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa (hash: mAlD/7UUyGVdekoOhhq71B1anWJmZ9lWKYk+6k6Ej2U=)
                          2: 9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer (hash: E9CNptHKWNvvuPC6W5ihJwZNW+cRtTj6Wt8oB63Ybug=)
                          3: 326130663a316363363a626162303a3a2f34342d3438203d3e20323034353335.roa (hash: 1+IhrNjfDlSrKMldoQWSJhujOmN03JwrltC4p7zGNeE=)
                          4: AFF4C2C7543A73C42DFA94F9950C37BDC859D280.crl (hash: F7cz83rrxkdkSnHLyvZTV2bvBwrpkHxcAcuwWrDTTG4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:60:38:2f:7c:51:6f:1f:3d:fb:51:a5:7b:89:43:f2:6c:14:c9:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFF4C2C7543A73C42DFA94F9950C37BDC859D280
        Validity
            Not Before: Dec 14 09:41:02 2025 GMT
            Not After : Dec 15 12:46:02 2025 GMT
        Subject: CN=04A94180CC89F2C1745BE135BB849B9DD3B4A1DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6a:4d:a5:17:d5:fc:4f:88:cf:c8:3c:c7:d3:
                    a3:5c:f8:5b:8d:de:83:ec:6f:19:6f:5f:a6:58:b1:
                    f6:f2:10:b3:9e:ab:ba:05:d9:81:d4:ac:57:c7:b4:
                    ed:70:24:5c:b0:6e:68:2b:3e:81:a2:42:a7:6a:a1:
                    ff:b6:9b:1b:48:3f:6f:bb:c0:16:91:6b:2c:32:62:
                    d5:0a:ec:1a:c1:2c:cb:27:85:16:d6:b7:b7:68:7b:
                    70:33:4a:5c:c2:e8:1b:47:25:86:74:ae:71:26:8f:
                    fc:4b:94:4c:0a:0b:e0:c8:ef:5b:4a:3a:32:96:db:
                    98:23:72:f5:17:3d:a3:dc:ee:62:04:ca:f2:0d:1d:
                    aa:e4:1a:06:36:b2:0a:88:f2:ee:28:80:4d:57:df:
                    00:d8:98:67:d5:6a:15:98:50:38:03:c3:46:06:d0:
                    2b:0d:c9:cc:93:88:3d:d6:fc:1d:d5:6e:c3:ae:08:
                    90:26:6d:6c:0b:19:90:c2:10:8e:9e:fd:ae:ac:6a:
                    d2:06:48:70:1f:20:29:b8:42:61:30:6a:7b:ac:c9:
                    a1:b7:b8:27:79:d1:ef:58:90:22:d9:64:26:4f:4e:
                    a7:0c:6f:db:31:bb:a8:7d:66:f5:75:db:61:f4:7c:
                    52:de:ae:27:3c:21:65:44:c1:c7:ad:c5:b2:ae:28:
                    97:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A9:41:80:CC:89:F2:C1:74:5B:E1:35:BB:84:9B:9D:D3:B4:A1:DF
            X509v3 Authority Key Identifier:
                keyid:AF:F4:C2:C7:54:3A:73:C4:2D:FA:94:F9:95:0C:37:BD:C8:59:D2:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:05:37:9a:47:1a:f7:f3:47:02:11:2d:88:03:8e:1f:63:c0:
         34:47:8f:5e:18:73:30:22:31:71:cd:92:5c:3b:c6:f2:f8:b0:
         7f:0e:2b:a5:3e:25:9c:64:97:69:89:fe:1c:06:c1:51:5d:ce:
         f7:8f:fe:f4:9f:3c:d4:1c:f3:21:22:4a:95:cd:9e:2d:90:a7:
         54:c3:83:7a:bd:a5:cc:43:58:6d:8c:26:e4:46:3f:ee:83:fb:
         a4:e2:0f:2f:85:0e:7d:0c:1e:dc:ac:22:69:33:10:47:58:67:
         e4:8b:c2:eb:e4:d7:cd:20:e8:fc:75:d7:c5:b3:c7:b4:f9:80:
         a6:ea:d0:72:25:26:42:05:c7:a2:a7:36:81:db:9b:7b:d2:7e:
         c3:bd:b0:e6:a1:a1:c8:5f:7f:cb:c1:82:c9:62:04:6a:76:17:
         b7:a8:9e:89:92:f3:f5:fc:a7:5e:3f:d7:e7:c6:6c:97:fe:9f:
         99:c5:20:f7:44:d7:fa:31:f2:69:e2:54:35:e9:8f:b0:f1:b9:
         d6:d7:0a:94:29:eb:91:7f:5e:e6:e4:e3:9c:ac:a5:d6:75:0c:
         89:1d:3c:26:4d:8c:4f:6d:ac:07:27:46:c5:04:4a:e7:c4:fb:
         d3:ce:cc:02:30:58:5f:ac:2b:d9:a4:62:bf:a5:5d:e2:26:1f:
         68:ca:2a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----