Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
File:                     2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft (raw, json)
Hash identifier:          vruSb4Yq/7xWd6QIIiA8xO+UQS9Qoz77O5ZdWAslnmo=
Subject key identifier:   CB:90:36:0C:8D:2D:E6:C2:27:A6:2A:80:7A:5F:3A:06:0A:7C:25:83
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       20BC749531F1B7AD06403E6730C508815FF456C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
Manifest number:          0385
Signing time:             Fri 06 Jun 2025 14:03:13 +0000
Manifest this update:     Fri 06 Jun 2025 13:58:13 +0000
Manifest next update:     Sat 07 Jun 2025 16:18:13 +0000
Files and hashes:         1: 323630323a663939323a66613a3a2f34382d3439203d3e203430363736.roa (hash: sRvK25+z4/XzVzRz/NRjDVLoeu4AhidYEGZ8Z4be+vU=)
                          2: 323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa (hash: mMm7sIXO5/HOrFuCVxMLtUjUW7H7tIPfaYADdGLvndY=)
                          3: 323630323a663939323a66363a3a2f34382d3438203d3e203533363637.roa (hash: sENJdG2CAk2ncOxoRbfpkGE6oUC5cWz8NGXE5l1PbdQ=)
                          4: 323630323a663939323a36303a3a2f34342d3438203d3e20313532393030.roa (hash: HWpzvbc2LzEmXxoT+kul7X4owcauEKJHusM+Ir+9R/w=)
                          5: 323630323a663939323a61353a3a2f34382d3438203d3e20323038303633.roa (hash: gL71Oo4khFGG4+rwcF6m9KHJDaySt3piSD+oyO2G3+0=)
                          6: 323630323a663939323a66373a3a2f34382d3438203d3e203534363030.roa (hash: mbxs/KyiiXCzMzovQkdebBf0tfpmu0WoGFLW/0GE3wA=)
                          7: 323630323a663939323a39303a3a2f34342d3438203d3e203236303432.roa (hash: MoXC/8DWDCDJNU7C3Mk26mgfoj92Dv/12Z/ZM6kBr4o=)
                          8: 323630323a663939323a66663a3a2f34382d3438203d3e203633333930.roa (hash: ofYyhY8QxgV7oA+K00vYAeRxc4dVjV27+J0ru1bGCjk=)
                          9: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl (hash: 2WxoIy6o1aBXGtY7O2PoZOQfPS9an9emVWamA5TZkyw=)
                          10: 323630323a663939323a35303a3a2f34342d3438203d3e20313939393539.roa (hash: s0tjGNQz3a0IJwtqI+yV2w0ziifnk/CWeyQrn3w3/qg=)
                          11: 323630323a663939323a61343a3a2f34382d3438203d3e203131333531.roa (hash: mMlSRkhdeeA9awCrBTY6qmDvxb75/R4fTCUImcwE1Zk=)
                          12: 323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa (hash: H4rlObELQ4x8lFTYx1O62Ru3wMsX/PzI3uR609UHR+0=)
                          13: 323630323a663939323a61303a3a2f34362d3438203d3e20373031.roa (hash: pU0ZnM3XlKB6GD5HhzNYR1xLlIiBzU0KSYhW4ta0NEU=)
                          14: 32332e3137302e3231362e302f32342d3234203d3e203538323032.roa (hash: GxalkmsKA3NBmKqpRbD10jaxIIxZkAYcIT4LC7UOrQU=)
                          15: 323630323a663939323a66353a3a2f34382d3438203d3e20323134323538.roa (hash: fIYxXr7UvbVyg5ErbGlT+osMThoxVt1juRlayE+Ah94=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 16:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:bc:74:95:31:f1:b7:ad:06:40:3e:67:30:c5:08:81:5f:f4:56:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Jun  6 13:58:13 2025 GMT
            Not After : Jun  7 16:18:13 2025 GMT
        Subject: CN=CB90360C8D2DE6C227A62A807A5F3A060A7C2583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:21:06:8e:63:cb:ec:f1:7a:0b:29:3d:4a:02:
                    d6:97:e7:57:6b:f1:21:cc:6b:65:6d:26:26:d9:c9:
                    30:b0:1a:5f:79:23:ee:cb:1f:8f:07:88:64:3d:80:
                    bd:16:52:33:fa:a8:23:24:9e:74:d2:88:04:07:a9:
                    62:54:ad:3d:4b:7a:58:6f:ed:0f:e8:28:fb:02:8b:
                    e6:dc:b8:31:8e:ae:b5:3d:18:44:91:e2:8a:36:a8:
                    e1:95:3a:44:34:67:55:5a:fe:3d:c5:9c:6d:14:c8:
                    fe:33:2b:1e:c4:54:44:50:5c:70:3a:d1:ee:e5:cb:
                    1d:25:0e:3d:84:ba:37:44:d3:b3:88:33:58:40:b8:
                    02:23:26:5e:1d:b3:db:07:90:4e:69:15:1a:bd:f0:
                    40:ba:56:a8:c1:8e:13:94:e1:29:da:ee:c2:4a:53:
                    d2:90:ca:29:7a:78:3a:4d:ad:49:9d:af:72:af:6e:
                    9c:a7:e5:00:3d:e8:c7:cc:a3:e5:6a:43:77:ab:4e:
                    8b:97:df:0a:e6:d4:90:79:35:ff:06:54:d6:51:44:
                    fd:cf:f2:0c:85:9d:8d:ad:02:8d:26:5a:17:27:fc:
                    be:4a:1d:a0:39:69:67:fd:ea:50:c7:0c:cd:fd:65:
                    67:4a:5e:8f:02:b8:33:03:50:68:d8:c8:7a:a4:f0:
                    f1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:90:36:0C:8D:2D:E6:C2:27:A6:2A:80:7A:5F:3A:06:0A:7C:25:83
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:7d:d9:31:e9:33:56:03:e1:7c:9b:ec:b0:d5:48:36:54:b3:
         74:c1:02:aa:01:61:dd:a0:66:0b:58:3c:90:c9:21:18:55:b7:
         fd:ef:76:e7:74:c0:67:f2:6c:21:13:72:52:04:f9:8d:22:db:
         bd:1e:9f:d0:e5:0d:33:26:83:e0:59:25:37:43:82:a3:b5:74:
         04:fa:f5:7a:82:ad:e6:d6:b1:d2:94:f0:b4:12:47:16:a8:64:
         41:70:30:d4:ab:55:65:ea:11:c0:61:ab:84:f9:2e:41:14:62:
         28:f9:f3:31:ef:22:6f:e1:30:3b:e7:69:4d:b1:71:4e:4c:37:
         80:70:4e:14:60:36:fd:4d:5c:1a:9a:a2:ac:f0:c5:9b:e5:4c:
         68:a4:e9:29:92:10:58:b3:f3:54:d4:cc:e4:7c:c2:0a:62:8a:
         ac:00:6c:dd:af:44:1d:0f:f9:09:83:eb:16:fa:6e:d3:47:93:
         e0:76:a9:a2:19:77:6a:be:3b:2b:1c:fb:58:ba:6f:8b:b9:c6:
         cf:f6:b4:a3:ff:55:94:8c:ea:99:17:ed:0b:9a:17:63:13:0b:
         8a:af:b6:31:8b:06:64:c0:32:f7:86:64:25:03:a2:fa:01:a0:
         94:40:2c:f6:9a:30:79:db:cf:f3:c8:4b:6c:52:c0:9e:36:82:
         9a:9a:ad:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:02:19 2025 by rpki-client