Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
File:                     2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft (raw, json)
Hash identifier:          OkLSVFBXX+zHT+9Krt4nwfhwaXASxhy+5qus0DSfmMw=
Subject key identifier:   5C:CA:42:09:61:1F:AE:C1:1A:55:0B:22:94:A4:64:88:04:1B:7B:4C
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       56C2EA1A0EC619E31C79A6DA253C8AB2A3DD1248
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
Manifest number:          0540
Signing time:             Sat 25 Oct 2025 11:53:33 +0000
Manifest this update:     Sat 25 Oct 2025 11:48:33 +0000
Manifest next update:     Sun 26 Oct 2025 13:17:33 +0000
Files and hashes:         1: 323630323a663939323a61303a3a2f34342d3438203d3e2030.roa (hash: TsDzPexWiyW7o35YhRgMnmXGuAARZmgF1yTYqL8wkn4=)
                          2: 323630323a663939323a65303a3a2f34342d3438203d3e203333333837.roa (hash: JcXzbGu5aoqW4eGRLqUocgWZf+gjmi1jki466ucPd4g=)
                          3: 323630323a663939323a62303a3a2f34342d3438203d3e20323039383734.roa (hash: M7868WXtqAKmg/2GcYPXHlqzGv673y1NrEBWzHOAn8s=)
                          4: 323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa (hash: NUE/UX3oXJFnmyAE2FoTGPVQs404K4mf9BK/aBACO14=)
                          5: 32332e3137302e3231362e302f32342d3234203d3e203538323032.roa (hash: xsTimzkeTJXF4Nr71zJnv2bONR0iZSrLPJdDzaLfkdY=)
                          6: 323630323a663939323a66643a3a2f34382d3438203d3e20343031383132.roa (hash: 59uZAy7XXfBP2lTYymBUstkE3+Fixf8c03kHK/e8F/o=)
                          7: 323630323a663939323a35303a3a2f34342d3438203d3e203430363736.roa (hash: izLerJCXQHRMj4EuHnpJKhCKBCsakjo+L9Seyo/D9Sg=)
                          8: 323630323a663939323a63303a3a2f34342d3438203d3e203236303432.roa (hash: Fgcu73F4DxRvaLksBuPTG0jHcKxfTvgmmVGQl4chyzs=)
                          9: 323630323a663939323a66373a3a2f34382d3438203d3e203236303432.roa (hash: fOgtYgLdoLv7e1AYu38TvXyvhQ1fkiq8zn2NcBleuBU=)
                          10: 323630323a663939323a39303a3a2f34342d3438203d3e2030.roa (hash: NC2ZhEPelpHdoSSljxfD6WpRWcBV8zPEY0f/OMUilVM=)
                          11: 323630323a663939323a66363a3a2f34382d3438203d3e2030.roa (hash: 6GBWB4w7LpAqZZsFZ/5hqsbITBZPRg9rgrqjz2AA2Yo=)
                          12: 323630323a663939323a66613a3a2f34382d3439203d3e203430363736.roa (hash: sRvK25+z4/XzVzRz/NRjDVLoeu4AhidYEGZ8Z4be+vU=)
                          13: 323630323a663939323a66353a3a2f34382d3438203d3e2030.roa (hash: dO4GOf8X86hgNTC2If8vBzNuybBxmkNlYTyanbrkRnU=)
                          14: 323630323a663939323a66633a3a2f34382d3438203d3e20343031383132.roa (hash: WWuZlGD19cauNNFGP8lkHygPrhsjx/40EDpoW/B2wUc=)
                          15: 323630323a663939323a36303a3a2f34342d3438203d3e20313532393030.roa (hash: HWpzvbc2LzEmXxoT+kul7X4owcauEKJHusM+Ir+9R/w=)
                          16: 323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa (hash: tl8M/rg4fzRj4HcLbXbMPjG2fJQE/fLu0oqk+/bvTJ4=)
                          17: 323630323a663939323a66313a3a2f34382d3438203d3e2030.roa (hash: YTwFmzgbdVgh5MV70gadVkuqTLHlIUY2ZnBOY6D4sbY=)
                          18: 323630323a663939323a35303a3a2f34342d3438203d3e20313939393539.roa (hash: s0tjGNQz3a0IJwtqI+yV2w0ziifnk/CWeyQrn3w3/qg=)
                          19: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl (hash: ytoteG9OEgRQH5RcLhoCvQ8A4B3Y5uecWEulov4cG6Q=)
                          20: 323630323a663939323a66663a3a2f34382d3438203d3e203633333930.roa (hash: ofYyhY8QxgV7oA+K00vYAeRxc4dVjV27+J0ru1bGCjk=)
                          21: 323630323a663939323a66323a3a2f34382d3438203d3e20323733323032.roa (hash: +regh0iXnX1+G7oho+N8MToCO88rnVaGwW232okUqZA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Oct 2025 13:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c2:ea:1a:0e:c6:19:e3:1c:79:a6:da:25:3c:8a:b2:a3:dd:12:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Oct 25 11:48:33 2025 GMT
            Not After : Oct 26 13:17:33 2025 GMT
        Subject: CN=5CCA4209611FAEC11A550B2294A46488041B7B4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9f:94:78:61:24:9e:f4:99:3e:73:fe:0f:77:
                    13:ff:46:12:77:14:34:62:4f:fc:7f:e9:b9:a1:97:
                    24:e4:06:c8:67:c7:31:ca:c8:ef:f3:ec:3f:25:4b:
                    b8:bb:67:ff:98:d4:06:be:98:56:b7:46:5f:c8:a1:
                    c6:57:49:5f:db:73:4d:63:b3:78:c9:e9:1c:42:cf:
                    42:87:43:52:74:b2:ea:20:30:2d:c6:e4:33:21:4a:
                    53:d3:60:46:17:1a:1f:bf:ab:76:9a:46:66:3a:8d:
                    22:13:6c:b2:fd:98:4d:55:17:cd:6c:59:3e:fd:f6:
                    aa:4e:ad:91:68:90:11:03:38:af:a9:1d:c3:b4:1b:
                    9c:41:ab:ca:ea:5f:36:75:59:f0:a8:83:11:56:f2:
                    07:ed:f8:2c:16:b5:71:a5:bb:d6:b1:f0:69:9f:2f:
                    c7:26:60:c7:e6:0f:16:0d:8d:2d:e6:c0:28:e8:ae:
                    e3:ca:d6:26:60:35:60:b8:f5:ec:0b:d8:e8:dd:42:
                    e6:0d:7b:5e:3e:cb:84:dd:93:93:2d:a3:c2:80:22:
                    a8:55:63:47:b9:2f:6f:9a:a1:19:39:ca:be:d7:97:
                    3a:a8:57:be:09:26:f9:86:5b:30:4d:95:b1:83:34:
                    c5:6e:6b:7f:5c:c8:ad:ac:83:0d:ba:54:ef:72:6c:
                    d9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CA:42:09:61:1F:AE:C1:1A:55:0B:22:94:A4:64:88:04:1B:7B:4C
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:37:e1:38:e8:c2:71:fd:3c:83:98:10:ac:ab:cc:c2:b4:ff:
         7b:2f:8e:e8:55:ab:4a:04:ba:fb:1e:21:4e:6f:9c:cb:80:de:
         19:3a:7b:26:64:61:95:8e:c4:09:bc:ba:e8:a9:e3:77:04:f4:
         fe:91:7b:5d:e9:74:58:3f:8d:55:1c:e3:a1:01:fd:89:ff:39:
         c0:4c:99:e7:2e:c7:bf:2d:52:48:85:a8:74:00:41:a9:be:4c:
         05:d8:4b:2c:40:9a:e5:f6:b0:78:b7:71:fd:2c:29:62:fb:92:
         b6:88:cd:ac:63:62:54:88:6b:f8:44:da:56:b1:98:23:0c:2f:
         62:23:7d:11:4a:fb:d5:fb:33:d3:c7:ba:f6:66:ca:85:c0:11:
         43:52:51:1f:10:42:b2:11:4c:0a:c4:c7:c4:26:35:f0:93:f4:
         e3:ec:5c:44:e7:36:e7:ef:d8:8b:cd:69:a8:a4:e7:0e:08:d6:
         24:54:8a:65:ad:7a:70:26:c6:85:a5:7b:82:e6:58:be:14:55:
         5b:41:14:17:34:8d:9e:84:96:d6:fe:de:80:bf:80:f8:90:c5:
         4e:1f:93:f2:0d:11:a8:c8:a0:9b:4b:54:ba:5b:03:7b:3a:ef:
         04:a0:01:35:d4:82:8c:cf:0c:11:a7:64:17:88:25:cd:fb:5d:
         a4:43:d5:0f
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUVsLqGg7GGeMceabaJTyKsqPdEkgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi
ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjUxMDI1MTE0ODMzWhcNMjUxMDI2MTMxNzMz
WjAzMTEwLwYDVQQDEyg1Q0NBNDIwOTYxMUZBRUMxMUE1NTBCMjI5NEE0NjQ4ODA0
MUI3QjRDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7J+UeGEknvSZ
PnP+D3cT/0YSdxQ0Yk/8f+m5oZck5AbIZ8cxysjv8+w/JUu4u2f/mNQGvphWt0Zf
yKHGV0lf23NNY7N4yekcQs9Ch0NSdLLqIDAtxuQzIUpT02BGFxofv6t2mkZmOo0i
E2yy/ZhNVRfNbFk+/faqTq2RaJARAzivqR3DtBucQavK6l82dVnwqIMRVvIH7fgs
FrVxpbvWsfBpny/HJmDH5g8WDY0t5sAo6K7jytYmYDVguPXsC9jo3ULmDXtePsuE
3ZOTLaPCgCKoVWNHuS9vmqEZOcq+15c6qFe+CSb5hlswTZWxgzTFbmt/XMitrIMN
ulTvcmzZxQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFFzKQglhH67BGlULIpSkZIgE
G3tMMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5
LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD
MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It
NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00
OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4
MTc2ZmE0MzEwYjYzNTUuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
ODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzEvMkYwRjFCQzY3
REQyQjlBN0UyNTQ1NjM4QzE3M0Q1RUMwNjBDMjdEMC5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACY34Tjo
wnH9PIOYEKyrzMK0/3svjuhVq0oEuvseIU5vnMuA3hk6eyZkYZWOxAm8uuip43cE
9P6Re13pdFg/jVUc46EB/Yn/OcBMmecux78tUkiFqHQAQam+TAXYSyxAmuX2sHi3
cf0sKWL7kraIzaxjYlSIa/hE2laxmCMML2IjfRFK+9X7M9PHuvZmyoXAEUNSUR8Q
QrIRTArEx8QmNfCT9OPsXETnNufv2IvNaaik5w4I1iRUimWtenAmxoWle4LmWL4U
VVtBFBc0jZ6Eltb+3oC/gPiQxU4fk/INEajIoJtLVLpbA3s67wSgATXUgozPDBGn
ZBeIJc37XaRD1Q8=
-----END CERTIFICATE-----
Generated at Sat Oct 25 19:56:55 2025 by rpki-client