Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.mft
File:                     F3CC3769D8FD66E30F3BA6B926481F664C7FED13.mft (raw, json)
Hash identifier:          6CoJ4aXz4c4J9cIvklKjijNFXEk1yJz5t04htXlHD5o=
Subject key identifier:   13:38:35:E5:B1:A9:18:7F:9C:CE:41:66:19:B3:0C:78:05:FB:99:F7
Authority key identifier: F3:CC:37:69:D8:FD:66:E3:0F:3B:A6:B9:26:48:1F:66:4C:7F:ED:13
Certificate issuer:       /CN=F3CC3769D8FD66E30F3BA6B926481F664C7FED13
Certificate serial:       5E751AD9BA4F78A42508923670EA921BB30CC166
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.mft
Manifest number:          18
Signing time:             Mon 08 Sep 2025 13:33:57 +0000
Manifest this update:     Mon 08 Sep 2025 13:28:57 +0000
Manifest next update:     Tue 09 Sep 2025 15:31:57 +0000
Files and hashes:         1: 326131343a373538303a3765303a3a2f34382d3438203d3e20323134353334.roa (hash: RRkb0bnNKnbeFbaERnfQOBi5pO2OGjCSeplsy38bpxQ=)
                          2: F3CC3769D8FD66E30F3BA6B926481F664C7FED13.crl (hash: ls7roI9cbwGeSDOVXuVb49awDQCi9m3T+1vm3JDSKeY=)
                          3: 326131343a373538303a3765303a3a2f34342d3438203d3e20323131353735.roa (hash: eIcNuMQVK00NVTttAcCUkEiDTJRni4+mtCPYV/BBYmk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:75:1a:d9:ba:4f:78:a4:25:08:92:36:70:ea:92:1b:b3:0c:c1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3CC3769D8FD66E30F3BA6B926481F664C7FED13
        Validity
            Not Before: Sep  8 13:28:57 2025 GMT
            Not After : Sep  9 15:31:57 2025 GMT
        Subject: CN=133835E5B1A9187F9CCE416619B30C7805FB99F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:81:e0:c2:8e:6b:8b:f8:c8:03:fd:d6:4d:
                    ad:79:35:f4:f6:ec:a5:c3:80:ef:04:72:3c:5c:b9:
                    3d:19:e3:54:f5:1e:65:0c:db:f0:7d:48:6e:ee:f1:
                    68:af:b8:9b:2f:a5:61:08:1a:6e:2f:ef:4e:b6:f7:
                    77:ce:2b:7a:e1:fc:8f:34:db:d1:ce:fa:31:84:27:
                    12:e9:71:f2:3e:87:e1:37:b9:d3:a8:61:50:eb:12:
                    8f:ad:b9:d1:3e:51:44:b2:c9:a7:21:cb:7e:67:55:
                    15:bb:e2:29:78:5c:d3:a3:74:2c:25:55:7f:ca:40:
                    bf:35:b1:28:a7:61:a5:6a:f9:03:48:19:cf:f4:38:
                    22:a6:b3:62:2d:62:62:a7:8e:61:18:c6:c5:ec:1e:
                    6e:36:f3:fe:b8:6d:1c:6b:ec:de:a5:8c:0a:7b:f7:
                    61:e6:0f:2b:54:60:95:69:32:6f:25:a6:8a:13:f4:
                    a8:30:ce:52:25:c0:cb:72:88:8f:87:c0:35:76:e3:
                    66:f8:38:46:2e:06:ed:07:6b:a8:7f:07:5b:01:e2:
                    82:cc:eb:78:c1:9f:28:f6:a8:b9:89:a4:98:2a:24:
                    a0:30:58:24:2b:39:28:b4:2f:19:7d:e2:56:e4:bd:
                    df:f3:7b:d9:1a:e4:2b:4f:c3:86:c9:37:1e:5d:bc:
                    cd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:38:35:E5:B1:A9:18:7F:9C:CE:41:66:19:B3:0C:78:05:FB:99:F7
            X509v3 Authority Key Identifier:
                keyid:F3:CC:37:69:D8:FD:66:E3:0F:3B:A6:B9:26:48:1F:66:4C:7F:ED:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:1d:b3:e2:be:3a:ff:f7:2b:86:cc:83:51:67:6f:8d:56:e3:
         5c:7e:be:eb:1c:23:40:61:87:d5:28:2c:13:0a:23:57:77:13:
         d1:f9:49:a1:db:6d:b8:14:50:23:1c:9e:d4:2c:31:df:c5:92:
         66:3f:92:e2:1e:42:c0:db:29:0f:20:69:1d:e9:a2:ae:c0:0c:
         ac:97:f1:a6:09:df:2d:52:66:ec:3f:5a:47:f9:ec:69:b4:93:
         54:ab:96:b8:7a:bb:9b:91:d1:5c:47:ef:92:5f:7a:b5:ac:b8:
         c3:06:ac:58:de:ab:09:a8:93:a9:79:c1:bd:1c:f4:8d:88:ce:
         7f:d7:49:67:be:9a:bc:63:07:14:84:01:b3:67:3a:2b:b4:0b:
         8d:c8:a7:c1:56:97:7e:87:b4:f4:fa:76:fe:35:d2:b4:be:5f:
         bf:05:5a:56:62:68:28:44:c8:84:0c:73:6e:df:14:b9:e0:49:
         df:ec:94:50:e4:cc:ee:0d:eb:1d:22:70:a0:31:e5:6e:a4:41:
         4f:7b:9b:6a:11:9e:75:ed:0f:85:38:55:6d:ba:44:68:9c:90:
         ab:bf:01:21:6e:7e:d7:ec:25:c6:28:1e:48:1e:14:dd:8d:f8:
         e9:41:89:7f:b7:e3:9e:cc:b0:b1:f5:c6:79:85:1a:e4:4d:67:
         a8:c4:12:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----