Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
File:                     38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json)
Hash identifier:          aNtX+waWh2mW73jmifGEUsfVwOJvpR/K7QmU/6buLlI=
Subject key identifier:   FF:51:D2:51:0F:D3:91:21:C3:44:67:B5:0B:AF:67:61:01:CF:D6:C5
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Certificate issuer:       /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial:       5A3EA8D4646AF59BA8AAA717DAE548C0994E0606
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
Manifest number:          ED
Signing time:             Fri 06 Jun 2025 05:12:29 +0000
Manifest this update:     Fri 06 Jun 2025 05:07:29 +0000
Manifest next update:     Sat 07 Jun 2025 07:25:29 +0000
Files and hashes:         1: 34362e3138322e31362e302f32332d3233203d3e203433383437.roa (hash: 4YLzigbbgGBlj3P8KPCDpw+y1a9c2DAZLVBVu5lNf4E=)
                          2: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: /UuXq/SkWF47gXFnW/T4vEllXZulBrt5hUqt6XmiJns=)
                          3: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: 01LOWf7MxhRX+2Op4rDN5W7ucn6FteIUTuCGEpIiXqg=)
                          4: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: 2aiAtkkpFlb5J4UKg3KwRnaG7ituhGEa6s/dcTUAgJQ=)
                          5: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: Zxw7HANZ4fSS/h6IwZB62HG+NMCfSONfC+RPVG/FTSE=)
                          6: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: tjhKwoa/z/ms3eL96lf+MyeXfH8SFjq92hWldF9BNCA=)
                          7: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: zw11Tnwj1qk371OBy2bFuY0ckjzYF4soNbyb5oAj95Y=)
                          8: 33312e3138352e3130372e302f32342d3234203d3e203231383539.roa (hash: X23TgVm2+OwqELUYhUauYCGCU9YC3xkuQ9JiAV3abPE=)
                          9: 34362e3138322e31382e302f32332d3233203d3e203433383437.roa (hash: 4Ns+nZIS59tdPTXyzEk/8ZsDfijKL83vY7HPlP7mVB0=)
                          10: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: jGy7NRXxpQ8Adk8KlwvLUXW9fgmGYykhrzR6k8tJHIg=)
                          11: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: bxI8j0Q43fNYwFfEpnx3zZA+WfxxHOFpyLP15cwiRJc=)
                          12: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: DOt+xOMDogaXujbawrGL0U15zCSEQeK/RAeOdZ56ezk=)
                          13: 33312e3138352e3130352e302f32342d3234203d3e20313335333931.roa (hash: UHjaYZdaJB6lUIpYnqhxUJeEQvDh7dO7siLVcmgE1HM=)
                          14: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: mN3Qu59H2oC79ZObPpdN6ubuCwdpq+KwMSfQr8+kwt4=)
                          15: 3138352e35382e3135382e302f32342d3234203d3e203432383331.roa (hash: H0/UOIDOPTZQG2jWBZUuvlV7qmEWppBmDmL+nyn9Jr4=)
                          16: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: YFUHOvZUTuDXo1v/ldHHqjI9VjtTCBbJBPcqOziNAKY=)
                          17: 326130323a323937303a3a2f32392d3239203d3e203433383437.roa (hash: s2Lo9o3m7PNA+VTM8h6HfGJuLE7e0u+GGo764aM9FW4=)
                          18: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: jK9tTJ3HWkDECaNJJZCeSwWGUPLGyK3Y5TeyBPZZ8ds=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 07:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:3e:a8:d4:64:6a:f5:9b:a8:aa:a7:17:da:e5:48:c0:99:4e:06:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
        Validity
            Not Before: Jun  6 05:07:29 2025 GMT
            Not After : Jun  7 07:25:29 2025 GMT
        Subject: CN=FF51D2510FD39121C34467B50BAF676101CFD6C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ad:b1:52:fe:93:96:b4:40:e0:f2:4f:9a:f3:
                    d6:68:5a:1d:ac:ee:e1:f3:54:9f:c9:3f:a8:f2:0a:
                    c0:22:e9:6b:b5:d6:e0:fe:5e:ab:78:58:c6:00:c1:
                    7c:ca:a2:fa:2d:70:52:87:fa:22:2f:d6:a8:fb:c8:
                    fb:82:ec:9e:c1:58:9c:27:6f:06:9a:90:ae:6e:a2:
                    f0:cc:17:ca:9e:01:b6:66:ef:b7:ef:8d:a6:11:e2:
                    c3:86:1b:01:54:62:f3:4f:8b:ce:b0:fd:ea:70:65:
                    51:70:61:7d:71:44:cb:20:94:22:6c:a2:ce:27:87:
                    4c:c5:01:d8:43:fe:e1:ff:46:77:0d:96:cd:85:d7:
                    9a:96:c6:4c:a1:32:43:54:03:95:a5:a3:4f:a8:f9:
                    71:9a:4e:d0:ae:30:7e:f8:f9:15:5a:d5:ba:0c:d8:
                    0a:d5:ba:93:9b:c4:56:eb:63:91:ef:26:ab:28:66:
                    9b:24:eb:7d:66:88:92:d1:66:83:6f:31:86:df:a5:
                    95:5e:d6:73:1b:56:18:6d:a6:15:0d:9a:76:d4:48:
                    f0:0d:d8:78:e1:3c:71:b5:0d:eb:54:d9:92:11:69:
                    fa:a8:93:52:df:dc:43:27:1e:6c:aa:74:e0:30:9f:
                    0b:a5:68:06:2f:2c:49:67:43:5c:99:33:a0:36:08:
                    1b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:51:D2:51:0F:D3:91:21:C3:44:67:B5:0B:AF:67:61:01:CF:D6:C5
            X509v3 Authority Key Identifier:
                keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ee:6c:0a:01:c8:2c:e6:32:59:7d:8d:1c:03:06:b3:2d:61:
         8c:81:dd:2d:76:15:65:3b:4a:7a:57:35:d9:92:e1:33:c4:05:
         41:fe:5e:24:b2:7a:88:ab:8f:ee:70:88:8a:5c:58:de:30:5d:
         35:ea:65:98:35:d4:5f:f2:31:b6:15:7f:d2:c7:3b:f5:8d:6c:
         bf:1d:65:e8:7a:84:0b:49:ed:d8:b8:5e:8f:85:7d:72:97:40:
         04:1d:1d:03:4a:df:64:9f:02:cd:34:fb:2d:ce:a9:81:bd:02:
         a0:28:d2:9f:fb:94:da:3b:c1:52:26:22:b0:3f:d3:54:80:a7:
         00:1f:0f:29:e2:83:71:15:03:39:04:b3:42:95:ed:8b:84:ab:
         22:09:8c:e2:6f:d7:34:f8:06:4b:67:78:6f:be:fb:6a:98:93:
         62:ee:4c:43:09:43:f4:44:e7:ec:f9:ce:22:24:e2:98:7b:94:
         18:b4:8f:04:dd:5c:54:40:10:7d:51:72:a1:c5:82:9f:5f:6c:
         37:59:f0:17:88:4a:49:45:6f:cf:1c:14:69:ba:91:d5:59:8a:
         36:5d:1e:56:ed:da:35:86:d2:f0:49:f0:04:16:7f:b9:9d:87:
         50:c1:07:96:79:17:0c:c5:20:fa:34:1b:80:48:82:de:2a:63:
         76:19:25:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:19:32 2025 by rpki-client