Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
File:                     B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json)
Hash identifier:          mWnFtANN9zeBJKlsk55jZUxk8r7id8uLeWzs0SkeMhQ=
Subject key identifier:   12:E1:DC:90:41:DF:E4:54:75:EC:C6:61:C8:DC:76:B7:84:70:2A:4A
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       742EE4C6080612DDBAA011D66175573B952EDDB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
Manifest number:          05D5
Signing time:             Sat 06 Sep 2025 03:53:54 +0000
Manifest this update:     Sat 06 Sep 2025 03:48:54 +0000
Manifest next update:     Sun 07 Sep 2025 05:43:54 +0000
Files and hashes:         1: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: aplL4eWGO1854T22hYUsUkBTP8Rpw5inKqfwVoAi4uA=)
                          2: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (hash: zOTGboIZBsrY2C4wOPiGbp4YdGPWL/CIf9OR+DPh8lw=)
                          3: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: vs2b7sm3b3a6ih0FOLh30+kJAWgxfwtdRLZicKgW2iY=)
                          4: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (hash: pjnqIb4dxS7ohemcNICs3/5MSebDeHfZm+o3ScY7Wbs=)
                          5: 3231332e3133392e38342e302f32342d3234203d3e2039303039.roa (hash: recgwGLHRmHMtvRRJVUhe6BWHyw6Djaciag4FXuYftw=)
                          6: 3231332e3133392e36352e302f32342d3234203d3e2039333034.roa (hash: IuHaapDzUgLoDmpk8BPvs+AnS5FkKTocszixLRbQ9pk=)
                          7: 3231332e3133392e36362e302f32342d3234203d3e203134363138.roa (hash: KfrtJjSrdaJP5uvqRj2CQapVnmUpyN82iN3vrd+6yjk=)
                          8: 3231332e3133392e36392e302f32342d3234203d3e20313337353137.roa (hash: HH3jqYI0MpU2yLi9Hw8yJjtic3EBakXCP+g63lrfqjg=)
                          9: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: +OuqAGA6Hfs6WhFA5/B6hEwf+tfKjNb8cvCngzlKbuA=)
                          10: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (hash: euqkb79t1OVkqJLV4h0sY2Fb9LyHpO6FssRdPdeta2o=)
                          11: 3231332e3133392e38362e302f32342d3234203d3e2039303039.roa (hash: FfLZiCS8Nd3284OE5qfthGu+7ch+27qC/k5QS2NyeLA=)
                          12: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: +A7YZkvAN81rPDpTJkId3sZMflwrFWtwJvc3yTwbIVs=)
                          13: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (hash: m9VEyjC6AstkEvUHZu0nndWjDPejGmt2Un1d+bIvwNg=)
                          14: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: 3sBgBPhXGekAATE8XJ410DzQWJqVxKjP0XKZZazqwjc=)
                          15: 3231332e3133392e38302e302f32332d3234203d3e20383334.roa (hash: qiWvZJxXyA1T8nIVbLoZ99OExdcS5mc15RZxXCZOFJM=)
                          16: 3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa (hash: LCM/dunTFfsiENo1u3oy0PNFVtxRWwm9bEHFaBempdc=)
                          17: 3231332e3133392e39332e302f32342d3234203d3e2039303039.roa (hash: 9cktvEdh4jpik+wY0YHKxFgG9OCHki2tIjn/mKo9IKg=)
                          18: 3231332e3133392e37372e302f32342d3234203d3e20333938323536.roa (hash: AAU8mMA/8qMP5OVFvU4ND40XGDRIHcFw5zTvG37HSds=)
                          19: 3231332e3133392e37332e302f32342d3234203d3e20333936333536.roa (hash: NieT5UxeWR+2krT0/d2wF19mZVPdkNXKgQ2OYS8di+w=)
                          20: 3231332e3133392e39322e302f32342d3234203d3e20383334.roa (hash: v0tNFH1u/s9uww1+x0zLopoqAlrYrdWeRhsSzqaLV6I=)
                          21: 3231332e3133392e37392e302f32342d3234203d3e20323132313530.roa (hash: 0JPdHuSbHUk0VXaqk6MQ9H7eLXZuOQ1QZwBPgp3LcZ4=)
                          22: 3231332e3133392e37392e302f32342d3234203d3e20323037333838.roa (hash: ++GZ339S0KrF867J3TV0tr4TdthWz9Doq5ZUIyvykVE=)
                          23: 3231332e3133392e37392e302f32342d3234203d3e2033333230.roa (hash: PtRMyKTdbfZGfPE5XdhdhFh3qhxKx8+kxVjMWXNcsWU=)
                          24: 3231332e3133392e36362e302f32342d3234203d3e203136353039.roa (hash: 1hlK3K+inj21DftfAPCqNx9Ur756v/RvYDQKchDD0RY=)
                          25: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: pcqczpZd3N8rkxbwgnioI5KV9SeSdrdvwmseTG1EX1s=)
                          26: 3231332e3133392e39312e302f32342d3234203d3e2039303039.roa (hash: iHrVGYqO0jEnmhXvt0u+E3Fi7EyKrYFB7bEQzlX2suw=)
                          27: 3231332e3133392e37352e302f32342d3234203d3e20323731393837.roa (hash: qsm72iRYseRLkO/eaTDbU1ka1enp1cU6d6BLc+o+lFc=)
                          28: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (hash: CZYh6lYb4N4Hi46B2oVp46GIE/gWlkXTwUlUU+TKpIw=)
                          29: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (hash: CLzyfVEPAwKX3mhx3cFkDV2A+7c3eW1iEPnVFN3/un0=)
                          30: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (hash: IdSy9DI41okmJzC8kiYhvPIkxbhT29hGtDcstol94Gs=)
                          31: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (hash: FBtJ+MNYwdWO4In9hmlePFb198UWpspP65HhFA9Ht28=)
                          32: 3231332e3133392e36372e302f32342d3234203d3e2039333034.roa (hash: NYL9XU5NwRS1XCCFzhRBS0MjCGeQliFqSkH8RJOdlK4=)
                          33: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: M5KJEFx6ngzgWcWaswPQRo9lko/DzsisbWDI/JPapI0=)
                          34: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (hash: 4HobDf2IR5LvPu11gvXGRRjA/4KYDCBMeX1L5falDQI=)
                          35: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: NjWmld7in/C2wyn6DXt7Xnv7mQPq1jiHpZcTZuGeBQ0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 04:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2e:e4:c6:08:06:12:dd:ba:a0:11:d6:61:75:57:3b:95:2e:dd:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Sep  6 03:48:54 2025 GMT
            Not After : Sep  7 05:43:54 2025 GMT
        Subject: CN=12E1DC9041DFE45475ECC661C8DC76B784702A4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:07:ae:60:62:80:3a:6b:9e:78:fa:a1:37:4f:
                    f9:21:5b:9a:b0:9b:bc:9a:28:d2:60:53:75:e8:ea:
                    b3:76:07:9d:bc:72:e9:3b:d8:79:5a:89:58:e2:93:
                    fe:13:e3:57:e9:0a:b9:b2:2c:46:5d:d8:2f:e6:b3:
                    55:72:5e:ca:08:34:e1:ae:c3:55:09:f2:15:db:a1:
                    ad:f6:1e:d4:21:7c:b1:64:14:c6:ae:b5:4d:6a:9a:
                    26:dd:a0:dc:a3:4e:1e:fe:5c:37:b3:5c:02:9f:ce:
                    c4:ad:8b:96:ba:e5:e6:1d:bc:3c:3c:65:60:e3:6a:
                    02:9a:ad:08:a7:4a:ba:34:8f:dd:ce:a9:d8:20:ab:
                    cf:13:44:e4:6e:42:c4:6e:cf:f1:8c:62:07:19:93:
                    5d:00:be:13:8b:a6:99:8f:2b:9b:6c:dc:04:bf:42:
                    82:a8:21:04:18:93:92:55:92:00:f1:d2:15:f0:ab:
                    d6:a5:99:70:91:39:e0:13:76:2a:a0:6a:cc:d6:fa:
                    2b:41:07:14:8c:c7:46:5f:56:0e:a4:d2:dd:7d:bb:
                    10:06:96:c9:3e:1e:44:d7:01:b5:5a:dc:7b:e4:ed:
                    7f:7e:25:88:c8:d0:66:a4:55:da:47:ae:55:f9:3d:
                    3b:72:e5:85:21:81:0b:16:b4:f6:8c:6a:5c:93:e7:
                    45:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E1:DC:90:41:DF:E4:54:75:EC:C6:61:C8:DC:76:B7:84:70:2A:4A
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:a4:22:ba:9f:f9:3b:11:50:83:4f:1a:98:63:78:91:7f:ca:
         61:ea:9c:d6:e9:c9:0b:6c:20:d5:bc:bb:96:fe:d7:5d:13:e8:
         4c:71:12:6e:93:42:8f:fd:05:4d:f5:a7:bf:3a:d5:e6:d4:a0:
         91:5b:a9:6e:6b:ed:af:a8:b9:e2:38:cb:fc:39:6d:69:3b:8e:
         fc:8d:ba:b5:54:90:72:90:db:73:d6:1f:0b:81:e2:3c:8d:dd:
         e6:1b:e6:51:02:a9:ce:8a:8c:48:17:ad:6a:78:f0:f2:b4:37:
         54:08:de:9b:24:8b:6e:a1:5f:f0:0a:82:a6:ef:68:b3:d6:44:
         d3:7b:ee:3c:8d:42:10:e0:be:77:ec:ea:64:18:d5:88:e7:1e:
         d3:8f:dd:54:2f:72:ee:b2:e6:55:97:a1:24:c6:9f:49:71:2a:
         07:5b:09:a1:8e:70:a2:fe:59:ae:ac:e4:cf:c9:aa:38:ca:92:
         c1:1b:f1:d4:b0:59:94:69:bc:3f:06:2b:69:af:f8:da:a3:4c:
         08:8c:88:77:72:c4:5e:c4:4a:61:2b:1f:31:1d:42:5b:35:58:
         5e:2b:46:4b:20:1d:2b:18:fd:10:29:35:59:5c:93:16:4c:00:
         d9:ff:22:36:ce:14:5d:90:a0:99:16:2a:97:05:8e:08:a2:b7:
         98:95:29:6c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUdC7kxggGEt26oBHWYXVXO5Uu3bYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yNTA5MDYwMzQ4NTRaFw0yNTA5MDcwNTQzNTRaMDMxMTAvBgNV
BAMTKDEyRTFEQzkwNDFERkU0NTQ3NUVDQzY2MUM4REM3NkI3ODQ3MDJBNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyB65gYoA6a554+qE3T/khW5qw
m7yaKNJgU3Xo6rN2B528cuk72HlaiVjik/4T41fpCrmyLEZd2C/ms1VyXsoINOGu
w1UJ8hXboa32HtQhfLFkFMautU1qmibdoNyjTh7+XDezXAKfzsSti5a65eYdvDw8
ZWDjagKarQinSro0j93Oqdggq88TRORuQsRuz/GMYgcZk10AvhOLppmPK5ts3AS/
QoKoIQQYk5JVkgDx0hXwq9almXCROeATdiqgaszW+itBBxSMx0ZfVg6k0t19uxAG
lsk+HkTXAbVa3Hvk7X9+JYjI0GakVdpHrlX5PTty5YUhgQsWtPaMalyT50U9AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUEuHckEHf5FR17MZhyNx2t4RwKkowHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hMDFjMTRmYi1i
NjYwLTQ4OWQtOWU5Zi05NDAyZTllMmMyZTIvMC9CNjgzRjJFQjUwQzU5OTlBNzc0
NTZFODgyNjgzMTYwOUQ0OEM3RDNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqaQiup/5OxFQg08amGN4
kX/KYeqc1unJC2wg1by7lv7XXRPoTHESbpNCj/0FTfWnvzrV5tSgkVupbmvtr6i5
4jjL/DltaTuO/I26tVSQcpDbc9YfC4HiPI3d5hvmUQKpzoqMSBetanjw8rQ3VAje
mySLbqFf8AqCpu9os9ZE03vuPI1CEOC+d+zqZBjViOce04/dVC9y7rLmVZehJMaf
SXEqB1sJoY5wov5Zrqzkz8mqOMqSwRvx1LBZlGm8PwYraa/42qNMCIyId3LEXsRK
YSsfMR1CWzVYXitGSyAdKxj9ECk1WVyTFkwA2f8iNs4UXZCgmRYqlwWOCKK3mJUp
bA==
-----END CERTIFICATE-----
Generated at Sat Sep 6 11:45:53 2025 by rpki-client