Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
File:                     E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json)
Hash identifier:          1A8e+nDGTcwRBZeKbDvGFH2se/ukdsVEoQGnQEeAQYo=
Subject key identifier:   4C:9A:40:67:DD:8A:1A:1C:82:F4:A4:D1:98:C5:50:31:2E:71:14:8F
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Certificate issuer:       /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial:       014F6F1572C20B3AD4E7AA7A49B64B31901D745B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
Manifest number:          FF
Signing time:             Mon 08 Sep 2025 01:33:57 +0000
Manifest this update:     Mon 08 Sep 2025 01:28:57 +0000
Manifest next update:     Tue 09 Sep 2025 02:57:57 +0000
Files and hashes:         1: 326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa (hash: Qj8pflv8KszWoeUIqOpeKQUtZrsbyJDTmnxefpUjjlo=)
                          2: 39312e3230392e34382e302f32342d3234203d3e2034363337.roa (hash: 4+D5jdmTDYB1GvCAU0z5GBGlSPW7Q/zpduO0wdWv8pU=)
                          3: 39312e3230392e35382e302f32342d3234203d3e203634323637.roa (hash: vVPhAwxMoGbJX95BZTqrmZCi086rlFMNDRhMBQEniYs=)
                          4: 39312e3230392e34302e302f32342d3234203d3e203232343237.roa (hash: na/qAaTdIJ7PT1YXsvaqUnpzD/nkfVV0HbNT3JlIn2w=)
                          5: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: y3D16Em3YSyshzoUMplCppQBtqFK5zWyo7IREtdEpXs=)
                          6: 326130663a356663303a646561643a3a2f34382d3438203d3e203339363733.roa (hash: gO+lPcmBJ3b3FFlaD55CICvRL4LDSg56OGDANGd62H4=)
                          7: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: UjFw0WQQLm//XoiWgykA8VWz+amzh0YCKaelwGihPq4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 01:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4f:6f:15:72:c2:0b:3a:d4:e7:aa:7a:49:b6:4b:31:90:1d:74:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
        Validity
            Not Before: Sep  8 01:28:57 2025 GMT
            Not After : Sep  9 02:57:57 2025 GMT
        Subject: CN=4C9A4067DD8A1A1C82F4A4D198C550312E71148F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f8:24:5f:d7:39:97:9a:bf:c3:5d:41:44:60:
                    56:ed:1a:aa:20:c3:df:9b:b1:36:76:ec:18:dc:d6:
                    91:d6:39:8c:e5:6d:4e:3b:b2:d1:b7:d5:ab:ec:da:
                    3a:53:6f:1a:39:52:67:e2:10:10:bd:4e:84:45:fa:
                    fc:e6:c9:70:03:62:96:a9:47:6f:b8:cf:7d:48:af:
                    fa:be:11:b0:33:b8:26:45:83:4b:24:ae:1a:02:4f:
                    0b:58:45:97:84:e6:b6:2a:bb:7d:90:f4:81:89:87:
                    3c:93:9e:da:9c:ad:48:b7:1b:ab:5f:9e:c2:be:77:
                    29:02:99:0a:18:d1:ab:87:d2:87:ef:67:f8:40:01:
                    cc:3c:69:8a:07:6c:3f:a5:a3:36:81:09:a0:79:cf:
                    e0:9e:3e:f9:ac:ea:08:04:12:5f:14:c9:1a:03:05:
                    de:8d:3d:4f:c2:2b:59:94:86:c0:3d:ff:c6:0d:56:
                    b1:4f:76:b3:1d:9e:85:30:9e:4f:f8:41:4b:9c:0e:
                    9b:09:0c:be:fc:18:5f:89:98:fc:49:32:71:54:cf:
                    3f:2e:98:a5:3f:d1:d5:44:90:89:92:97:5b:30:1f:
                    dc:50:69:d6:d6:54:34:3e:c5:2e:e5:3d:c3:73:cb:
                    51:8d:86:7e:de:8d:0e:24:39:d5:1e:db:7b:bf:22:
                    55:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9A:40:67:DD:8A:1A:1C:82:F4:A4:D1:98:C5:50:31:2E:71:14:8F
            X509v3 Authority Key Identifier:
                keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:12:e1:89:41:b3:1e:e5:86:2f:e9:7d:56:81:88:d2:81:f6:
         44:57:8d:a0:5f:c3:e9:77:fe:1f:95:44:c7:5c:df:a9:08:60:
         b6:87:5c:f9:5d:af:a3:f5:0a:3f:93:c1:3a:40:fb:91:23:bb:
         a3:a7:96:b4:f3:b9:83:f6:8e:23:ed:68:9d:73:53:b4:38:10:
         61:c1:55:b3:cc:f2:2e:b5:76:c8:33:61:f7:3c:5f:4a:8e:aa:
         61:c7:0b:97:31:2a:90:10:ce:88:be:ef:e2:d6:7f:81:42:58:
         3e:95:90:c2:c6:d5:73:c2:37:c9:a9:4a:ef:8a:b8:c1:80:f3:
         40:ac:18:ce:f3:bc:79:77:7a:5a:ed:c7:6b:0c:0b:1c:ab:f6:
         3b:a0:32:b6:99:e1:1f:84:77:93:b4:1d:d7:3f:30:69:a4:cf:
         fc:fb:74:a5:90:c2:a3:fa:cf:10:dc:4f:1f:6b:84:ee:02:3b:
         54:9a:e9:d6:c0:62:e5:b2:74:ab:96:c2:de:92:2d:24:6a:6c:
         65:a9:bf:c1:31:45:86:b0:c9:f2:91:79:05:13:4f:c2:ed:6f:
         fd:f3:3c:9a:2d:36:e3:11:1f:03:89:db:66:48:e7:f3:23:4b:
         07:7b:1c:cb:e9:1b:f7:a4:98:a1:60:7a:1a:15:c2:b4:d7:9c:
         31:8c:81:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:36:58 2025 by rpki-client