Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File:                     1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier:          YOsfFMigBOBk+lPU1zBXjCb0qA5LubEPj2fFU6qBgqk=
Subject key identifier:   34:C0:83:DA:40:A0:4C:43:43:95:40:A3:39:8B:0E:AD:0F:A5:51:8C
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       73E5F6453D10537E57F3A8897762172A9ECAD59C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number:          0292
Signing time:             Sun 31 Aug 2025 10:10:31 +0000
Manifest this update:     Sun 31 Aug 2025 10:05:31 +0000
Manifest next update:     Mon 01 Sep 2025 12:19:31 +0000
Files and hashes:         1: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=)
                          2: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
                          3: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: polxJUQuuGvo82QFQvRtgLcGzpMrITqZaH9JMW5PByU=)
                          4: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
                          5: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=)
                          6: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: 7RQ0gXCWkNwXJyLVMAjMT4ifOZKJ140AG/jnIia+kz4=)
                          7: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=)
                          8: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: s8PXZ6xun7QdEzluX2KYTIUVTeLEFzlJ1flicK9iKH8=)
                          9: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=)
                          10: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=)
                          11: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: P+G+ccVCd+vNUfW7NEPgP+hoVYdcalTSglOHkBXLN9Q=)
                          12: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 6RxmKyitzJl4tEe1yv4vU5lxANHGsLOEl2k3HSP2ddo=)
                          13: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: ZhIUpj5tVPDcWiQ+3SY61ZE9RRhM2AJ7zchpU/cGNbk=)
                          14: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: 17qN8Bd0gWBZvDkn96RHqKMURz1HVyJmOiwn1OSD2G0=)
                          15: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
                          16: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: M4zqLtdUHSAbU4GatESAUlsOQgWU2zpPTfy3/5JmOsg=)
                          17: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Sep 2025 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e5:f6:45:3d:10:53:7e:57:f3:a8:89:77:62:17:2a:9e:ca:d5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Aug 31 10:05:31 2025 GMT
            Not After : Sep  1 12:19:31 2025 GMT
        Subject: CN=34C083DA40A04C43439540A3398B0EAD0FA5518C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:75:f1:a5:0d:84:1d:5d:5f:96:a7:ef:51:df:
                    2e:d2:e9:bb:f4:57:65:ed:9d:b3:84:34:ee:34:a2:
                    1f:30:99:40:e4:95:9b:02:b9:b5:50:47:b5:22:17:
                    19:37:34:c6:39:17:eb:d0:35:66:ef:c8:dc:90:da:
                    a6:ba:11:51:e4:6f:01:11:b4:b8:54:dc:12:86:b6:
                    25:4f:44:67:79:b5:25:8a:d8:8a:cd:c0:b0:a7:ab:
                    1c:f0:db:e8:50:09:20:97:38:ec:58:e9:3e:fe:ea:
                    fd:df:96:81:d5:79:1e:a4:30:10:8c:41:af:b8:12:
                    d9:90:a0:3b:19:fd:fe:e4:0c:da:be:14:d0:24:0c:
                    19:5e:3d:84:a9:1d:1b:cb:ad:2d:fb:3c:88:45:53:
                    20:a9:ec:67:2e:e1:8a:a2:e8:28:ff:c1:48:e6:57:
                    f5:5c:95:bf:4a:77:ea:30:95:5c:89:f8:a9:c0:69:
                    a2:85:32:23:12:ed:0a:08:96:96:f3:66:01:9f:84:
                    78:eb:a5:45:59:5d:61:13:6e:54:da:0d:bc:44:38:
                    b8:a5:df:ef:7a:ec:9c:6e:c2:2e:eb:b8:0a:79:73:
                    04:96:bb:4a:1d:13:6d:35:e8:fc:52:59:89:3b:0a:
                    34:91:7a:ac:2d:bd:98:5b:b5:98:f0:a5:1a:47:35:
                    a2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C0:83:DA:40:A0:4C:43:43:95:40:A3:39:8B:0E:AD:0F:A5:51:8C
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:4a:64:80:5c:1d:42:49:c7:0b:db:a7:2f:53:07:2f:40:dd:
         3e:71:10:3d:4c:fd:67:88:37:43:96:2b:a7:1f:56:1c:28:c5:
         c1:81:2c:2a:de:f7:e8:e9:61:99:c5:7e:b4:e9:31:9d:8f:fe:
         3b:f9:8a:35:56:11:df:31:f5:56:3f:f4:7e:10:8c:e8:c8:06:
         dc:b5:0b:02:fa:1b:08:fe:d0:33:9a:34:50:72:57:7f:43:93:
         58:c5:01:15:1a:bb:0f:c3:48:51:46:5b:6b:15:20:7b:66:95:
         9e:86:6a:3c:d3:1f:c0:0f:77:1c:0d:6c:46:72:a6:56:62:39:
         af:d4:d3:a0:0c:95:66:91:a4:ef:c8:3a:f7:53:91:a9:e9:17:
         30:fd:b0:f2:4f:4e:69:c5:ae:32:39:87:6e:52:ee:66:48:bc:
         31:07:63:1c:85:72:b5:51:ac:7e:2b:18:46:48:5a:50:5d:94:
         b5:c8:60:d3:53:da:03:2a:80:16:01:15:b1:f4:27:58:d5:12:
         34:fc:16:6c:17:97:3d:35:4f:78:b7:95:21:0c:9c:37:44:0c:
         58:69:81:40:8f:ef:bc:e8:90:72:34:75:55:75:34:4c:8e:90:
         31:52:70:34:c6:cf:40:0f:46:9d:d2:3b:2c:29:81:75:f9:bf:
         4d:ea:c9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 31 13:33:37 2025 by rpki-client