Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
File:                     2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft (raw, json)
Hash identifier:          mFfPHOgvn49PgACLF+QcGdW+z9LNtqqR3ecJJhJRGy8=
Subject key identifier:   11:1F:42:78:C3:CE:9A:24:9A:D4:1E:45:5F:3E:E6:53:0A:4D:4C:B4
Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
Certificate issuer:       /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Certificate serial:       2D8AD998B6D3032E9179615C03B4A783D306B1EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
Manifest number:          03E1
Signing time:             Tue 21 Oct 2025 14:45:25 +0000
Manifest this update:     Tue 21 Oct 2025 14:40:25 +0000
Manifest next update:     Wed 22 Oct 2025 16:13:25 +0000
Files and hashes:         1: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl (hash: b1uP3TytkfVbuLShyBdYAE0AUgP4j99yHIsNWDnX0Wc=)
                          2: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (hash: FrtXdPIEsvn1iYUedtjAO8L9S5GjDxa5ywOB8CuN7A0=)
                          3: AS205329.asa (hash: VGL8fNaLY3qFu9mP5r7NvYdgKqN6s2IJxTCOZNeTahk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:8a:d9:98:b6:d3:03:2e:91:79:61:5c:03:b4:a7:83:d3:06:b1:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
        Validity
            Not Before: Oct 21 14:40:25 2025 GMT
            Not After : Oct 22 16:13:25 2025 GMT
        Subject: CN=111F4278C3CE9A249AD41E455F3EE6530A4D4CB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:18:dc:0a:4f:13:9c:52:d7:12:ac:b3:63:
                    9f:1d:0d:4a:5a:6f:63:9f:8b:c2:ae:c6:ae:15:4f:
                    62:e6:b9:2a:17:c9:d7:3e:b2:0e:d5:cd:50:5a:fb:
                    93:28:d2:b0:f5:bc:4b:a9:32:b9:53:79:22:fc:4f:
                    c2:98:05:0e:88:c2:8d:11:7b:3a:1a:42:80:c3:2d:
                    b7:59:ac:bb:8d:79:06:92:59:04:a5:14:94:6b:fe:
                    f8:d3:e7:8e:97:75:12:e1:a3:80:52:f4:48:52:1b:
                    58:49:39:cb:bb:d8:25:85:90:15:bb:cf:fc:7c:fb:
                    9f:77:27:88:94:7b:13:ac:07:16:eb:e7:7d:4e:db:
                    c9:f1:a7:1b:d7:ad:9a:22:89:04:0d:21:54:9a:42:
                    9b:27:ed:67:4a:1d:cb:10:f0:c1:93:13:58:23:0a:
                    62:b0:3b:a3:e5:75:7b:05:e8:17:2b:77:e4:ad:53:
                    44:75:90:fc:63:98:ad:7e:66:31:40:5a:db:a7:d4:
                    62:f6:59:91:67:97:a4:7b:92:09:19:55:ab:80:84:
                    eb:d1:59:e7:73:ad:8c:30:19:c3:56:b3:8a:d0:52:
                    f6:9f:51:f2:51:f8:a8:94:db:de:04:08:08:c5:d2:
                    ee:92:c5:86:ff:dd:35:8f:5b:15:b1:14:1c:cd:62:
                    5a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:1F:42:78:C3:CE:9A:24:9A:D4:1E:45:5F:3E:E6:53:0A:4D:4C:B4
            X509v3 Authority Key Identifier:
                keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:71:20:9e:2d:52:82:b5:17:a0:a7:39:64:e9:95:56:19:41:
         50:b9:08:c1:69:ce:4a:33:e1:fe:d7:27:08:f4:99:d3:db:58:
         1c:b6:dd:c8:ae:87:2a:4c:96:45:fe:b1:e6:e1:57:5f:d6:79:
         2f:8e:9c:df:30:f9:9f:a9:5a:3c:81:1c:ba:36:cd:fa:34:73:
         3a:04:39:f4:93:3e:e5:1c:e1:3b:24:b4:8c:3b:00:c7:ba:eb:
         78:6d:e5:bb:11:08:a7:a5:34:2b:69:a2:34:9b:77:1e:2f:ca:
         c9:b3:d5:fe:15:fc:f3:34:9c:6e:b1:ac:5b:bb:a4:1d:7f:f0:
         2d:33:28:47:15:4e:df:f6:0e:87:9a:e7:f2:9b:db:21:4f:7f:
         e7:35:c1:e7:27:aa:78:d9:6f:1a:0f:89:24:86:95:c6:97:9e:
         fa:33:3f:e9:51:c9:f8:1e:a9:b2:47:c7:71:89:c2:82:0a:cc:
         9f:b2:33:32:2b:ba:9b:1b:d2:1b:0d:75:cb:73:e4:24:db:e7:
         47:cb:e0:f9:84:56:f5:bc:ac:00:5f:9c:09:75:20:10:53:31:
         c0:a6:2f:27:45:38:12:81:66:78:da:e5:8f:c6:8f:b6:70:50:
         ee:d9:51:2a:ab:45:3a:0a:80:1d:5f:d4:41:ff:a0:e3:5f:88:
         04:6c:86:0c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIULYrZmLbTAy6ReWFcA7Sng9MGseswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMmYwOGNlY2Q1ZTU3Y2JhMGU2OGJjYTdmNzQwMWJkNWVk
YjM4N2ZiODAeFw0yNTEwMjExNDQwMjVaFw0yNTEwMjIxNjEzMjVaMDMxMTAvBgNV
BAMTKDExMUY0Mjc4QzNDRTlBMjQ5QUQ0MUU0NTVGM0VFNjUzMEE0RDRDQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz+hjcCk8TnFLXEqyzY58dDUpa
b2Ofi8Kuxq4VT2LmuSoXydc+sg7VzVBa+5Mo0rD1vEupMrlTeSL8T8KYBQ6Iwo0R
ezoaQoDDLbdZrLuNeQaSWQSlFJRr/vjT546XdRLho4BS9EhSG1hJOcu72CWFkBW7
z/x8+593J4iUexOsBxbr531O28nxpxvXrZoiiQQNIVSaQpsn7WdKHcsQ8MGTE1gj
CmKwO6PldXsF6Bcrd+StU0R1kPxjmK1+ZjFAWtun1GL2WZFnl6R7kgkZVauAhOvR
WedzrYwwGcNWs4rQUvafUfJR+KiU294ECAjF0u6SxYb/3TWPWxWxFBzNYlpXAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUER9CeMPOmiSa1B5FXz7mUwpNTLQwHwYDVR0j
BBgwFoAULwjOzV5Xy6Dmi8p/dAG9Xts4f7gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2
OTgwLzIvMkYwOENFQ0Q1RTU3Q0JBMEU2OEJDQTdGNzQwMUJENUVEQjM4N0ZCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0x3ak96VjVYeTZEbWk4cF9kQUc5WHRz
NGY3Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNjk3MTYwYy1h
Y2M1LTRiNTEtYmY1NS0xMGM3YTZlNjY5ODAvMi8yRjA4Q0VDRDVFNTdDQkEwRTY4
QkNBN0Y3NDAxQkQ1RURCMzg3RkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHEgni1SgrUXoKc5ZOmV
VhlBULkIwWnOSjPh/tcnCPSZ09tYHLbdyK6HKkyWRf6x5uFXX9Z5L46c3zD5n6la
PIEcujbN+jRzOgQ59JM+5RzhOyS0jDsAx7rreG3luxEIp6U0K2miNJt3Hi/KybPV
/hX88zScbrGsW7ukHX/wLTMoRxVO3/YOh5rn8pvbIU9/5zXB5yeqeNlvGg+JJIaV
xpee+jM/6VHJ+B6pskfHcYnCggrMn7IzMiu6mxvSGw11y3PkJNvnR8vg+YRW9bys
AF+cCXUgEFMxwKYvJ0U4EoFmeNrlj8aPtnBQ7tlRKqtFOgqAHV/UQf+g41+IBGyG
DA==
-----END CERTIFICATE-----
Generated at Wed Oct 22 05:10:44 2025 by rpki-client