Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
File:                     0839A93DAB544C296FFA143456844A8B2818B1D0.mft (raw, json)
Hash identifier:          LQMuBZPOfopfHomtExQXmw/BKOpRly9g5iy+muzv1iY=
Subject key identifier:   28:54:30:0E:8A:D4:24:67:98:DB:6C:13:A6:5E:79:83:9E:64:AC:4A
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       233D4791BE2A6C1571BFFF410EAC067103119814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
Manifest number:          02EF
Signing time:             Mon 27 Oct 2025 00:46:46 +0000
Manifest this update:     Mon 27 Oct 2025 00:41:46 +0000
Manifest next update:     Tue 28 Oct 2025 02:00:46 +0000
Files and hashes:         1: 6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.cer (hash: 6I8CkH37Y+2qxrW8WAlVcQiiukOkkakJShyNFWsBV3k=)
                          2: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer (hash: gW5/r+rTqmiwY5x1Qtx3z5ezWcBU9AkoYGR7QTJTGt8=)
                          3: 326131313a663263303a333a3a2f34382d3438203d3e20323032333539.roa (hash: XIj+fw+vRgYTpRxwvO3XvTkfLsFczQo4AujMyz3iud4=)
                          4: AS202359.asa (hash: 6VIFnTZlZo7nQ/fI9Z3+DaeUn3Y1Zv+vHdQ94mzfXkg=)
                          5: 323030313a3637383a6663383a3a2f34382d3438203d3e20323037393630.roa (hash: UNIFWQcfDb9TIYM9mTcmUs06i4tbcfV6n3m2ESGFPVM=)
                          6: B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer (hash: 8IYDJ2eIDos7JCscqio8m4CtvsMZIm87tSAcUKKXKKg=)
                          7: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer (hash: 1nhiF+DUP666qHgL0W5CdOzUBH6sH332zL1MCTVIgUk=)
                          8: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer (hash: jH9R6EtyMHUcM8XcpEu+SmgJb0fp9TQ+h2bdy0JKm8s=)
                          9: F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer (hash: xVngRZoqmU3ug9ZE0lvPtcRq8CjSyQiMIGiV8ww3DYk=)
                          10: 1A889E0950A8B6489E67E7C7189539FB887EAD71.cer (hash: QvMFt41RXdcJq7gp5tnRNXaXgfSmaaXZCupMATLSYFk=)
                          11: 326131313a663263303a3a2f34382d3438203d3e20323037393630.roa (hash: 3TxnMdPT5hHYItzRe6t9ErU/wv40unaDW97hsOh3H4M=)
                          12: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer (hash: Z+xIm/9vNqFKmLWBcsaGK8BJ1alQ9TOcEU4cwskAlyE=)
                          13: B50D92304CA867525C648A07380EA065FD352DEC.cer (hash: jeLezi/e/tiKuflcEffKB+Cet8nw848xqf2VW1otgMA=)
                          14: C2724A29EF989A4340933B8130B402DD4627A501.cer (hash: 984ckCJkp1VtRhMMUPKyUG2Uubk2ftZ4dLd3NzPeeY0=)
                          15: 1D570B984E9C5E382B0A879AA21F6518621F059F.cer (hash: w4LlrRiZpjCqpbWEegKCJHPhvyvwSjODOuNEEV+R23o=)
                          16: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer (hash: fBqC9ryjQi6+GMXhqT8gchFPNagFwAwTKLhvHv66WwQ=)
                          17: BBED14E9793905EC1EA5CE10AA03C497D737B115.cer (hash: m+ztv5UmtHgdFMzFwqLzYGsJqAw/AeqFEUgffywu2Zc=)
                          18: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer (hash: Zmzv7fBFqGLxjYc480gPrSI5W4OUPciQIi5quu5IaLg=)
                          19: 326131313a663263303a3a2f32392d3239203d3e2030.roa (hash: SFi79UqiX3kS2cuHdwRtphv59FDPSt5CMOnrnul0UdU=)
                          20: F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer (hash: +U9s3nk3zcGTMVxdfeeaoEIEhjnpyi2zUiI59YfVir8=)
                          21: 31586760843F668A816117EA02F6F30FE8F9C359.cer (hash: sdjQP12grMA84wrOD8soDanrM9KsCHOhQQgZ6YwFl/w=)
                          22: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer (hash: xWjJR6Nxgh4wTbQyfSpM8roZ9e57XZ5G/Wz+HfAB8Qw=)
                          23: 326131313a663263303a343a3a2f34382d3438203d3e20323032333539.roa (hash: B4MACJgrYv8gOFyM+OgYWOFeMkOQBLykzkdPSnyxEgo=)
                          24: 09F041F60B21B649820D0FEE0D7654D63DDD080D.cer (hash: YD4L9bqvaUV95bBh8Ju1YuFHRvMJfo/DkcF98/HxW9I=)
                          25: 62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.cer (hash: L9VSFOsG4sCFFaXWcNTMiKK4PkL1oeVJZtfXUCMq90Y=)
                          26: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer (hash: NscCIMsZ2yU9wFViqqUFMP9l2GG+IJImIYDZVt1y4cg=)
                          27: 326131313a663263303a666635303a3a2f34382d3438203d3e20323032333539.roa (hash: RTtc7kvQY4mgVpXb0OGaj3d8CGbqE+rrAFaJtMYV3Gw=)
                          28: DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer (hash: 3vaivSKVhBLosaem2QlCMLHyP8nE7HqRRCEcYWTaKv0=)
                          29: 3139332e332e3136352e302f32342d3234203d3e203434333535.roa (hash: 8+PpyJbtCrTrR5hMXklV6jn0Gbpl8JRn1mZ/sbUihXw=)
                          30: 326131313a663263303a313a3a2f34382d3438203d3e20323032333539.roa (hash: ZivrOJ7iiOCUg/HqF4j2xuXr75dIBf1hdqQTAxY+xwU=)
                          31: AS207960.asa (hash: RBx5PyqAoDrY5adMVJOexhNWG9/6VgBD3egnyXHlPHY=)
                          32: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer (hash: CEGJbTLl4BFPIQu0BkXUdZ1K35M3vSyHeqh8rVvhUfc=)
                          33: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer (hash: yTl2Qe0zE7utVIXFFzinc49BbSbwlbqpMj5PC0Y9RLc=)
                          34: 4742E76772F118A935D69FD40F69858085C80999.cer (hash: PXNlleSIOJFtms7j+EwWK+dQ4coJG0uvhI3LcgkFsFw=)
                          35: E02C2B37910DB974089166C0D244DE386B5762C2.cer (hash: NQL7Q+vPifLFy80HHQ35NSOJH0JVOxv33NgrFx9SMgU=)
                          36: 6482EA67DB858D1440DD67B955223E4341BA4E97.cer (hash: lKlfGm9oX8e/vMr1ifVDL2vFahUuPFOtcD1F8uJvy/E=)
                          37: 0839A93DAB544C296FFA143456844A8B2818B1D0.crl (hash: lnazX4hGGGY1ggsiAfH/4qBicZlfsSv+K/y4pZ66Ie4=)
                          38: 970AD94C83244100A97F9186D53DADAB07995EE9.cer (hash: RWBnNEK86OTd+EsaiL4tRRo/ytLMfihyN/KLzSQWa5Y=)
                          39: 326131313a663263303a666630303a3a2f34382d3438203d3e20323037393630.roa (hash: 6+o/SVChTjHbiYUJ03zyc6Ju+ZkXcW4hDy3lbeRRz+k=)
                          40: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer (hash: e/9HYgp/mohWVL/xi7PmXFlHj2B3IcMqES1nyxAUKjo=)
                          41: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer (hash: fNICkLgDOQLQyXcYC+Mx7zWPSiGBhLSE5Btg3FNYCrk=)
                          42: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer (hash: EluTWf0GQ95lG3mbjIrTeS+cckdmvkzXIoud3lIjd+s=)
                          43: 44C4C913D58F5EF847996241E969B60A1E3F1389.cer (hash: E3ak7egeb7oLQq4pNOV672llzd9VjZ7X1tZw4IAYLms=)
                          44: 3139332e332e3136352e302f32342d3234203d3e20323032333539.roa (hash: PN7OPw6x8T4uLhMmLkm8sVVlgwZlpPub1GieXN4o6dQ=)
                          45: B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer (hash: zKaN08cZjSwmv4VxKubYdVn/CoX70Fn+0x6DYvBEbBM=)
                          46: 326131313a663263303a323a3a2f34382d3438203d3e20323032333539.roa (hash: SlyimbxFLoCHsFWWpUZjHgmLHKv7rmMtitzOtZT7wdo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 02:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:3d:47:91:be:2a:6c:15:71:bf:ff:41:0e:ac:06:71:03:11:98:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Oct 27 00:41:46 2025 GMT
            Not After : Oct 28 02:00:46 2025 GMT
        Subject: CN=2854300E8AD4246798DB6C13A65E79839E64AC4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:85:fa:a9:23:f4:94:28:11:3d:bc:8b:f1:bc:
                    4f:70:07:a7:0c:0b:03:50:1e:f3:e0:9b:b3:d8:5f:
                    15:74:bc:49:7e:4b:13:7e:5e:bf:72:ba:36:86:ed:
                    1f:6b:25:43:09:b4:dc:92:dd:ab:97:cf:22:c6:60:
                    60:92:b5:3c:7d:8d:06:8a:40:e9:47:98:1b:e7:44:
                    f1:a9:89:e6:6f:0c:b7:22:ad:78:ee:17:36:2a:9a:
                    2c:80:30:1e:c4:05:9e:56:ca:78:b3:56:ec:c9:84:
                    4f:a5:87:31:59:b6:40:a8:8e:16:ce:76:9a:b5:9d:
                    5a:fe:60:4e:d8:18:d5:37:e9:fc:4a:27:07:8d:f2:
                    01:a1:fa:64:7a:82:81:0b:e2:7c:62:e8:77:da:f8:
                    fc:1d:aa:ac:b2:97:5b:2c:fe:a3:03:95:cb:2c:cb:
                    b1:70:b3:a2:2d:a8:61:4e:34:ac:d7:d9:ac:4d:56:
                    6a:9f:aa:8c:4f:6e:9d:20:d6:70:84:bb:c2:43:eb:
                    12:b7:0c:2b:2e:d9:1b:8c:5c:bc:f3:99:32:3e:ff:
                    d8:02:a3:77:bf:e8:80:8c:91:00:d0:da:96:16:15:
                    7d:e1:84:6f:21:3c:e3:8c:a3:8a:57:e1:44:d2:1c:
                    4d:92:b1:28:05:cf:95:f7:93:e1:01:9f:c5:f0:1d:
                    72:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:54:30:0E:8A:D4:24:67:98:DB:6C:13:A6:5E:79:83:9E:64:AC:4A
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1f:ee:3d:5a:fe:68:53:ab:e6:ee:d1:56:a4:0b:28:3f:34:
         20:76:0f:df:36:6b:5f:61:8a:50:52:b4:36:cb:7d:b0:b5:7e:
         c0:f5:7f:c4:3b:97:51:4a:78:a0:9b:f6:64:a0:ea:e0:f9:da:
         bc:e9:67:14:e3:8e:6a:1e:73:bb:bb:01:38:02:16:e4:1e:a5:
         3a:6c:e9:69:08:bc:a5:b3:c9:7e:7d:bf:2c:80:e7:e9:c8:c0:
         9c:43:95:72:39:e2:cd:c6:eb:18:ab:5d:1f:f9:d6:fe:cd:dc:
         cf:9c:8e:0e:00:86:e6:70:61:cb:98:39:e4:e7:98:f1:ea:2b:
         ac:9c:2d:9e:77:f1:31:cc:26:ec:12:92:ef:8a:86:fd:79:6f:
         69:b9:d2:6e:f3:42:b7:00:21:44:8f:59:da:11:59:83:e2:59:
         0d:b8:5c:1d:7b:3e:9c:c7:9b:6e:0a:61:17:4f:56:4c:9f:86:
         b4:de:04:01:3d:81:cb:37:bb:55:80:b0:5b:7c:62:dc:2f:7e:
         72:11:4b:fa:c4:1c:d6:cd:2b:8b:2e:34:3c:5f:01:5f:50:8b:
         30:b1:fe:8f:e7:2d:01:8c:7e:2d:22:93:51:0c:81:54:9d:d3:
         38:30:6c:91:a6:99:51:c7:d1:30:60:78:5e:d9:04:c2:fd:ae:
         cc:06:68:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----