Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
File:                     9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json)
Hash identifier:          anOWG5oLhBFog27I60r9fWMGLBe8FYo2L9SHl/pdRkk=
Subject key identifier:   0F:58:F4:66:BA:B9:C7:CC:A3:EE:8B:C4:C8:B6:CD:7D:F4:77:0E:13
Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
Certificate issuer:       /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Certificate serial:       16C965748771666B4CFC82CCB7F5185F73A663A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
Manifest number:          01A8
Signing time:             Thu 16 May 2024 17:19:17 +0000
Manifest this update:     Thu 16 May 2024 17:14:17 +0000
Manifest next update:     Fri 17 May 2024 19:26:17 +0000
Files and hashes:         1: 38392e3131362e382e302f32322d3232203d3e203135343139.roa (hash: oliv3UvDFKTa0wiNT7OiJ64JX3DbfwpBCCLlzIdzyhs=)
                          2: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: UgvQYOhN2LyeI0GOMV54VcX7efV9Lmg6a869tKpf6jk=)
                          3: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: lOT9pfGeBYMNdNMD4FhM0REGqH5tpGCyVGBxXRBdkF4=)
                          4: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: XOUR7jlDOJh+58qxpGQGq2MOlSmScuDMgtUFExt9daE=)
                          5: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: odZkH62dhzXeLsXAmwvJM41Ox4ymXypFxB9iAiH0rhY=)
                          6: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: RopAUC9WeDxJkjPiIFGG3cAkxuCMld4PMKruh7HW+7M=)
                          7: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: ysNMOtywfh1ARPKCbUE+O+K4YEKjz0xe1hxdTS7Izrs=)
                          8: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: LqVWkT/zceAzbvveNwhUbB73xAD4FqZemL5aMFNpkaM=)
                          9: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: NPM2yEw11OkbHwQ7vN+lq6WaHRQGeAFFz6T4nsSoJXM=)
                          10: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: k/OGDGlILkE/xEPeeGjvakYX1nrCF6rmW8Tqqbw2uo0=)
                          11: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: qgA0jA2ez8XC53EvikT1lnkoABgWAoo3F15bMD9yrMI=)
                          12: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: QPZQLVOhfep2eSy91Ni75k8palTbuqH2cMFGoGjEWTE=)
                          13: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: L21kRkdZ2QmcX+cx/JVTrHttc0a4k1I07irYyy6DF3U=)
                          14: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: gR/LokfWMESnLIj+2pTDgelwBH9gp7u/TXi46OlVsTM=)
                          15: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: 2KedoZjsIqS/Z5u2ZKI6scofUoRYRc7bYw1os8PNF44=)
                          16: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: J34QjF816p0aSnQhWLllJT3x/G7EZmHiKTc4oGtQixM=)
                          17: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: 4XqIXzABkCq3gofskylIjQhpky7W4wsfBDZLMpMvFrs=)
                          18: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: EdAeJzi7hzQ8grgTwwOtF0eu8ICWnleD0jVmMmEBH0Y=)
                          19: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: cY4e9VLFYD8BeybjCnZhj2zoHTsJzvE6LjoNQ2J+RH4=)
                          20: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: ytIjzRM2QHUDdWLnY1oaDhW3e5kak0xdKzdBBDfsG6c=)
                          21: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: X3/9u46jAGxsIPtuCyeXYEK8c2AEjF7X4m/m2Lk2Ox8=)
                          22: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: 4mqwfhy9a9hkFt/HMZyRxqga/e91H8gT7Jps1d0H4tQ=)
                          23: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: wu/2prI2As0c83bwlp6sHkijs3ihcjyaF+tNuk8sDLU=)
                          24: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: rhFDH+HSHu4ldLmFGmaAa5PHLCVApED+hpmGpIlda10=)
                          25: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: LHj7cEC3np/SL7KrzjVG4YK5k+/6vgSIt6qEAy8t6g8=)
                          26: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: 2tsvA7xPz9IQULjIyLmZ9Zph2TZWDiyvUyvfFqz1Unw=)
                          27: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: pDz08t6uDLX+UQCcv6T58rLaflML1JlRSGhc6ytA2t0=)
                          28: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: /Sx3ZT56SijfaPfN0r7Rki9SbHf31MFkwpJxqoLjlyo=)
                          29: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: qhaFvlVLH+2xpWB5GUThhCTtmPpF9czPSm47uZpQLew=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c9:65:74:87:71:66:6b:4c:fc:82:cc:b7:f5:18:5f:73:a6:63:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
        Validity
            Not Before: May 16 17:14:17 2024 GMT
            Not After : May 17 19:26:17 2024 GMT
        Subject: CN=0F58F466BAB9C7CCA3EE8BC4C8B6CD7DF4770E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:42:2f:ab:54:0d:1b:df:e1:b1:01:70:f0:f9:
                    e3:61:bb:ab:ff:af:aa:eb:c1:6a:2d:50:53:c3:25:
                    d3:2d:79:6a:89:fb:d1:78:f4:86:f4:ad:73:0f:83:
                    23:57:2c:8b:7e:56:52:86:4a:00:81:0c:7f:c1:c4:
                    eb:24:d3:df:3f:33:ef:8e:a6:a0:7b:83:a9:1d:71:
                    23:11:1d:9b:67:0e:ce:47:b0:31:89:4a:fb:18:92:
                    4d:75:16:08:99:3e:aa:37:7e:d6:ff:5d:14:d4:ef:
                    fa:7e:f9:db:75:0d:da:c4:60:ed:04:3d:31:af:23:
                    2f:15:d5:94:c2:c5:2f:6c:37:09:a6:a7:ad:e3:a3:
                    ba:82:bf:1f:1f:4e:47:09:4f:73:f1:a9:34:6c:74:
                    0e:1b:91:16:45:06:0e:57:2f:2a:75:db:fa:d3:45:
                    de:c3:ce:ca:f3:73:72:0d:54:a8:37:1f:13:84:00:
                    6a:08:0b:91:10:09:58:e7:58:38:81:9c:35:3c:0a:
                    ae:ad:5b:c9:9b:c8:ea:2a:64:c5:63:3b:38:6a:74:
                    27:67:f5:85:b3:a0:0b:b3:0a:ca:27:34:9a:00:ff:
                    ff:f7:e4:c6:0e:e9:4a:d1:5d:32:55:0e:e7:2d:6a:
                    c7:5d:e8:25:7c:50:3f:5a:76:b3:f7:00:f3:c9:4b:
                    9c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:58:F4:66:BA:B9:C7:CC:A3:EE:8B:C4:C8:B6:CD:7D:F4:77:0E:13
            X509v3 Authority Key Identifier:
                keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:6f:a3:46:40:87:12:4d:38:04:01:91:45:67:1d:7a:24:c3:
         d3:71:67:6a:2c:51:4d:92:31:da:70:57:76:2c:aa:f4:61:fd:
         dc:dc:80:a9:21:56:65:bf:4e:f4:b2:31:60:be:39:5a:68:ff:
         88:c0:d4:ca:30:c5:18:eb:9e:fb:ac:42:dc:52:bc:36:c7:8e:
         72:d7:3a:cf:8e:c2:60:97:a0:2b:3a:a8:c7:7f:24:30:86:ab:
         e6:b4:4f:d0:e3:cb:d4:99:3e:cb:d8:f3:78:c0:e7:d7:92:c7:
         5e:19:30:8f:ec:c1:64:d0:f3:7f:46:dc:a2:3d:af:58:97:66:
         3f:da:44:14:e5:c8:53:7a:90:27:78:df:73:1a:a9:58:ee:e9:
         f8:55:c7:b3:69:c1:f6:d2:85:fe:9c:a2:e4:1a:55:75:18:a8:
         97:12:13:a0:bd:48:4a:13:1c:5c:ba:5f:66:e0:87:55:bd:b2:
         d3:e1:a4:fe:de:7b:70:c6:d5:cc:50:92:29:4e:6c:03:1b:72:
         ce:ab:53:94:c0:44:ad:d0:a5:ab:84:0f:e1:5f:c0:b5:bd:66:
         cf:60:e5:0c:5f:6d:65:36:c2:88:6b:42:be:00:58:93:64:e1:
         0d:a4:9d:fb:71:77:f9:27:76:15:36:a3:f0:73:d0:0e:52:0f:
         1e:8a:8f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:36:31 2024 by rpki-client on console-fra.rpki-client.org