Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
File:                     4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft (raw, json)
Hash identifier:          BzZT0S4XQ4IKS3zBefEGE0wpFGOWxSCc2dz98S/cpJ0=
Subject key identifier:   AA:3C:DC:EF:33:9C:36:FC:71:AC:96:6F:FA:58:31:B9:E3:D6:B2:4E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       5871319D32E1EADD1E41D44AFD0EFA0E2068588A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
Manifest number:          0383
Signing time:             Tue 21 May 2024 01:22:08 +0000
Manifest this update:     Tue 21 May 2024 01:17:08 +0000
Manifest next update:     Wed 22 May 2024 02:52:08 +0000
Files and hashes:         1: AS46450.roa (hash: /U7XsmUdEzCBXLKz8d6FeyXHq5hioE02y2aW+IdL1ZM=)
                          2: AS15440.roa (hash: Z0EwinDPC9pbKd9+qgBTeivSaTI3PlLabJz7L9gmPFE=)
                          3: AS834.roa (hash: uKln74tLqsn8xqOsuQP+vDGxuX4E4w+nWDT+HIeTue8=)
                          4: AS215311.roa (hash: Hkzuykj+tisA0Tx7eUktPcP0DYTI4omZRhZ9///+SpQ=)
                          5: AS152179.roa (hash: BnpMoQUEZci5m5uABICcFRDv3OsDHmA7zMEOad4oYwk=)
                          6: AS60672.roa (hash: j+uCx9q+WHlG2I1yutpGaxAIeM4Tu0sQXsHrrAFPU1c=)
                          7: AS138195.roa (hash: +3w8PsG4nU6aEeQ1swOFmcOHK72NC5FFVqnMpnMt6tc=)
                          8: AS209474.roa (hash: rXyO8XbxRntA7NfH/3SVcBrcxz6houizak9lcdVMLUI=)
                          9: AS215362.roa (hash: CYe9Ka04hLvbogUClAQvdidjxfKPAGB4Ou2jLLXfLGA=)
                          10: AS202673.roa (hash: bBWm7lCQsvphVYPlLgB78pFr8wjNnSF9TcIwg5vnJ+k=)
                          11: AS0.roa (hash: 9CDNsf+lgVmOuG38RCGngegAe9GimEBdezbxdGpPDzs=)
                          12: AS151872.roa (hash: dweXNHoRiECC3PPz2y+UUnCu5qtIwcPsswTJ9GkSnvE=)
                          13: AS6079.roa (hash: iF6FLV+NBF0m1VJ87XO1rvGqyWprTZJSzgid9YVXiG4=)
                          14: AS25369.roa (hash: R6mZKbCG9jbQTlB/4r0oCXgWiOmgPI0elVDqzqpzA+o=)
                          15: AS174.roa (hash: k+BKWtAn6NU5cthUVxu+copnpfPJUGxoN395K9dkVgA=)
                          16: AS62240.roa (hash: K5ID9Fgkq6AAHT2lUoQrB6JXJUW0zO8mk7Qj4C/0Whg=)
                          17: AS37191.roa (hash: xM6Up6vbYL1esWcIhxDxETJ3q7D4dsumKhU4CPo4wwI=)
                          18: AS63902.roa (hash: oGw5zgcrUziu3YbH3T0Tk5doeeaha836mgbl2lbKwkQ=)
                          19: AS5650.roa (hash: 1cZyPW9VSrNwiPiV9IsgSZ9YukofEQpOyAOz3Tg0Tq0=)
                          20: AS58061.roa (hash: qVTMAqGBngJM9vLuKyebObBBCv8RCv1ueOiD8Bj/1Gg=)
                          21: AS3320.roa (hash: AJrm71LxBrlbKP2lOTNjrWpj/5ldop4TSgbdxEBcD4Q=)
                          22: AS215599.roa (hash: pK5u1kvt9HhOEmbtou7JXCvtp8DAYtijSHAY4icRCIk=)
                          23: AS7393.roa (hash: KXLXAKDcwR0bCoTHPhB8HMRkl2/GlagOMyItrIbxQc8=)
                          24: AS272662.roa (hash: w6MIjg72aMX/SCbyh0asbAGjHbz6HU22eO9EXKTdZ6w=)
                          25: AS270157.roa (hash: A0fdqOBBB76MSOd7jVxAYPmRW5INJa0IYaCdi3yesdw=)
                          26: AS16509.roa (hash: ep/07QFlw62dCBjcl5E4BiYqMftRtbSFA9EdcJ0V7EU=)
                          27: AS14618.roa (hash: gdxsVgaXYZRE7wd+6zImkJWHYOeHgsVawEbT4Rjh5pQ=)
                          28: AS7922.roa (hash: OEkMh9ndqWs9yrBITz3XvxNsZ03ihLopV0M3aBx3xjc=)
                          29: AS212762.roa (hash: K4DTuaa74gKnfmewIwacssoLHJknTe3iu46SYq3a8k4=)
                          30: AS29066.roa (hash: f1+4k1Y6WY6IdZoC9XSYBtJTkNJaaRWGPtVRMXN11zA=)
                          31: AS215015.roa (hash: ThPsDoY97b3PQGPZhDzAtfxQI/VLS7nDm8reZmXStK4=)
                          32: AS198584.roa (hash: n+8sElu85xYVW8BtPdoNYU8akWAXPPGI8glytmT9blI=)
                          33: AS7018.roa (hash: t3zrrITDfZe1+FvU1RMPhYBh6Wnf6NrRJwUzTw5PkeU=)
                          34: AS215287.roa (hash: z1NQXtptxnnR2j+UIDIyMuWw0FuYQLHU43VYrOJ4Gzc=)
                          35: AS26548.roa (hash: EFVIcEMUmnkwRwnSEBYGRTk8n/AlIOOSspV1DyFD7Vw=)
                          36: AS56913.roa (hash: k6yFIkMMeNWT+UibY5yTnEK5MwtqAv+SjeddLyz1k2g=)
                          37: AS211440.roa (hash: YIvj9Y6uAuE4QG8eGLqX5EALeaHPgAnRPzP62+DmNp4=)
                          38: AS35916.roa (hash: 5JTkyXN0TeBstpy6+spYHyjuvvsraIrtAj/Xw++zCWE=)
                          39: AS215355.roa (hash: FiXHZF2+EyMQOpqdh6Hh/sKce9M6LghqNjqp0UCLwFc=)
                          40: AS54004.roa (hash: yI2SJzfrBSKqGFw4KSD6Jh0uWBF5djx4fQn9rl2l31w=)
                          41: AS206092.roa (hash: NAXPoDb70lSjxY+kgaMM2gc+uMwy4ITL1v3Pqp/OwjQ=)
                          42: 4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl (hash: 40Dkoraj2WCrfD+F0UL9w2yf91xb/kUE6TyTPh/53Lg=)
                          43: AS23470.roa (hash: H6GjoayyQonIvGd0hyC/tXYJFsaL3VhSZ0kqNATyvlc=)
                          44: AS398355.roa (hash: tg6qSliKof+W8BwG75UTEPvvaTQwcpnmRhBRxeT9v/A=)
                          45: AS5065.roa (hash: mXYW/y2qdANlJHBnkfAFz1dSbROWWS3K0r/MtrrmEpE=)
                          46: AS400866.roa (hash: dg9PFGCDulscxJ9gEiWOhxtzEif7q47VDZfhwTefQzU=)
                          47: AS137509.roa (hash: h3jKHYVPj7brzkzX1ctOLb9Y1MVXEqQcrrPzrLWfK9M=)
                          48: AS211975.roa (hash: wPknNvACGLLJc9eK5YLHq+8Se170qU/NCL/NtoXgQAs=)
                          49: AS199058.roa (hash: hAov0VMIJ7vNXiAwUdIhd8zNsFj7xkUfJSL/GwJ3sCg=)
                          50: AS212238.roa (hash: 0tjUxZEZkZg9mhBIP75Ji5xmhNCoAE+RXv0yjMFBeLs=)
                          51: AS29802.roa (hash: ibR5w5FinR/A2wJ8J43k1fd0RS8ReAAv+YcBzo/nVks=)
                          52: AS918.roa (hash: YnZq254O9vbd85Q93uJtCGkb1pj6qdzJTb+8nNxdRAY=)
                          53: AS40676.roa (hash: itadWCnwPtn5vvMcTKxFJfP6xtPXC3DXgrqVvbR+oJ8=)
                          54: AS7029.roa (hash: ccyG33uHiMOKo78cwaQGiW03/TaHk69VMBn5saMyVkE=)
                          55: AS49608.roa (hash: Fzi0eK05/UM4Y8il3oD5oybQwKXU3RHehgPjBuu2aAw=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:71:31:9d:32:e1:ea:dd:1e:41:d4:4a:fd:0e:fa:0e:20:68:58:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: May 21 01:17:08 2024 GMT
            Not After : May 22 02:52:08 2024 GMT
        Subject: CN=AA3CDCEF339C36FC71AC966FFA5831B9E3D6B24E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5b:f5:23:54:c2:75:61:b9:49:4a:67:b5:91:
                    ef:19:96:14:f4:e6:15:dd:f5:7b:54:63:57:65:9a:
                    bd:e7:90:82:50:df:42:df:85:c3:cc:c5:ec:98:bf:
                    f4:93:04:69:80:8c:d6:57:d1:7a:65:73:26:05:f7:
                    da:70:33:a6:99:87:36:95:81:ba:c7:6f:7b:b9:5c:
                    85:d0:6d:81:02:21:da:b5:92:5a:1c:ea:9c:bb:26:
                    9b:38:2d:e5:66:30:3b:b7:a0:be:87:9a:a7:f1:39:
                    5c:64:0d:28:c4:28:b9:d1:2c:ea:d4:1b:19:84:52:
                    79:13:cd:3d:d3:c8:27:5f:98:da:ed:0b:eb:b1:89:
                    0c:10:68:c7:6f:e0:9b:2f:3c:eb:23:7a:94:0a:50:
                    b0:a6:13:26:58:d3:3a:70:e4:67:09:da:ab:59:12:
                    93:54:bf:b3:90:10:c3:39:81:a0:df:0b:85:f2:eb:
                    85:a1:95:cc:09:a0:57:5f:e7:59:bb:0d:db:98:c5:
                    31:f2:f8:f8:56:e4:26:3d:63:b5:2f:c1:ff:b1:40:
                    d6:fe:55:1e:3a:b6:b1:82:a6:2f:80:36:f5:87:4b:
                    18:4e:61:0a:c1:13:02:69:9a:92:01:ac:15:00:c4:
                    86:86:6d:b7:f6:e2:24:72:6e:7c:8f:3b:77:9d:b3:
                    f0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3C:DC:EF:33:9C:36:FC:71:AC:96:6F:FA:58:31:B9:E3:D6:B2:4E
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:07:68:68:f8:25:22:21:a5:a3:12:53:a8:45:c5:88:11:f4:
         f0:d7:d2:95:85:1a:0a:2d:2d:b3:7e:f3:00:4c:87:84:8f:fc:
         37:b8:df:02:5b:b1:61:4f:ad:2b:d4:f4:ee:17:65:d6:7d:2e:
         f0:45:52:9d:c1:20:6a:b1:93:e9:a0:92:80:d4:14:bb:a7:9d:
         79:a4:a9:b3:26:b8:e3:27:e8:06:e0:4a:da:f3:ff:22:b7:bd:
         87:f7:69:43:72:c0:72:d4:8e:09:78:f7:29:30:69:a1:ce:f0:
         24:5a:b1:5a:17:6f:cf:ae:db:31:6f:00:c1:8a:3e:09:c8:59:
         0c:df:c5:1e:ed:2c:41:c8:6a:2a:75:e6:b8:1f:ab:a2:e6:f9:
         64:7f:45:ba:a1:1e:4c:eb:66:c5:cd:7d:a2:05:0c:ea:c8:fd:
         a5:15:4b:35:ad:51:f9:40:b6:c7:6f:21:1a:59:f1:c7:86:f4:
         2a:8e:47:37:c3:ab:e7:20:5d:f1:45:a8:ef:2b:29:3d:d5:6d:
         61:db:22:7a:24:1c:c8:bb:33:42:05:6b:08:e9:5a:97:82:66:
         e5:fc:53:6f:ee:f3:d5:5b:2a:36:ff:47:ad:f9:4a:b9:cb:ba:
         16:f9:a2:ad:6b:84:89:2b:12:22:04:05:48:c7:c5:10:36:bb:
         ea:ec:dc:7e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUWHExnTLh6t0eQdRK/Q76DiBoWIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDA1MjEwMTE3MDhaFw0yNDA1MjIwMjUyMDhaMDMxMTAvBgNV
BAMTKEFBM0NEQ0VGMzM5QzM2RkM3MUFDOTY2RkZBNTgzMUI5RTNENkIyNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaW/UjVMJ1YblJSme1ke8ZlhT0
5hXd9XtUY1dlmr3nkIJQ30LfhcPMxeyYv/STBGmAjNZX0XplcyYF99pwM6aZhzaV
gbrHb3u5XIXQbYECIdq1kloc6py7Jps4LeVmMDu3oL6HmqfxOVxkDSjEKLnRLOrU
GxmEUnkTzT3TyCdfmNrtC+uxiQwQaMdv4JsvPOsjepQKULCmEyZY0zpw5GcJ2qtZ
EpNUv7OQEMM5gaDfC4Xy64WhlcwJoFdf51m7DduYxTHy+PhW5CY9Y7Uvwf+xQNb+
VR46trGCpi+ANvWHSxhOYQrBEwJpmpIBrBUAxIaGbbf24iRybnyPO3eds/BzAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUqjzc7zOcNvxxrJZv+lgxuePWsk4wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wOWJlM2FhZS1h
ZWExLTQxZGMtYjFiOS05NWFjNTkxODI0NGQvMC80RkMzMzZCRjlGM0RFNUNFNDE0
MTRCRDE5NzE5NDVGNEIyNDZCRkNDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArgdoaPglIiGloxJTqEXF
iBH08NfSlYUaCi0ts37zAEyHhI/8N7jfAluxYU+tK9T07hdl1n0u8EVSncEgarGT
6aCSgNQUu6edeaSpsya44yfoBuBK2vP/Ire9h/dpQ3LActSOCXj3KTBpoc7wJFqx
Whdvz67bMW8AwYo+CchZDN/FHu0sQchqKnXmuB+roub5ZH9FuqEeTOtmxc19ogUM
6sj9pRVLNa1R+UC2x28hGlnxx4b0Ko5HN8Or5yBd8UWo7yspPdVtYdsieiQcyLsz
QgVrCOlal4Jm5fxTb+7z1VsqNv9HrflKucu6FvmirWuEiSsSIgQFSMfFEDa76uzc
fg==
-----END CERTIFICATE-----
Generated at Tue May 21 02:16:54 2024 by rpki-client on console-fra.rpki-client.org