Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/1/EF9F2D6EC712DCE081DA9CED1F956372EA648756.mft
File:                     EF9F2D6EC712DCE081DA9CED1F956372EA648756.mft (raw, json)
Hash identifier:          AfIcW2oUkZ1IrzZOW8j+gokztjCZ6eUbLWjFmIWXLxk=
Subject key identifier:   1B:87:C9:22:E7:63:9A:24:60:1A:B3:AD:68:3C:23:59:32:82:BE:E3
Authority key identifier: EF:9F:2D:6E:C7:12:DC:E0:81:DA:9C:ED:1F:95:63:72:EA:64:87:56
Certificate issuer:       /CN=EF9F2D6EC712DCE081DA9CED1F956372EA648756
Certificate serial:       55734D54AD50F7FAED882460B596D7273B118228
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/EF9F2D6EC712DCE081DA9CED1F956372EA648756.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/1/EF9F2D6EC712DCE081DA9CED1F956372EA648756.mft
Manifest number:          CD
Signing time:             Thu 13 Jun 2024 12:00:21 +0000
Manifest this update:     Thu 13 Jun 2024 11:55:21 +0000
Manifest next update:     Fri 14 Jun 2024 15:15:21 +0000
Files and hashes:         1: 326130663a383563313a3333313a3a2f34382d3438203d3e20323135383835.roa (hash: ig8jYkjS5pkS4LkobyiUpR3pXzvq8g8KG7sJwWc1dSs=)
                          2: EF9F2D6EC712DCE081DA9CED1F956372EA648756.crl (hash: wcHq+tNL0kTwVq7KyEnpTBJqoG3m4wBvUsk5ZRFqZTs=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/1/EF9F2D6EC712DCE081DA9CED1F956372EA648756.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/1/EF9F2D6EC712DCE081DA9CED1F956372EA648756.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/EF9F2D6EC712DCE081DA9CED1F956372EA648756.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Jun 2024 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:73:4d:54:ad:50:f7:fa:ed:88:24:60:b5:96:d7:27:3b:11:82:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF9F2D6EC712DCE081DA9CED1F956372EA648756
        Validity
            Not Before: Jun 13 11:55:21 2024 GMT
            Not After : Jun 14 15:15:21 2024 GMT
        Subject: CN=1B87C922E7639A24601AB3AD683C23593282BEE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ed:12:8b:a9:02:72:78:9a:e7:d8:9b:a3:ff:
                    27:9f:d3:3e:23:a1:e9:0d:e0:72:28:58:56:65:df:
                    c6:c0:b4:78:56:d6:8f:80:10:10:93:8c:e2:e0:94:
                    58:d3:84:52:42:06:37:ae:96:2f:fa:c8:5d:a5:49:
                    d8:8a:11:77:7a:c1:05:bc:c4:83:6b:4e:66:9d:fc:
                    79:ae:29:a0:97:c0:01:b2:bd:5e:6d:0b:42:01:d8:
                    e6:90:c3:f0:51:7d:fb:a4:6e:92:e9:30:62:ee:23:
                    a1:c7:81:f8:ff:38:a4:a3:26:87:e9:51:ef:ef:e9:
                    a0:6d:29:82:85:56:f7:4b:75:84:75:a3:28:70:92:
                    e5:ea:48:60:20:fb:b4:b4:a0:d8:87:96:ba:99:28:
                    38:45:33:57:a0:3b:d3:4d:ff:8b:32:40:58:a9:cc:
                    77:b0:d7:6e:c6:66:fe:62:23:f9:34:50:37:91:7b:
                    a5:fb:1c:a2:d5:79:0a:7c:12:4e:f7:4b:d6:70:2d:
                    e5:ed:37:18:0f:41:d6:44:4a:6f:a5:2d:bc:da:70:
                    e6:12:e2:d5:41:89:8a:15:6b:66:0a:4b:ce:52:2f:
                    25:c2:0d:21:41:a4:0f:fa:5a:15:8b:58:5d:cf:65:
                    b5:d0:fd:84:7e:f0:83:16:cf:dc:f8:9e:fe:66:0e:
                    b7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:87:C9:22:E7:63:9A:24:60:1A:B3:AD:68:3C:23:59:32:82:BE:E3
            X509v3 Authority Key Identifier:
                keyid:EF:9F:2D:6E:C7:12:DC:E0:81:DA:9C:ED:1F:95:63:72:EA:64:87:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/1/EF9F2D6EC712DCE081DA9CED1F956372EA648756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/EF9F2D6EC712DCE081DA9CED1F956372EA648756.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/1/EF9F2D6EC712DCE081DA9CED1F956372EA648756.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:03:06:87:73:30:eb:c9:f6:c8:68:84:0d:45:5c:b5:50:54:
         02:aa:d5:df:8e:b0:4b:56:65:16:b0:2d:85:89:e7:e9:04:fd:
         16:83:f9:16:65:4e:f6:f5:ec:a5:4a:95:d3:8c:0b:9c:70:b6:
         e7:78:3f:e3:4f:ec:05:d5:df:07:57:6d:0d:41:25:33:d5:82:
         8d:51:9e:0b:ce:17:7c:0d:73:58:b0:31:8c:13:34:f1:5e:f0:
         58:6a:a0:ad:42:30:55:b6:55:e5:22:4e:bc:e9:6f:19:47:08:
         fb:ac:af:bf:e7:44:77:b9:fc:c4:b3:d9:ac:94:62:ff:fc:9d:
         c7:a4:5f:aa:e8:d7:ac:22:d2:e5:40:9e:ba:93:f3:6b:cd:95:
         72:0b:91:b3:0c:57:cc:b4:a4:fa:1c:6f:18:c7:b2:2b:3a:7d:
         d8:9e:31:03:4f:b4:68:e7:d6:21:03:8f:03:ea:de:b3:54:ea:
         35:24:84:ed:ae:2e:45:ed:cc:4e:88:c8:19:e0:b9:e1:b6:eb:
         5a:a2:15:55:7e:f7:6e:6e:4d:be:69:74:c4:83:aa:5a:0e:ef:
         34:9b:c3:d3:88:a6:f0:b9:34:f6:c9:8c:95:8b:9a:77:26:37:
         c0:81:07:f8:60:45:e0:24:61:17:c8:31:e5:0a:e6:ff:52:8a:
         8a:68:bd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 14:15:22 2024 by rpki-client on console-fra.rpki-client.org