Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
File:                     8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json)
Hash identifier:          tYK2XOUxGcXmOYANACAFH2hFlgpp2Dq41LnJ+osFux8=
Subject key identifier:   25:C8:3D:D7:BC:A3:9B:0D:34:E8:35:41:69:25:53:4B:C6:1D:78:8A
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Certificate issuer:       /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial:       27A9C86C33750AF36DF42F55B546776E1B2184B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
Manifest number:          028F
Signing time:             Tue 21 May 2024 01:52:08 +0000
Manifest this update:     Tue 21 May 2024 01:47:08 +0000
Manifest next update:     Wed 22 May 2024 03:11:08 +0000
Files and hashes:         1: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: PRTTOxbeXI2/gRZPeKbPFH7+pJEKtXVlCe5sAgzgvR0=)
                          2: 3231322e3130322e3131342e302f32342d3234203d3e20323032343038.roa (hash: bA+64SeZjVCMAIfm9fWsRIVm+e0SiNXYOc4SPiHzKB8=)
                          3: 322e35382e38372e302f32342d3234203d3e203633303233.roa (hash: GskJPRP5+rnvvHOREh4sZ2sSIv4K+a70HYvv48uTIUc=)
                          4: 36322e3139322e3137352e302f32342d3234203d3e203332313637.roa (hash: Cpd8yjyP6Pj6lsQ2rZ8NEinYWKDtve9LRtCY/PfJ4hY=)
                          5: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: YfFARHbeyn8I02CqI9mdvuolpWMnEI9v9CXBSyH46/s=)
                          6: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: UgI/51A2bcq107ZFEky5Ecfs8BRKlXHWJ17xhKHSilI=)
                          7: 36322e3139322e3137322e302f32342d3234203d3e20323733333438.roa (hash: dMqAcZx9ayJ+1iUSW7UM0yO942oHinoYpMEAORVvMDk=)
                          8: 322e35382e38362e302f32342d3234203d3e20313432313131.roa (hash: ghP/K0aFSuuh8OzXlyABQdz31k5fHzbuxuUBeRfhY40=)
                          9: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: Y7IbPRg5qQHAo4WFrVenmXjcCZLx20s3VxoWUs04Maw=)
                          10: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: /OMx7MFE8UrXMyEzRJg0zSoKofUzxr5YB8gd8e+bYhk=)
                          11: 38352e3230392e31372e302f32342d3234203d3e203239383032.roa (hash: 0K2B87iNGfwJ9jUVp3r1xMrdworqeaWKEe8Ob0M/J7Y=)
                          12: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: 7bjHiN8Er+tU2RAiJy0WTviu1R7AW1nDOH4fe1UqwDU=)
                          13: 322e35382e38352e302f32342d3234203d3e203437343336.roa (hash: nYgu9kBkRhcLmcGO/2u6SLmuyYzZA0j/VnRcY6P4Llo=)
                          14: 38352e3230392e31392e302f32342d3234203d3e203230343733.roa (hash: Ok/1fsSZr2so/IpQPOJ6JEPuNUf/+VhhAgPt79YijxM=)
                          15: 37372e38332e3235342e302f32342d3234203d3e20333936303733.roa (hash: /sKsILc6ripbGrrjZfOCzHw6x84hkL37MuytXcwGW/A=)
                          16: 36322e3139322e3137342e302f32342d3234203d3e203134343435.roa (hash: Ks9FYEjAxCDATrvSClIMNr4I2YSrmWbTVddJLMvjkn0=)
                          17: 34352e31332e3135302e302f32342d3234203d3e20323132363039.roa (hash: 3YwODoAIMA+EcN8jN6ttyi3ShMMDtquckFasgGQIYbA=)
                          18: 38352e3230392e31392e302f32342d3234203d3e20333935383939.roa (hash: 8qyeB5GEXAQh8r3Hg24XZ/nXbjK7C5wmVXrShhitSDM=)
                          19: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: Lou4vvYiSAy2voI0SZqwtmZNxoTRb8e5r/f8gOfrdrI=)
                          20: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: sxG50LgT/h3QpQ5de3gXs44bUdVa+WF/vc37ICDp6aA=)
                          21: 38352e3230392e31392e302f32342d3234203d3e203236373337.roa (hash: SGL5IEW2JopNPhh1E9HXv/wmh67qnx4oLbRQQWWSjBI=)
                          22: 34352e382e3137332e302f32342d3234203d3e20323131393735.roa (hash: RR6KgWmi1lDMkLpEBu4aHafRx617I8UcHbYj9UXIZ2g=)
                          23: 322e35382e38372e302f32342d3234203d3e20313532363732.roa (hash: BppMkR46goDmRilMgHSuVei/eawmxzIyd06PCyZu6mg=)
                          24: 3231322e3130322e3131342e302f32342d3234203d3e203438303234.roa (hash: 920SqtpoF5VgrWwlE7dciLlvDdDpVV27LUhHTL2XiyM=)
                          25: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: eVP9RPY/WpuBxj4uRQpsGyWhFlJEVn2o5gOxlnEx12Y=)
                          26: 322e35382e38362e302f32342d3234203d3e203633303233.roa (hash: waF6qA6R1w7kBLXKGoxlVi2r5v8Kr+slBxOo/BnKxi0=)
                          27: 34352e36362e3134382e302f32342d3234203d3e203631333137.roa (hash: e7KFTp8WhSYx7qrXr9SymmmSKIPkT/VUufPSkOTmu+c=)
                          28: 3138352e3138312e302e302f32342d3234203d3e203631333137.roa (hash: Ynfi8cdCyu4++VFoig0QieWTWymlGRjNoJkfvQHT2L4=)
                          29: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: EPX6XGpgNwtiRnBvxDuCW65ZQ4Gu+llG59fAl/wr2K4=)
                          30: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: 3fsiRkpHdJoS5qphseHYMpbxHsbWCStbC1t09F70QDQ=)
                          31: 322e35382e38362e302f32342d3234203d3e20313532363732.roa (hash: ih3AHjCGpafM5RuLKhdLo6m35UKDvTzkhWqno3bhhXs=)
                          32: 322e35382e38352e302f32342d3234203d3e20323031333634.roa (hash: D1gSVTjM3kaH+QdxcFDy3RNE5cowzusP7CxdRrnSHWw=)
                          33: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: /aJYXmycChaYAP8nUETPknnMtZH4D42r3VGCkxcOatk=)
                          34: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: FAPqw4LjtjXMafqD5LfdlurFTSY9GLC8Bh5CPXzSnp0=)
                          35: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: Gd+G4Zr088TNOtiL3B6vX4VMHdc64e6XVCPxcaSyzoI=)
                          36: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: tAeFWHRRTDvTUOrOy/1nzIOLy8j2fWFXA6Ea48yF5UE=)
                          37: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: qfsSfO3u+aEvqfryOy+1rEoddfZZVNVWf2CgNggMkdo=)
                          38: 34352e382e3137322e302f32342d3234203d3e20323030343135.roa (hash: KfGm8oKCcj7dPsD1fNqk4qOilkoWdq266OnknCVNfLk=)
                          39: 34352e36362e3135312e302f32342d3234203d3e203134343435.roa (hash: sbQZAarDOPBDEu2y/4s1HWuu0GLNFowkYXPZj8B/IPk=)
                          40: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: G3ktlo5Pg6qzwxzsge9w8i5/SWUPTUDok4BusGXoygw=)
                          41: 322e35382e38372e302f32342d3234203d3e20313432313131.roa (hash: /1aZYnPXFsidrkO7zcZbEz+dvZdrcm8iqP3GgJ5LX54=)
                          42: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: z+gdtNeWYwGwr2RyXkZiuDH6ZBO7Ot6MTq0Sk4tdJZU=)
                          43: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: fxo20se8NonJpKay03pSLcHBpJzDwzRcqPei2XVKBrY=)
                          44: 34352e36362e3135312e302f32342d3234203d3e20323131303631.roa (hash: R78Uql38suoDiMSh9d3FlVVpVSkWz+fCj4pnUBeaUaU=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 22:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a9:c8:6c:33:75:0a:f3:6d:f4:2f:55:b5:46:77:6e:1b:21:84:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
        Validity
            Not Before: May 21 01:47:08 2024 GMT
            Not After : May 22 03:11:08 2024 GMT
        Subject: CN=25C83DD7BCA39B0D34E835416925534BC61D788A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c5:2d:30:6c:54:77:bc:83:59:30:31:34:b4:
                    15:15:d6:54:25:74:69:1d:80:02:19:98:b8:f3:ad:
                    70:59:8e:a8:36:f8:db:f3:86:4d:3f:ab:d8:6d:da:
                    e6:9b:79:e4:d9:17:09:29:c1:aa:a2:c5:5c:0c:b7:
                    f0:d6:a2:f4:44:0c:7c:dd:10:39:3d:09:1b:f1:86:
                    a3:22:fa:fe:63:d3:60:d0:63:80:01:00:e7:5c:99:
                    bb:a7:3d:1a:88:45:97:3f:ec:03:ec:a1:b5:08:39:
                    cc:4c:31:71:84:c8:24:c9:4d:02:0a:83:3d:8d:f0:
                    e3:f0:5b:10:98:ef:19:89:7c:db:d9:66:be:ec:fa:
                    6e:a2:65:94:35:55:0b:74:ce:34:15:bc:56:d6:2b:
                    25:94:b7:02:f2:a0:b1:a2:a9:1b:25:83:11:28:57:
                    a3:c3:35:05:b6:ff:8e:84:91:99:8d:18:ba:a3:64:
                    d5:e7:a1:d0:76:db:03:98:3d:3c:e0:72:bc:4a:38:
                    54:b5:86:f7:7e:22:3b:d9:ba:ac:d5:af:bd:29:ab:
                    f0:95:b5:ae:31:5b:a4:85:c8:ea:86:df:50:43:de:
                    f6:62:b2:60:fc:44:cf:d8:e3:81:7a:85:e2:66:cb:
                    41:b5:b1:80:f4:6f:0f:d2:9b:56:2e:c1:5a:41:86:
                    20:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C8:3D:D7:BC:A3:9B:0D:34:E8:35:41:69:25:53:4B:C6:1D:78:8A
            X509v3 Authority Key Identifier:
                keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:f1:3b:3d:27:f7:fb:e5:62:3a:d8:ed:ef:c8:bf:2c:62:aa:
         89:0f:7b:82:14:92:b0:a6:46:c4:a2:8b:bc:d2:0f:b8:8a:a3:
         df:7b:70:a9:a2:6f:e4:70:ae:78:ff:74:5b:65:46:00:c0:03:
         5e:a5:1c:00:60:e4:a9:aa:05:06:45:d3:37:25:20:64:75:b6:
         62:d3:02:e1:a2:26:1f:04:0f:f5:53:cf:8d:9b:32:15:a9:c6:
         90:6f:19:89:d2:fa:d0:b7:39:ee:7f:dd:d0:34:e7:e4:05:a9:
         bf:62:0d:b0:f1:d0:1e:92:6e:f5:bc:a6:71:7f:55:4d:d9:0c:
         28:67:94:4b:63:63:27:f1:94:f6:24:7e:0e:20:da:87:34:28:
         23:c6:1f:35:94:3e:9e:c9:c4:b3:27:40:64:b5:17:1f:b3:4c:
         00:bb:b1:d6:c5:1a:d8:ac:23:a1:09:bb:e8:40:d7:e0:62:56:
         66:f1:5f:47:06:16:d7:ba:6a:2c:ce:6e:84:e8:bb:e5:bd:8b:
         69:e7:98:93:06:b0:fd:54:22:75:f2:05:5f:6d:a0:1b:d0:46:
         4e:b3:8a:a0:a3:e9:46:07:e7:f7:04:c7:95:c3:01:d3:b4:c8:
         2c:07:9c:93:ce:c4:eb:ec:05:9a:fa:f5:e5:8e:a7:b0:6f:9e:
         78:f3:82:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:55:24 2024 by rpki-client on console-fra.rpki-client.org