Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
File:                     9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft (raw, json)
Hash identifier:          ixXnqT6XDyb0eOogUR9pzL9UmeVxzMNIHvBNcn25cmw=
Subject key identifier:   A0:BE:B6:C8:75:08:C3:73:F7:08:D0:D8:56:7F:09:7C:BB:E1:82:BC
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       7C74DA26E547477228370FA58107DCDC8FDA483D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
Manifest number:          01C7
Signing time:             Thu 16 May 2024 23:47:04 +0000
Manifest this update:     Thu 16 May 2024 23:42:04 +0000
Manifest next update:     Sat 18 May 2024 00:36:04 +0000
Files and hashes:         1: AS21859.roa (hash: 09tSiolm/leamLm1I0WBwX7niOlwsHvW7/iHs3UdiKs=)
                          2: AS58061.roa (hash: j5QES1Yud7gycp0D+9vLcmxBgaCsaGiUXTZ3dxyj5j4=)
                          3: AS25369.roa (hash: mkc9Yj4YMD9F3gBXEla3RGqxmQnm8KFTktBq1/g1vSc=)
                          4: AS6849.roa (hash: /qecrz5Y3NdYXPjj0Iyi+5Cx9yOCHfpR409XaS4UnO4=)
                          5: AS174.roa (hash: M9D2dGqSp8ifwu1+2pH3SqQngfxMhnfFULy2Q+vFPnU=)
                          6: AS3320.roa (hash: +oimB0eR0/e/zlntuO1DBunkga7uN9BdI8lbfYN09Sk=)
                          7: AS2914.roa (hash: gBQ3uhtKi/IDVrn22PSzwI2DFNNIEWGRAesRxHq9+jI=)
                          8: AS29802.roa (hash: WoSIqRTSqZv1z2EmPCIA+7sPicYbyj+Dbk+Sv3RCXOs=)
                          9: AS834.roa (hash: 2SZqCRE2+4nUckQVCxkyjqFAsjmNU2Yx12dNLAha8s8=)
                          10: AS3356.roa (hash: GM6PVeTjFUloAHOVtUaJKI3YkMlpiZfqqEF9e+CoBIY=)
                          11: AS7018.roa (hash: OLO5Z60y+0edpM5FLH8aCGfYWSAMYmpQgpPDJQmFCVA=)
                          12: AS23679.roa (hash: Ok4XRwELul6iFmUKDyMknSIfPHCtzWteFSULXbhO4Js=)
                          13: AS201780.roa (hash: GR1JbRsa0LvWkSZjywtahQteJ/5jQTiszlqI+t6XG9M=)
                          14: AS42689.roa (hash: IgqAEfgJE2FFiSr0fDq95IA9lF8aeK1ZeabgIRY2FHk=)
                          15: AS5065.roa (hash: NnQZohNqd1olGXksByc77E4FIXg7xPu85M2f6oLvjgA=)
                          16: AS8220.roa (hash: MCOcACLUrRVfYOjpSuWMB8i96LhvfBuoWmZiZcJ3PEI=)
                          17: AS209474.roa (hash: 7mExHNImQTUwBUELnYwfhacnz1T3mWONpLHGQ2gAR0U=)
                          18: AS3949.roa (hash: oTX09F0sGtSVYDdiB5nLuG5oRwQ3ommq/qN39kjuNtY=)
                          19: 9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl (hash: FQ/0wOF1y4AUoOyhTW5+QgWYnk1SkH58d2a5U7zWZMg=)
                          20: AS53616.roa (hash: ke9Cm1lMId27aNxO4HyR15KCsZFD5kogunV6wefLPOw=)
                          21: AS8075.roa (hash: GgFQarexz2WuUBdGOsnFHstsXkivf+q8AGl7KmmEOdM=)
                          22: AS51269.roa (hash: ly4zBSpwx3tnZLY/d6YnnWs6Zn6bGuThPWTO4b0Q9qg=)
                          23: AS5511.roa (hash: Rqob2C0KmEwtrDJ58jAUCt9gLqg8s3iiJYhIUaIWaWU=)
                          24: AS10753.roa (hash: kMJqFsWRzxXCyiqPJ7GPAM9HN+Tm9gJ6BeCdPFHS/hw=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 19:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:74:da:26:e5:47:47:72:28:37:0f:a5:81:07:dc:dc:8f:da:48:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: May 16 23:42:04 2024 GMT
            Not After : May 18 00:36:04 2024 GMT
        Subject: CN=A0BEB6C87508C373F708D0D8567F097CBBE182BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:02:3d:b0:31:ce:b4:fc:b3:dc:7b:7e:c3:
                    9d:c3:15:d7:a9:e3:c6:ac:bf:0c:34:c2:85:3b:42:
                    f1:24:90:c3:15:36:0d:24:18:66:dc:35:3a:5e:d2:
                    72:b5:62:50:c5:c8:31:ec:a8:71:54:2d:72:85:33:
                    b4:5b:e8:8b:9f:1f:f9:81:64:ab:9a:ca:13:99:02:
                    01:77:39:06:d6:dc:1c:bb:32:e4:cb:7c:f6:7f:34:
                    4e:33:f2:32:20:8e:1e:52:0c:32:6d:0d:e8:87:f4:
                    ad:75:3f:73:59:5e:c3:8b:22:ba:5a:b8:30:8e:30:
                    73:57:f4:99:bb:54:29:12:47:dd:a4:42:50:ca:a6:
                    65:ec:14:46:7b:4d:08:32:57:02:76:62:d3:9f:25:
                    1e:bf:ec:b6:87:3a:e3:ee:76:fc:c8:ab:3a:40:0c:
                    71:57:6e:72:2b:23:23:2d:1f:c8:e1:48:f7:fb:b3:
                    ac:f0:07:e2:c5:cf:e3:34:a5:34:03:69:35:60:c1:
                    49:c4:40:33:d4:d8:1a:37:77:bd:8a:7d:10:38:9a:
                    59:13:1a:65:d1:30:8b:2e:d4:b1:46:73:23:bf:93:
                    79:0e:ce:1f:30:16:95:ce:42:6b:d1:ee:7a:6d:88:
                    7f:df:67:de:c5:22:de:f0:76:7f:31:63:d5:9b:4e:
                    a7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BE:B6:C8:75:08:C3:73:F7:08:D0:D8:56:7F:09:7C:BB:E1:82:BC
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:84:c0:71:ca:10:d7:0d:42:a9:80:d1:7f:9a:54:02:c6:60:
         ad:bf:f5:fd:71:de:d8:1d:47:4a:4c:c9:0e:92:11:bc:5c:f5:
         9f:01:93:06:53:c9:5a:e0:84:c3:a6:11:eb:5c:da:1d:4d:44:
         cf:ef:92:f6:90:20:11:8f:c5:98:8e:3a:5b:65:6b:97:33:5e:
         ec:8b:84:41:98:0a:90:9c:11:ff:7f:07:92:ef:1b:04:47:ae:
         e0:5a:95:4f:3e:89:ec:7b:2d:dd:a1:f2:01:b3:26:f3:2f:4a:
         c3:ba:2f:7c:cc:db:e1:ee:46:64:43:c4:34:01:65:aa:4d:4b:
         a1:49:1b:c1:82:25:77:51:63:aa:28:2a:b9:fb:da:8a:ce:98:
         90:c1:fb:83:03:80:a7:46:1d:4a:0b:fe:b4:58:b4:97:e6:02:
         1a:62:0c:7b:40:3c:10:fb:3d:48:8a:30:79:4d:2e:80:51:5b:
         d7:0d:85:e0:db:da:94:b2:60:df:62:62:ff:78:d6:20:f6:04:
         ab:fd:c5:ef:b0:f4:ca:cd:a1:64:47:11:1a:bb:ea:f0:cd:79:
         56:c7:f6:96:ce:05:4b:d5:e5:4a:dd:ed:53:e3:67:eb:a3:c1:
         c9:c8:db:53:53:b4:3f:bd:a5:f6:f5:58:de:dd:02:20:5f:5c:
         21:60:67:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 00:20:27 2024 by rpki-client on console-ams.rpki-client.org