Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
File:                     097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft (raw, json)
Hash identifier:          ogPaVZciJdxXMUNdkM7sjNNd0IiwtaXLtNpiCwpFJNE=
Subject key identifier:   78:8A:75:25:A4:DF:EF:97:56:9B:0A:AA:B7:E1:B4:5A:93:D8:FF:F9
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Certificate issuer:       /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial:       0DFE0201731D05F9A927B66C08FF38318B846BB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
Manifest number:          07F1
Signing time:             Wed 22 May 2024 12:54:15 +0000
Manifest this update:     Wed 22 May 2024 12:49:15 +0000
Manifest next update:     Thu 23 May 2024 15:41:15 +0000
Files and hashes:         1: 3138352e3136392e322e302f32342d3234203d3e20323136313531.roa (hash: 3d0jE1jw60xlICOE8NK183LW1kBVrTNonNof3DafmHE=)
                          2: 3138352e3136322e34372e302f32342d3234203d3e20323031333431.roa (hash: Tienk5JJgaHXXC/+f8X+liZPo/4c1yTA96iy0wg5LOk=)
                          3: 33372e3134302e3234362e302f32342d3234203d3e20323031333431.roa (hash: 3h830rQY5N6hrCXWqg8ta1/+vt/aab4rs9GygDtEclI=)
                          4: 3138352e3136392e312e302f32342d3234203d3e20313336373837.roa (hash: 3JPGRftCaPDGJa4OFogJrM/ixzgJnHVQzzVJBA9qkXY=)
                          5: 3138352e3137322e35342e302f32342d3234203d3e20313336373837.roa (hash: hgvIVmpSAS5fLH7ux7eHXrw66BF9K0mkB25JrkxbJNY=)
                          6: 34362e3235332e3134312e302f32342d3234203d3e20323031333431.roa (hash: p0NuLJYpAL/u2E/gmlMfgO8zrudo/pholreGz1AAxao=)
                          7: 3139342e32362e3231312e302f32342d3234203d3e20313336373837.roa (hash: OK3D7lB7JwYhpKRabVjWHlsUquuA6bn1BN6qXrj2+2E=)
                          8: 3138352e3136352e38362e302f32342d3234203d3e20313336373837.roa (hash: EJ+48mbtrWEBKQ1KSRJtzBuvJnh9xOJlsYXhfqRWISI=)
                          9: 3138352e3137302e3139362e302f32322d3234203d3e203432333636.roa (hash: LzR04kVQl+lv/xULScIWKGb3a8tM0901uBQYuDeI+Ng=)
                          10: 3138352e3136392e3235352e302f32342d3332203d3e203632323430.roa (hash: oioR69nroTHzyM7s8L+mDvApluLlQCZSBAwTfP8v9DI=)
                          11: 3138352e3137322e35322e302f32342d3234203d3e20313437303439.roa (hash: LdWeAFkfCaiEPXy7kJMKUqEzTytXYLiDiu6xQYMGj4E=)
                          12: 38302e37312e3134382e302f32342d3234203d3e20323031333431.roa (hash: v+PYean9ftuFallkbRLWqEmTMzaG3KASHL0UsSW6Lww=)
                          13: 3138352e3136352e38352e302f32342d3234203d3e20313336373837.roa (hash: 7g4OmaEa9XU8AI1nhk8elX7BiclVvOdH0pzO5ciDEDU=)
                          14: 3138352e3136322e34342e302f32342d3234203d3e20323031333431.roa (hash: s1YwuFH4KBAsa6ik8xco25G1Z2P45xlUA4O8Z4VYAZc=)
                          15: 36322e3130362e37322e302f32342d3234203d3e20323031333431.roa (hash: sUT5EV9k1L/jQGDNWlfcLLbBnnCO0pFntUTPU25VrVk=)
                          16: 3138352e3135332e3137382e302f32342d3234203d3e20313336373837.roa (hash: dQwhla9irxRG4UTGZJK/nV19KdOEtPcs2n63Fo4nABc=)
                          17: 3138352e3136332e35322e302f32342d3234203d3e20323031333431.roa (hash: vrrnmBun1nwJYVClymG5s/6QnTA5LjpkRYcFxY+kWFI=)
                          18: 3138352e3136322e34362e302f32342d3234203d3e20323031333431.roa (hash: XXVf1l3Aamyu4Fk2yBBmidmRJO0o15X7QjaCANazwpA=)
                          19: 3134362e31392e38382e302f32342d3234203d3e20313336373837.roa (hash: k/16OjibAm+bwJ+FEweKPy7ljijdjCmdtFR4ek+yJxA=)
                          20: 3134362e31392e3135362e302f32342d3234203d3e20313336373837.roa (hash: XydZZpeClLS38TXf3ZFttmWfWpWqLhY9kRhjEr0QIFE=)
                          21: 3138352e3136352e38342e302f32342d3234203d3e20313336373837.roa (hash: fFSH0ezykUI/2rRJSAo+exqof2ZJtlPE+gqLmlOb20Y=)
                          22: 3138352e3136352e38372e302f32342d3234203d3e20313336373837.roa (hash: Kv4PwzbsWerOFaXUMXpyyPSMoboEcIHU31pejUilSM0=)
                          23: 36322e332e33362e302f32342d3234203d3e20313437303439.roa (hash: 26/dBSTf240BW9aUgJQD85EmewMvwzZmf83v49As/xk=)
                          24: 3138352e3136392e322e302f32342d3234203d3e203230383630.roa (hash: IqOcZsuS9R+EH6PQHtmps/Bh2teXAtgTAlHsfSlylXg=)
                          25: 3135372e39372e3133342e302f32342d3234203d3e20313437303439.roa (hash: j6iQ7XPNgV4Xm2EiDPXy4GkmGEsz+Iskwr/eLYFe/xM=)
                          26: 3138352e3136332e35332e302f32342d3234203d3e20323031333431.roa (hash: /0XaxXhIpCBztME9mrOVRtjh8l9tUhuQZnCgGKk8nwg=)
                          27: 3139342e34382e3230342e302f32342d3234203d3e20313336373837.roa (hash: wBbnTnl5jy4PmfomQNDYN1LhOxeHLYzhQDhxtZCGW4s=)
                          28: 3138352e3136392e3235322e302f32342d3332203d3e203531313637.roa (hash: kLuSLGd/oX0ih679ZZY3SSMPbqrvs9wqtVwmOUyBp2I=)
                          29: 3137362e39372e3230392e302f32342d3234203d3e20313336373837.roa (hash: grWaMIZLpaiIJIuXYqUQ1AUCt1a/12+1wyRSJlpeI6k=)
                          30: 33312e3232322e3233312e302f32342d3234203d3e20313336373837.roa (hash: 2k0Z8refgJuQGraEgU6im2zeNj5AvbWAjNuQjUAJUQU=)
                          31: 3138352e3136332e35352e302f32342d3234203d3e20323031333431.roa (hash: 3vRPyd9EV1M4dXMtYiR3SC+fBubUSJA2+O9g0piPzfs=)
                          32: 3138352e3136322e34352e302f32342d3234203d3e20323031333431.roa (hash: auJQmPwtzsiDqzP4ycUgN4ElSEUNtfOg/xVR1IsZ7bU=)
                          33: 3138352e3231322e3131382e302f32342d3234203d3e20313437303439.roa (hash: o0szdMS1XxaRPrNn+t5pxo+KsAoZ28Jfu/d9lC4lddM=)
                          34: 3138352e3136332e35342e302f32342d3234203d3e20323031333431.roa (hash: nmHExG0Aar9d5K9XhY/D50c4EkxBblWpOV2y57jMUEE=)
                          35: 3138352e3136392e3235342e302f32342d3332203d3e20313336373837.roa (hash: AXmehYXWoh3W50kHP/Lwblhm9EphhIbW75uBGx3sH28=)
                          36: 3138352e3137322e35332e302f32342d3234203d3e20313437303439.roa (hash: JG8HR1Gkjq4Xt8m01HeJcn2KEdZZxiV2UN7snCbxDP0=)
                          37: 3138352e3136392e302e302f32342d3234203d3e20313431303339.roa (hash: wx5+huK5jpeEa9f4LWS5Hx9xBo1Rid5hsjlAfmiy8J8=)
                          38: 3130392e3233342e37392e302f32342d3234203d3e20323035363539.roa (hash: lUSaJRI3VNneA85dXg+bx6kRPXDOxIeKFo+59U+nVNo=)
                          39: 3137362e3130302e34332e302f32342d3234203d3e20313437303439.roa (hash: cYJTU0575sMMvwZFEmSMKgnaClUqJ2sNRv+mStMg7BI=)
                          40: 3138352e3135332e3137362e302f32342d3234203d3e20323132323338.roa (hash: 5so44R7GOj7qeVDdtiy/qqYwCospV4qnbN/H/qIRPFw=)
                          41: 097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl (hash: tsGLK00Zl0rTo9VDMcBtt6NXqJofIDda4fOU4/l54MA=)
                          42: 3135332e39322e34302e302f32342d3234203d3e20313437303439.roa (hash: A503di7uDXe3BAGZSGDBqvjh6Y/sgCvwVi9LY9jAYfM=)
                          43: 3138352e3134372e35342e302f32342d3234203d3e20313336373837.roa (hash: Cg4jwqi9HB1vx+TAnwlxtgkzkKbCNxe5LLyLwPGIcjo=)
                          44: 3138352e3135332e3137392e302f32342d3234203d3e20313437303439.roa (hash: Lt0cXli6tSoVYi72Gl+C4zNyxSb0YrAPji8ShXZLn9A=)
                          45: 3138352e3137322e35352e302f32342d3234203d3e20313336373837.roa (hash: 3dVelz7BWyEODxBoB2vjISFlIvJ7nID3V+DZaHlSHqY=)
                          46: 3138352e3135332e3137372e302f32342d3332203d3e20313336373837.roa (hash: WakGXIwVOezrKpe9uh1Vgi2+7ZfoPoJsS9NADqzaEKc=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:fe:02:01:73:1d:05:f9:a9:27:b6:6c:08:ff:38:31:8b:84:6b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
        Validity
            Not Before: May 22 12:49:15 2024 GMT
            Not After : May 23 15:41:15 2024 GMT
        Subject: CN=788A7525A4DFEF97569B0AAAB7E1B45A93D8FFF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:33:40:aa:31:2e:7e:1b:ab:3c:63:f9:69:
                    5a:a7:7f:6e:e5:87:05:41:22:a0:0a:fc:29:12:2d:
                    50:e0:36:36:af:cb:1c:f8:32:c1:f1:94:4d:db:35:
                    52:52:3d:da:c5:e8:26:12:05:5e:9f:f2:7b:d2:c5:
                    6b:82:b6:55:96:3a:d0:0c:52:03:8a:00:0e:0d:f4:
                    d4:e9:9e:28:45:cd:a9:1a:3d:a7:e0:66:b8:de:aa:
                    c2:2c:df:48:f1:bf:23:e7:ef:9a:f9:2c:99:b1:19:
                    18:e8:ca:a2:ff:8e:8c:02:29:56:77:f0:87:cd:1a:
                    73:c1:5b:d2:59:fd:e6:2e:f8:fa:ea:88:02:24:21:
                    76:97:14:af:27:51:c1:24:99:a1:a2:f0:69:1c:7a:
                    47:77:4a:f0:15:f1:aa:87:bf:a4:31:a0:d0:d6:92:
                    8f:a4:13:88:7a:1a:07:0d:23:b0:d3:b8:a8:4d:30:
                    f4:13:c4:f3:1c:5a:1a:d1:fe:22:0b:9b:7a:f1:7c:
                    35:a3:87:fa:1b:7b:c3:20:ed:8c:40:11:ea:0f:12:
                    82:d6:b2:ad:79:79:af:2f:72:ce:c7:d1:fa:03:a4:
                    41:02:99:b2:88:e7:73:d4:95:25:2d:53:bb:03:1d:
                    50:60:bc:9f:f2:3a:0e:33:dd:44:64:73:09:55:f2:
                    21:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8A:75:25:A4:DF:EF:97:56:9B:0A:AA:B7:E1:B4:5A:93:D8:FF:F9
            X509v3 Authority Key Identifier:
                keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:a3:ad:82:d3:a2:51:61:74:e7:fe:ff:79:78:e7:89:44:40:
         cd:3f:d0:9f:bc:f1:a2:3c:9b:07:33:51:cc:3b:e0:25:df:f3:
         d9:75:a5:13:53:56:c5:70:ba:ff:aa:b9:b4:a1:20:ff:14:34:
         ad:01:78:df:2d:c1:13:a1:f3:9e:cc:a5:65:07:f9:78:1c:bc:
         d9:11:d7:3d:c1:e6:0a:5e:ee:18:6f:04:be:54:f0:54:2a:42:
         a6:4b:73:fa:69:63:e2:85:2e:62:c7:d1:00:60:22:d0:0e:aa:
         43:f2:6e:13:76:33:e1:6e:a8:06:d0:e2:1e:6a:ed:19:8a:3f:
         d9:9f:01:48:a7:be:9e:99:ed:2a:95:89:35:33:b3:89:12:b5:
         c5:23:99:ea:e8:a3:2b:16:49:c3:7e:70:dd:3d:e9:c0:dd:36:
         ff:9b:81:93:43:37:20:f4:b3:6e:dc:79:ff:4a:3e:ca:39:65:
         eb:72:83:78:5a:56:4e:39:bc:f5:db:b7:46:e1:4a:cc:30:72:
         ed:18:7a:a6:fe:fa:73:35:3b:17:51:f2:64:54:20:38:ad:95:
         46:8e:34:b3:06:dc:12:9a:d0:c5:d6:93:b0:5a:fc:fe:ec:90:
         d3:ca:68:2e:9b:57:ad:6c:ed:a5:cf:c9:a7:7e:a5:58:e5:fc:
         93:19:1a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 16:10:54 2024 by rpki-client on console-fra.rpki-client.org