Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.mft
File:                     5777980E886C29F0060C3A073B6E681A8A70574B.mft (raw, json)
Hash identifier:          vUD0qbn93eCWDoS/aRkPbCcjQ4+8A6NZD6WDw6CCwh0=
Subject key identifier:   9C:0F:4E:7D:75:9A:37:79:6A:AD:CD:5B:A8:F5:7B:B0:3E:BC:4B:70
Authority key identifier: 57:77:98:0E:88:6C:29:F0:06:0C:3A:07:3B:6E:68:1A:8A:70:57:4B
Certificate issuer:       /CN=5777980e886c29f0060c3a073b6e681a8a70574b
Certificate serial:       5854981C29EACAB53CF27D4EE716FBF720E1D675
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3eYDohsKfAGDDoHO25oGopwV0s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.mft
Manifest number:          A8
Signing time:             Mon 16 Sep 2024 09:35:02 +0000
Manifest this update:     Mon 16 Sep 2024 09:30:02 +0000
Manifest next update:     Tue 17 Sep 2024 09:46:02 +0000
Files and hashes:         1: AS216311.asa (hash: KdvFLNJ2XQSeDW8tjcp7QjKAB/zlq90sUUcEa1pHg6A=)
                          2: 5777980E886C29F0060C3A073B6E681A8A70574B.crl (hash: mZ/b/JwwyQSBex1L30BYMibcuG+Y0TQS72KaCwFtTD4=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3eYDohsKfAGDDoHO25oGopwV0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:54:98:1c:29:ea:ca:b5:3c:f2:7d:4e:e7:16:fb:f7:20:e1:d6:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5777980e886c29f0060c3a073b6e681a8a70574b
        Validity
            Not Before: Sep 16 09:30:02 2024 GMT
            Not After : Sep 17 09:46:02 2024 GMT
        Subject: CN=9C0F4E7D759A37796AADCD5BA8F57BB03EBC4B70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:af:b8:e4:3d:51:20:7b:b3:d8:8f:59:2d:73:
                    fe:a8:e6:6c:3f:30:03:a7:b5:90:3f:bc:0c:60:63:
                    51:b9:a0:24:58:aa:ae:17:fa:2a:01:10:ed:15:cd:
                    3a:2c:61:68:54:8e:f4:aa:60:a0:7f:cf:23:47:b7:
                    c3:38:4b:91:3f:1e:6b:96:a0:6a:79:77:89:eb:4f:
                    bc:4e:84:14:1b:07:28:b1:e4:08:6b:a5:e4:af:5a:
                    fd:88:d5:86:a7:22:16:bb:34:64:32:9d:10:1c:fc:
                    fe:96:b7:b3:d1:a8:ae:20:9c:fa:a1:63:e7:33:00:
                    17:45:d9:3e:c7:e5:e3:6e:52:f4:59:94:e9:f2:01:
                    7d:1c:5a:df:ba:99:5b:4d:42:ff:56:48:45:3f:c9:
                    f5:c8:e0:7d:95:a6:eb:0e:3c:ff:68:9f:2d:92:94:
                    33:0c:54:39:a7:9e:dc:64:b2:61:e0:c1:a1:8a:8c:
                    a2:aa:54:96:34:94:f0:a6:0e:94:63:6c:5d:58:28:
                    e7:f4:d9:ab:63:fa:a2:5f:81:74:5d:ac:be:96:22:
                    ad:75:d1:31:04:a9:04:82:52:52:c9:c6:0b:86:8b:
                    aa:9e:9a:6a:cc:e4:a6:78:2a:a6:fd:be:97:0a:12:
                    71:60:5e:60:9b:c2:68:ff:c2:f9:eb:41:32:1d:0c:
                    80:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0F:4E:7D:75:9A:37:79:6A:AD:CD:5B:A8:F5:7B:B0:3E:BC:4B:70
            X509v3 Authority Key Identifier:
                keyid:57:77:98:0E:88:6C:29:F0:06:0C:3A:07:3B:6E:68:1A:8A:70:57:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3eYDohsKfAGDDoHO25oGopwV0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:fc:81:cb:56:61:ad:b1:fd:da:9d:6a:94:4b:1d:bf:f7:5a:
         78:b7:70:80:66:77:e8:0b:a9:6b:29:a6:03:17:f1:81:43:2e:
         1e:1a:65:56:f3:31:b4:2d:30:d2:39:22:cf:90:71:19:9e:4f:
         38:3d:b8:7b:11:79:61:90:af:be:ac:f6:62:cd:8a:0b:44:23:
         43:03:58:cd:99:b7:7e:aa:47:4f:74:32:7d:d7:fd:0a:d0:5c:
         8e:0d:2d:49:e3:41:4e:68:4f:1f:53:20:e2:43:c5:be:94:70:
         66:db:af:e2:7b:4d:46:88:3b:90:0e:81:9b:24:19:45:8c:a1:
         c3:83:99:81:e9:47:18:0a:bf:8d:41:a5:38:f8:59:a5:33:4d:
         84:39:9c:58:fc:12:56:6c:7b:66:66:70:15:99:9d:0b:15:84:
         64:55:f2:b1:46:2e:67:5f:36:dd:22:32:43:53:c3:19:73:88:
         19:ae:b3:51:f2:bd:b4:8c:15:59:52:bb:53:4d:ba:30:02:ce:
         f4:20:d1:db:41:d7:8e:a4:33:80:0d:be:dd:f5:49:59:73:1e:
         05:46:38:3d:51:2b:23:4d:eb:de:22:50:57:76:c9:77:49:51:
         c5:34:0b:30:93:bc:77:76:66:96:7b:d9:89:62:bc:3a:bf:c6:
         01:ab:f4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 10:47:28 2024 by rpki-client on console-fra.rpki-client.org