Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          p7D5NCMWG2WCCFtQz4UZzRtnpAMFxTO704hxlrjG6v0=
Subject key identifier:   AD:2B:80:E8:8E:47:F1:7D:0A:39:7C:39:F2:64:4F:49:24:F2:E1:99
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       4A00B887F0CA4710A5FAA3A8BF676DE4FCA91659
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          016B
Signing time:             Wed 15 Jan 2025 18:11:58 +0000
Manifest this update:     Wed 15 Jan 2025 18:06:58 +0000
Manifest next update:     Thu 16 Jan 2025 21:04:58 +0000
Files and hashes:         1: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: KcXubqBOt4JkGecKPlzGXyXHoDowb5GGjZNu/3FL1xU=)
                          2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: 1C8fIKlQUnAeCmyoK3V2NdUgsW/0q5NrpzLZYBb5TGM=)
                          3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: aHQLak9N9Oms5rgKvpLigAh2LZdfLoi6boC6n7PKDU4=)
                          4: AS198136.asa (hash: W+U8FE8wW4IM5Quak0Mq8eROawTLthMCIEUtXh+wJqE=)
                          5: AS212068.asa (hash: B3ZUqxz38OM0d1AJg+LgnB7cw80/HkHXOni8GeSXIhs=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 Jan 2025 15:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:00:b8:87:f0:ca:47:10:a5:fa:a3:a8:bf:67:6d:e4:fc:a9:16:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Jan 15 18:06:58 2025 GMT
            Not After : Jan 16 21:04:58 2025 GMT
        Subject: CN=AD2B80E88E47F17D0A397C39F2644F4924F2E199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:dd:09:79:30:04:6d:a8:14:b6:56:2b:cf:bc:
                    aa:a9:74:dc:42:52:da:c3:cc:8a:50:93:1d:39:fd:
                    4a:e4:99:3e:85:9c:3e:bf:de:59:f5:bc:2e:80:18:
                    ae:72:af:78:50:52:54:99:26:b0:13:6c:a4:26:a9:
                    7c:28:15:3c:8b:04:0b:98:31:aa:87:6e:5d:04:51:
                    a2:56:ed:71:42:9a:25:89:d0:3e:98:21:b4:45:a2:
                    98:17:85:a9:a8:4d:25:d7:17:9b:3f:de:e1:13:13:
                    e1:75:ec:cd:ff:70:8d:f4:17:02:78:ee:66:16:68:
                    7f:e9:8b:d5:0c:3b:60:58:49:1d:34:29:6b:1b:38:
                    3a:dc:b6:b0:ed:81:c7:07:c0:36:b2:96:e9:cc:b6:
                    9f:19:a9:1c:0b:2d:dd:0c:93:95:88:df:d2:c4:e8:
                    17:6b:cd:5d:9d:57:db:a0:75:fa:ef:35:be:94:73:
                    62:63:d8:1f:d5:20:eb:ad:c9:8e:19:06:6a:11:dc:
                    b1:99:22:7d:6f:61:a5:d9:d8:e5:58:b1:41:0e:4a:
                    87:18:48:0d:c2:3c:f2:76:9d:a0:76:82:f0:d9:ae:
                    34:05:e3:5d:f6:a5:ea:90:a6:2e:c1:df:0b:2f:17:
                    0c:2e:73:09:14:53:9a:b9:eb:93:1d:82:d2:ce:a5:
                    7b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2B:80:E8:8E:47:F1:7D:0A:39:7C:39:F2:64:4F:49:24:F2:E1:99
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:eb:6c:61:27:ef:75:69:2b:fd:40:13:ca:04:dd:81:f6:15:
         dd:3d:45:bf:04:d1:33:08:03:37:9f:d8:88:49:04:74:36:73:
         3b:af:30:3a:f0:fb:bb:10:12:fb:cb:c6:e0:cf:e5:10:73:5b:
         e6:bc:99:4f:8b:79:5e:72:62:f2:7d:5c:c9:1b:40:6b:ab:aa:
         fd:af:fa:d7:03:42:3b:42:6c:77:b2:1a:4b:f6:68:20:7d:da:
         df:b7:c7:65:73:c8:d8:43:e2:96:a4:a8:48:b4:78:98:58:ac:
         b3:c5:33:d9:a4:68:36:d6:85:17:83:d7:1f:48:f7:f9:12:6d:
         12:62:fc:90:50:b3:ec:30:95:e5:fd:bb:53:66:75:9c:d1:f9:
         0f:a0:e8:da:8e:8e:17:42:13:e0:90:2b:46:48:e3:2d:30:08:
         f5:a9:22:48:a0:3a:c2:f0:a2:fa:ee:b3:b7:dc:9f:1d:3e:04:
         84:b8:cd:40:c7:2a:d7:66:50:5f:8b:2b:01:3c:25:bb:a1:40:
         bd:1a:0f:ca:21:e8:b5:5b:f1:cb:4d:84:4b:cf:cb:47:35:35:
         99:51:43:5a:75:49:97:4c:d1:5d:02:79:63:aa:cb:27:95:cb:
         6d:e7:c0:25:58:e4:80:cc:9c:82:a8:05:12:eb:49:8a:21:2c:
         9e:55:71:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 16 01:05:22 2025 by rpki-client on console-ams.rpki-client.org