Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft
File:                     75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft (raw, json)
Hash identifier:          Sqk7oiGIQ1ckf84mBwPpBa+iQooI7k80gHY4bQpxuk0=
Subject key identifier:   D3:7C:83:89:49:A0:35:50:B1:23:BE:D7:CE:10:AC:38:3D:E1:D9:D1
Authority key identifier: 75:D5:C2:EC:D3:0F:68:0D:B5:D1:69:87:F4:57:FE:B4:5D:8B:A9:70
Certificate issuer:       /CN=75D5C2ECD30F680DB5D16987F457FEB45D8BA970
Certificate serial:       6B5C7040BBA195488EF49216E0AF4D916DDEF88A
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft
Manifest number:          1E
Signing time:             Thu 19 Sep 2024 04:14:56 +0000
Manifest this update:     Thu 19 Sep 2024 04:09:56 +0000
Manifest next update:     Fri 20 Sep 2024 07:41:56 +0000
Files and hashes:         1: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: DeNLRbWhS9WKIEvlMBYaR+2p0F2qMHWNHV7i4if0F4Q=)
                          2: 75D5C2ECD30F680DB5D16987F457FEB45D8BA970.crl (hash: iQoz3FptrT5jZbkb+2wmfNnEauCmoCRuBvXFKD4O31o=)
                          3: 326130363a396634313a3a2f33322d3438203d3e20323135303835.roa (hash: ZKnqXWpL638YuDEQpZ7F3g5bqELtKVJQB4+caqr2NiE=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Sep 2024 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5c:70:40:bb:a1:95:48:8e:f4:92:16:e0:af:4d:91:6d:de:f8:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75D5C2ECD30F680DB5D16987F457FEB45D8BA970
        Validity
            Not Before: Sep 19 04:09:56 2024 GMT
            Not After : Sep 20 07:41:56 2024 GMT
        Subject: CN=D37C838949A03550B123BED7CE10AC383DE1D9D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:32:09:b2:3e:44:87:72:d0:f7:4b:a1:e7:16:
                    fe:2c:05:5e:39:57:33:8e:df:12:be:ad:47:da:79:
                    70:64:17:ee:60:6f:7c:5d:24:dd:6f:7a:de:8a:3c:
                    7d:a1:8b:b6:81:e2:7d:c9:71:f8:13:c4:07:e6:00:
                    5a:1a:80:82:29:75:11:d7:b9:1a:19:78:30:38:c4:
                    d5:73:86:a7:d9:a2:2e:c6:45:90:5e:50:f4:86:0c:
                    6b:16:21:87:74:1a:49:e8:04:2f:ee:a6:87:80:59:
                    b4:c0:23:ee:2b:19:a5:ee:f8:78:a9:5a:5a:ef:68:
                    62:1e:77:b7:48:fb:11:b9:cc:c6:fe:ff:7f:19:0f:
                    3c:29:8d:16:29:e3:03:4b:80:c8:04:da:eb:1c:35:
                    40:fb:92:b0:c7:59:89:c4:a6:4c:12:c0:77:1c:f6:
                    8f:86:1e:c9:1e:f8:8c:2c:43:b0:37:13:39:d4:6d:
                    1a:ce:88:4c:85:d6:eb:ad:0d:25:e6:66:6c:2a:12:
                    80:b5:ab:a8:16:be:bb:05:25:07:38:ab:83:92:3f:
                    c2:f8:e0:3e:ed:20:e3:9a:c5:48:45:76:bc:99:88:
                    d2:b6:4f:ac:0d:2b:52:b8:f0:e4:ab:b3:14:fb:61:
                    a3:b6:48:43:21:52:bc:7a:05:7e:6b:e3:f8:a5:c7:
                    27:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7C:83:89:49:A0:35:50:B1:23:BE:D7:CE:10:AC:38:3D:E1:D9:D1
            X509v3 Authority Key Identifier:
                keyid:75:D5:C2:EC:D3:0F:68:0D:B5:D1:69:87:F4:57:FE:B4:5D:8B:A9:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:43:77:3f:87:00:63:40:be:17:35:f5:0f:38:f0:9f:48:4c:
         6c:0a:14:19:34:c5:56:a8:11:ce:d0:31:ad:4a:77:d3:b7:84:
         79:28:e6:84:ff:a1:a5:30:f5:3a:b2:18:9c:b8:ea:8b:18:78:
         0c:b7:e7:1a:e8:e7:54:8b:6c:2e:01:a2:92:5b:d0:95:9d:11:
         d9:a4:17:ed:fb:4d:b1:d7:8e:87:da:2d:5d:2d:ab:14:f6:ff:
         16:d3:57:42:4e:eb:a2:fd:21:cd:14:14:36:f8:e6:e5:ea:2f:
         fb:a2:e9:77:01:d6:49:3d:c4:a6:ad:a7:ce:6a:02:68:e3:8f:
         d8:87:ed:67:a3:fc:e5:e0:f1:fb:d4:c6:97:b8:06:64:05:02:
         53:c8:f9:f6:b2:34:72:52:63:04:7a:7b:e6:58:9f:95:13:4d:
         a3:16:11:96:63:87:7b:f3:e5:ce:12:c1:78:c3:f0:ae:c0:3a:
         eb:53:c9:ba:94:a0:d8:d2:60:1e:d7:91:12:0f:bb:c0:3a:f6:
         11:6f:33:63:d1:9f:c4:92:a4:bf:9b:4d:1e:b6:1f:63:69:b6:
         18:22:b0:cf:81:56:d7:ad:22:08:eb:e9:78:87:75:d2:ae:ea:
         89:ad:6a:be:a1:5b:b7:c4:a0:bc:07:3d:2a:04:c4:aa:27:00:
         82:50:fa:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 07:47:34 2024 by rpki-client on console-fra.rpki-client.org