Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.mft
File:                     F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.mft (raw, json)
Hash identifier:          XXfLWJjG46+GDQx0fjSqBuBHzCO8LuojuB7AUWuN0wI=
Subject key identifier:   35:99:CE:FE:10:70:00:88:C8:80:D7:C6:91:B5:92:A7:BB:58:37:D3
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Certificate issuer:       /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial:       2412F9E3AED4F16F7DC5834F8C91AA2DBA296C89
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.mft
Manifest number:          04A6
Signing time:             Mon 13 Jan 2025 04:44:23 +0000
Manifest this update:     Mon 13 Jan 2025 04:39:23 +0000
Manifest next update:     Tue 14 Jan 2025 06:06:23 +0000
Files and hashes:         1: 326130353a646663313a393137343a3a2f34382d3438203d3e203537343833.roa (hash: v9dmjrzFnV5b2A6xdAui+Q4gF3ELLt9FJDdHXMck0Pw=)
                          2: 326130353a646663313a393139343a3a2f34382d3438203d3e20323135333836.roa (hash: awyK23REAgC5OF3FSXK6T6lPv/Y9OPv1M2gCMFucc/g=)
                          3: 326130353a646663313a393136633a3a2f34382d3438203d3e20323135363635.roa (hash: KNGSB+cQzjns5f9eTaOdtd1wrmRLgRW49MUBloto0aU=)
                          4: F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl (hash: PgswhVlR2Iw/nPnA4aY9O//qkdAdIlIeiRu0Wh3biho=)
                          5: 8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.cer (hash: JrP9Yj9+GylzB9vk0aiJi9Dd+braOBZrvEH4EsNnbUc=)
                          6: 326130353a646663313a393137303a3a2f34382d3438203d3e203531323534.roa (hash: 0EAZ2NFbwuGWl6CNH5AGsOtZjzsc6LwCa4kExjYyEJo=)
                          7: 326130353a646663313a393161663a3a2f34382d3438203d3e20323033363836.roa (hash: YQo0TjcPu+Em3BVoDjLJhW1AEQJ1FP5qfZ9t5gA0Dqs=)
                          8: 326130353a646663313a393161303a3a2f34382d3438203d3e20323030323436.roa (hash: Fqfb2rBJMD6Q69G0R/3ria7ckhlk5qxOnkkuYg56aXo=)
                          9: 326130353a646663313a393138633a3a2f34382d3438203d3e20323135323830.roa (hash: SR7XrQx3p3SosQYaDLORUu1Ba3qDV69RZH6Q+bd7ckQ=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 Jan 2025 23:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:12:f9:e3:ae:d4:f1:6f:7d:c5:83:4f:8c:91:aa:2d:ba:29:6c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
        Validity
            Not Before: Jan 13 04:39:23 2025 GMT
            Not After : Jan 14 06:06:23 2025 GMT
        Subject: CN=3599CEFE10700088C880D7C691B592A7BB5837D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bc:68:16:9a:13:fa:03:1e:c8:39:7f:f2:3c:
                    59:6d:63:a1:e7:e4:4e:19:c4:09:12:8a:4d:ae:31:
                    5d:1e:3b:f6:01:51:3c:9e:9b:0e:17:8b:f6:c3:55:
                    6b:57:ef:a8:85:11:70:84:42:d9:3b:0a:bb:7b:8a:
                    b8:a5:c6:9f:51:8e:bc:f1:e8:fd:45:1e:be:1b:ba:
                    1e:36:dc:ad:1c:47:67:72:be:e7:21:33:b2:d0:1e:
                    64:0a:2e:40:9c:7f:fc:15:6c:75:3d:78:d9:ca:e6:
                    4f:fe:bb:51:7b:98:2f:a1:95:b4:f1:a4:4f:44:50:
                    ae:b3:8b:22:f3:3c:7c:5c:bd:cf:d0:52:f9:58:71:
                    ae:3b:df:ae:46:23:04:f8:df:70:89:c4:51:d2:8e:
                    7c:86:68:76:d9:d0:aa:b2:3f:75:cb:36:59:af:7d:
                    71:4f:42:77:70:03:5e:28:a7:f0:a7:24:4d:72:4e:
                    8e:91:45:ca:90:64:4d:63:02:82:03:70:cc:fb:9f:
                    8a:60:b6:96:2d:36:93:73:a1:c4:2c:4c:13:66:83:
                    f7:bb:f2:f6:0a:c4:ba:1c:4f:b2:36:5b:0f:0f:5c:
                    de:99:24:22:19:8d:ab:93:75:b7:14:d5:ac:e9:0e:
                    98:7f:6c:24:a7:ee:95:47:7e:f4:da:17:b4:d3:66:
                    16:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:99:CE:FE:10:70:00:88:C8:80:D7:C6:91:B5:92:A7:BB:58:37:D3
            X509v3 Authority Key Identifier:
                keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:74:64:35:e6:7d:9b:32:a3:38:7a:d7:11:75:34:36:0a:0c:
         01:24:ee:d9:c8:a7:b1:94:49:f5:a2:a0:9b:84:19:ec:74:6d:
         1d:4e:af:24:15:4a:ec:b9:30:96:38:e4:d8:49:96:12:5e:3e:
         85:fc:8f:dd:cf:c2:1d:62:d9:02:59:c2:5b:aa:c4:4b:6b:31:
         a2:d9:db:de:f3:54:41:6b:de:90:9c:8f:6a:35:bb:d0:82:e9:
         94:0d:64:e0:16:03:87:40:49:c3:19:a3:5b:b9:6c:47:5c:f8:
         90:cc:64:23:e6:85:fa:3b:91:a5:4b:7a:89:18:47:6b:5f:ab:
         01:24:80:d2:f2:9c:ac:ff:d9:d6:80:03:a6:01:49:8d:43:f2:
         8d:33:12:ba:8d:20:88:13:d1:64:aa:e6:6e:63:7f:33:ab:26:
         76:81:3b:ea:ed:83:ee:29:6f:e8:57:db:ee:b3:7c:33:86:8d:
         6f:ce:c1:fc:16:62:98:2c:31:77:53:5d:b4:1a:20:28:d1:6e:
         7a:fe:68:08:2f:36:fb:4b:96:0a:62:5b:f1:df:0a:b8:06:29:
         40:2e:d2:38:05:ca:2d:1c:3e:bc:62:52:9c:be:81:7d:0c:02:
         e5:b5:2b:ff:63:2c:da:0b:93:61:38:2c:00:b9:e3:58:a9:94:
         36:a6:b3:1c
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUJBL5467U8W99xYNPjJGqLbopbIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjczN0Q4MUJGQkVGRkRFRUM5RUMzMkI3Qjg2NDExMkRF
MDVFN0I3NjAeFw0yNTAxMTMwNDM5MjNaFw0yNTAxMTQwNjA2MjNaMDMxMTAvBgNV
BAMTKDM1OTlDRUZFMTA3MDAwODhDODgwRDdDNjkxQjU5MkE3QkI1ODM3RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjvGgWmhP6Ax7IOX/yPFltY6Hn
5E4ZxAkSik2uMV0eO/YBUTyemw4Xi/bDVWtX76iFEXCEQtk7Crt7irilxp9Rjrzx
6P1FHr4buh423K0cR2dyvuchM7LQHmQKLkCcf/wVbHU9eNnK5k/+u1F7mC+hlbTx
pE9EUK6ziyLzPHxcvc/QUvlYca47365GIwT433CJxFHSjnyGaHbZ0KqyP3XLNlmv
fXFPQndwA14op/CnJE1yTo6RRcqQZE1jAoIDcMz7n4pgtpYtNpNzocQsTBNmg/e7
8vYKxLocT7I2Ww8PXN6ZJCIZjauTdbcU1azpDph/bCSn7pVHfvTaF7TTZhaNAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQUNZnO/hBwAIjIgNfGkbWSp7tYN9MwHwYDVR0j
BBgwFoAU9zfYG/vv/e7J7DK3uGQRLeBee3YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzEvRjczN0Q4MUJGQkVGRkRFRUM5RUMzMkI3Qjg2NDExMkRFMDVFN0I3Ni5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0Y3MzdEODFCRkJFRkZE
RUVDOUVDMzJCN0I4NjQxMTJERTA1RTdCNzYuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1Yzdk
LzEvRjczN0Q4MUJGQkVGRkRFRUM5RUMzMkI3Qjg2NDExMkRFMDVFN0I3Ni5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAI10ZDXmfZsyozh61xF1NDYKDAEk7tnIp7GUSfWioJuEGex0bR1OryQV
Suy5MJY45NhJlhJePoX8j93Pwh1i2QJZwluqxEtrMaLZ297zVEFr3pCcj2o1u9CC
6ZQNZOAWA4dAScMZo1u5bEdc+JDMZCPmhfo7kaVLeokYR2tfqwEkgNLynKz/2daA
A6YBSY1D8o0zErqNIIgT0WSq5m5jfzOrJnaBO+rtg+4pb+hX2+6zfDOGjW/OwfwW
YpgsMXdTXbQaICjRbnr+aAgvNvtLlgpiW/HfCrgGKUAu0jgFyi0cPrxiUpy+gX0M
AuW1K/9jLNoLk2E4LAC541iplDamsxw=
-----END CERTIFICATE-----
Generated at Mon Jan 13 08:17:46 2025 by rpki-client on console-fra.rpki-client.org