Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft
File:                     B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft (raw, json)
Hash identifier:          bKElLVt4J/4zKTNNr+xUpM5T503FbKMraMfurMKn3eI=
Subject key identifier:   3D:5E:12:71:98:93:CD:30:0D:6C:22:60:4F:12:67:12:2A:0F:D1:35
Authority key identifier: B7:3B:05:97:1A:1A:76:BD:F1:BC:61:A5:17:8B:00:B4:FF:71:BA:BB
Certificate issuer:       /CN=d90d8aba2a52e658722522ec42c626f029750e015dbdba418f
Certificate serial:       2CA8237FBE1DAD62D2C6277D8C912F7B51449BD6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a52e658722522ec42c626f029750e015dbdba418f.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft
Manifest number:          73
Signing time:             Sat 07 Jun 2025 23:34:57 +0000
Manifest this update:     Sat 07 Jun 2025 23:29:57 +0000
Manifest next update:     Mon 09 Jun 2025 03:07:57 +0000
Files and hashes:         1: 32332e3136342e3135322e302f32342d3234203d3e203236353631.roa (hash: Ufvh495kVHTsvuscjFimK/5B3fifdcUwR5A1Uohco9k=)
                          2: 323630323a663966613a3a2f33362d3438203d3e203132383339.roa (hash: KB5IW4CbSuoOkgtd2rJCaS7SQDgxB1P+CSq45yfOs7s=)
                          3: 323630323a663966613a3a2f33362d3438203d3e203630383538.roa (hash: 5c3OaxW1qKZrY2FscDnJyFNXHvDxQCbXNLWzxHU/wc8=)
                          4: B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.crl (hash: 5kTpYxCRio9e6whNHSTiMB1KllM+2wJlFNbC8UDZcSA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a52e658722522ec42c626f029750e015dbdba418f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a8:23:7f:be:1d:ad:62:d2:c6:27:7d:8c:91:2f:7b:51:44:9b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d8aba2a52e658722522ec42c626f029750e015dbdba418f
        Validity
            Not Before: Jun  7 23:29:57 2025 GMT
            Not After : Jun  9 03:07:57 2025 GMT
        Subject: CN=3D5E12719893CD300D6C22604F1267122A0FD135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:82:4d:48:85:8b:82:2f:9e:68:59:d3:d3:8a:
                    db:7b:f3:f6:90:0e:f2:fe:42:a9:03:cc:1e:30:e5:
                    cb:f2:76:09:6d:48:55:0a:95:e2:e8:27:e0:9d:ce:
                    c0:84:c5:41:14:61:c5:0e:a5:50:7b:ed:64:c2:e0:
                    d7:ee:64:0d:08:df:a9:e0:52:07:29:46:44:ba:97:
                    c5:04:0f:94:cb:18:0f:a9:1b:d6:df:9a:46:50:f9:
                    22:f8:35:30:ed:1c:3a:b1:83:3d:34:dd:35:9e:89:
                    ff:82:07:cc:0d:66:63:c9:c5:da:9f:57:66:75:1a:
                    39:f8:2f:c7:70:70:5c:b0:ed:1d:4a:5f:9c:15:de:
                    04:42:62:68:f8:44:42:df:dc:74:e3:82:a2:fd:ba:
                    64:87:2a:87:b9:56:7d:f9:6e:23:d7:69:b2:57:04:
                    44:08:2c:de:bf:a7:ce:27:4b:a1:aa:34:c0:94:27:
                    86:73:3c:8a:b3:2d:7d:8c:ab:c4:3b:5a:20:75:89:
                    19:56:62:ff:06:2b:c9:9f:b1:b0:21:f3:0c:9a:b7:
                    3d:1b:06:12:f9:0b:4d:38:53:da:9c:4f:1f:51:b1:
                    72:29:8a:9a:39:b6:da:33:87:a9:b5:f1:98:ca:21:
                    d9:be:a1:21:88:7a:84:06:8f:0e:0f:ff:10:51:fe:
                    2c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5E:12:71:98:93:CD:30:0D:6C:22:60:4F:12:67:12:2A:0F:D1:35
            X509v3 Authority Key Identifier:
                keyid:B7:3B:05:97:1A:1A:76:BD:F1:BC:61:A5:17:8B:00:B4:FF:71:BA:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a52e658722522ec42c626f029750e015dbdba418f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/B73B05971A1A76BDF1BC61A5178B00B4FF71BABB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:7c:3d:9d:5a:c4:74:d6:1a:74:8f:a3:75:10:7b:5a:4d:82:
         8a:26:af:7a:68:70:bc:30:0a:be:db:a8:63:90:c9:78:76:bf:
         43:ec:db:dd:68:bb:47:a2:af:c4:44:20:23:70:e9:a3:d5:d6:
         5a:de:1d:f0:e8:91:5a:10:96:61:3c:26:ad:25:7e:e8:b2:d9:
         7a:3f:55:e5:d6:18:b7:9d:09:b3:ac:b8:d6:f9:ea:59:a2:08:
         87:3c:16:33:00:99:04:bf:8f:1f:63:f1:5c:ae:6e:f6:d3:66:
         c7:d3:f0:2a:60:3e:51:36:15:ea:df:a6:9d:e1:f7:06:3a:e9:
         58:3f:b5:77:b0:1a:5b:c0:6a:f3:bd:d7:d9:cd:f9:54:83:9e:
         27:b1:31:4e:6b:91:fd:73:49:ef:71:2e:e6:b7:ea:42:95:f8:
         6c:d5:5f:62:37:00:1e:40:57:f4:32:36:16:37:15:2a:f9:ce:
         f7:50:5c:c8:b7:18:14:10:ef:97:9f:24:e3:73:91:9a:bc:6b:
         2d:c0:b8:88:89:d4:26:ca:3a:41:89:9e:2e:ab:90:52:f9:48:
         c0:d1:8b:5a:b3:01:be:2d:19:b4:6e:c2:39:91:b3:0b:df:16:
         09:ce:92:10:e3:3b:84:0b:e3:05:3e:f8:76:35:4d:f3:a4:3c:
         ee:43:7d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:40:30 2025 by rpki-client