Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
File:                     FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft (raw, json)
Hash identifier:          g21ANQT9OXGi58uyoqem2L5e5yAC3hrcZfkjBx+UbqI=
Subject key identifier:   ED:E9:28:34:94:A7:92:F9:29:D9:B4:C8:3F:AE:DC:74:CF:8B:75:2C
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Certificate issuer:       /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial:       44C8830C56ECA7F51511E12E24596C9C03AC86AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
Manifest number:          1F
Signing time:             Thu 13 Mar 2025 01:01:51 +0000
Manifest this update:     Thu 13 Mar 2025 00:56:51 +0000
Manifest next update:     Fri 14 Mar 2025 03:24:51 +0000
Files and hashes:         1: 326131333a653430343a3a2f33322d3332203d3e20323135333130.roa (hash: uyzQxNfCQuPRUilhbFb9igirZqWyG0ghryABccswsyE=)
                          2: 39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa (hash: DmLW24LZ1vnZeM7Yk9oInpGtra92p8B8+f/VK3l3ndo=)
                          3: 3139342e32362e3232332e302f32342d3234203d3e20343030313735.roa (hash: yzlstLnidlbzwukvV9D/QvVE7rWc67Q28lja1LYs6xM=)
                          4: FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl (hash: lL9yFuqSMrSz6wCL2hOd+8jNejD+5r86TUiStUCzQbU=)
                          5: 326131333a623930343a3a2f33322d3332203d3e2035363530.roa (hash: NxII85muRlkPy6Ue9rBPty6Qe2NOTHZ5aybygZpMWdo=)
                          6: 326131333a646130343a3a2f33322d3332203d3e20323135333130.roa (hash: +nnxoDraZp1GnJqnPBkJVf2tvjIfmjIdjzZ1kJJ3DOg=)
                          7: 326131333a653430313a3a2f33322d3332203d3e20323134393637.roa (hash: H3nzZLDuD+hMyo0VXetwr0aEFusgjbaL4Ptg0xbrpOA=)
                          8: 326131333a623930303a3a2f33322d3332203d3e2035363530.roa (hash: O/uOtyjfl4MlQDYp72kf544XXXljSkWM6HF13huBkEM=)
                          9: 326131333a646130353a3a2f33322d3332203d3e20323134393430.roa (hash: 4U+lv5fdVNtShdj/snUUKz+UGwwRicG7k/GaBlfpAoA=)
                          10: 3231332e352e3132392e302f32342d3234203d3e20323132323338.roa (hash: y+MccKPhc/2KhhvHGoqYvoNRkkUTzEwbJt4GOMeUfuU=)
                          11: 326131333a646130323a3a2f33322d3332203d3e20323135343230.roa (hash: /XIIDyQLovgvuWo+FMAvONj9QZYopmDAHKNtoUoPi4w=)
                          12: 326131333a653430303a3a2f33322d3332203d3e203530353830.roa (hash: rFtvfsVQHKCdQAqKZM/z0xrzFdBj+H8lvhfwWrdW4dw=)
                          13: 326131333a623930323a3a2f33322d3332203d3e2035363530.roa (hash: fgX7JOs0CLQUJu45+RMzl8sB0KWTVxumN6S/L327z0k=)
                          14: 326131333a653430353a3a2f33322d3332203d3e20323134393430.roa (hash: HZ1FcP6uKIG0ErisyoB210/El4Tl/fdKRO4f//GIOhY=)
                          15: 326131333a653430333a3a2f33322d3332203d3e20323135343632.roa (hash: 0f4WAabP3xZvH36q2OTX1i3if9moXyHYYV6+CfUNtlk=)
                          16: 3231332e3233322e3235322e302f32342d3234203d3e2033333230.roa (hash: /Kq4VkHWPBjYK33PPSBMXdIWaIDemEZf9s/0PNOi978=)
                          17: 3137382e32332e3138382e302f32342d3234203d3e2033333230.roa (hash: GKO1xHzUJGinckXhhCthyQ7yu4eOcaWTxHAnYAzelTo=)
                          18: 3137362e39372e3231332e302f32342d3234203d3e20323136303330.roa (hash: x+RYo6wjWwk6+BVxPpNh5bRjqAt+Gok7rpn9qho5bkg=)
                          19: 326131333a646130333a3a2f33322d3332203d3e20323135343632.roa (hash: +zJlwocjllLnsQbU3Pz9rSlrsgFZqIsBvJ2vFa1jc64=)
                          20: 326131333a646130303a3a2f33322d3332203d3e203530353830.roa (hash: OHKDfo5l5/jEy46ijNWjc2QXFRSDD6WocUfsgvZEdnk=)
                          21: 33372e3134302e3232332e302f32342d3234203d3e20323036303932.roa (hash: GO8jazaT07yHqE0/NadQwAelqQjPVTo+2xINwt+os7M=)
                          22: 38342e3234362e3131312e302f32342d3234203d3e2033333230.roa (hash: C4YEp8j4LdYsTYvi6G+irz5U3tTH6rayAYxhSvLGLbo=)
                          23: 39342e3132342e37322e302f32342d3234203d3e20343030303339.roa (hash: uDISVLlw/nJy4wy96JtWj7K3NXKh8ecGghWlBzzixw0=)
                          24: 3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa (hash: wE97ifCwuCsHZoyv+UtvDLCrOhOpwPEVh3JX3wVqIpE=)
                          25: 326131333a653430323a3a2f33322d3332203d3e20323135343230.roa (hash: 4kV2/I3YxBchjG3IOXi1hr0lRxiFuT7fxsWyAbTDWfo=)
                          26: 3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa (hash: gBowB4M9spFJyhtGeGBV6pXmZemrPQZEhgmMEW2ghgQ=)
                          27: 326131333a646130313a3a2f33322d3332203d3e20323134393637.roa (hash: zj1ARbGG0KKWVGhyBIQnR9Ua0u7oCe2HCtyMecubnF8=)
                          28: 36322e3230342e33372e302f32342d3234203d3e20313938323331.roa (hash: I6eMklUSFiAulRI2b++yFtpDHfGf+yyRunITvHHP3rY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 03:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c8:83:0c:56:ec:a7:f5:15:11:e1:2e:24:59:6c:9c:03:ac:86:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
        Validity
            Not Before: Mar 13 00:56:51 2025 GMT
            Not After : Mar 14 03:24:51 2025 GMT
        Subject: CN=EDE9283494A792F929D9B4C83FAEDC74CF8B752C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:32:d3:36:82:56:28:6e:03:7f:44:8d:5d:01:
                    f6:5f:5a:24:ff:01:e5:1f:f4:0e:77:b7:d8:cd:7c:
                    4e:7e:f8:47:f2:34:19:47:ae:7f:ec:17:b8:a5:bc:
                    8e:2e:d3:de:eb:7d:31:d4:ed:5f:95:eb:85:a3:bc:
                    84:23:c1:c1:1d:42:86:bb:96:6e:07:68:78:59:10:
                    ee:91:2e:3a:a7:73:6d:20:03:2c:ef:6f:c8:a5:3e:
                    d4:e7:6e:57:2c:a4:ea:85:f5:ee:9e:c6:c6:72:ea:
                    50:a6:9e:c8:a0:3b:40:ff:63:a3:cc:ad:fa:4a:22:
                    b2:7b:e1:af:50:ab:5b:aa:03:38:3d:d5:5f:af:df:
                    36:37:08:a5:b8:00:69:00:63:a4:8a:35:5c:04:a9:
                    1d:ad:f4:13:9d:c3:7c:08:b2:8a:07:6e:28:95:06:
                    ae:5c:2e:92:a4:3e:89:b9:29:ce:7d:98:32:3e:ed:
                    cb:bf:ce:4e:58:bd:63:dd:89:d8:ad:72:21:f6:6c:
                    d6:52:74:56:4c:ad:43:f1:5b:c1:91:cd:62:61:43:
                    c2:e4:6c:2b:39:a0:67:fa:0c:bb:89:f7:84:11:8c:
                    9c:26:25:68:30:24:3f:fd:03:04:c1:39:d3:a9:29:
                    80:44:d4:57:9d:e2:a5:30:e4:61:43:dd:b3:3d:fd:
                    c0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E9:28:34:94:A7:92:F9:29:D9:B4:C8:3F:AE:DC:74:CF:8B:75:2C
            X509v3 Authority Key Identifier:
                keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:cc:e7:28:46:69:82:fd:06:df:04:10:4b:7a:db:5e:d0:7b:
         ab:a4:8d:dd:a0:b9:62:da:44:00:86:62:43:88:29:c8:b7:11:
         e1:e8:82:65:3b:70:1b:49:b7:31:c4:37:4d:26:f3:b4:12:3d:
         f8:80:3a:63:31:07:15:bf:a3:91:db:69:bd:62:c6:8c:3d:b8:
         c1:23:bb:56:03:1b:3a:69:d5:6e:a1:e5:62:2e:f1:ce:c6:7d:
         38:24:08:80:f3:4c:08:92:6d:2e:a2:7e:fe:e7:c8:3c:84:53:
         86:53:df:aa:71:bb:97:3d:52:53:8b:6d:6d:8e:d0:86:5a:5c:
         26:f2:e5:ae:89:fa:d6:cf:f0:d3:81:31:6e:de:e9:e0:fb:35:
         2c:e9:3f:ba:26:43:74:8c:5c:f4:21:50:a1:4e:45:4c:3c:d3:
         49:45:62:d1:78:a6:a4:ea:90:3c:09:0e:f7:05:2e:04:71:46:
         fd:73:0c:5f:94:01:ef:cb:e3:64:2c:88:c2:f3:72:ce:9e:25:
         21:e4:7d:c2:5e:9b:c4:ff:e7:9b:34:62:18:a2:19:fb:17:36:
         0d:7c:63:63:70:b8:1f:2d:5f:8c:c4:c4:22:65:b6:76:2d:91:
         4e:1f:7c:b9:23:17:fd:6e:2d:85:a0:57:1f:67:01:29:0e:fc:
         8b:bf:be:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 10:41:48 2025 by rpki-client