Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
File:                     3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft (raw, json)
Hash identifier:          V8V3Z1YtnPwLfQihGwvB14C4xcS2TODYUb86G2qi8Bs=
Subject key identifier:   88:9D:59:F5:4C:6F:D7:1A:5D:7D:AD:A7:BB:A7:9D:45:F8:5E:78:FF
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Certificate issuer:       /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial:       753D34434BBF0B774427435A72D1B2B103D1F7C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
Manifest number:          019B
Signing time:             Thu 03 Apr 2025 06:25:35 +0000
Manifest this update:     Thu 03 Apr 2025 06:20:35 +0000
Manifest next update:     Fri 04 Apr 2025 08:51:35 +0000
Files and hashes:         1: 326131343a366634343a633064653a3a2f34382d3438203d3e20313938333432.roa (hash: JbFcx8NYIQrxy++ssCWok53ycSawtedKXeTKz2IS1/I=)
                          2: 326131343a366634343a633066663a3a2f34382d3438203d3e203534363831.roa (hash: /yWZfagoJlrySMZHREX961tilL5M+CVEvfwwfIOvULs=)
                          3: 326131343a366634353a646561643a3a2f34382d3438203d3e20313938333432.roa (hash: /s9FD+BuCvCOu4sZBij0Yh1eY8Nr8NHCtVi0OvPiCyY=)
                          4: 326131343a366634353a3a2f33362d3438203d3e203530323234.roa (hash: mvEo9ltQv4jrZCOh4EYz0yzaY9D43IlA4B9MK3lgwdw=)
                          5: 326131343a366634353a633030303a3a2f33362d3438203d3e203438343336.roa (hash: 84yN8GMB2a5DXwGkFW2zsyLvfW/TnY6P5ZHEy29emgk=)
                          6: 326131343a366634343a633064653a3a2f34382d3438203d3e203438343336.roa (hash: bY9e62A4gu/86iUTHSumKPvi2hGZoe5ZTShnEctU4SM=)
                          7: 326131343a366634353a633030303a3a2f33362d3438203d3e20313938333432.roa (hash: kj+wMZhCYMt0Z9jhqZmZtaHQjz2obXZ+/J2z1ua51wg=)
                          8: 326131343a366634303a3a2f32392d3438203d3e20323030323432.roa (hash: c5+sIF6SVWQEOk60+gid/kKFxdzO9Q59QB0rcaeUFAg=)
                          9: 326131343a366634343a623030623a3a2f34382d3438203d3e20313939353832.roa (hash: MYKoEmllVAyYKTmfRaWUIl1KQBpJiM51RTw82pBlZ/0=)
                          10: 326131343a366634343a623030623a3a2f34382d3438203d3e20313937393139.roa (hash: GcC1OOQic3vs9xDhV0qGl8u3fvABcPb7eRlO7suqV/c=)
                          11: 326131343a366634343a633730313a3a2f34382d3438203d3e203438343336.roa (hash: kN+6glZZqj1lvl+f3cQSjIHuGxniqs1l2hL+N9PCMXg=)
                          12: 04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer (hash: 2lYT3gtC49tqrkD3HaWeKlDKSbKBNwQiIvyLld9YaQk=)
                          13: 326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa (hash: OSQQWXQC8Doo46F92DSw83gpWUJg/I3ZjbHjihzygko=)
                          14: 326131343a366634343a646561643a3a2f34382d3438203d3e203534363831.roa (hash: 4vV1NPLNtJ5Sem5fwMjyfRCUw2Hm0zuf9K0F0M5JmTU=)
                          15: 3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl (hash: QlRzS37/cZgt5jgADov+ujH7Z6H9fLqlPLaYu/btYl4=)
                          16: 326131343a366634323a3a2f33312d3438203d3e20323030323432.roa (hash: TPvNwHsZw7UbSxFzI4ZEU2RQRB0eOXJX5J17JfLQpnQ=)
                          17: 326131343a366634343a623030623a3a2f34382d3438203d3e20323135343733.roa (hash: L8GmqvJ1QVmWAKscHOFBmFM5vDJ8hADh4YYnfT4JEAM=)
                          18: 326131343a366634343a636166653a3a2f34382d3438203d3e20323035373839.roa (hash: jDOaIGvPgjhenzPsT0baoWOtCBD2JafI5qghnSCs9Dw=)
                          19: 326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa (hash: zQ/yzhK7qvzoSsvDcyClVn7AKwYrbUYHcG3F64niJUE=)
                          20: 326131343a366634353a646561643a3a2f34382d3438203d3e203438343336.roa (hash: D8dy67lH7mKpFtKbPMaHWGtbJcZylACehWx+4H0irZc=)
                          21: 326131343a366634343a656465383a3a2f34382d3438203d3e20323035373839.roa (hash: K1pgngmKcNIjyWdBpbyb8yrU4+AFj1FA0WE8csGiSxU=)
                          22: 326131343a366634343a623030623a3a2f34382d3438203d3e20323130363637.roa (hash: 5aLekRp0Z/nDkL3quTBST646++5Or5kPuLfIwZxGWPU=)
                          23: AS200242.asa (hash: 1AlMG2dsNj+2a3kLp0CpSmy1LKhmLk73ZFr/4CSbD+w=)
                          24: 326131343a366634303a3a2f33322d3438203d3e20323030323432.roa (hash: qhoj8vou0d4ZtC5V1DKyyM7rrTWsmPFrHxQlmlsE9nQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Apr 2025 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3d:34:43:4b:bf:0b:77:44:27:43:5a:72:d1:b2:b1:03:d1:f7:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
        Validity
            Not Before: Apr  3 06:20:35 2025 GMT
            Not After : Apr  4 08:51:35 2025 GMT
        Subject: CN=889D59F54C6FD71A5D7DADA7BBA79D45F85E78FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:ca:f6:95:45:cb:5c:6b:69:d8:a4:cc:c0:
                    5c:d5:4c:1f:46:1f:87:1b:d5:7e:36:aa:7d:8e:37:
                    4c:68:2a:55:3b:02:6a:82:b0:da:c0:a8:75:11:77:
                    3a:df:6e:e0:19:29:3a:a0:30:03:a8:26:b6:c9:2a:
                    a9:dd:6d:e3:00:87:d8:15:3b:65:56:29:da:41:96:
                    17:16:f0:e0:b5:c6:94:6b:69:45:92:87:55:af:85:
                    8e:6c:f6:f4:58:29:87:14:44:b0:74:71:c6:83:09:
                    63:47:28:73:4d:52:58:28:f1:2c:8c:c7:09:44:36:
                    be:2b:55:c1:65:2b:e0:93:9b:75:dc:e3:59:51:33:
                    64:4e:ce:11:19:f6:3f:b3:9a:be:74:48:85:ec:5e:
                    09:85:94:94:ea:23:3c:d7:84:01:cd:10:bc:0c:48:
                    43:3c:c1:c6:91:bf:04:36:d5:cc:6e:05:b1:18:34:
                    a5:23:e8:b1:bd:d8:94:3c:61:4e:62:64:86:11:43:
                    c0:22:48:2b:8a:be:3c:81:aa:19:dd:85:d9:23:cb:
                    27:7c:e6:fe:76:3c:33:b6:91:8a:21:26:22:ea:02:
                    94:d2:2a:18:84:f1:32:d4:ec:e2:10:30:2d:4d:cf:
                    9c:47:35:4a:24:42:89:fa:6e:a7:1a:0f:4d:8b:73:
                    40:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9D:59:F5:4C:6F:D7:1A:5D:7D:AD:A7:BB:A7:9D:45:F8:5E:78:FF
            X509v3 Authority Key Identifier:
                keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:cf:49:38:8a:d6:83:ba:28:24:f3:47:d2:2d:e6:dd:87:3e:
         4d:1c:4f:85:92:19:ad:0d:14:a9:c5:1a:c4:28:07:e0:fe:ac:
         f9:d1:ec:0d:6c:dd:4d:b7:61:f0:4d:76:7b:eb:fc:db:79:57:
         b2:d4:91:e9:48:d1:e8:17:d7:4b:19:d2:06:50:bc:ae:63:17:
         54:1c:1b:82:04:15:3b:5e:55:67:73:ed:67:40:6c:66:eb:2e:
         b2:57:c3:2d:2c:f8:d4:a3:37:a7:44:6d:a2:37:52:e6:80:40:
         bd:16:1a:bf:d7:fc:71:4c:ef:3b:94:8a:72:92:68:39:2e:17:
         6d:5f:9a:33:84:ae:af:d8:15:c9:d7:b1:cd:6b:70:88:f4:ed:
         41:96:7a:ec:49:21:e9:b2:de:db:13:b8:e8:3b:bc:57:c7:51:
         75:24:11:8c:0d:a3:25:a9:e8:5f:55:ba:b9:dc:73:35:8d:0a:
         89:04:41:53:f5:66:26:e6:4f:53:3c:cb:d4:fe:67:cd:70:f8:
         9d:43:59:d9:38:7e:a7:d2:57:da:6f:9f:4d:0d:52:b7:74:8f:
         e3:ba:e6:bc:7e:36:29:d3:fa:32:cf:05:b3:73:92:e1:74:5b:
         c3:64:76:49:ac:02:4e:3c:e9:cb:52:c3:67:d1:7e:1b:45:ac:
         50:1f:3a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:03:43 2025 by rpki-client