Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
File:                     3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft (raw, json)
Hash identifier:          nNZnL3ph4nxBfvKCITnYmawr5+k0hllhKiKp+yu4hns=
Subject key identifier:   CE:B6:43:2B:25:A0:AF:C3:62:EE:3A:6F:84:F6:A9:A8:39:68:14:60
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Certificate issuer:       /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial:       50D37E4920DD898F584CD4A332FDA14212A84C0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
Manifest number:          DD
Signing time:             Wed 20 Nov 2024 23:51:14 +0000
Manifest this update:     Wed 20 Nov 2024 23:46:14 +0000
Manifest next update:     Fri 22 Nov 2024 03:02:14 +0000
Files and hashes:         1: 326131343a366634343a623030623a3a2f34382d3438203d3e20313939353832.roa (hash: MYKoEmllVAyYKTmfRaWUIl1KQBpJiM51RTw82pBlZ/0=)
                          2: 326131343a366634343a646561643a3a2f34382d3438203d3e203534363831.roa (hash: 4vV1NPLNtJ5Sem5fwMjyfRCUw2Hm0zuf9K0F0M5JmTU=)
                          3: 3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl (hash: gB50WVfieIQzx5HuTN4JeLWOkYCmBOYa08AIoltEmTw=)
                          4: 326131343a366634343a636166653a3a2f34382d3438203d3e20323035373839.roa (hash: jDOaIGvPgjhenzPsT0baoWOtCBD2JafI5qghnSCs9Dw=)
                          5: 326131343a366634323a3a2f33312d3438203d3e20323030323432.roa (hash: TPvNwHsZw7UbSxFzI4ZEU2RQRB0eOXJX5J17JfLQpnQ=)
                          6: 04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer (hash: 2lYT3gtC49tqrkD3HaWeKlDKSbKBNwQiIvyLld9YaQk=)
                          7: 326131343a366634343a633066663a3a2f34382d3438203d3e203534363831.roa (hash: /yWZfagoJlrySMZHREX961tilL5M+CVEvfwwfIOvULs=)
                          8: 326131343a366634343a633030303a3a2f33362d3438203d3e203438343336.roa (hash: BdiUFweGigwrt1qmB+4GHc7up/GDatg2FV8XcDO+0Ts=)
                          9: 326131343a366634303a3a2f33322d3438203d3e20323030323432.roa (hash: qhoj8vou0d4ZtC5V1DKyyM7rrTWsmPFrHxQlmlsE9nQ=)
                          10: 326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa (hash: zQ/yzhK7qvzoSsvDcyClVn7AKwYrbUYHcG3F64niJUE=)
                          11: 326131343a366634353a3a2f33362d3438203d3e203530323234.roa (hash: mvEo9ltQv4jrZCOh4EYz0yzaY9D43IlA4B9MK3lgwdw=)
                          12: 326131343a366634343a623030623a3a2f34382d3438203d3e20323135343733.roa (hash: L8GmqvJ1QVmWAKscHOFBmFM5vDJ8hADh4YYnfT4JEAM=)
                          13: 326131343a366634343a656465383a3a2f34382d3438203d3e20323035373839.roa (hash: K1pgngmKcNIjyWdBpbyb8yrU4+AFj1FA0WE8csGiSxU=)
                          14: 326131343a366634343a623030623a3a2f34382d3438203d3e20313937393139.roa (hash: GcC1OOQic3vs9xDhV0qGl8u3fvABcPb7eRlO7suqV/c=)
                          15: AS200242.asa (hash: /5NvSpcQ/x8aSvoO6NYRrhog8M0eNa6qeZ1zapYt4P8=)
                          16: 326131343a366634343a623030623a3a2f34382d3438203d3e20323130363637.roa (hash: 5aLekRp0Z/nDkL3quTBST646++5Or5kPuLfIwZxGWPU=)
                          17: 326131343a366634343a633030303a3a2f33362d3438203d3e20313938333432.roa (hash: rUeTx7XUpZpHsjcVgH5QY0KIemFkDQPvwh8onflexmg=)
                          18: 849A6D8BFAC2BC81C0BB3ADB0F1BFC68BBBE063F.cer (hash: l2bTRC1KiYIeWBpMyLIwmT0W8VLMCyAoDZ5O0FriVcU=)
                          19: 326131343a366634303a3a2f32392d3438203d3e20323030323432.roa (hash: c5+sIF6SVWQEOk60+gid/kKFxdzO9Q59QB0rcaeUFAg=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 18:58:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:d3:7e:49:20:dd:89:8f:58:4c:d4:a3:32:fd:a1:42:12:a8:4c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
        Validity
            Not Before: Nov 20 23:46:14 2024 GMT
            Not After : Nov 22 03:02:14 2024 GMT
        Subject: CN=CEB6432B25A0AFC362EE3A6F84F6A9A839681460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:9d:04:ef:0f:6e:4f:0e:e9:b4:5f:5a:cd:65:
                    2e:53:c9:bb:00:90:57:7a:0a:ba:6f:5e:3f:48:8a:
                    33:b7:55:ca:cf:61:87:62:ff:90:3f:e0:76:6c:6d:
                    32:da:5f:f5:a4:1a:f0:c3:57:9e:d7:81:27:7b:65:
                    cf:83:ba:56:ac:00:9e:ea:ec:4b:a9:40:86:21:48:
                    cf:2f:a1:82:a7:4f:1e:6d:13:6c:04:ef:c7:0c:6a:
                    fa:61:bf:b2:62:a1:e8:46:c5:22:a0:c4:f9:54:7e:
                    92:58:c4:0a:44:1a:84:f0:4d:30:ea:3d:d0:d5:16:
                    7d:72:99:fa:b8:c5:45:1b:83:45:6d:ea:6c:2f:63:
                    68:e1:af:e7:76:94:88:7f:83:29:ee:01:92:09:49:
                    07:47:8f:09:32:e6:1c:5f:c4:84:60:f5:c7:71:ad:
                    9b:c0:c6:42:7d:94:41:a5:b9:fa:d0:36:f0:a4:ab:
                    33:10:77:28:9e:a5:b2:d9:9b:41:f4:95:38:48:c0:
                    13:6e:7b:f6:60:05:dd:75:48:97:ab:67:ee:40:2a:
                    a9:34:12:0b:d3:1e:c7:dd:28:8c:f0:46:1f:6e:62:
                    0d:6e:2f:31:9d:1f:cc:09:4f:17:49:9c:6f:7e:ae:
                    5f:6f:fc:40:b3:c5:93:aa:b6:ec:df:35:7c:4d:d6:
                    0c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B6:43:2B:25:A0:AF:C3:62:EE:3A:6F:84:F6:A9:A8:39:68:14:60
            X509v3 Authority Key Identifier:
                keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ed:fe:e1:08:4f:0a:e7:6d:d3:22:3d:d1:9c:9a:99:25:cd:
         b5:c9:79:4b:fc:97:8f:b5:ab:74:ce:b5:e5:7e:11:c0:ae:d3:
         6c:9e:5f:3f:b0:bc:6a:74:dc:36:00:db:8e:28:cc:90:7f:74:
         dc:45:41:85:0f:9a:ee:90:ba:48:ef:ee:f6:1d:23:72:a9:7b:
         47:7b:c1:eb:8b:b0:e9:6b:07:19:80:db:26:3c:af:5a:89:a2:
         cf:c3:e9:ee:4b:e7:8b:ae:ac:d3:63:73:18:5a:00:56:85:f3:
         9e:27:10:cb:e4:e6:26:73:66:7d:52:72:64:ca:5b:3f:01:16:
         64:89:4e:38:16:d9:00:58:be:b9:dc:13:5a:78:05:4e:5b:8f:
         8f:f0:13:2c:b5:6c:16:a5:eb:9a:d7:86:0a:59:1a:8c:bb:b2:
         4d:9b:22:88:51:58:d4:b6:27:c0:c9:ff:dd:15:84:ca:5e:9d:
         c5:52:af:6c:40:ca:34:61:59:9e:8b:93:39:e0:cd:04:74:70:
         b9:b8:cc:a8:94:94:80:65:35:90:80:5e:08:f5:2d:7e:dd:5c:
         c6:47:e6:db:8f:52:21:da:87:cf:bf:85:f0:8d:d3:3e:e2:94:
         c5:53:ab:95:82:b0:7e:ed:86:99:d6:32:f2:b7:03:c2:9c:c4:
         ee:f2:b0:f7
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUUNN+SSDdiY9YTNSjMv2hQhKoTAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi
YjJhYzMyZTAeFw0yNDExMjAyMzQ2MTRaFw0yNDExMjIwMzAyMTRaMDMxMTAvBgNV
BAMTKENFQjY0MzJCMjVBMEFGQzM2MkVFM0E2Rjg0RjZBOUE4Mzk2ODE0NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDunQTvD25PDum0X1rNZS5TybsA
kFd6CrpvXj9IijO3VcrPYYdi/5A/4HZsbTLaX/WkGvDDV57XgSd7Zc+DulasAJ7q
7EupQIYhSM8voYKnTx5tE2wE78cMavphv7JioehGxSKgxPlUfpJYxApEGoTwTTDq
PdDVFn1ymfq4xUUbg0Vt6mwvY2jhr+d2lIh/gynuAZIJSQdHjwky5hxfxIRg9cdx
rZvAxkJ9lEGlufrQNvCkqzMQdyiepbLZm0H0lThIwBNue/ZgBd11SJerZ+5AKqk0
EgvTHsfdKIzwRh9uYg1uLzGdH8wJTxdJnG9+rl9v/ECzxZOqtuzfNXxN1gxLAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUzrZDKyWgr8Ni7jpvhPapqDloFGAwHwYDVR0j
BBgwFoAUPu67lGqNIdQIPJPcCc7lV7sqwy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5
YjNkLzQvM0VFRUJCOTQ2QThEMjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1B1NjdsR3FOSWRRSVBKUGNDYzdsVjdz
cXd5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZmY3YTk4OS1l
Y2RmLTQzZDYtODZlMS1mNmMzOTM1YjliM2QvNC8zRUVFQkI5NDZBOEQyMUQ0MDgz
QzkzREMwOUNFRTU1N0JCMkFDMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+3+4QhPCudt0yI90Zya
mSXNtcl5S/yXj7WrdM615X4RwK7TbJ5fP7C8anTcNgDbjijMkH903EVBhQ+a7pC6
SO/u9h0jcql7R3vB64uw6WsHGYDbJjyvWomiz8Pp7kvni66s02NzGFoAVoXznicQ
y+TmJnNmfVJyZMpbPwEWZIlOOBbZAFi+udwTWngFTluPj/ATLLVsFqXrmteGClka
jLuyTZsiiFFY1LYnwMn/3RWEyl6dxVKvbEDKNGFZnouTOeDNBHRwubjMqJSUgGU1
kIBeCPUtft1cxkfm249SIdqHz7+F8I3TPuKUxVOrlYKwfu2GmdYy8rcDwpzE7vKw
9w==
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:58:32 2024 by rpki-client on console-ams.rpki-client.org