Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
File:                     B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft (raw, json)
Hash identifier:          3cPAKxKkddOuXDEJnI5WFwMN7j0/93IsrbqB2hyebQU=
Subject key identifier:   00:F2:21:C5:7D:90:2E:50:13:39:F6:54:61:57:D1:C1:98:45:E2:15
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Certificate issuer:       /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial:       28DA074BC5AC9DADDDA6966E0ABC3291256E31B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
Manifest number:          01CC
Signing time:             Fri 17 May 2024 20:37:04 +0000
Manifest this update:     Fri 17 May 2024 20:32:04 +0000
Manifest next update:     Sat 18 May 2024 21:26:04 +0000
Files and hashes:         1: 3139352e382e34392e302f32342d3234203d3e203630343538.roa (hash: lV0XILGs1QioGzSnLrP4YyMUiDRZ9hnyAG1qPrLmJBU=)
                          2: 3138352e33372e3233312e302f32342d3234203d3e203630343538.roa (hash: YhHcJrKwdtxqzEGziKIgiMAQpXC/Au8g9vKgKlaLYwQ=)
                          3: 3138352e3132352e37372e302f32342d3234203d3e203630343538.roa (hash: QohikauJjJ0kd0jYYLtcL0quU9HPoMZDxQlOtnXdlro=)
                          4: 34352e3134362e3138382e302f32322d3232203d3e203630343538.roa (hash: aBI6+D/J+MdhF6uecPlGlIq1TzVBNlfqV5G1bBlB5gA=)
                          5: 3138352e3135362e3231372e302f32342d3234203d3e203630343538.roa (hash: 8jiJMQEMDfCP46aEORctsvOS64YIu8o6i/jztvFyab0=)
                          6: 3138352e3136322e3137302e302f32342d3234203d3e203630343538.roa (hash: tz+kKwXYg+RqxgRhrQ0sHPWP3Y4FW1umPuLsw+UpN+Q=)
                          7: 3138352e33372e3233302e302f32342d3234203d3e203630343538.roa (hash: Nzr+aEI5jT8/LOVo2F+J0u8mfnGq+cjlfRM9yjf5l4c=)
                          8: 3138352e3232362e3135332e302f32342d3234203d3e20323131343430.roa (hash: 6CGpf7emh1UjrNPPuzV0823u1l4fTWrjCwjQE//uP/w=)
                          9: 3138352e3135362e3231382e302f32342d3234203d3e203630343538.roa (hash: NhGQeWUg6vIMhNcHN6bTvZm6URetlkY9NVPEBzs9QAg=)
                          10: 3138352e3132352e37362e302f32342d3234203d3e203630343538.roa (hash: 3Kax7E9WyZ4UdBnwx15tLM2ab/E7WiqxEN49fC905JU=)
                          11: 3138352e3231352e3131342e302f32342d3234203d3e203631333137.roa (hash: MICNuYMvJUHgCdVT1plXDczI8fEUnBDLrqP7RDCDC7w=)
                          12: 3138352e3230322e3134372e302f32342d3234203d3e203630343538.roa (hash: ivfqgW6pknNz7W2BrfCSXrSbgMoveHSKy/ARnXypFkM=)
                          13: 34352e3134332e3134382e302f32322d3232203d3e203630343538.roa (hash: 3BkEQkW46jMqyo/nz4IDBICzW8j+Eb9YYj7VOUzIBxU=)
                          14: 3138352e3136372e32342e302f32342d3234203d3e203630343538.roa (hash: myiJ+eKZK25WuG/yeYeSCylFUnQpbWhMPeTfdUojCGc=)
                          15: 3138352e3135362e3231392e302f32342d3234203d3e203630343538.roa (hash: y5D649dlQavGoM7fmIIjbhoGyJ3iTHGQLZ6nviq9KP0=)
                          16: 39312e3139392e3130382e302f32342d3234203d3e203630343538.roa (hash: +53q9egaNQe3ojh80prLCjLmWi/eWJixICgQMa0yoqo=)
                          17: 39312e3139392e39302e302f32342d3234203d3e203630343538.roa (hash: sORULPjKmYTxWbCiZWHNjFWiFpyXjfWGCbDwXrkrqhg=)
                          18: 39312e3139392e3130322e302f32342d3234203d3e203630343538.roa (hash: pZYe+Icr14zX8GPR5SEM0hurzdvHBtgRw9dAOnXGFtw=)
                          19: 3138352e3230322e3134342e302f32342d3234203d3e203630343538.roa (hash: nTWIhHKDKvd18QYfwUQFRg+IAgFhDPtfdSMnKe9+keE=)
                          20: 34352e3133312e38302e302f32322d3232203d3e203630343538.roa (hash: on7cgxwGLsJ4f0UYU6tsJP66yCuCZF2zC3GjJUTyzv0=)
                          21: 3138352e3132352e37382e302f32342d3234203d3e203630343538.roa (hash: Yx85jlC/pqOIJh9zjrd7wmwgYOsvMkGtTigiR7bSUBQ=)
                          22: 3138352e3135362e3231362e302f32342d3234203d3e203630343538.roa (hash: i3+h4aF4VisQVOs8GzWAOELAYb1H2hDjZq2C0mPJqcY=)
                          23: 3138352e3130302e37322e302f32322d3232203d3e203630343538.roa (hash: or9fza+6lY3RDinsikTgHZcdXr2Fac+fP7QTxfWhodI=)
                          24: 36322e3132322e3138392e302f32342d3234203d3e2033313730.roa (hash: NArp1h65r6YKnF8RwdgULoc6qhwkPET0ca1F+YQ7hDs=)
                          25: 3138352e3230322e3134352e302f32342d3234203d3e203630343538.roa (hash: wKZ2+oz90sGpvnTmZPOb1U0hZosyLyZMBLMdFgwVbEY=)
                          26: 33312e3231372e3235302e302f32342d3234203d3e2039303039.roa (hash: 31n49IcPWLCpVzjQZIBX1nR5jHR6sN2ym+AS2vhAPkA=)
                          27: 3139352e3231312e35312e302f32342d3234203d3e203536393133.roa (hash: UslQcIWF3w5Uye0sQTNbkLM9HQa9mA2meqV4r3zYVXQ=)
                          28: 3138352e33372e3232382e302f32332d3233203d3e203630343538.roa (hash: h/Zl/Uzch9A6TxZb602npGAfRJ88S1LMlSdllQ9HJP4=)
                          29: B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl (hash: G5+/rN89MwtzzIJvtxLUJoXJIULuqhc2mTovp9DFgTc=)
                          30: 3138352e3136372e32362e302f32342d3234203d3e203630343538.roa (hash: qaCPm69uWBGxbE7T+P0+OEabmh8OarFDbz7ijfUE5Z0=)
                          31: 3138352e3232362e3135352e302f32342d3234203d3e203634323637.roa (hash: ndFaeOmTGLPT5V5I+qk9XNDfayVUEssXnm22GtfpDgM=)
                          32: 3138352e33372e3232382e302f32342d3234203d3e203630343538.roa (hash: 02GxgQPwwh2PT3p3QgK6Hp3i6/Tidx69Yw3YuSGkfkk=)
                          33: 3138352e3136322e3137312e302f32342d3234203d3e203630343538.roa (hash: WMj2Pgb2uWN/ZRXGQ2kfC/vsdksimgXlMTzeIcG8Rrw=)
                          34: 3138352e33372e3232392e302f32342d3234203d3e203630343538.roa (hash: kRJPSeYDDhP3JanX0LXdTZbvcZjkV7vJ+MORq8jG+GE=)
                          35: 34352e3135312e3139322e302f32322d3232203d3e203630343538.roa (hash: Xr3XMe6VRtVpsnmfuJNuTvLS9mGolY6+WYmCmwbpIjw=)
                          36: 3139352e382e3131392e302f32342d3234203d3e203630343538.roa (hash: 00lrJWkec3fubbrqFxOXSFvzFz6jGW/mxIc2Z+19+og=)
                          37: 3138352e3136372e32372e302f32342d3234203d3e203630343538.roa (hash: Gb7FAk2+qRbfhowtceglcDI2PMqLBqIiuypaa6npbaw=)
                          38: 3138352e3232362e3135322e302f32342d3234203d3e2037303138.roa (hash: eFwqDrcXPOq51WhlPfPNotpgKZnDi0IknYbfgX3GC/4=)
                          39: 3139352e382e34382e302f32342d3234203d3e203630343538.roa (hash: yFBBGyzWNG1ZamO61GNcmk1rLW9TNm/BwU0RYxt01MM=)
                          40: 39312e3139392e3132332e302f32342d3234203d3e203630343538.roa (hash: RDLBnVfcKJFev6UtB1aGW3Obvn1CnQSdMFMYBpY/9Mc=)
                          41: 3138352e3132352e37392e302f32342d3234203d3e203630343538.roa (hash: CLO3O6AfO1/EE8ECessCssnJQNZWGiLJIk/JdSPi1r8=)
                          42: 3138352e3136322e3136382e302f32332d3233203d3e203630343538.roa (hash: yiWey9Tvi2l3p1TPd7zesC6Zw+Zx91M7V4br/C0VJzY=)
                          43: 3138352e3230322e3134362e302f32342d3234203d3e203630343538.roa (hash: 5FH4knvUcGHuZYPYzt33R1oOuC7nZ8KD5zo2m6pDXqU=)
                          44: 3138352e3136372e32352e302f32342d3234203d3e203630343538.roa (hash: /1MHI4aV5jtOdQTFybX9UgjJlF3Q0rJIhXLJo4SqcQQ=)
                          45: 3138352e3231372e3134302e302f32342d3234203d3e203539343332.roa (hash: yGjLp4hQkvs/v28PvPBQqH104+27I58bZdoK1hEWVSg=)
                          46: 3139342e35392e3232332e302f32342d3234203d3e20313939363134.roa (hash: jGs2aqE+/7vgDDmIS62FbYwe6Qw0U7YjibG53PkQERg=)
                          47: 3138352e3232362e3135342e302f32342d3234203d3e2037303138.roa (hash: bQT+a1bE7EzT4cb66w7JBQ/Mp3HmLfDbOYxXbiq0Qm0=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:da:07:4b:c5:ac:9d:ad:dd:a6:96:6e:0a:bc:32:91:25:6e:31:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
        Validity
            Not Before: May 17 20:32:04 2024 GMT
            Not After : May 18 21:26:04 2024 GMT
        Subject: CN=00F221C57D902E501339F6546157D1C19845E215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e3:5a:d8:9f:47:51:49:90:7b:a9:ea:84:3a:
                    6f:3b:fa:85:96:f7:c6:69:1d:47:81:c3:b5:06:ba:
                    68:e0:9f:87:a9:f8:b1:12:01:f5:e9:e0:a3:7b:d5:
                    3b:22:95:cd:73:d5:b2:7f:10:6f:00:f2:78:67:bc:
                    7a:87:5c:0f:0f:6a:cc:0f:89:42:9f:70:c7:1a:54:
                    a8:b0:e3:d3:d5:2e:45:25:03:e4:0e:f4:21:36:e9:
                    65:1d:ed:f0:30:d9:c8:24:73:3e:b5:ab:e8:39:3b:
                    bb:95:e2:86:1e:89:75:12:b2:c7:1d:73:de:9f:cc:
                    1f:12:40:8f:59:1e:40:9c:68:e6:2b:ae:87:31:df:
                    75:52:be:41:44:a2:ee:32:94:63:0f:a1:74:08:4a:
                    6a:af:30:1c:f3:09:d9:d8:92:fd:0d:2c:a3:c7:55:
                    f9:0f:3a:70:61:2a:b4:d0:2c:a9:dd:e2:de:15:1f:
                    5f:d7:9e:1b:35:79:4f:1f:e4:87:bb:3f:7c:4b:79:
                    a4:07:d3:01:20:50:03:34:01:5b:cd:0b:13:73:94:
                    e2:44:fb:07:42:70:60:c6:91:8b:6f:68:64:b0:03:
                    20:9b:f6:33:9d:9e:78:24:52:5e:87:17:ee:c0:49:
                    08:f7:8e:f9:4d:f1:0f:4b:53:1b:0b:2e:39:42:20:
                    62:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F2:21:C5:7D:90:2E:50:13:39:F6:54:61:57:D1:C1:98:45:E2:15
            X509v3 Authority Key Identifier:
                keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:25:19:ed:f8:50:a7:64:e9:c3:27:a6:bb:9e:8b:17:ba:67:
         05:64:7f:c8:6b:65:7b:dd:62:04:77:6f:ce:93:55:d4:cc:08:
         f9:87:3d:61:c9:8a:75:5c:60:26:6c:1d:b8:a4:a4:2c:14:1e:
         fb:2c:cd:76:86:c7:d1:25:a6:bc:92:d3:cf:6c:13:47:93:8b:
         67:69:3f:4d:11:cb:9e:e7:d5:8f:40:02:b9:e8:e5:a2:75:ba:
         a1:ac:b8:c8:54:fd:8e:f3:ed:49:28:db:8d:a4:ff:a1:5c:ff:
         e9:00:29:b1:b6:93:4d:73:aa:4b:12:4c:99:f1:13:de:50:76:
         08:59:90:3e:d5:f5:00:b4:70:dd:10:96:7c:61:94:43:f8:77:
         6e:f5:00:95:4f:3e:c9:88:a0:8c:a0:3f:d0:37:18:ab:a7:95:
         5d:dc:a1:47:f2:f8:b4:ae:0d:3d:9d:9b:ac:03:b3:29:7f:96:
         bd:1a:6b:38:7f:1f:93:4d:fe:d8:2a:8b:07:3e:6e:fe:de:83:
         7a:b3:e6:9f:20:93:a9:0e:aa:94:13:10:64:30:4c:61:5c:da:
         0b:f9:1c:bc:d0:a4:98:70:eb:1c:3f:18:82:9e:ba:3c:39:a0:
         5e:2c:62:4e:4e:2b:cf:27:e3:c1:0f:05:16:d2:8f:c1:63:fe:
         88:88:59:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:45:49 2024 by rpki-client on console-fra.rpki-client.org