Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/10/7ED778DA4A3C37C059929C1861648182D738009F.mft
File:                     7ED778DA4A3C37C059929C1861648182D738009F.mft (raw, json)
Hash identifier:          8/6gM6UWtbaoqJ/z9lzLsFtAPLZyqzTHfLOMIu9zQME=
Subject key identifier:   29:18:03:C3:0C:7A:8B:5A:E6:1F:10:AB:19:8B:C0:2B:E3:A7:A9:6B
Authority key identifier: 7E:D7:78:DA:4A:3C:37:C0:59:92:9C:18:61:64:81:82:D7:38:00:9F
Certificate issuer:       /CN=7ed778da4a3c37c059929c1861648182d738009f
Certificate serial:       5D02C5E03ED67A2BBCA32E6CAB6FE9C5F00FCB0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftd42ko8N8BZkpwYYWSBgtc4AJ8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/10/7ED778DA4A3C37C059929C1861648182D738009F.mft
Manifest number:          02EC
Signing time:             Tue 21 May 2024 04:21:41 +0000
Manifest this update:     Tue 21 May 2024 04:16:41 +0000
Manifest next update:     Wed 22 May 2024 05:39:41 +0000
Files and hashes:         1: 323030313a3637383a6233343a3a2f34382d3438203d3e20323038303531.roa (hash: NDgRNVQCoAKRO1YJTGI1AK9wEBZVvXv1RDhf51rQHng=)
                          2: 7ED778DA4A3C37C059929C1861648182D738009F.crl (hash: Jnmzm92Pl7ljj6yJQJuk3kj4NSsNxv5+5GTCNf8gWP8=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/10/7ED778DA4A3C37C059929C1861648182D738009F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/10/7ED778DA4A3C37C059929C1861648182D738009F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftd42ko8N8BZkpwYYWSBgtc4AJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 22:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:02:c5:e0:3e:d6:7a:2b:bc:a3:2e:6c:ab:6f:e9:c5:f0:0f:cb:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed778da4a3c37c059929c1861648182d738009f
        Validity
            Not Before: May 21 04:16:41 2024 GMT
            Not After : May 22 05:39:41 2024 GMT
        Subject: CN=291803C30C7A8B5AE61F10AB198BC02BE3A7A96B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0a:88:c3:a5:2e:8f:95:d8:67:34:22:aa:37:
                    42:50:70:1f:65:cf:b2:49:da:dd:97:17:03:70:a3:
                    e0:37:40:c6:21:bd:7c:49:9c:87:5c:70:f1:d6:2b:
                    6c:57:3a:b2:7d:6c:9d:39:b1:32:39:e5:24:eb:5e:
                    21:29:16:65:53:45:08:08:e0:dc:05:6f:27:f3:21:
                    d1:32:9b:fb:e3:65:ac:1b:93:2a:7a:0a:51:1a:05:
                    f4:87:77:22:0f:4c:ed:2a:65:6c:39:5e:cf:05:c5:
                    c1:f1:e1:a4:d9:2a:de:03:cc:c1:ca:d5:db:ee:4d:
                    3b:8a:e8:44:7b:62:2c:15:71:fd:74:48:6c:d2:2a:
                    3d:77:67:e6:1a:97:ce:b9:5f:25:18:1d:6f:10:79:
                    6d:88:c9:92:5a:e0:4f:9e:da:6b:86:0b:29:3d:1e:
                    1d:dc:5d:1a:41:68:41:aa:e3:d1:46:ad:42:32:0e:
                    6c:bc:7a:b4:e9:13:a7:da:f8:10:99:88:be:21:c1:
                    d0:cb:f1:e1:49:ab:2e:3a:07:73:32:52:a9:31:b3:
                    b7:79:25:a7:2e:77:5b:38:bb:40:fe:b0:47:bb:0a:
                    5d:01:66:d0:f4:d2:ce:49:e4:11:f6:73:91:85:b2:
                    59:18:99:9e:52:fa:75:62:b1:a9:7a:9b:89:49:56:
                    bd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:18:03:C3:0C:7A:8B:5A:E6:1F:10:AB:19:8B:C0:2B:E3:A7:A9:6B
            X509v3 Authority Key Identifier:
                keyid:7E:D7:78:DA:4A:3C:37:C0:59:92:9C:18:61:64:81:82:D7:38:00:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/10/7ED778DA4A3C37C059929C1861648182D738009F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftd42ko8N8BZkpwYYWSBgtc4AJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/10/7ED778DA4A3C37C059929C1861648182D738009F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:40:f2:70:b6:40:14:fe:1d:9a:c1:66:c2:7b:f6:b5:ff:47:
         6a:df:b1:5e:c0:8e:81:5b:9d:42:45:43:a3:38:5b:35:e8:4b:
         45:57:79:3d:97:aa:5b:87:d3:bc:67:48:0a:74:63:f6:b3:2d:
         b0:2e:0c:2f:d9:40:64:27:17:c9:8a:76:9b:a6:e0:81:4a:bf:
         ed:e4:54:77:15:03:27:fd:9d:2c:fe:1c:84:eb:a7:db:07:a4:
         0e:9d:a9:c0:1d:86:84:3f:b0:5a:c8:b6:dc:a9:c2:ac:55:f3:
         37:dd:05:b6:9c:56:df:cf:a6:d6:72:47:26:58:95:de:4f:c6:
         65:10:16:5e:fa:cb:56:11:2c:9f:cf:d1:22:4f:86:54:e4:8a:
         90:24:18:ea:4b:c6:80:ce:96:f2:db:31:23:02:77:6d:d8:dc:
         7c:67:10:ff:9e:09:8b:73:3a:8f:e8:05:91:0b:7b:f7:a3:06:
         3c:d1:0e:0d:09:98:cd:81:eb:d0:eb:f8:55:33:29:b0:6b:44:
         2a:a3:a1:0d:07:c1:4c:7b:95:50:e6:5f:54:16:d8:ae:6f:aa:
         10:d3:6d:c0:b7:68:17:a7:2f:3e:dc:29:37:c8:a3:5a:e2:3e:
         9b:20:20:0c:d5:17:9c:40:0b:57:8a:e0:31:23:70:c8:22:af:
         f0:ed:40:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 05:25:26 2024 by rpki-client on console-fra.rpki-client.org