Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
File:                     B3D0280F500695A43204251C9830454CA8A2E7AC.mft (raw, json)
Hash identifier:          SyVSl5L1oS0Y6qPcpcaxzIRmH9SvcYK7Fqppd4uAV3I=
Subject key identifier:   F6:8D:F9:A0:07:B4:CC:01:10:B5:35:86:A1:59:93:04:28:E2:69:91
Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC
Certificate issuer:       /CN=b3d0280f500695a43204251c9830454ca8a2e7ac
Certificate serial:       730CC57EF6093539610A9DBE1A80C0757EA94A67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
Manifest number:          0104
Signing time:             Fri 22 Nov 2024 08:23:40 +0000
Manifest this update:     Fri 22 Nov 2024 08:18:40 +0000
Manifest next update:     Sat 23 Nov 2024 08:29:40 +0000
Files and hashes:         1: 326130623a366338303a3a2f33322d3332203d3e20323135383338.roa (hash: hwipkGSwtCKNEaVeYs/lVeZpckysHvyHuEt4Oz/IH2U=)
                          2: 3138352e3138362e32372e302f32342d3234203d3e203631333137.roa (hash: 2F3f2M3iftyv7EiTkHvKpwsHqihrOdk50XbB4vq7cXc=)
                          3: 3138352e3138362e32342e302f32342d3234203d3e20323135383338.roa (hash: sYBJGQEADZAQ/LhDv39fbswhI7nUsQH8ZMB5xh3hosI=)
                          4: B3D0280F500695A43204251C9830454CA8A2E7AC.crl (hash: kZdmlYjhO84+NSRrWSWANDcpxN78paA14NPHW24XmVI=)
                          5: 3138352e3138362e32352e302f32342d3234203d3e203135343430.roa (hash: ILHMVutQqrUF6iiv8nR1xxWWhUx08z770HSNuw90qv4=)
                          6: 3138352e3138362e32362e302f32342d3234203d3e20323135313434.roa (hash: FGw0uQkf/MUJnZ7pOVEyfqDiaQUqk5EZIWLuflhMios=)
                          7: 326130623a366338313a3a2f33322d3332203d3e20323135383338.roa (hash: ZrlItvK4GUW9v/tEHAeY+MLQvIad9obNlZyUUNFrjsU=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:0c:c5:7e:f6:09:35:39:61:0a:9d:be:1a:80:c0:75:7e:a9:4a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac
        Validity
            Not Before: Nov 22 08:18:40 2024 GMT
            Not After : Nov 23 08:29:40 2024 GMT
        Subject: CN=F68DF9A007B4CC0110B53586A159930428E26991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f2:fe:ab:54:56:06:82:d4:5d:08:fb:91:51:
                    75:4d:95:b0:87:43:f3:9b:98:90:05:b4:6b:44:cd:
                    02:ba:44:bd:3e:88:a1:fb:eb:66:1f:bf:9b:f1:19:
                    2f:dc:fa:4f:47:09:a4:14:bb:e1:ae:d8:02:eb:36:
                    94:04:26:ab:f0:e3:4b:1e:78:9d:38:e4:0d:ac:10:
                    1e:c4:86:55:9c:98:a7:83:09:94:e4:12:19:dd:85:
                    6e:b8:4a:8a:28:4e:14:df:85:5b:76:91:23:04:7d:
                    48:5f:37:62:25:d0:e3:c2:36:f0:06:c0:cf:4f:af:
                    45:66:2f:c5:fa:16:12:e1:ee:05:5c:8e:94:30:3e:
                    64:0f:d1:69:8e:58:5d:c2:56:99:dd:bf:82:99:b4:
                    3b:58:db:55:3f:a5:e4:89:f9:8a:76:e1:6f:0a:a8:
                    49:14:78:ef:c3:41:5a:ba:ae:11:63:83:35:62:e6:
                    43:29:7e:b8:bd:49:5e:42:90:e5:88:56:1d:58:15:
                    19:39:2f:ee:9e:4b:0b:1f:8f:92:a0:98:4f:aa:0b:
                    8d:12:43:5b:11:ed:39:26:9e:60:6c:09:48:b4:ce:
                    5c:39:c4:c2:d7:d6:11:70:93:de:70:b2:d8:6e:59:
                    72:be:69:e3:1a:10:60:84:a7:e4:83:ae:bc:ad:d4:
                    71:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8D:F9:A0:07:B4:CC:01:10:B5:35:86:A1:59:93:04:28:E2:69:91
            X509v3 Authority Key Identifier:
                keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:1a:58:36:b5:8d:8f:ba:a6:e8:79:e4:9d:21:0f:4d:c0:98:
         62:1c:e9:38:28:0a:dd:d2:78:b4:4e:88:79:06:09:54:19:5b:
         23:a7:bf:1a:98:41:fe:15:04:8c:07:b9:b6:15:b9:76:44:83:
         17:4a:7d:6c:16:8d:42:8d:2d:20:8a:8a:d4:f5:e8:6b:09:ce:
         f3:9c:d3:a7:26:5e:9d:73:8a:ed:31:2d:60:05:2d:72:07:5c:
         c8:83:a6:35:d5:91:e3:dc:9e:25:36:77:4e:dc:3d:8e:09:58:
         a5:81:ea:80:9e:aa:4f:09:f8:de:4c:5b:de:8d:c6:4c:ab:b4:
         47:06:8b:80:03:26:f1:94:5a:b9:f8:07:ed:d8:17:b5:a4:cd:
         57:43:1d:50:f2:a8:77:50:30:3d:3b:a9:b0:c4:23:5a:db:ab:
         19:51:7e:9b:3f:3e:ce:cc:1a:e1:1d:e7:96:01:1c:72:85:90:
         1c:48:10:e6:2a:fe:90:d8:ef:54:fb:f5:d5:b5:dd:b6:8f:8d:
         02:10:c5:05:a2:4b:57:d4:79:82:d1:e8:68:90:4e:92:d5:54:
         98:e0:54:27:1e:55:d1:ea:7b:9f:ac:1f:39:0e:78:c6:b7:81:
         80:f0:7d:18:18:c0:02:6a:65:37:96:c6:af:56:88:62:c1:ba:
         f9:c4:2d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:01 2024 by rpki-client on console-fra.rpki-client.org