Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
File:                     2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft (raw, json)
Hash identifier:          Odmb2tt166dSiJW8+7zUWtv7G6Yu9SKitb7QqPWIC9c=
Subject key identifier:   02:B7:B7:26:33:44:87:E0:EB:B0:0A:EA:FD:C2:93:6A:9C:05:2A:A6
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       0B0FE5992AC24D04CD8134B355B620DD964CA6CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
Manifest number:          02B7
Signing time:             Sun 16 Feb 2025 06:31:07 +0000
Manifest this update:     Sun 16 Feb 2025 06:26:07 +0000
Manifest next update:     Mon 17 Feb 2025 09:22:07 +0000
Files and hashes:         1: 323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa (hash: H4rlObELQ4x8lFTYx1O62Ru3wMsX/PzI3uR609UHR+0=)
                          2: 323630323a663939323a66663a3a2f34382d3438203d3e203633333930.roa (hash: ofYyhY8QxgV7oA+K00vYAeRxc4dVjV27+J0ru1bGCjk=)
                          3: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl (hash: qJ4GRYlyEHS8Da4gat71yynao6tvBDnGsS/P5KU7MSU=)
                          4: 323630323a663939323a61303a3a2f34362d3438203d3e20373031.roa (hash: jpCL4m4b5cSnTNdPRoZCWkZcs8gb1dSXSE6j140G924=)
                          5: 323630323a663939323a66373a3a2f34382d3438203d3e203534363030.roa (hash: mbxs/KyiiXCzMzovQkdebBf0tfpmu0WoGFLW/0GE3wA=)
                          6: 323630323a663939323a66353a3a2f34382d3438203d3e20323134323538.roa (hash: fIYxXr7UvbVyg5ErbGlT+osMThoxVt1juRlayE+Ah94=)
                          7: 323630323a663939323a66363a3a2f34382d3438203d3e203533363637.roa (hash: sENJdG2CAk2ncOxoRbfpkGE6oUC5cWz8NGXE5l1PbdQ=)
                          8: 323630323a663939323a61343a3a2f34382d3438203d3e203131333531.roa (hash: DdFqWMe8YjBRE58x7m8buJzeQzhGFoQV6Tdjk/UJm5A=)
                          9: 323630323a663939323a39303a3a2f34342d3438203d3e20313734.roa (hash: CuuYc8MUpVSK565EQNYdg0n6ncQQoU1CMGYQB2DaFns=)
                          10: 323630323a663939323a62303a3a2f34342d3438203d3e20343031313037.roa (hash: IZrxMk6OV/92rpAnPcsFE+Xu3xGUpjdqBdAs//cVWUA=)
                          11: 323630323a663939323a61353a3a2f34382d3438203d3e20323038303633.roa (hash: /wpry2cZumMTubbK3DJtMHlNPLEJ6twYQ8r2q5rnsLg=)
                          12: 323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa (hash: mMm7sIXO5/HOrFuCVxMLtUjUW7H7tIPfaYADdGLvndY=)
                          13: 32332e3137302e3231362e302f32342d3234203d3e203538323032.roa (hash: GxalkmsKA3NBmKqpRbD10jaxIIxZkAYcIT4LC7UOrQU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 09:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:0f:e5:99:2a:c2:4d:04:cd:81:34:b3:55:b6:20:dd:96:4c:a6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Feb 16 06:26:07 2025 GMT
            Not After : Feb 17 09:22:07 2025 GMT
        Subject: CN=02B7B726334487E0EBB00AEAFDC2936A9C052AA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e1:b8:e1:94:43:12:a1:11:92:dc:9f:9f:42:
                    6f:a3:af:bc:b5:a3:43:fd:a0:b9:c2:38:88:97:40:
                    13:03:b7:9d:f2:29:7c:35:97:52:27:d1:7c:2b:b8:
                    cf:2c:f1:43:29:f0:d2:ec:9d:ba:b0:3f:81:bc:dd:
                    94:67:79:af:95:37:e8:40:c1:81:35:fc:1e:bd:46:
                    ec:98:73:41:c0:57:0d:2d:ce:6e:0b:58:51:3c:57:
                    40:21:30:2b:35:76:53:2e:94:d0:db:56:df:72:e2:
                    35:8b:94:d3:a7:6b:fc:eb:97:86:31:9f:64:a0:32:
                    02:ad:bf:9b:51:a3:be:d1:01:3c:fe:f9:ca:cf:63:
                    2d:4c:d5:17:04:88:58:7e:5b:a7:08:65:b7:22:48:
                    ce:7b:10:d1:5d:14:09:32:53:3f:66:06:74:c5:11:
                    3e:9d:6f:89:71:b2:5d:4a:97:6b:0e:b7:00:d0:c7:
                    da:d4:1d:e1:aa:50:c4:6b:19:51:c1:2a:ee:e7:cd:
                    b4:39:58:3f:4a:a5:ec:3f:f0:bd:e8:27:95:16:f0:
                    7c:52:d5:7b:b3:8a:1d:7c:02:94:c7:9d:2d:b0:a0:
                    66:cc:89:bf:0c:7b:ad:6c:9a:f4:a7:04:19:58:0c:
                    4b:6b:7a:06:89:6a:b2:d0:be:a7:26:68:b5:f1:55:
                    70:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B7:B7:26:33:44:87:E0:EB:B0:0A:EA:FD:C2:93:6A:9C:05:2A:A6
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:11:f2:1f:bb:9b:5e:07:6c:16:25:05:31:e5:b1:98:0c:72:
         c3:3e:9e:6a:21:b6:4a:90:4a:68:6e:e5:80:ad:48:7b:57:8f:
         3a:10:a4:70:e7:58:2f:c3:39:50:a8:d6:66:36:f6:7f:bc:32:
         e8:6f:d1:cf:b5:d3:11:72:42:06:55:c9:cc:93:6d:18:d3:37:
         1a:37:a0:f4:87:1b:0d:4a:4c:6e:ab:ca:e9:94:26:96:1c:b1:
         e6:6e:6f:63:1d:32:5e:28:98:88:83:bd:4f:a1:d5:49:be:62:
         93:75:d2:10:a0:1a:9c:a6:c4:d4:68:32:b5:a7:b0:d6:8c:c8:
         bd:bf:9d:16:a7:cc:5f:77:c9:84:9e:48:fb:8f:b7:2e:16:9d:
         c6:8c:c1:c3:87:8b:01:af:4d:20:30:4c:75:22:93:4b:f8:49:
         58:55:6d:ba:57:bf:1e:97:b2:c4:4f:9f:9c:78:63:ab:3e:cd:
         f7:ef:c7:75:dd:82:72:86:f7:e8:3c:59:e9:1f:bc:f5:76:34:
         8c:ef:da:33:c7:26:a1:b9:4e:34:e0:59:c6:08:b5:cf:6a:e0:
         52:85:ac:22:94:25:1d:ab:9d:ed:b7:53:f3:0b:3b:e3:7c:b1:
         21:ab:4d:42:47:f7:31:6e:fe:d6:4c:46:88:fe:0d:77:e8:8b:
         a7:b1:c4:86
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUCw/lmSrCTQTNgTSzVbYg3ZZMps8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi
ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjUwMjE2MDYyNjA3WhcNMjUwMjE3MDkyMjA3
WjAzMTEwLwYDVQQDEygwMkI3QjcyNjMzNDQ4N0UwRUJCMDBBRUFGREMyOTM2QTlD
MDUyQUE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eG44ZRDEqER
ktyfn0Jvo6+8taND/aC5wjiIl0ATA7ed8il8NZdSJ9F8K7jPLPFDKfDS7J26sD+B
vN2UZ3mvlTfoQMGBNfwevUbsmHNBwFcNLc5uC1hRPFdAITArNXZTLpTQ21bfcuI1
i5TTp2v865eGMZ9koDICrb+bUaO+0QE8/vnKz2MtTNUXBIhYflunCGW3IkjOexDR
XRQJMlM/ZgZ0xRE+nW+JcbJdSpdrDrcA0Mfa1B3hqlDEaxlRwSru5820OVg/SqXs
P/C96CeVFvB8UtV7s4odfAKUx50tsKBmzIm/DHutbJr0pwQZWAxLa3oGiWqy0L6n
Jmi18VVwEQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFAK3tyYzRIfg67AK6v3Ck2qc
BSqmMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5
LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD
MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It
NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00
OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4
MTc2ZmE0MzEwYjYzNTUuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
ODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzEvMkYwRjFCQzY3
REQyQjlBN0UyNTQ1NjM4QzE3M0Q1RUMwNjBDMjdEMC5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJ0R8h+7
m14HbBYlBTHlsZgMcsM+nmohtkqQSmhu5YCtSHtXjzoQpHDnWC/DOVCo1mY29n+8
Muhv0c+10xFyQgZVycyTbRjTNxo3oPSHGw1KTG6ryumUJpYcseZub2MdMl4omIiD
vU+h1Um+YpN10hCgGpymxNRoMrWnsNaMyL2/nRanzF93yYSeSPuPty4WncaMwcOH
iwGvTSAwTHUik0v4SVhVbbpXvx6XssRPn5x4Y6s+zffvx3XdgnKG9+g8WekfvPV2
NIzv2jPHJqG5TjTgWcYItc9q4FKFrCKUJR2rne23U/MLO+N8sSGrTUJH9zFu/tZM
Roj+DXfoi6exxIY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:19 2025 by rpki-client