Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
File:                     8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft (raw, json)
Hash identifier:          cZMlV6VXw9q7mxNSdp3PjKyJ99zvJEWPNEbOLjADxWQ=
Subject key identifier:   9A:54:57:2B:AF:15:0C:A5:F7:43:40:C1:BA:AD:09:04:CB:63:1C:E6
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Certificate issuer:       /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial:       2376DA792BC44C4DB13FF6A77E473FE710BB4845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
Manifest number:          D9
Signing time:             Thu 21 Nov 2024 15:33:40 +0000
Manifest this update:     Thu 21 Nov 2024 15:28:40 +0000
Manifest next update:     Fri 22 Nov 2024 19:23:40 +0000
Files and hashes:         1: 3138352e3234302e3130362e302f32342d3234203d3e20323134343538.roa (hash: A4xSoaJgKGvgYyxTiRaQc7hyiiMELV+dvyPZYNnypk4=)
                          2: 3231322e3130332e34362e302f32342d3234203d3e2037303138.roa (hash: rMME+vqCZKRx6MWTu2JJLyrYUejGxmy68BYs8Iy+dcs=)
                          3: 3231322e3130332e34352e302f32342d3234203d3e2037303138.roa (hash: 7tYhgwnpQgjrUY6lIYzrsufXTdIxxdIzG5zhNY7GMPE=)
                          4: 3139332e32342e3233342e302f32342d3234203d3e20323133393837.roa (hash: oiVt8ohpGVjPObvoY8F5/4DdG/+vs7OwxK+iV8ozFOs=)
                          5: 34352e39352e38302e302f32342d3234203d3e203232343237.roa (hash: 1iNa622Wy2pLG+EQ9PLnzZr/TAQ/DFOpTXcvxlsTiU8=)
                          6: 3139332e32342e3233352e302f32342d3234203d3e203630373831.roa (hash: 3IIPnO8jnB/C9bfC+8H124jFOjjxVU8ltj/gUK5jsA4=)
                          7: 3138352e3234302e3130342e302f32342d3234203d3e20323130353338.roa (hash: e7DAYp4SHfxn2VHLApclYeubQioRqGakPF4YwyLlJQg=)
                          8: 34352e39352e38332e302f32342d3234203d3e203136323736.roa (hash: Q533ax1UvzPaArfGm41TbSiXq7dZJCYsDwOW5gzCSPM=)
                          9: 3231322e3130332e34342e302f32342d3234203d3e2037303138.roa (hash: M4JPV0EpOREdo4rtW4NnuCUGqJpn33if9+NH5NeepXw=)
                          10: 3138352e3234302e3130352e302f32342d3234203d3e20323135383836.roa (hash: Zg7Zy94s0jkW2vAFLU4oSa1vifJGmomHg+RPCbDKJZY=)
                          11: 3139332e32342e3233322e302f32332d3233203d3e20323134323430.roa (hash: IE183VqO+F52HWn1DPHjI/7o/gqGxmRRAt8wnHBpU6Q=)
                          12: 3138352e3234302e3130372e302f32342d3234203d3e203231383539.roa (hash: 6yyT/lSYz64kWrG5y/UL8jnnfCMJo6XEAFq3o0kuIM4=)
                          13: 34352e39352e38312e302f32342d3234203d3e203130373533.roa (hash: FkBgrUApMvi3lgA70RwzXdmr+ue7YGI+0ZsQLz4AeeM=)
                          14: 3231322e3130332e34372e302f32342d3234203d3e2037303138.roa (hash: cHloJRokAuSrc8moMEBQO1JYueWgMh/VbSgADCTahj8=)
                          15: 3139332e32342e3233322e302f32332d3233203d3e203530333030.roa (hash: 0GRRCttIttRIMhB7V0vunXGAKORf14Pml5dL3sloPKI=)
                          16: 34352e39352e38322e302f32342d3234203d3e20323134313334.roa (hash: ZVDnUpjmQz3pm0MDzOgDjfBaD8IijBkidSYUwuSN8bE=)
                          17: 39312e3139302e3135372e302f32342d3234203d3e20323130383330.roa (hash: LHHDMQAiPEKdKz+17Sj/aubO3T0fJoOtFfvF63ozlF8=)
                          18: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl (hash: yyE0WA5Vlw3HwrQ8xWDYpyYgxEuGSmXKGxDkTJoOA1E=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:76:da:79:2b:c4:4c:4d:b1:3f:f6:a7:7e:47:3f:e7:10:bb:48:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
        Validity
            Not Before: Nov 21 15:28:40 2024 GMT
            Not After : Nov 22 19:23:40 2024 GMT
        Subject: CN=9A54572BAF150CA5F74340C1BAAD0904CB631CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2d:41:8e:a3:ec:42:cc:00:6e:bc:32:3f:c9:
                    67:f5:7a:f2:e3:b5:b5:34:01:40:ab:e1:df:48:7a:
                    06:96:1a:15:11:44:c0:42:75:9e:89:5d:24:79:f1:
                    60:b4:db:2f:0a:80:bd:f6:39:77:29:2c:37:3b:06:
                    99:da:4f:5a:47:4e:cd:a7:40:08:34:07:1a:39:14:
                    6c:93:a5:80:21:ba:d7:ff:a5:98:19:fa:30:d7:8e:
                    b1:94:74:19:2f:74:3b:37:f5:2a:b6:40:17:91:b8:
                    b5:27:18:ef:45:25:74:b3:a4:8d:24:81:c8:9b:c4:
                    6c:9c:4c:fb:22:66:75:7e:99:ae:f9:62:52:82:43:
                    38:d7:d8:07:24:66:13:bd:15:69:d9:48:e0:76:81:
                    3b:fe:40:0b:28:f9:c4:4b:60:8e:ac:e0:c4:11:95:
                    08:ca:49:5f:91:56:68:fb:69:58:83:05:fa:55:6e:
                    f8:28:5d:8b:cd:c2:a2:7b:c3:7d:e4:e0:07:56:c4:
                    ad:d8:2a:97:98:38:c0:6c:29:27:15:4d:b4:94:06:
                    c1:3b:35:e6:1a:ea:78:88:af:9f:cc:44:eb:e9:aa:
                    44:e5:ca:ee:6d:05:54:84:a9:be:f8:05:c7:aa:9f:
                    67:e8:89:e1:1c:7b:55:c9:26:77:3f:f9:28:39:46:
                    f8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:54:57:2B:AF:15:0C:A5:F7:43:40:C1:BA:AD:09:04:CB:63:1C:E6
            X509v3 Authority Key Identifier:
                keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:34:93:a4:02:26:30:70:2a:98:a9:f1:62:14:9c:15:f1:70:
         10:c3:50:a6:09:c0:d9:bc:d2:1f:c2:60:6a:84:a5:c8:a4:3a:
         98:4d:65:02:f9:08:c3:c8:ed:19:22:58:73:98:8a:ee:8e:70:
         5a:1e:09:c6:90:0d:52:33:80:c8:11:f1:13:fb:55:6f:5a:3b:
         9d:d7:25:a7:d1:de:6c:fe:ab:c4:c0:17:e6:ba:2b:53:85:8c:
         98:ed:7e:40:2e:ef:42:88:78:59:7c:96:fa:a3:2e:8b:43:cf:
         1c:d1:3b:f2:39:4d:34:d7:65:46:2f:74:20:28:c9:c9:72:9d:
         83:73:d4:35:90:59:35:58:da:2d:f3:f0:ef:4e:c0:68:7f:50:
         56:ac:cc:62:c7:d2:b4:44:eb:48:6d:b1:02:51:c9:7d:8d:fa:
         dc:20:09:69:f2:83:bf:14:33:a9:fe:01:0d:b1:22:92:be:8a:
         88:35:be:4a:7d:72:4a:d1:f4:fa:cc:4e:de:64:9b:f8:33:b1:
         61:45:2e:49:e8:51:20:09:85:c2:30:76:59:b2:09:93:93:7b:
         12:c0:97:2c:46:64:a1:ee:90:29:59:79:af:3a:6e:cd:fb:da:
         82:c9:cb:40:2f:61:a8:94:33:78:58:57:62:95:af:9f:e2:9a:
         fe:49:19:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:06:13 2024 by rpki-client on console-fra.rpki-client.org