Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
File:                     830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft (raw, json)
Hash identifier:          sGKStrlHQukdc/tgryj57P7ZoGno6DETdodhPA1hTkQ=
Subject key identifier:   58:10:8A:83:08:EB:5B:7A:7F:31:98:CC:17:12:8F:6C:4C:5E:E5:DC
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Certificate issuer:       /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial:       4A2AA2D43FF45F0FF63BE7D0597DDA8B32ED93D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
Manifest number:          0296
Signing time:             Thu 21 Nov 2024 08:58:40 +0000
Manifest this update:     Thu 21 Nov 2024 08:53:40 +0000
Manifest next update:     Fri 22 Nov 2024 12:10:40 +0000
Files and hashes:         1: 326130653a666363303a3a2f32392d3239203d3e20323031393633.roa (hash: qdebRShI1BsDkowxWmjmO/ySQ67z1G0tcY+aaojgUVA=)
                          2: 34352e39332e3138342e302f32332d3234203d3e20383334.roa (hash: AgDIaeNXKjMDkwvUNi4RDqBQvLdmZGzG4aV/gHgeUXE=)
                          3: 34352e3134352e3234302e302f32342d3234203d3e20323639303730.roa (hash: Fx8lA4avbsmernWt6IDOzA3NfpW1UoiSmWx8aeHvPn4=)
                          4: 34352e3134302e33392e302f32342d3234203d3e20323132333834.roa (hash: 9eMDEw9m3BfsI83cIQHVFVd3ObQ9CMqzUDZSu4P9KjQ=)
                          5: 34352e3134302e33372e302f32342d3234203d3e203230343733.roa (hash: eU7tCt6efGYNZjhRXdGSDnrdJ0Esu+bFh9EOKe0ZpQ0=)
                          6: 830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl (hash: R7QGTDA7dJVJWs3DQHB6eZ6vXbj4X0LZHvMcFi9V7io=)
                          7: 34352e3133322e3231392e302f32342d3234203d3e203536393133.roa (hash: AxLNZDyeHINJ0r0eh4VNHb6q4DdnWSgJt/pD0neyKdY=)
                          8: 34352e3133322e3231372e302f32342d3234203d3e203231383539.roa (hash: dXFRkKkCKVRo3kheY7TxPeD7qb8C1qNLHcvWTQZirTA=)
                          9: 34352e39332e3138362e302f32332d3234203d3e2033333230.roa (hash: VAeKGs9UHtqpVRcDtQW520o4iavD4BPJNFtFxFrs4yY=)
                          10: 34352e3132382e31332e302f32342d3234203d3e20313939393235.roa (hash: lbqo8bVd2bNDEcGLFAZKGWs5cX8HuFPs445xJs/ijC4=)
                          11: 3138352e3235302e34302e302f32342d3234203d3e2037303138.roa (hash: w2qraU5y2QsBq1fVg3gY50SANpfvXrLX+eEcEhf4ce4=)
                          12: 34352e3132382e31342e302f32332d3234203d3e20383334.roa (hash: QDbk0nlJhLR7apfP44X7S73OTc5wsSambdSsTjWzrQo=)
                          13: 34352e3133322e3231382e302f32342d3234203d3e2032393134.roa (hash: cY69z9/SUAKAZFyidUOH2kqRa5ziPRt7vN4h9tGFTeE=)
                          14: 3138352e3235302e34312e302f32342d3234203d3e203536393133.roa (hash: GvBFiY+gVuHFdOFBSYuhvvCCYLVGwKsBLj3xL5HG9as=)
                          15: 3138352e3235302e34312e302f32342d3234203d3e203439363038.roa (hash: N+74LWplsmBrA1Qo3/sgwbk4EKoKMkiHXq8IKjTelyk=)
                          16: 34352e3133322e3231362e302f32342d3234203d3e203136323736.roa (hash: L/BEDQa9goRD1yPLVMHjeX/aQHCzx+ivnSV21s/5SYY=)
                          17: 3138352e3235302e34312e302f32342d3234203d3e2037303138.roa (hash: IzUHUbnVmdxueA4yZ0OMA1f3x+y7ydgNndOOV8ZDGq8=)
                          18: 34352e3134302e33382e302f32342d3234203d3e203330363434.roa (hash: fJwttlRoX6x8pHVPArebGf7Mfzm6Mhd98H+STIQz6RU=)
                          19: 34352e3132382e31322e302f32342d3234203d3e20313336353537.roa (hash: GI/aZsOCGO0eol75QgiKGdLVWPN+m00XjhLbN7VPSj8=)
                          20: 34352e3134302e33362e302f32342d3234203d3e20323135343630.roa (hash: 5zMmXjkRkBk9/uGYUTAhE1gW/wF0ZkXO0Ht9YKJUZts=)
                          21: 34352e38392e3135302e302f32332d3234203d3e20313338393937.roa (hash: 5clR9Wtor+IOuKjeunidIbaSD2QfHPe706FuAFkxWsI=)
                          22: 34352e3134352e3234312e302f32342d3234203d3e20323134353739.roa (hash: ecd3AYkEVnl/nPIUjiZIW5gPIFDZnDrC7h/lE1jMOGA=)
                          23: 34352e3134302e33362e302f32342d3234203d3e203630323233.roa (hash: nnTqnGEg5UWAKMZfSvEt/V11mhLAEEHBCap1BBtgq2w=)
                          24: 34352e3134352e3234332e302f32342d3234203d3e203231383539.roa (hash: PJH1dFKAQPoULr+aUgsQadg9xagPIWIzP9msLqf5QP8=)
                          25: 34352e38392e3135302e302f32332d3234203d3e20323130353432.roa (hash: wFozge1poHwEF4lXqXXlfcFZR2pYAANkE7nE8OvV8ZE=)
                          26: 34352e38392e3135302e302f32332d3234203d3e20313532313739.roa (hash: bmojzZeepyIZ/0OgLjhR5pc6BgvPZg2mTK4vcnODns8=)
                          27: 34352e3134352e3234322e302f32342d3234203d3e203631333137.roa (hash: ikgi1ZDn+JlqvEXD23SCdDljFp0ZwM53qtOl2sujyPg=)
                          28: 3138352e3235302e34322e302f32332d3233203d3e203338313935.roa (hash: j7KQ1jRl+b2zWBCscj5VAuhfgmA4IoWIw8q8V/vmDKc=)
                          29: 34352e38392e3134382e302f32342d3234203d3e20383334.roa (hash: yBsd+nwavw3BanIFwR8i7NsPE65cFlCLtCKhwkNMztM=)
                          30: 34352e3132382e31322e302f32332d3234203d3e20383334.roa (hash: TV142dkIfjlXVF18mfQXIHSlB6/BpS7NTRR0FAI1u74=)
                          31: 34352e38392e3134392e302f32342d3234203d3e20313337343039.roa (hash: qWgGvwTzfqT1YLcE33rk4sGIYA/qYs3OV+nuSeBWXug=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:2a:a2:d4:3f:f4:5f:0f:f6:3b:e7:d0:59:7d:da:8b:32:ed:93:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
        Validity
            Not Before: Nov 21 08:53:40 2024 GMT
            Not After : Nov 22 12:10:40 2024 GMT
        Subject: CN=58108A8308EB5B7A7F3198CC17128F6C4C5EE5DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b4:4e:00:39:64:0c:e1:c1:d2:f6:5a:24:f1:
                    92:92:cc:3a:1a:e1:9a:9e:b9:da:e6:0a:de:13:d7:
                    b6:4f:03:ad:18:6f:5e:b0:8a:c3:40:df:5d:c9:de:
                    40:68:15:14:e5:8d:a6:06:d5:29:3c:ae:bc:26:f0:
                    ea:b9:0c:7d:9d:66:2d:ee:2f:a1:79:57:7b:73:ae:
                    1d:47:dd:72:72:ad:19:be:1a:7d:ef:65:94:81:eb:
                    4e:5e:52:ce:84:42:30:c5:ca:6f:56:b3:de:2c:fb:
                    23:08:2d:26:aa:f0:1b:c8:7c:83:1e:30:86:8e:10:
                    42:b9:27:18:d9:13:d5:0b:0b:c2:6e:01:67:1c:09:
                    02:46:7f:25:f7:aa:4d:c9:6d:a0:42:8e:f1:b5:23:
                    a1:8d:50:72:6b:e4:73:71:da:a8:61:df:f7:60:b9:
                    26:84:96:73:17:d3:19:65:65:dd:ad:f9:47:ae:11:
                    56:f1:d6:5a:a9:5f:e4:67:06:12:1e:43:2d:af:a1:
                    9e:c5:2d:dc:0a:2f:3b:58:58:48:4d:e0:77:c6:9b:
                    fc:bc:1f:f7:f3:8d:3e:a4:08:c7:f0:9a:8f:07:da:
                    dc:29:82:a4:ff:8c:0c:ee:6a:7e:11:d7:a7:8a:d3:
                    8e:59:b0:96:74:60:cc:8a:41:fb:f2:ed:ec:ed:47:
                    c6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:10:8A:83:08:EB:5B:7A:7F:31:98:CC:17:12:8F:6C:4C:5E:E5:DC
            X509v3 Authority Key Identifier:
                keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:20:14:a9:d4:8f:7e:fe:7e:dc:0e:3d:15:83:5a:8e:8e:cd:
         d1:16:dc:8f:1d:55:55:a9:92:ae:cb:3a:b2:86:47:80:0c:49:
         1f:a0:4e:c9:f7:e5:12:ae:55:df:25:d7:ef:ee:10:36:3b:1d:
         0b:37:47:74:a7:81:46:d5:11:28:d7:17:4e:aa:b7:3c:d5:5e:
         3e:8f:cc:71:bf:ba:e7:ee:f6:89:23:16:a5:e1:02:a8:36:a2:
         9a:32:fe:4a:ba:c9:bc:4a:19:76:d7:3a:43:df:cd:0c:99:2e:
         7e:e6:8a:b2:95:bf:43:6f:0d:3f:97:42:3e:1f:d8:90:40:d1:
         62:63:ab:7a:92:86:06:30:e7:7c:cc:90:ec:9c:bf:72:c8:6c:
         08:01:7d:38:6e:07:fc:94:fe:49:e6:57:cd:9e:db:03:ee:dc:
         f5:da:89:17:84:8f:8c:44:b3:35:bf:05:2a:d6:47:40:6d:3d:
         86:f8:61:7f:9f:a3:bc:e8:38:ee:ad:ab:8f:8f:f4:d0:02:d6:
         59:db:bf:b4:1b:47:c4:88:61:07:b2:43:b1:22:31:c2:d0:3b:
         9e:67:75:68:b3:9e:c9:b4:91:56:b1:c1:a1:83:e7:bf:f8:8d:
         fe:61:4a:c8:3a:f0:eb:f8:2c:05:d0:14:7c:81:a4:9f:c9:53:
         51:66:a8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:18:36 2024 by rpki-client on console-ams.rpki-client.org