Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
File:                     7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft (raw, json)
Hash identifier:          cRcF0wGTzbwPSVJSKDmr/fkSDRQBmHYrUEmVGfC8t/s=
Subject key identifier:   91:23:3B:DB:2C:9B:4B:51:0D:A5:3D:44:B8:D2:ED:98:46:32:E3:4A
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Certificate issuer:       /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial:       3AFAF496F8A3383C5321688D220F6193BF996A58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
Manifest number:          0223
Signing time:             Sun 13 Apr 2025 09:52:45 +0000
Manifest this update:     Sun 13 Apr 2025 09:47:45 +0000
Manifest next update:     Mon 14 Apr 2025 11:54:45 +0000
Files and hashes:         1: AS214382.roa (hash: 3mdGmB+MqeNou2AqNRnnA1BWnShvE1ri8paBmeFhwy0=)
                          2: AS174.roa (hash: KmqEJB1dxQIIloKVPkkbntlEcy1ARDYaPLLY3uMOIm8=)
                          3: AS215181.roa (hash: 8c7j6ROZkv9rsISuOepRqboy6rQv1ZZGNzV6s1PEfo8=)
                          4: AS48011.roa (hash: 31noUs2aw29aSBjbcOBCzUWTjAZh1Lx4Vxvxx+QLkZg=)
                          5: AS215645.roa (hash: UBLNE8vPFJ4RJ8CwzT37PS6O2qc5ZKDXh9nZDQtS0Ag=)
                          6: AS213908.roa (hash: wEcBr92vzR4kjMQEsYcqkaimECO9B6QY/N0qri4wvgg=)
                          7: AS29262.roa (hash: 6F8mIn5t4Uin7EEUh8/0QT15LDhkMnOeVOsi0WNGvTs=)
                          8: AS209737.roa (hash: VJk81JB0avfEvMn4kd4UIbMnQxNs74YhrV7QKFrSjtU=)
                          9: 7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl (hash: o5qWU3+L1SLeFsfsMVAdqdt3AN2fecGN3sbS6AaatmU=)
                          10: AS48678.roa (hash: DfuJDai8I63wWe10eGhk263g4dJw/eLfZD/9v5CSU/8=)
                          11: AS200385.roa (hash: lUbYJUUtmC59iMeyhKcxYgEg2vM8y5MdXfSFIZiRB0c=)
                          12: AS213945.roa (hash: Dfw/TMx4yeEHp3tqbG5JTH0MlnMovsQATMtSRFx2n+Q=)
                          13: AS213697.roa (hash: qfNPMZHeuBK3uyqxmSPGX+p0nSj6giH3MWeKDw7pBgY=)
                          14: AS16276.roa (hash: TKGoFF70dGfYsk//0Z8r06TyTvram6KGW67++Ak0SAI=)
                          15: AS209474.roa (hash: 8WyY50MWf2Hfbw2950nOGLiIE+FeO23xAKd6eVU/oqE=)
                          16: AS212249.roa (hash: /e2+AX50bUVQXQLW6qHnF+2r7KfT7N/eX+wwFMbTOCo=)
                          17: AS200193.roa (hash: SSptXBffD8vyfJ8+ItmqHOXRVZPoCHM2Olja4YnMGSw=)
                          18: AS213865.roa (hash: Qegg417UohwYAVTIiu2LURkN/QxIXbY0hbfGnBneAII=)
                          19: AS2856.roa (hash: XfezLPxqS6qyMgnS5p6Q9Ff8J4pjCk1yan6ixJDr/rA=)
                          20: AS198376.roa (hash: JEmSmJ0YmxPQKJqHO/cQFxZKDlrWgq5I18kuApShUkA=)
                          21: AS211567.roa (hash: iK0TYJAzoZ5eAM5l2xKG3wDioMwf0eNKmuSQE76ieVM=)
                          22: AS210574.roa (hash: wUZq1liPsoWhqP/PsAnP9XYmT2nkynUx2diJl88CHlI=)
                          23: AS24940.roa (hash: 7ndOfm4mllNOzsJ7zyFyorvw4wKXu3yOQsEyvruD26U=)
                          24: AS834.roa (hash: AATU8ztUIsrzXoHyZa/WwH5bevguvSm4NbDH5UMzUZg=)
                          25: AS47952.roa (hash: mG6NxVSxbG15sF/N6FL8pmxqAnMV7BudYJRt6OvigRI=)
                          26: AS48976.roa (hash: dLcdNZGcalFuqVoMZh9vJilRZtWbYFdqrkY8gv9EmKI=)
                          27: AS6939.roa (hash: iZY4J3O2MLYKL0akIGCmGpf7/y9QvuDbwv5dwFvM2XQ=)
                          28: AS213637.roa (hash: DVbk+CQD5GmqE90LP9GaRh43nuI8C9nazELWCHyEZMs=)
                          29: AS204843.roa (hash: fNXrhm79TNS1ZP505zLI5uWaJ+XQ51eaKU0riHbEtjg=)
                          30: AS206150.roa (hash: eAsypIAyA8Kdbn0XoaRDvgLYzH/AwQUCck6taoH8hnM=)
                          31: AS215073.roa (hash: 9qyhwFrULV4D+B30Hh+hOl8HFjEgidWRa+rZrtXUqEw=)
                          32: AS43260.roa (hash: NqOT57VjKAYzTumnR0DiXH7U6MpSsJcZzDXVmqIlO9g=)
                          33: AS22773.roa (hash: VovBvubOcRbA05kc2hWH18Zkt93+ibTrzRGxV1t1g/k=)
                          34: AS25098.roa (hash: 2ck2aTaSLUIT5Lnh7ab6JJq/5tik3X5I0ABBsnXc6qA=)
                          35: AS214854.roa (hash: mkgYf1IPpwSjHtpBogia2RURLStqit0Wnml0LwgLCwg=)
                          36: AS201079.roa (hash: YiroNHsMhmcvnTfQdTj6xU3E26sbM/UBmzpsaCfEuwg=)
                          37: AS147003.roa (hash: Zz21rokZJS36kNnUQ947NhxCwHF1ji+tZPwXOs1/EuY=)
                          38: AS51847.roa (hash: ZiHWRq3CcRX60m4beZUWWWdkaHXdPe8qNB0z+E/sOKQ=)
                          39: AS213404.roa (hash: G912kWmDqOjjDFfWO05aGWqNLkkFW9qIXZ5HJES6QtI=)
                          40: AS51559.roa (hash: /AcxJuyGcwsgZq8wiS8ei3O+I0F+yKw7o6CWEd8yZ7w=)
                          41: AS212598.roa (hash: E6RiGK/frtboiOpyDj60dmtFGK3+v2QhFOwKnFxev2c=)
                          42: AS39521.roa (hash: KNy/04N9eFJhLGLziKUtLlKXZyCJA/5l8BcpkU/cTQk=)
                          43: AS209371.roa (hash: fs+t+F9sJvJlpCvynYVeHHb0Zyu/TO0P+jOvMvlLUWo=)
                          44: AS399989.roa (hash: FRInC9/a5ivbW/+4e6wjYQYdJpUCQmcW2dxK54SKi0M=)
                          45: AS212219.roa (hash: sx6DXJwFI8wywmbpDT/dcn1xzLkvYQzNVR8SyjqKzwQ=)
                          46: AS7029.roa (hash: sD43QDbg0M1ujz8FBgk2sJ0CHOwsJtRUGZ+I7UN+Pe4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Apr 2025 11:54:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:fa:f4:96:f8:a3:38:3c:53:21:68:8d:22:0f:61:93:bf:99:6a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
        Validity
            Not Before: Apr 13 09:47:45 2025 GMT
            Not After : Apr 14 11:54:45 2025 GMT
        Subject: CN=91233BDB2C9B4B510DA53D44B8D2ED984632E34A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:f8:eb:59:09:e6:09:b1:a1:bc:3a:72:7b:
                    95:b9:50:4e:4f:a2:35:b6:e1:f9:f5:38:b6:cd:9d:
                    a1:ad:8d:86:3f:a8:a9:75:8a:44:da:ea:39:db:1c:
                    c3:f1:f2:f8:d5:98:44:ab:88:f9:8e:45:7d:1c:d6:
                    e8:e9:e7:72:55:23:db:db:e8:35:3b:25:35:07:b8:
                    9d:57:56:17:0f:e7:7c:0d:05:4a:bb:8b:aa:9e:a3:
                    3f:d7:40:d4:74:cb:b7:a5:c7:cd:7b:b0:cc:b7:94:
                    4a:b7:66:41:fc:c3:a0:3e:a7:28:b0:42:d8:7b:e0:
                    f3:9c:0e:38:e5:b2:2f:27:fd:ee:e7:c9:04:ed:4e:
                    78:9e:4a:e2:d5:a9:cd:a2:b5:6b:3b:31:b5:ce:c0:
                    0f:9e:5f:f7:99:de:61:01:9f:ac:9d:e6:20:65:36:
                    b9:63:b9:33:2f:6f:7c:6f:9e:46:ab:8f:c9:b4:8d:
                    af:1f:09:4e:68:ef:1d:9f:6d:b4:56:4a:40:75:3b:
                    58:b0:40:01:ff:06:80:c2:c2:1c:a5:76:cd:59:06:
                    0f:f6:9d:a2:c5:b1:bd:0d:9f:4e:6c:75:7f:18:0f:
                    6d:c6:c9:27:d8:29:b3:84:2c:c2:e9:90:06:47:05:
                    40:1d:0f:4e:7b:ce:ac:d7:2c:df:95:15:9c:86:75:
                    f3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:23:3B:DB:2C:9B:4B:51:0D:A5:3D:44:B8:D2:ED:98:46:32:E3:4A
            X509v3 Authority Key Identifier:
                keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c4:a1:df:26:fc:7d:6e:22:2b:df:c1:10:09:8f:d1:55:82:
         98:29:5f:ca:96:f6:d5:63:1f:64:fd:af:b9:c1:24:79:71:b1:
         6e:11:3f:3c:22:6a:e2:8b:13:8a:94:9d:a6:55:8f:ab:2f:ec:
         79:a4:ed:56:02:2d:3e:80:f8:ed:32:4a:4a:60:99:71:a9:98:
         bf:b0:e9:5c:d3:6f:d4:c5:ef:7d:72:da:19:4e:a0:45:ff:22:
         d4:6e:7d:06:0b:ff:13:f4:32:71:c6:dd:a2:a4:d6:b2:9c:90:
         b0:da:35:b7:75:a6:67:1d:7f:a8:24:6f:70:b8:10:f3:22:65:
         70:ae:db:49:b7:b9:b4:68:52:ff:9a:02:dc:b2:da:00:c7:6d:
         ed:ab:ff:3f:55:f9:37:5a:a5:b5:31:5c:08:3f:1a:4e:ec:ef:
         a2:ab:bb:1f:5c:70:03:c2:0f:20:11:14:4c:7a:6f:0d:cf:a4:
         fc:bf:c1:39:a8:9e:3d:94:93:76:02:27:2a:23:11:7b:a4:a4:
         56:46:c4:96:d1:3c:c3:07:37:bc:43:a6:0a:eb:05:b2:54:69:
         92:e9:ff:f3:a3:a5:77:ea:a2:93:fc:14:c0:5d:3e:2e:35:85:
         ff:5a:d2:f7:69:0e:39:a2:95:78:c5:2c:3e:b8:7b:96:42:8f:
         73:55:66:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 22:55:49 2025 by rpki-client