Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
File:                     B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json)
Hash identifier:          glDZyc3D6/+414v9MgwhXvHylspj6wUmSwoeFBnbwaM=
Subject key identifier:   5E:06:68:32:06:2F:A9:AC:74:24:AD:A4:90:24:44:DF:13:04:65:6A
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       269C806CE774750A3C47900C375545DCAC07F01B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
Manifest number:          0436
Signing time:             Fri 22 Nov 2024 00:03:40 +0000
Manifest this update:     Thu 21 Nov 2024 23:58:40 +0000
Manifest next update:     Sat 23 Nov 2024 01:43:40 +0000
Files and hashes:         1: 3231332e3133392e36372e302f32342d3234203d3e203538303631.roa (hash: 3jLf7P3yhu2TZSIau2HMO04k6qsnp0FHPjUx5d6p434=)
                          2: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: wiKTAGHeq7hZCTbxM8OsNaV9lIuXCaW0Jz9DnCxt/K4=)
                          3: 3231332e3133392e37372e302f32342d3234203d3e20323132343136.roa (hash: OFT1TjEQHADTUi76ZQun/gCcNu9+i36V2pU04Vuxa5Q=)
                          4: 3231332e3133392e38312e302f32342d3234203d3e20383334.roa (hash: E6vU8PpaL/9i3InYi0evlTE13nQ+KIDlp46gtqWEKU0=)
                          5: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (hash: cv7c938TG1TrAJ4WxpMEnrJuipZuwdL8o32jtRflF/0=)
                          6: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (hash: Bl1aRRfvhlQw8eeGsoLHX9t51iL6e6Y2fGT+6y05OLk=)
                          7: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (hash: of9+QBHzVFeRCikR2/nTKS/SdWnbBqij0UrrT6Ws2zo=)
                          8: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: pcqczpZd3N8rkxbwgnioI5KV9SeSdrdvwmseTG1EX1s=)
                          9: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (hash: J06WMDxk0vMK8pfigTls8zgcVFUgtvOJyAs44qQdbiE=)
                          10: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: vqZLjJNuzsHV7ZyjR5MAzsGFKtnqbkYxEe3fUziAUxQ=)
                          11: 3231332e3133392e38302e302f32342d3234203d3e20323039323432.roa (hash: YdX+fXUti68/8C3ziNoPSSL7DqiBK1OnnQdcQ6MJQjc=)
                          12: 3231332e3133392e36392e302f32342d3234203d3e2032393134.roa (hash: 81bpc/CfwUaeuP0px8RLdF+w4HW5KjenHLxKw8NU88s=)
                          13: 3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa (hash: qcqTb3VE7m+UGKYwU3pX6Cz4rtaboRvLfOlujiKOavY=)
                          14: 3231332e3133392e38342e302f32342d3234203d3e2039303039.roa (hash: Ag6bDXTIkeP3S1yYyObakXBVS3meRtUEDwW2GPMInYg=)
                          15: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: EZylfov+7K8QPFtv2IUYm6ohl+UzGHPfuoTVapkH1p0=)
                          16: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (hash: CDL0jvyMQodplKp33qHE8utNJuEvgr8dJgi4XDSuhbM=)
                          17: 3231332e3133392e37392e302f32342d3234203d3e2036303739.roa (hash: HhOOQwX7m6iytgoMVxNbY1GI7gtWWU+7Uxm93RErcio=)
                          18: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: Ghq8jwTJA7GRX7mh9mqCc+aBnqXGq/O3Bay6ZVLERbE=)
                          19: 3231332e3133392e37352e302f32342d3234203d3e20323731393837.roa (hash: k/dg+vn2LRgJwjRiBw+dTVhqGlwM5OEWHrHzMTRZgGU=)
                          20: 3231332e3133392e37332e302f32342d3234203d3e20333936333536.roa (hash: p9bl2cITeGqyDsp+qYa6XKu0+IBsfcA9I2MK2L2iu7Q=)
                          21: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (hash: Byq8JepWqrcVEWnX2vthyW2wZas5MvW5yy9NQn72V5M=)
                          22: 3231332e3133392e39332e302f32342d3234203d3e2039303039.roa (hash: BpwFTe7Yxv8spCXtI6SlrcvqkmRSrqF7TJL8D0ERvYc=)
                          23: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: vfZaTN2Yf/fmXByNlYvPl5D/II7iMpeoY3OZSHPC08Q=)
                          24: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: SYDNtbUftTvIAY1nHMVswIaI7CgNSFMYjysKDb9SdV4=)
                          25: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (hash: osiInenMTL8nKf7tFVx8rBMOYt6Vnk1ZBd7DbmGt4LE=)
                          26: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (hash: lKJSkJqFjy6TPDk7oRGHPjAYx2K53051mCG+JZr9O4Y=)
                          27: 3231332e3133392e38362e302f32342d3234203d3e2039303039.roa (hash: yJ63ns+uy5OkuxXphsk4soJDW/P4jNZxDgA1HqxR2Vc=)
                          28: 3231332e3133392e39322e302f32342d3234203d3e20383334.roa (hash: 6Jy9wWlUlUHCaXgvzl/QdTAZFj96twj6nqzC95T3heA=)
                          29: 3231332e3133392e39312e302f32342d3234203d3e2039303039.roa (hash: xgaIqdtwavjhzG1jXVp6EFDMpjflmhfZfviz1IzDLuw=)
                          30: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (hash: FVZySD2qYJGzeA33TZ6k9nKfV57UUqtM3Y9RFiezkdM=)
                          31: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: h3bOznzQazMxnAj63lKiHhJJlraY2HH+h7VBdxrnanU=)
                          32: 3231332e3133392e36362e302f32342d3234203d3e20383334.roa (hash: SNW8omoc9P2vj0w72D1hi4oAnHQDAuaks2hIVn3M924=)
                          33: 3231332e3133392e36352e302f32342d3234203d3e203538303631.roa (hash: 4CxK/2nsy4IlLMM6spVwFLEFITyK9i3ABeG638HSk98=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:9c:80:6c:e7:74:75:0a:3c:47:90:0c:37:55:45:dc:ac:07:f0:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Nov 21 23:58:40 2024 GMT
            Not After : Nov 23 01:43:40 2024 GMT
        Subject: CN=5E066832062FA9AC7424ADA4902444DF1304656A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bc:75:d0:9a:50:a7:5d:1f:b6:33:05:9b:67:
                    74:bd:9c:b5:7d:be:c4:97:c4:3b:37:84:f2:2b:51:
                    77:b5:9b:08:a0:75:5b:a7:5a:99:52:24:ac:a6:33:
                    58:6f:0e:ea:82:39:99:04:7a:1d:46:7e:3a:a3:65:
                    47:f2:c9:84:1e:5d:d3:64:51:b3:02:3b:bd:9b:8b:
                    06:be:39:24:8a:cf:93:0c:6d:22:eb:05:2a:cb:d2:
                    5a:82:f9:a4:72:18:35:4b:fc:d5:e0:ed:e5:93:06:
                    06:0f:17:2b:55:44:c4:75:d4:97:13:35:13:54:07:
                    5d:9e:9c:7f:c6:4d:1a:aa:43:1d:1b:56:e1:c6:4e:
                    eb:bc:4e:fe:9f:e0:0e:43:54:1e:2d:48:37:19:b2:
                    b8:e8:b1:df:d5:47:0d:35:9e:38:99:59:57:fc:b6:
                    5e:3d:42:1f:4b:e8:4d:88:88:fe:e5:64:30:41:26:
                    5f:c3:e3:d0:56:d2:22:1d:51:b7:93:0c:3c:11:65:
                    c4:b8:4a:f6:c8:19:59:16:40:e4:2b:d7:b5:17:f4:
                    00:1e:60:12:8c:ef:2f:86:7b:83:36:9e:34:7d:1c:
                    f8:43:54:3d:8e:b9:0f:57:cb:4e:27:30:ee:b2:90:
                    4b:0c:21:0c:c1:97:40:00:03:89:28:ba:ec:c7:9d:
                    d4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:06:68:32:06:2F:A9:AC:74:24:AD:A4:90:24:44:DF:13:04:65:6A
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:71:7e:83:95:f6:50:45:c6:f3:33:18:0b:f8:5c:aa:57:43:
         c3:58:70:06:d1:83:56:c7:2d:a6:7e:56:4f:b6:b5:f4:f1:ac:
         1e:99:1b:c0:5a:07:b9:21:a4:ab:46:d7:6d:93:44:89:2c:e5:
         ac:98:f6:54:3a:29:10:b8:28:fe:5c:5e:a1:b6:11:5c:37:e3:
         f4:4e:32:59:cd:1b:e5:44:54:c7:b6:ea:bc:cf:6b:08:f6:11:
         82:d7:a6:92:47:67:62:af:57:c9:35:7c:73:62:52:ac:1d:fa:
         e2:bf:ea:fb:27:a6:11:fc:ba:1e:f5:a1:cd:fa:6b:96:c8:5b:
         03:96:07:ae:17:a0:bb:b0:50:eb:92:d8:b8:f4:7b:b3:1c:8f:
         c3:3f:4f:04:84:d7:f6:82:62:ed:55:03:00:2c:ab:24:3c:62:
         ca:43:1b:13:11:8e:c1:e7:67:4c:dd:7d:67:ce:c8:22:f4:23:
         b5:7f:e2:c3:cd:e3:72:92:c1:93:77:d2:79:18:0a:79:b7:6a:
         e4:4a:1b:28:ba:c8:d5:a0:4c:7e:b2:e6:c6:32:a7:e4:34:07:
         19:0c:2f:d9:5e:3c:a2:7b:ab:4b:41:c7:de:5c:7f:be:04:1c:
         06:4c:90:e2:73:6e:85:68:59:86:f9:f8:b3:95:69:2d:86:f6:
         44:33:a1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:44:50 2024 by rpki-client on console-fra.rpki-client.org