Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
File:                     B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json)
Hash identifier:          kD2u0C4PfVYhJArYdBIUXqkEnAe+rQUBB3/9KiY5w9s=
Subject key identifier:   37:8F:7D:25:B6:A2:51:B6:A2:C8:BA:53:7B:18:3E:42:0A:CB:03:5F
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       0321DC2ECFBFC1B928CE07348D46188D0B3730DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
Manifest number:          02EE
Signing time:             Sun 05 May 2024 14:11:42 +0000
Manifest this update:     Sun 05 May 2024 14:06:42 +0000
Manifest next update:     Mon 06 May 2024 17:25:42 +0000
Files and hashes:         1: 3231332e3133392e36352e302f32342d3234203d3e203538303631.roa (hash: rLd9ULONnfqFen0riuFJ2OFWPRLCjjFkKWqPLe9st7k=)
                          2: 3231332e3133392e38322e302f32332d3234203d3e20383334.roa (hash: s33mwWq2D5kOFLWhov5D2KJCG2pVbaFzL7G9UmQ///E=)
                          3: 3231332e3133392e38342e302f32342d3234203d3e203239383032.roa (hash: bYJMl1244EupZya+7H0o4w3m07Ylzgd+jZRALlzGWtc=)
                          4: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: vfZaTN2Yf/fmXByNlYvPl5D/II7iMpeoY3OZSHPC08Q=)
                          5: 3231332e3133392e37392e302f32342d3234203d3e2036303739.roa (hash: HhOOQwX7m6iytgoMVxNbY1GI7gtWWU+7Uxm93RErcio=)
                          6: 3231332e3133392e37352e302f32342d3234203d3e2037303138.roa (hash: COGp8d7KKgCdyyyCB2No7YIZlVSiU2X3WkC9BRBYufs=)
                          7: 3231332e3133392e39342e302f32342d3234203d3e203239383032.roa (hash: fZ2bdiIMWYwpfBwHrx96UbiUhC5P7T7JOy2YLtMX4VI=)
                          8: 3231332e3133392e39332e302f32342d3234203d3e203239383032.roa (hash: qgEKCIPyfKm1i6vrvNFA4xwjXMLTED0yCzVcBrYrG5A=)
                          9: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: EZylfov+7K8QPFtv2IUYm6ohl+UzGHPfuoTVapkH1p0=)
                          10: 3231332e3133392e36392e302f32342d3234203d3e2032393134.roa (hash: 81bpc/CfwUaeuP0px8RLdF+w4HW5KjenHLxKw8NU88s=)
                          11: 3231332e3133392e37372e302f32342d3234203d3e20323130353432.roa (hash: J665VeL+ta2lvtf028bxqxOBWVLZFouFffMzBhchlUE=)
                          12: 3231332e3133392e38382e302f32342d3234203d3e203239383032.roa (hash: 0I9qeXVBmaSAPY8no67OszUeXgHZ1DHZLPqkhi27538=)
                          13: 3231332e3133392e38322e302f32342d3234203d3e203239383032.roa (hash: QLbwCr0GKiYF0C8410Tg63khF7TM6cn7RI8ArMHAyic=)
                          14: 3231332e3133392e37332e302f32342d3234203d3e20333936333536.roa (hash: RxZB3vx4tiQDDXpk2MtH+4ljEsnOVrLIIeQp2UMK/rE=)
                          15: 3231332e3133392e36372e302f32342d3234203d3e203538303631.roa (hash: vlom6lZKeYJIfUE9Gp+HYzZ8jvFOPvpCrdTMVjm5P1I=)
                          16: 3231332e3133392e38332e302f32342d3234203d3e203239383032.roa (hash: RR2aIY9i1fWDxHRpkeF8JveiZ3BPVXzLBjfhIpB++ko=)
                          17: 3231332e3133392e38372e302f32342d3234203d3e203239383032.roa (hash: W6Cmsu3UHslV9l1LnCIkWilopTPnvzIp0Sfbe7XMQMw=)
                          18: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: vqZLjJNuzsHV7ZyjR5MAzsGFKtnqbkYxEe3fUziAUxQ=)
                          19: 3231332e3133392e39322e302f32332d3234203d3e20383334.roa (hash: a3Cyny7tY//5kyYdeF2Lso0Pnpk8zPrkwcblGo+4aHw=)
                          20: 3231332e3133392e39302e302f32332d3234203d3e20383334.roa (hash: Eb6bV48KLehXFOvsG5u4jHlAt+ri3m27o5ABT3fMA44=)
                          21: 3231332e3133392e38302e302f32332d3234203d3e20383334.roa (hash: rYc87PX3iN2A2WLhIGdP9DosLVfsPx1yZr+jcSqyRCw=)
                          22: 3231332e3133392e36362e302f32342d3234203d3e203538303631.roa (hash: 1beFd0/1wwkXHMKY9h+mV4i0Vc2npXtct3dDpnuu694=)
                          23: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: SYDNtbUftTvIAY1nHMVswIaI7CgNSFMYjysKDb9SdV4=)
                          24: 3231332e3133392e39352e302f32342d3234203d3e203239383032.roa (hash: R+DR3aau74Jgo0ET1/4cx+ID9ULIpOut3nNQigqMf8U=)
                          25: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: Ghq8jwTJA7GRX7mh9mqCc+aBnqXGq/O3Bay6ZVLERbE=)
                          26: 3231332e3133392e38362e302f32342d3234203d3e203239383032.roa (hash: /g4mXfjc/EY8nBfITflmu9EgNwDcmLPBo6uXwmbhPYM=)
                          27: 3231332e3133392e39312e302f32342d3234203d3e203239383032.roa (hash: bUy/nx+h0InuBO1UKZeFPfTatZgaSTj/yinC2P9xZ8E=)
                          28: 3231332e3133392e38392e302f32342d3234203d3e203239383032.roa (hash: UAXnl/iw9cd9qcaevE5seUKCMZPpCBRsej3/OFvVOCU=)
                          29: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: Mk5qC31ygUngyatrNMaNYH7bQjktyJfOHqPnXC4aCsY=)
                          30: 3231332e3133392e39322e302f32342d3234203d3e20383334.roa (hash: wH8ujP8Oz3P5iS8h+uqCY/5lG3L0F574SONikFgzZA8=)
                          31: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: H7cgvEzU+d0rQ0975IpBT2Z8TAhwDHYo/2bkSCgFY1U=)
                          32: 3231332e3133392e38352e302f32342d3234203d3e203239383032.roa (hash: LtGTBA0tja4aPes6zNqKB5Ol7YdK6+sknfbrbq7b0wc=)
                          33: 3231332e3133392e39302e302f32342d3234203d3e203239383032.roa (hash: rIo1LK1LtYvOql2Exp10N3xZkVHS5zBLjZ0ylu5lh6A=)
                          34: 3231332e3133392e38312e302f32342d3234203d3e20383334.roa (hash: I3T5wSDwv15/M4INrVHofJUryKKpdIv6BU79I+qhn1U=)
                          35: 3231332e3133392e37382e302f32342d3234203d3e2037303138.roa (hash: Wi3BqskDkmGWkMgAqHNJff7vtrKNb3u3OfrEqc91Sx8=)
                          36: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: h3bOznzQazMxnAj63lKiHhJJlraY2HH+h7VBdxrnanU=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:21:dc:2e:cf:bf:c1:b9:28:ce:07:34:8d:46:18:8d:0b:37:30:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: May  5 14:06:42 2024 GMT
            Not After : May  6 17:25:42 2024 GMT
        Subject: CN=378F7D25B6A251B6A2C8BA537B183E420ACB035F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:87:ee:e2:19:72:52:35:8f:62:b4:20:ee:e3:
                    0f:80:a8:d6:f8:b3:5a:0c:ed:55:4c:88:2b:24:22:
                    13:4d:93:de:d5:92:8b:8e:81:f1:a0:b2:64:8a:b6:
                    74:67:38:26:e4:5e:34:54:b6:f3:20:ea:61:fd:21:
                    26:73:be:92:26:8c:bd:67:d9:8e:09:fc:1b:c2:c4:
                    9f:c0:cc:24:b9:cd:fe:68:2a:59:4f:b5:c6:8b:c1:
                    13:39:c1:56:3f:2e:3e:ef:85:26:c6:d4:1f:8b:37:
                    0b:81:ad:3b:78:f2:42:9d:28:3c:4e:d0:76:34:80:
                    b5:b8:ae:6b:2b:97:34:5d:43:a7:29:a1:72:48:c8:
                    ae:e8:2d:e0:94:45:5f:b5:af:33:1f:13:a4:ed:00:
                    dc:66:73:ec:b7:f2:0b:c9:60:9d:98:ea:95:05:cd:
                    e0:5a:4a:a6:c0:8c:22:a1:83:9a:db:6c:1c:c3:5b:
                    ae:16:69:a2:b1:6c:d8:ed:cf:e6:ae:a1:a6:3f:b1:
                    0f:0a:6c:6d:c2:1e:c1:d9:72:d5:31:93:c4:f5:52:
                    ba:43:24:25:3e:be:6e:06:9d:cd:e7:2c:62:b4:69:
                    17:78:9c:aa:70:df:51:c8:5e:c7:91:91:a8:38:e2:
                    f4:ec:36:92:ec:a3:d9:1d:95:e6:13:41:02:40:7a:
                    5c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8F:7D:25:B6:A2:51:B6:A2:C8:BA:53:7B:18:3E:42:0A:CB:03:5F
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:43:f9:ba:4f:1a:ea:5e:70:9b:f1:40:80:7c:14:88:23:00:
         71:8b:35:b8:57:2d:ec:ab:0d:b6:d6:4e:33:d1:eb:76:69:cf:
         37:7a:5d:e0:d9:ec:01:a7:d5:fa:ab:ef:ae:7b:84:1d:b2:a8:
         63:85:d9:ab:4b:4c:8d:1b:39:58:71:4c:48:fc:0d:58:73:9d:
         95:8a:88:eb:f6:d2:5e:c4:ba:7d:1a:34:bf:fe:1a:27:fe:99:
         7d:c7:bd:4a:d7:4f:c4:47:64:bf:71:64:a7:9f:46:ac:43:4d:
         08:9d:66:11:3a:d4:99:6c:41:2d:b3:6e:c4:88:9f:73:a9:f4:
         b9:47:21:5c:85:8d:3c:e5:87:6e:96:bc:3b:e0:d1:c3:4e:f2:
         4a:dd:6e:55:0b:6c:4c:8e:6d:25:ca:33:6e:4e:b4:97:2c:98:
         f5:28:2e:36:00:94:1e:85:4d:42:87:2a:ca:cd:e0:3a:d5:77:
         c3:36:ef:f0:5a:1b:24:7d:e7:83:14:1f:8f:1c:b1:47:2b:68:
         83:a3:f7:ba:e6:ff:33:0c:4d:9c:bd:e5:59:fd:f3:6f:06:31:
         51:27:67:64:1a:80:97:1c:a6:0e:a9:82:74:0c:d3:83:e2:16:
         d8:f9:65:80:2c:7f:87:0a:22:8e:9c:c7:08:31:fc:8c:06:fd:
         ec:2e:04:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:51:34 2024 by rpki-client on console-fra.rpki-client.org