Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
File:                     9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json)
Hash identifier:          N80npwHLcpjzlRecTyyjDP2zRj0Bo3CAoZC0JMm7KUs=
Subject key identifier:   55:0E:05:DA:25:BB:71:3F:50:00:E2:D7:32:08:85:AC:C1:70:4A:4B
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Certificate issuer:       /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial:       6272D55E1A90A4B6A0A96EC5EE5C438D514817CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
Manifest number:          0390
Signing time:             Fri 04 Apr 2025 21:20:43 +0000
Manifest this update:     Fri 04 Apr 2025 21:15:43 +0000
Manifest next update:     Sat 05 Apr 2025 22:52:43 +0000
Files and hashes:         1: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: A1CjnV+NyDZwOVxdBcrWKwBSG1WxLzqze1hZgIjxST4=)
                          2: 36322e3131322e3134342e302f32302d3230203d3e20313734.roa (hash: Ad72tjH/2ejz4oVBvE15bChc+ZghBWzMmGhckXgb9l8=)
                          3: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: dPumV3w+l5K00Z5figZidyPpD2Xj/WObq95u77jhIK4=)
                          4: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: ujOzcUFn73GlYynt8yef9LZrmhEywDFvXOhmuSoBoLw=)
                          5: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: 5fRTLBwa+9UakH99d7fiIhF38s5b5HYUgOzUS5Gnq9Q=)
                          6: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: XMw9F313q7zqwk9WgKtqBIUnF54AehPCvxl08cqiMlw=)
                          7: 3138352e322e3136322e302f32332d3234203d3e20323135323639.roa (hash: C51KB3vmzIVuzhz63IWTP1lTGLSpJxZj4/CH5M0kfBA=)
                          8: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: cwrS6A/oM7uVoRnag/rHPBb4Qk8hZAq3bZyA0gVPCzk=)
                          9: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: WiqoWKXOz7ZQhMXXduL0+zFQFmjEeKBsMMHhWo7WoIA=)
                          10: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: oQyH8lZhLG0u0aqF+4s4indFn1nAIdiedV1waxwDSVA=)
                          11: 3138352e322e3136322e302f32332d3234203d3e203531383437.roa (hash: Jwdi//fPxewEqnA7O6IEmtLIG4RVeyoi6OUkCB8cEJ4=)
                          12: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: LBMUHWugPGnJtw9mI4PuIshgxiedjcAOS8XKlWg3eYE=)
                          13: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: croMu0E9wofvL0uxcR7zjKLYZEonbZiHP8TK6ggNZ7I=)
                          14: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: ctmz9i6j9MzmoRzm8Yae2LkIQQsvUmf+XGfjJWt9iD4=)
                          15: 3138352e322e3136322e302f32332d3234203d3e203233343730.roa (hash: BaNMtijhViF+Bla+nFfkE6LPu/fLazY0/tBmFu9zjrc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:72:d5:5e:1a:90:a4:b6:a0:a9:6e:c5:ee:5c:43:8d:51:48:17:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
        Validity
            Not Before: Apr  4 21:15:43 2025 GMT
            Not After : Apr  5 22:52:43 2025 GMT
        Subject: CN=550E05DA25BB713F5000E2D7320885ACC1704A4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cc:b5:53:fa:52:7f:07:a0:cc:cc:c8:39:6f:
                    97:df:8c:37:77:8b:5d:56:89:0c:b0:07:42:3a:36:
                    33:e6:72:ad:79:e9:07:ce:9f:9a:29:30:eb:eb:d6:
                    53:e2:73:93:6b:93:85:c9:e3:b4:ba:61:fb:1f:7a:
                    cb:79:70:48:18:bd:41:ce:cf:ef:29:1d:f4:81:60:
                    a7:21:ae:a7:1d:f2:fc:7d:3c:1e:2e:79:68:36:b2:
                    6e:39:0d:d7:c1:30:c7:08:63:e3:fc:ec:60:0c:80:
                    da:0c:c9:3f:a7:2e:2e:9d:60:73:ad:d8:ec:24:fd:
                    a9:67:0c:3f:c0:15:16:18:97:8a:44:e0:5e:c5:b5:
                    e8:b1:f5:c4:4a:1a:24:d9:d8:8a:11:1e:4f:48:4e:
                    8d:93:57:34:e1:70:82:35:13:7d:58:9a:87:e1:a6:
                    28:36:2b:4a:17:5d:0b:61:a1:f5:84:95:4d:f0:54:
                    bd:06:6f:bf:ce:7d:60:91:fa:79:90:81:5f:7e:21:
                    aa:58:dc:0c:9f:e1:dc:9b:19:9a:bb:78:43:b7:42:
                    3a:04:52:9d:32:f9:73:17:b6:c0:83:3e:69:d7:3f:
                    cb:99:1e:31:0a:6e:f5:b5:2d:d8:85:8d:12:86:a5:
                    1c:72:c5:43:31:45:67:df:18:59:3f:60:12:83:64:
                    1e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0E:05:DA:25:BB:71:3F:50:00:E2:D7:32:08:85:AC:C1:70:4A:4B
            X509v3 Authority Key Identifier:
                keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:0d:b6:78:ef:d0:33:a6:55:4b:0c:a0:52:1c:20:4b:2b:5a:
         ae:75:24:a3:e2:f2:e0:b4:8d:cd:4a:43:d7:2a:60:01:8d:22:
         b4:4e:d9:98:79:f0:7b:b9:ed:25:2b:24:89:a1:dc:1b:16:e4:
         3b:9e:a5:46:a8:cc:3e:8f:83:1d:87:85:81:e3:27:41:fb:42:
         ee:a8:9d:44:47:18:12:6e:bf:c0:cb:2e:12:55:a6:5e:82:dd:
         8c:de:7b:6e:57:33:38:b0:b6:75:fc:b5:99:77:2c:85:dc:36:
         71:02:06:fc:13:34:67:e7:02:e7:5f:8b:65:1a:cf:70:8f:05:
         46:c0:1b:02:dd:9f:90:79:02:af:f4:4d:5c:3e:2b:07:a1:a6:
         9d:c2:3d:07:e0:4b:d3:3f:d3:15:aa:72:0e:e7:fe:b7:e9:7c:
         f8:04:03:a8:a2:b6:22:6c:00:67:0c:d3:fc:b3:82:1e:0a:a0:
         b2:2f:aa:bb:d8:1d:59:3f:19:9e:b0:f9:93:a8:db:b4:07:c1:
         08:58:27:25:0a:77:d8:7d:cb:99:a2:cb:c2:41:79:15:29:51:
         3c:ed:95:2e:a5:09:eb:58:21:e9:22:7c:01:2f:8c:d7:a4:ef:
         b4:c4:e6:91:00:4d:c8:b3:b3:a5:ed:c5:b6:24:b7:84:de:ef:
         1d:20:35:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:34 2025 by rpki-client