Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
File:                     1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json)
Hash identifier:          B+Uj9y8blnSnNNHiaATrtrKlUHUU3V59ns2QHluaLuw=
Subject key identifier:   CC:05:81:3A:90:E6:8B:AF:28:56:19:B1:21:E7:AA:41:99:3A:A5:4C
Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
Certificate issuer:       /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
Certificate serial:       095901745146464120E7BA10D52C15720F824D14
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
Manifest number:          018F
Signing time:             Fri 04 Apr 2025 14:42:44 +0000
Manifest this update:     Fri 04 Apr 2025 14:37:44 +0000
Manifest next update:     Sat 05 Apr 2025 14:42:44 +0000
Files and hashes:         1: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: AF+Ua5qWjlXSmRcISzVN1U/rrOe/cIos4w3BIP5f38s=)
                          2: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: KADA3zDKXvL/4R+46HmNoDL3xG2RVXCQ+Fx+Q057jPA=)
                          3: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: LBwr2IIvIEK5xOuNpQkeW83enlWLrYAsIaYysvPQEas=)
                          4: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: wu4NApOfezgLJjsC2U+bzWwjgdcgVOBFq6UL7NyfBkc=)
                          5: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: UnaMFJ4LqZmUQNqlqG5yZayY3BN6lWYzE1n4NGCmei8=)
                          6: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: WILaErOtYEwaER07cW7IGwEP87dFlbxnPw+ZhGtPeTA=)
                          7: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: UquZZhD+stfw6K5NY7fXbhCP0+mqj1qzvei6xCuAA7A=)
                          8: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: suIl/3chBmz4SE6S2JNws6yO1vlc1iZKVLvbUUyDaA0=)
                          9: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: mbo+9PjAf+is8MQEYQcjnTe6biSi8K+HHfmzFB/JEuY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 14:04:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:59:01:74:51:46:46:41:20:e7:ba:10:d5:2c:15:72:0f:82:4d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
        Validity
            Not Before: Apr  4 14:37:44 2025 GMT
            Not After : Apr  5 14:42:44 2025 GMT
        Subject: CN=CC05813A90E68BAF285619B121E7AA41993AA54C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:91:9e:0c:e0:8f:86:71:55:e2:5f:f0:0c:79:
                    f4:81:ac:d5:08:4c:46:94:71:a2:cb:6f:ae:1a:fe:
                    8e:2b:3f:5a:0c:f6:bf:fe:e7:7a:ba:26:1f:64:83:
                    b9:67:70:6f:00:e2:26:07:bc:82:4a:38:34:b1:f6:
                    c9:df:42:6c:cd:e6:90:7f:2b:78:36:2b:09:3e:0c:
                    49:3e:b4:c2:89:ea:e1:58:64:11:cd:7a:97:0d:14:
                    97:9e:a0:a3:f3:bc:4f:1c:fb:b7:c7:89:e7:04:b8:
                    84:43:bd:44:d9:1b:bc:a5:ba:cb:ea:e7:dc:48:b8:
                    dc:81:94:78:37:9c:5b:0d:70:32:bb:8c:9f:6b:da:
                    4d:80:37:fb:8e:8d:2c:e6:57:1b:0a:90:36:40:97:
                    e5:f4:fa:0a:89:2b:22:3c:d1:b6:4e:22:3f:ab:fa:
                    65:29:43:05:7e:4d:40:d3:9e:a0:72:37:03:bb:2e:
                    25:07:dc:2b:82:e9:8d:5f:3a:db:31:f6:65:09:85:
                    24:e4:79:38:70:1a:23:79:bd:2a:57:fa:7e:58:c2:
                    6e:94:9f:93:d2:cd:64:34:75:0c:cf:2a:5e:b7:09:
                    3c:f0:7e:fa:6d:e2:9a:07:08:2e:ce:ee:fd:7b:7a:
                    e0:e2:c1:56:f0:46:80:cc:9a:eb:88:9e:48:59:21:
                    83:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:05:81:3A:90:E6:8B:AF:28:56:19:B1:21:E7:AA:41:99:3A:A5:4C
            X509v3 Authority Key Identifier:
                keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f8:a4:bd:b3:7e:82:46:3b:29:89:ce:c3:41:e5:66:62:05:
         25:b9:08:c3:11:5f:4f:c9:e8:f0:fe:81:c3:22:1e:f9:0a:f3:
         b2:49:aa:7d:5e:ab:c9:0c:f2:f0:bc:5a:df:96:02:98:4d:ce:
         8d:1c:1f:4e:69:34:6a:62:05:2b:f5:e4:ce:01:23:b8:ef:34:
         2e:b6:06:8c:87:6c:6d:7a:38:e7:2d:a4:fc:80:24:b3:43:4c:
         8c:65:28:f2:ea:49:f2:34:e2:33:ba:22:8f:8f:59:f0:9b:f5:
         da:e8:d8:23:7c:7c:dc:30:a2:72:d3:3f:41:ef:04:12:47:4f:
         c2:ad:02:8f:08:f5:0a:cf:ed:f9:bd:d6:af:ac:f5:85:0f:6c:
         77:ae:0f:c9:93:9a:a5:44:10:66:29:68:d0:02:5d:33:fb:7a:
         6b:81:8f:32:b2:96:5b:83:42:2f:41:d4:f3:3b:b9:31:26:15:
         ae:60:37:0d:29:46:4f:3c:8f:17:c3:38:57:39:41:66:9f:bb:
         50:9f:bc:ae:f8:f2:15:a3:45:c7:4c:29:7b:ae:d4:55:e8:44:
         7a:10:01:26:68:b4:da:04:59:42:30:52:35:e9:24:cd:64:2e:
         06:64:b8:6b:3d:17:f1:96:a3:9a:df:70:2a:a6:8e:00:40:83:
         73:a5:00:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:22 2025 by rpki-client