Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft
File:                     F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft (raw, json)
Hash identifier:          2s1M1VGTg8R0cDWQcnuFnDwda8NbRVFvwjiTTNL5WQY=
Subject key identifier:   F7:5C:62:3B:0A:EB:29:CD:5B:12:15:53:04:EA:A6:C6:6D:DE:F5:3F
Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
Certificate issuer:       /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Certificate serial:       28453393FC9E482EA319787EEE731E469883F3CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft
Manifest number:          043E
Signing time:             Sun 16 Feb 2025 16:06:46 +0000
Manifest this update:     Sun 16 Feb 2025 16:01:46 +0000
Manifest next update:     Mon 17 Feb 2025 17:25:46 +0000
Files and hashes:         1: 3139332e39332e3135322e302f32342d3234203d3e20313939363134.roa (hash: jNaGJEHXg+vn+v2vVdhmJa1IVdEz/D1ggT5kvM1c0Hk=)
                          2: 326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa (hash: jAOxURrHtZvlqdFVdBr3F4ACmPO4DT4L5AmOtZPktVY=)
                          3: 3139332e39332e3135332e302f32342d3234203d3e203439313237.roa (hash: muToXyQQPQk1kATIKIk2PX93pnZZn2qQ05PiLXKydlA=)
                          4: 34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa (hash: j/tvDF/xrBJ6Z/GVFcZpOag/ZBQuFXiJ56kFmYlSx34=)
                          5: 3139332e39332e3135352e302f32342d3234203d3e203230343733.roa (hash: Yia13ZpyH/rxCHPO1ZKxkaJKT40u4xmMRfCLnQCmpaw=)
                          6: 3139332e39332e3135352e302f32342d3234203d3e203631333137.roa (hash: SV7SbziqH7eMIEMJIbsVc3dV1p2SM237aRtzHljTDkg=)
                          7: 34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa (hash: NLU++5xZjzD437PtmNgvfxHCqYMIFnb00RqdIBmj2Iw=)
                          8: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl (hash: ahyvLUPMAPC6OtCd9FxnPFqZkqo6y0DiThPZ2ydy7i8=)
                          9: 3139332e39332e3135332e302f32342d3234203d3e20323134303336.roa (hash: FgMfWX7zLNqyUMvyIkAVqVqXpYApxS0iTmFAdZ7lH9Q=)
                          10: 3139332e39332e3135342e302f32342d3234203d3e20323131343135.roa (hash: lcDvK25Krwnz/wCtWIMtJ+GA0fjdNOA7l7WMMKyVVUU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:45:33:93:fc:9e:48:2e:a3:19:78:7e:ee:73:1e:46:98:83:f3:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
        Validity
            Not Before: Feb 16 16:01:46 2025 GMT
            Not After : Feb 17 17:25:46 2025 GMT
        Subject: CN=F75C623B0AEB29CD5B12155304EAA6C66DDEF53F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:80:d2:1d:6a:ff:42:27:b6:09:d3:83:37:f1:
                    c3:9d:6d:18:27:4d:7c:f4:2c:4c:51:c0:ab:f9:10:
                    8e:7f:f5:c9:38:79:2d:79:02:5d:e7:3f:f6:8a:88:
                    e1:4b:22:22:1c:20:20:f1:bc:31:ae:9e:e0:42:f9:
                    6a:8b:7d:0b:8c:f1:f2:f6:06:4b:86:8e:fe:a9:29:
                    ee:6c:b8:b8:96:35:63:c9:8e:81:c1:1b:4e:34:27:
                    17:1f:78:41:47:34:1c:d5:58:45:d1:61:4e:22:7c:
                    70:01:19:0e:23:b6:3e:1d:90:32:b3:3f:05:e8:45:
                    09:f5:92:5b:47:f8:68:67:6a:48:a4:ff:bd:06:a3:
                    52:61:d2:03:99:2b:9d:81:85:85:b7:ad:40:a9:3f:
                    1d:f5:6c:6c:76:48:20:bd:ca:db:f2:e2:36:34:c7:
                    4f:9a:ca:28:58:db:11:8d:9a:64:2d:90:e9:79:ed:
                    fe:30:0b:19:3b:6a:7e:a1:d6:53:0f:b0:69:e8:fb:
                    62:cd:3e:55:96:e1:25:06:e6:1d:d5:b5:0c:41:95:
                    8a:cf:e3:06:a4:3f:ac:ef:af:71:59:d9:78:1b:67:
                    24:86:2f:6d:c6:29:d2:91:14:cc:2a:4c:eb:2c:d4:
                    46:09:0c:53:96:15:37:a5:5d:eb:c0:43:b5:7c:53:
                    4b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5C:62:3B:0A:EB:29:CD:5B:12:15:53:04:EA:A6:C6:6D:DE:F5:3F
            X509v3 Authority Key Identifier:
                keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:43:48:d5:44:c5:3e:8a:46:67:60:47:e5:e3:96:87:4f:cb:
         2d:1c:b3:0d:09:05:e2:6e:85:46:14:a9:35:84:29:79:26:ae:
         2f:41:cb:5d:20:3c:19:26:34:85:07:9c:43:e2:6c:8e:4f:88:
         ce:2d:ad:33:71:78:29:44:ef:6a:76:80:09:a6:ce:b6:c0:78:
         bc:d1:14:9d:8a:bc:79:f7:a3:df:93:e5:43:2b:30:10:75:81:
         09:9c:cd:25:74:1b:16:dc:00:c9:10:6e:f3:e7:7b:2e:7e:ac:
         8b:2b:92:5a:0e:57:35:90:ca:89:59:18:33:18:59:45:c9:9c:
         52:04:79:b3:e8:09:ed:7b:bd:45:20:fb:b9:13:23:14:0b:60:
         e4:12:0c:ca:d6:dd:a0:2f:eb:9d:2c:d3:6b:a9:c3:a3:a1:71:
         15:6f:fb:95:0c:e9:02:48:5b:94:43:33:9b:90:71:54:cc:be:
         74:7d:31:2e:4c:f2:06:2b:4f:6d:e0:79:7c:2f:87:55:d7:ab:
         7b:07:68:bc:88:b8:5e:a4:a0:92:6e:ac:1f:c8:11:af:8a:3a:
         4a:c9:0f:c7:f1:c2:42:b2:6b:74:aa:fe:9b:f5:dc:9a:5e:75:
         94:b7:99:1a:bd:9b:d7:f1:9c:61:42:e1:8c:a1:3d:a8:63:52:
         43:82:19:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:05 2025 by rpki-client