Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft
File:                     F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft (raw, json)
Hash identifier:          Uy/dODf40PxC3qcGQcoeO6OryVE8cFQq1Vvlk2IdZMQ=
Subject key identifier:   20:52:EC:E8:18:CC:56:30:1C:3E:9E:B0:A0:F2:D7:01:9C:70:BD:4B
Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
Certificate issuer:       /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Certificate serial:       7E44E1E773581A9E406048F9226E7E1C9EE3FEC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft
Manifest number:          0414
Signing time:             Thu 16 Jan 2025 06:14:36 +0000
Manifest this update:     Thu 16 Jan 2025 06:09:36 +0000
Manifest next update:     Fri 17 Jan 2025 10:04:36 +0000
Files and hashes:         1: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl (hash: P4HbBaoJKpP0CLvqnR1IHSx11CE9yeVLn+KCN7PCRcE=)
                          2: 3139332e39332e3135352e302f32342d3234203d3e203631333137.roa (hash: SV7SbziqH7eMIEMJIbsVc3dV1p2SM237aRtzHljTDkg=)
                          3: 3139332e39332e3135352e302f32342d3234203d3e203230343733.roa (hash: Yia13ZpyH/rxCHPO1ZKxkaJKT40u4xmMRfCLnQCmpaw=)
                          4: 326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa (hash: jAOxURrHtZvlqdFVdBr3F4ACmPO4DT4L5AmOtZPktVY=)
                          5: 34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa (hash: NLU++5xZjzD437PtmNgvfxHCqYMIFnb00RqdIBmj2Iw=)
                          6: 3139332e39332e3135342e302f32342d3234203d3e20323131343135.roa (hash: lcDvK25Krwnz/wCtWIMtJ+GA0fjdNOA7l7WMMKyVVUU=)
                          7: 34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa (hash: j/tvDF/xrBJ6Z/GVFcZpOag/ZBQuFXiJ56kFmYlSx34=)
                          8: 3139332e39332e3135332e302f32342d3234203d3e203439313237.roa (hash: muToXyQQPQk1kATIKIk2PX93pnZZn2qQ05PiLXKydlA=)
                          9: 3139332e39332e3135332e302f32342d3234203d3e20323134303336.roa (hash: FgMfWX7zLNqyUMvyIkAVqVqXpYApxS0iTmFAdZ7lH9Q=)
                          10: 3139332e39332e3135322e302f32342d3234203d3e20313939363134.roa (hash: jNaGJEHXg+vn+v2vVdhmJa1IVdEz/D1ggT5kvM1c0Hk=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Jan 2025 08:50:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:44:e1:e7:73:58:1a:9e:40:60:48:f9:22:6e:7e:1c:9e:e3:fe:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
        Validity
            Not Before: Jan 16 06:09:36 2025 GMT
            Not After : Jan 17 10:04:36 2025 GMT
        Subject: CN=2052ECE818CC56301C3E9EB0A0F2D7019C70BD4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:82:46:d6:7c:8f:5b:e7:90:9a:c1:b7:c3:83:
                    37:ba:c3:67:54:21:4c:db:61:66:b4:3b:02:6e:12:
                    2e:4d:c2:84:70:cd:cb:b2:26:8c:a3:9d:b2:38:5c:
                    5f:25:32:03:a9:dd:b8:8a:94:17:49:fd:85:52:99:
                    64:43:d8:bd:78:70:fd:42:97:f8:6d:1a:b0:3e:fb:
                    a7:02:f5:f8:7e:4f:41:5a:29:98:3a:05:af:b3:27:
                    8b:75:43:78:20:ba:1f:1f:56:5b:50:c4:5f:12:53:
                    f7:e9:22:3c:58:e8:85:e7:66:7e:9a:b3:0d:09:9d:
                    99:df:73:99:8a:9f:93:66:a3:08:cf:8e:ec:96:5d:
                    96:96:31:b1:f9:a5:76:18:07:f7:c3:2b:a5:28:41:
                    ad:ee:3e:0a:f2:a4:e1:da:c4:18:fc:d2:a2:3e:3c:
                    dd:ba:31:93:9e:7f:f4:cf:3e:24:73:18:1f:40:14:
                    e5:c7:64:81:0c:4c:99:fa:3f:52:fc:19:26:e1:ce:
                    3e:16:a4:60:cf:1b:c9:5e:e1:f5:76:ea:b2:0f:01:
                    ca:58:9d:a8:51:35:e3:97:60:b3:37:e6:f2:2a:63:
                    75:7a:bc:85:95:ae:db:d2:53:d8:41:f9:8e:0c:88:
                    79:94:03:0e:3d:0c:c8:da:97:03:06:22:e7:fd:ed:
                    88:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:52:EC:E8:18:CC:56:30:1C:3E:9E:B0:A0:F2:D7:01:9C:70:BD:4B
            X509v3 Authority Key Identifier:
                keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:ef:d3:db:a5:b0:59:95:93:79:05:3c:06:01:d6:ef:9e:07:
         01:35:71:11:79:5d:93:c4:64:e4:67:c2:47:26:29:72:d4:18:
         77:7b:c6:b6:69:a4:6a:ec:0c:67:0a:f3:f8:f0:04:97:89:b9:
         54:4f:41:d0:da:77:57:0e:4c:73:d5:30:d7:9b:66:bd:dd:7d:
         da:d2:64:ca:ff:d0:23:98:b2:13:5b:52:e4:3c:58:3f:d9:70:
         91:71:ee:38:56:71:f1:85:e5:99:ff:83:2b:b8:8b:de:94:c0:
         b6:bf:2c:00:1d:73:f5:bb:d0:77:c5:3b:86:4e:61:11:39:21:
         87:80:32:78:5e:fa:b6:38:91:a4:60:e1:a6:2b:39:2c:81:b5:
         0b:2d:26:b1:c1:c8:c0:ec:65:7b:40:4d:6b:47:d1:27:bf:36:
         d2:88:27:68:b8:2f:45:ca:df:c0:dd:d8:65:cf:e9:b1:56:41:
         b7:a9:c5:04:38:aa:1f:a9:20:84:a3:f0:b2:b0:f4:fb:73:2e:
         92:ee:75:aa:01:8a:7b:b4:0a:9b:7e:3f:d3:2f:d3:ac:62:dd:
         0d:b1:25:18:42:8b:54:a1:9a:14:b1:7d:82:19:a8:17:38:a0:
         3e:39:19:54:0e:70:b7:c2:61:1e:a6:fa:d6:9a:6f:fc:31:bb:
         b3:9b:f2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 16 11:38:48 2025 by rpki-client on console-ams.rpki-client.org