Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft
File:                     F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft (raw, json)
Hash identifier:          Heh2zdZgCVwmjJFMEKT1LEepIWRQjs9Ancl1IMxIUAs=
Subject key identifier:   62:3A:F7:F8:54:04:91:59:81:2B:9F:C6:EB:80:94:92:01:EC:CB:9B
Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
Certificate issuer:       /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Certificate serial:       361CFA53B3825F6C6C3A12566268E211905FB03A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft
Manifest number:          02B6
Signing time:             Fri 03 May 2024 00:26:42 +0000
Manifest this update:     Fri 03 May 2024 00:21:42 +0000
Manifest next update:     Sat 04 May 2024 01:34:42 +0000
Files and hashes:         1: 3139332e39332e3135342e302f32342d3234203d3e20323131343135.roa (hash: xMcsrC67odGaWyaR2hxgrCfYPETddSEG0xxrhNfldwA=)
                          2: 34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa (hash: MLoOg0WMNnQbU5WWUbDbyND1vsRkEBjaulJny3LgQq0=)
                          3: 34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa (hash: 7h9c3ic2ijne7bcZtVDKPsbHR6LZDseAyEQRvPPRo0U=)
                          4: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl (hash: uI53ZUC9A7K1g76Vjr474F9lnHOfLWcPCoyfMczIGg0=)
                          5: 326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa (hash: 3UlnCQXkfXu+2GZ5Bl7s6bSNz4Mx8TSa01kcYDPKMyM=)
                          6: 3139332e39332e3135322e302f32342d3234203d3e20313939363134.roa (hash: nT7gvnfkgYFNmxNunVHYHFHUN5YuSFJyH0PB1mpE4/s=)
                          7: 3139332e39332e3135332e302f32342d3234203d3e203631333137.roa (hash: f6JGNjZsAgaozmDw79IJKGiOd+NS/amYN159buCKF+w=)
                          8: 3139332e39332e3135352e302f32342d3234203d3e203631333137.roa (hash: CQ8GZzI1c7CqTnsVBjS8FkgsO1OVVGRKDoqwe+OZXuU=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1c:fa:53:b3:82:5f:6c:6c:3a:12:56:62:68:e2:11:90:5f:b0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
        Validity
            Not Before: May  3 00:21:42 2024 GMT
            Not After : May  4 01:34:42 2024 GMT
        Subject: CN=623AF7F854049159812B9FC6EB80949201ECCB9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:96:0e:8d:1d:b2:6d:bb:39:13:31:bd:c4:83:
                    43:b6:b5:8a:ba:8f:83:1c:93:de:a4:03:e4:f6:75:
                    a1:e2:b5:d8:4d:48:06:df:8e:f4:33:97:5b:f6:6d:
                    39:96:08:db:13:03:e9:80:7c:b1:d1:00:69:4d:31:
                    30:7d:86:e8:2c:7b:35:27:8c:ca:28:f9:3e:e1:27:
                    6b:54:19:3b:3f:10:0e:66:3c:8d:21:81:1c:43:f1:
                    e3:ad:43:71:a8:d4:6f:71:2b:76:7f:1c:e9:bd:4a:
                    f5:0d:02:90:af:6e:25:03:a8:5d:76:92:fb:c6:93:
                    ac:2d:19:96:ca:ff:6d:55:99:f8:29:f1:a7:1c:c6:
                    d0:a5:eb:e2:9b:55:9f:86:8b:44:b0:73:40:41:81:
                    dd:42:ee:92:80:cb:21:ff:60:7e:d7:95:33:94:1c:
                    61:2a:be:3d:df:1f:16:86:97:9e:d7:57:9e:65:ec:
                    23:6b:37:df:86:62:2a:5a:9e:59:29:9e:f1:42:4f:
                    48:a1:8b:45:f4:13:5f:bf:55:30:fd:06:ac:67:df:
                    59:19:2f:63:6d:f2:f9:40:71:59:31:f2:a3:1b:b8:
                    ff:c1:ef:0e:7f:3b:24:07:e1:f4:9b:57:f3:7d:ec:
                    11:99:1f:24:b9:2b:f6:b3:8c:65:9a:8f:24:35:27:
                    0e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3A:F7:F8:54:04:91:59:81:2B:9F:C6:EB:80:94:92:01:EC:CB:9B
            X509v3 Authority Key Identifier:
                keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:a1:b1:20:09:d1:6a:4e:90:b9:97:f4:9c:ce:d6:0c:5a:b0:
         36:3f:4c:c4:23:5b:f1:d2:2e:64:aa:fb:39:6b:e2:4a:0c:4f:
         2f:47:71:9e:60:bf:76:31:79:3d:87:0d:52:8a:c4:4d:44:57:
         cc:46:68:92:3d:22:27:39:39:88:58:e8:f8:47:96:0b:19:70:
         a0:17:a0:3e:58:9a:2f:d5:20:e6:fd:f1:6c:ae:ff:84:d2:72:
         5b:b5:7d:70:e7:1d:41:c3:b0:f1:7f:da:d5:0b:05:65:41:0d:
         97:9c:2f:6e:7a:b1:e9:b2:d2:ca:c2:53:aa:5b:ae:45:2a:0a:
         56:fe:8f:2d:64:52:dd:f9:82:89:2e:92:9a:87:b1:c3:b8:b7:
         ef:de:71:6b:c7:dc:51:9a:b7:7d:81:cf:f2:13:43:eb:53:c5:
         47:2b:85:97:9c:ae:05:01:89:59:be:39:46:ff:63:00:31:10:
         3b:05:ab:d8:fb:bf:e5:d7:a3:76:a6:64:3d:77:3d:a1:98:96:
         6a:26:32:96:02:ec:d9:42:79:28:ee:eb:0d:fa:6a:cf:73:6f:
         9b:93:90:ae:16:39:e3:f8:94:4a:e7:a6:7a:ed:67:06:4e:c8:
         7c:4e:6b:b3:48:ac:d1:0f:33:17:2c:a7:66:03:fc:b6:78:5e:
         fa:25:46:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:52:30 2024 by rpki-client on console-fra.rpki-client.org