Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
File:                     3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json)
Hash identifier:          Vqh1upwlh6ylEFl9oxUakVbaETfuZdN9cX1fmoL1xuM=
Subject key identifier:   06:0F:EF:E7:F8:99:11:E9:DD:C6:8E:0C:8E:98:7C:89:37:15:67:4F
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Certificate issuer:       /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial:       49481DD51C58F7512FE14F686C1117C57343B73A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
Manifest number:          03E3
Signing time:             Fri 22 Nov 2024 05:33:40 +0000
Manifest this update:     Fri 22 Nov 2024 05:28:40 +0000
Manifest next update:     Sat 23 Nov 2024 06:36:40 +0000
Files and hashes:         1: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: fwFlI5KynFReBaJHeEmglZP/AWQ+qsV3ZylKwH9jb0Y=)
                          2: 3138352e3231332e3234302e302f32342d3234203d3e203239353338.roa (hash: gcrezpbkvcqBnSLpZetM8bEEnNHAAsTxciJcMFM8hRM=)
                          3: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: W9NdT6aoX4s9PghUA97T0GAxnEF0Q0u3VMj+QX70R5Y=)
                          4: 33362e3235352e39342e302f32332d3233203d3e203632323430.roa (hash: HHehYmYO5S3nVqn5RxPN8IY1cV+6/LfOgSFg8yGTFv0=)
                          5: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: OBAzX7jZUk7Za1E5MEVxtdjyAyWEmCtcqgWHValavGM=)
                          6: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: Os5pPaUq4wuSIVKgbNMacUddHXr+Tpw7Nr5HsfcIjhw=)
                          7: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: h1azTNafUjb7UdhKJgtNINL6z0yWbbbvs5e4uvD1ZDY=)
                          8: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: OQY6w4Q7ZQH092Yj40TGy9LpmPXnSdGe58D7QhrLuAk=)
                          9: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: UABDTXTWp8foWVTBYxxIWEuae7LAbLk9s44nxTvRACo=)
                          10: 3138352e3131312e3138392e302f32342d3234203d3e203631303934.roa (hash: 7GvIeRHulthBUpjBqsqDj1rm4KiFcp0loCD/HDsOBdE=)
                          11: 3138352e3231332e3234322e302f32342d3234203d3e203631333137.roa (hash: SKhTV84jNI1MhV+XLYyiYmvQWNoZGMyb4/D7Z/xQFXo=)
                          12: 3138352e3232392e3230332e302f32342d3234203d3e20323036373335.roa (hash: FZGdNF2bcBn3tP8pVRjxMkfCiiAE12vqIDQ0utFcBVs=)
                          13: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: 1mp0f8eHaMQpRA78Gkk4jwOU31yHu1aUXXw7yDxnVEo=)
                          14: 3138352e3133302e36302e302f32342d3234203d3e203437323633.roa (hash: Mxm0Th4cvATiCDtJUDgGxPClmGBwI49A7J/53MEK4wc=)
                          15: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: +zgqg7oCfaFMqowtNn81ipaj3irDs5wSCtc6B41Oes8=)
                          16: 3138352e3232392e3230302e302f32342d3234203d3e203139343337.roa (hash: EP6RD+ZuD8/aeGRdu5DeM51xsrxE2M7oAfAneTY5Btg=)
                          17: 3138352e3231332e3234302e302f32342d3234203d3e2033323233.roa (hash: MZau10zedWMcfacP+tAKMz6NiJl4IfcotdHySIsuAvo=)
                          18: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: hgOouETN68JjnwRVGuA3Qb1CgGL84jJbpDczZSdOrkw=)
                          19: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: KhYwWjM/5tZMAc1Ys2Qi/Z3IxKzkYaHG79mNsaA679A=)
                          20: 33362e3235352e39322e302f32332d3234203d3e203630373831.roa (hash: 7osIUbxAsp8JXEl3vUE49emLTbi5wZizrI6LmhRbKog=)
                          21: 3138352e3231332e3234302e302f32342d3234203d3e20323039323432.roa (hash: r/yhCg+H/V+gvgUqqXgm6SF+8gfop7ZrFjkciDc1VEs=)
                          22: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: 7MRl2ndToXr+/Nwpi0fWFQSP/EKXsP73R/4IMWd5dgM=)
                          23: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: GFt7MPBQXAoRbBAZf/a6ypM3reYPwEU6C1kyEqDInRE=)
                          24: 3138352e3133302e36322e302f32342d3234203d3e203239303636.roa (hash: mH/CiZmwU0yIfVsdjhTMAG/KAtonINfckXbmsVpawiw=)
                          25: 3138352e3133302e36302e302f32342d3234203d3e20323039383234.roa (hash: /ZWZ+zszt3TNCj2yOoTJTCE/0H082SSXrxH7o4HYwGg=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:48:1d:d5:1c:58:f7:51:2f:e1:4f:68:6c:11:17:c5:73:43:b7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
        Validity
            Not Before: Nov 22 05:28:40 2024 GMT
            Not After : Nov 23 06:36:40 2024 GMT
        Subject: CN=060FEFE7F89911E9DDC68E0C8E987C893715674F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cc:c7:4a:cf:77:c6:df:bf:46:5e:8b:a7:ab:
                    c5:0a:94:0b:25:63:e8:fb:6e:ae:f5:2c:bd:18:b1:
                    81:d3:2a:51:75:54:81:60:d1:f0:a3:73:c3:b8:17:
                    f1:c5:18:4d:ec:80:db:65:42:c0:6b:2c:2f:4c:3f:
                    18:44:05:b0:dc:f7:1c:87:a3:7e:c3:53:3f:b8:58:
                    3d:c1:2b:81:0a:55:38:27:ba:00:31:24:ca:73:1f:
                    4d:60:ee:2f:aa:e9:08:3f:6c:90:44:c5:73:56:81:
                    be:8c:4e:80:b3:c3:68:24:fc:d1:0f:27:8f:15:53:
                    27:73:25:df:ac:82:ae:ce:80:ea:46:70:f3:ed:12:
                    a1:96:dd:1b:24:9f:2f:1c:ef:85:f3:66:cd:91:04:
                    23:80:95:ab:1e:b0:fb:2c:42:38:24:e0:ac:7e:3a:
                    59:cd:1f:03:dc:b7:ad:1b:13:85:e4:68:be:1d:bc:
                    5e:76:a5:1e:6e:1e:d0:eb:c2:92:95:e8:52:ad:a7:
                    fb:a8:ef:f3:6d:6f:fb:6e:7d:41:cc:5b:c8:35:07:
                    3b:61:68:f7:e2:28:88:cd:e6:be:2d:09:37:c5:f5:
                    95:6c:9d:3d:c5:a4:5b:97:8c:b7:ab:2b:67:0a:35:
                    6b:62:93:1d:13:9e:75:e1:81:03:78:33:49:78:7c:
                    4a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0F:EF:E7:F8:99:11:E9:DD:C6:8E:0C:8E:98:7C:89:37:15:67:4F
            X509v3 Authority Key Identifier:
                keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b7:1a:06:63:54:5b:fa:b4:48:a6:05:6d:26:30:d2:6c:cf:
         32:1f:48:93:f6:ed:bd:03:3a:28:2f:77:e7:b7:68:7b:9b:cb:
         1b:6b:28:ef:f5:a4:87:9c:d9:47:b1:88:17:c9:1e:37:6c:ae:
         02:97:40:25:ee:25:cd:f1:72:0e:6b:f7:66:c7:69:c1:26:f8:
         52:44:1f:96:ee:5c:2a:c1:88:fc:c2:bc:52:ca:07:5c:69:cb:
         4c:8d:6f:01:f1:e1:11:85:2f:a9:e7:a0:74:a4:20:83:7b:b8:
         f6:4f:25:6d:31:52:73:bc:be:09:2f:3d:89:20:54:70:81:c1:
         3c:41:b8:c2:2f:04:ad:04:65:0c:83:e2:24:fe:c6:ee:b7:71:
         e6:61:3d:86:3c:39:03:94:15:70:55:f1:e8:2c:45:65:e2:26:
         42:92:cf:7c:7e:23:fc:e5:4f:5a:0e:39:87:2e:1f:93:d5:b7:
         30:57:5b:8b:da:89:31:a8:27:09:91:59:b6:7f:6b:37:07:44:
         d2:b6:e4:21:e3:e8:cd:4d:4b:cc:f1:91:44:ef:52:43:7c:cf:
         fa:d8:6f:1a:78:3a:9c:ba:d7:92:e1:d4:e8:0b:44:78:76:38:
         61:4a:d5:65:af:d7:d4:b7:dd:4c:bf:a1:da:8e:b6:0e:86:16:
         bf:5e:4e:53
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUSUgd1RxY91Ev4U9obBEXxXNDtzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm
Yjc3YjRhOTAeFw0yNDExMjIwNTI4NDBaFw0yNDExMjMwNjM2NDBaMDMxMTAvBgNV
BAMTKDA2MEZFRkU3Rjg5OTExRTlEREM2OEUwQzhFOTg3Qzg5MzcxNTY3NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrzMdKz3fG379GXounq8UKlAsl
Y+j7bq71LL0YsYHTKlF1VIFg0fCjc8O4F/HFGE3sgNtlQsBrLC9MPxhEBbDc9xyH
o37DUz+4WD3BK4EKVTgnugAxJMpzH01g7i+q6Qg/bJBExXNWgb6MToCzw2gk/NEP
J48VUydzJd+sgq7OgOpGcPPtEqGW3Rskny8c74XzZs2RBCOAlasesPssQjgk4Kx+
OlnNHwPct60bE4XkaL4dvF52pR5uHtDrwpKV6FKtp/uo7/Ntb/tufUHMW8g1Bzth
aPfiKIjN5r4tCTfF9ZVsnT3FpFuXjLerK2cKNWtikx0TnnXhgQN4M0l4fEp1AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUBg/v5/iZEendxo4Mjph8iTcVZ08wHwYDVR0j
BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy
Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190
M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00
ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1
MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALcaBmNUW/q0SKYFbSYw
0mzPMh9Ik/btvQM6KC9357doe5vLG2so7/Wkh5zZR7GIF8keN2yuApdAJe4lzfFy
Dmv3ZsdpwSb4UkQflu5cKsGI/MK8UsoHXGnLTI1vAfHhEYUvqeegdKQgg3u49k8l
bTFSc7y+CS89iSBUcIHBPEG4wi8ErQRlDIPiJP7G7rdx5mE9hjw5A5QVcFXx6CxF
ZeImQpLPfH4j/OVPWg45hy4fk9W3MFdbi9qJMagnCZFZtn9rNwdE0rbkIePozU1L
zPGRRO9SQ3zP+thvGng6nLrXkuHU6AtEeHY4YUrVZa/X1LfdTL+h2o62DoYWv15O
Uw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:51 2024 by rpki-client on console-ams.rpki-client.org