Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
File:                     98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json)
Hash identifier:          xmFGcLzV6dSgZ722T+fBywlfT/8gl4zbW/YDXCXLMDo=
Subject key identifier:   4E:14:79:E4:23:1E:20:23:5D:89:8F:68:E5:86:04:C6:20:D4:26:B7
Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
Certificate issuer:       /CN=98a87cad5b710890a9528f166f4202393824e6b8
Certificate serial:       699E8DE5AB782A79079F173F8810C63579BE7441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
Manifest number:          02AF
Signing time:             Tue 03 Dec 2024 03:42:56 +0000
Manifest this update:     Tue 03 Dec 2024 03:37:56 +0000
Manifest next update:     Wed 04 Dec 2024 05:01:56 +0000
Files and hashes:         1: 326131313a353730353a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: abdx96bGasEt79nv1n4PdtuPD35/cpm50ioY9tC3qus=)
                          2: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: 2t1rBhnp/nx2NbYLLBT6459cj12qNkxF/Y+7pwb3JUg=)
                          3: 326131313a353730333a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 4u/gNCBvytd7eZSyyMh6T2KiCJ3m+wg7l3GvlAdV7y4=)
                          4: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: QSf1f4sZpmKAqesOD+5GkB0Z3X1d4jZecHW/qgpOz7c=)
                          5: 326131313a353730363a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: AfUd0g6EM08gdKu3gWYFuswqhaPb+uAVwfADq4dSUAA=)
                          6: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: abkTgvFhAoj4f+KMDGBQF/dpnMqoiBMVzOOia/8N82A=)
                          7: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: GzEfYNi6/vde9duBI4GoacY9I1ImrO0osp4FqLdS6w0=)
                          8: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: M1W/UI7nVvcG5IlyKmaYpsnNndD+L3rNJ9g8XuVAe1c=)
                          9: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: 6xKp24gU5DBAB1Kw+WWXfVQhj34i1+UyseAfrABT8A8=)
                          10: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: jIh25hfOh+rFQiGmadfy1dIZhgp+dBsBKhlqy+GXRi0=)
                          11: 326131313a353730323a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: jpJvrreRDifLrtBDiVkCHa/ih9KUqNO+TXds5XFOzYA=)
                          12: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: XD3V5dJXTVRCxQzxxC2QHwrcf2NvhNrbOoV/LwRhC+0=)
                          13: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: TMlytZ8X0slW9x4jJKyuBdUnUnMpROm7M/wSYhg+WrM=)
                          14: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: OiF9NTgLIvpgOtsU+ET8v0G7trHw/6kgGm+sQfii6jA=)
                          15: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: WtMw6gTmYTWCmtNsyMU8znGs+9TK96TMgDW07igAViw=)
                          16: AS48070.asa (hash: YsK0/rV2BmXeHeRJ0VrNqX7Hbez3e33zUXMrV6bup5Y=)
                          17: 326131313a353730373a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: yXrlXEmbJ+W468Anpz8E2TYdQ5p48eYhmRv8EWEFWss=)
                          18: 326131313a353730343a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: vfJJza7tgDeLAPDMVyN5V6KQIqwick9H3Cppm/e5D7Y=)
                          19: 326131313a353730313a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 8rSYC/rmOaG6QMucx38lab+ttuAxpdA8gF20Sx392S0=)
                          20: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: P6VpVcg2APhRrCeqSdvJWAeWYuUD0ufb44Yi4WeNSS4=)
                          21: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: U7ZpZq92KRjLluBChNmcNbVK0yuDCFIu2VYYNCvyYhE=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 00:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:9e:8d:e5:ab:78:2a:79:07:9f:17:3f:88:10:c6:35:79:be:74:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8
        Validity
            Not Before: Dec  3 03:37:56 2024 GMT
            Not After : Dec  4 05:01:56 2024 GMT
        Subject: CN=4E1479E4231E20235D898F68E58604C620D426B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:66:0f:1b:dc:c5:a9:24:ba:de:ab:72:36:0a:
                    80:1d:aa:9a:a3:31:cd:7f:b0:34:8a:c8:8f:70:72:
                    cb:c6:1c:b8:4c:55:57:3b:ee:c8:1d:e5:70:71:fa:
                    15:e3:9a:9c:e9:d0:b9:49:5d:1b:11:e5:f2:dd:82:
                    77:b6:e6:8d:cf:e9:ca:e8:5f:14:07:ca:50:3e:f0:
                    65:db:62:f7:4f:f1:43:12:04:ac:9b:b9:18:ff:37:
                    41:93:8b:ea:8d:20:b5:86:59:a2:84:22:9c:74:e3:
                    3d:79:13:68:fc:06:49:da:32:00:8a:73:87:30:87:
                    8f:e4:97:23:dc:21:81:01:13:f3:62:66:b1:98:18:
                    05:f5:b5:d7:c9:0c:2c:a3:92:f6:7f:f2:1e:ce:00:
                    c6:8c:08:50:a0:80:cf:3f:6d:98:97:83:f4:4d:b9:
                    b3:40:68:ec:6d:6c:b6:04:68:91:d7:52:96:dd:d7:
                    da:75:8e:e0:aa:99:43:0a:83:b9:ce:cf:06:bf:91:
                    c5:d0:15:e3:af:20:65:47:1e:f6:3f:2b:12:7c:00:
                    e1:4b:44:60:cd:76:28:57:48:0c:67:d4:bd:9e:37:
                    32:06:83:34:94:af:75:34:45:0a:ee:f7:4f:a3:1d:
                    37:82:81:1c:c3:f1:b7:1c:b6:da:fd:3d:75:0e:d0:
                    3c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:14:79:E4:23:1E:20:23:5D:89:8F:68:E5:86:04:C6:20:D4:26:B7
            X509v3 Authority Key Identifier:
                keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c7:76:14:fb:35:52:64:77:5c:03:3f:46:1f:23:4b:82:fa:
         12:79:59:7b:85:a3:dc:a5:5c:f5:04:86:4e:c7:3d:96:09:11:
         de:7a:89:35:fa:b2:5e:bf:f5:18:d5:2a:1e:9e:0a:1d:a7:89:
         3f:8d:bf:a1:4d:aa:39:68:70:0b:a7:11:7b:8a:b6:b2:f2:90:
         1c:e8:6b:a0:48:73:c7:61:a0:ac:ed:fe:eb:4c:43:56:73:3b:
         2b:49:84:f8:42:29:06:6a:46:f4:1d:76:2e:32:3e:ac:68:54:
         e9:01:55:32:e4:dd:40:98:d9:13:65:da:6c:3f:68:fe:e1:2b:
         f2:74:07:c4:8b:be:a9:c3:96:60:af:4d:fd:7c:66:04:0e:00:
         df:9b:6e:4f:37:98:1e:45:eb:9c:40:95:57:bb:73:1d:3d:6e:
         81:03:e0:d8:e5:ec:1e:19:99:ef:28:59:4a:92:ed:1e:11:31:
         c1:2f:02:fd:ad:40:01:d3:32:e6:9f:12:04:56:05:a2:50:f3:
         a5:02:10:71:1c:30:8e:b7:e2:84:f3:cb:32:a4:a0:4b:f3:b7:
         6f:2f:2c:b1:bb:5a:72:77:e6:c1:66:ff:fd:3c:24:96:90:dd:
         b9:19:c8:73:49:ff:8f:fb:77:8c:33:bc:e5:36:cc:38:46:f4:
         65:01:6b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 06:16:45 2024 by rpki-client on console-fra.rpki-client.org