Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
File:                     2472949B3C234930DBE99B1B5CD5196AB16D151B.mft (raw, json)
Hash identifier:          v6TURkhJIRr3jPiNeclS7DIuAtAj8c2JKyC6WWfKiZo=
Subject key identifier:   DD:46:1D:BB:2A:71:06:02:48:92:24:2A:80:9F:9F:F7:E8:ED:41:D7
Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
Certificate issuer:       /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Certificate serial:       26A31F02656C1088A5AF8544AD9EC0F0061459A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
Manifest number:          024D
Signing time:             Fri 06 Jun 2025 05:53:26 +0000
Manifest this update:     Fri 06 Jun 2025 05:48:26 +0000
Manifest next update:     Sat 07 Jun 2025 06:25:26 +0000
Files and hashes:         1: 32332e3137302e37322e302f32342d3234203d3e203436373636.roa (hash: FghA8Zz7QbzObKv2ia/HqFgnN9W82bmOSCIz6G2zFuE=)
                          2: 323630323a663961323a32303a3a2f34382d3438203d3e203436373636.roa (hash: LOHxn0RgwORnxWPoX7PgNpofW2yqHK4ri4vHvhFnLZQ=)
                          3: 2472949B3C234930DBE99B1B5CD5196AB16D151B.crl (hash: wRJH6TmW4Z0EST1GD3KlmhCAZ4s0vEFBt7WHsrPenVc=)
                          4: 323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa (hash: 4IHJsjfC0Zoq18aE2FFzAMYZQpT6YF+Y54OUnxbTiPM=)
                          5: 323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa (hash: Lmh4khK9jqfGM7AgqtrinnAM2ubStxsQ/YZSUwbqCvU=)
                          6: 323630323a663961323a3a2f34382d3438203d3e203436373636.roa (hash: dNvxw0+R2mi2yZ7yZ+PkpHw5t4IMqFyhS0zsCoWaY88=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:25:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a3:1f:02:65:6c:10:88:a5:af:85:44:ad:9e:c0:f0:06:14:59:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
        Validity
            Not Before: Jun  6 05:48:26 2025 GMT
            Not After : Jun  7 06:25:26 2025 GMT
        Subject: CN=DD461DBB2A7106024892242A809F9FF7E8ED41D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c9:0c:89:bb:14:63:56:c3:af:e2:ef:0c:4e:
                    5f:1b:2a:a9:4c:0d:57:6a:66:a9:03:39:ff:4c:bf:
                    19:58:cb:88:66:b0:12:2a:a0:10:f9:b6:48:21:91:
                    ea:b6:30:93:19:72:a8:cf:f8:f6:d1:7b:d2:1e:fe:
                    39:6f:09:81:42:0d:ec:68:e9:f9:97:e4:3a:ab:c9:
                    b7:67:81:04:a8:52:64:41:95:4c:5e:ff:7c:d7:0e:
                    6e:9d:d0:23:7b:7d:0c:19:fe:dd:df:fb:60:a8:18:
                    2d:80:e9:d1:4b:5a:30:4a:e0:ba:ad:57:b4:fb:d3:
                    0b:ba:d5:56:0b:23:75:73:8f:c6:06:ae:27:ba:af:
                    46:2a:d8:89:d9:b4:7a:22:35:10:bf:92:d0:5a:f1:
                    0b:98:0e:92:06:a5:e5:af:a3:1c:8f:4d:55:0c:51:
                    8d:1d:aa:01:db:31:6e:ed:9e:2c:88:c8:92:f7:d8:
                    e7:e5:0d:f0:2a:6a:a4:0a:f0:63:a8:13:95:19:21:
                    63:01:44:fe:22:10:2b:3c:cc:b6:12:78:e4:06:76:
                    18:d3:70:e6:db:89:d4:be:4b:aa:57:b7:20:ec:f3:
                    f9:de:c9:49:20:86:e1:b0:db:5c:54:c5:45:bf:84:
                    29:65:a8:fb:7d:4a:e7:dc:5e:99:e5:ff:9c:0b:ac:
                    d0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:46:1D:BB:2A:71:06:02:48:92:24:2A:80:9F:9F:F7:E8:ED:41:D7
            X509v3 Authority Key Identifier:
                keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f1:32:e2:4e:e0:a5:52:28:7a:5b:a0:d4:53:18:15:d1:d8:
         fd:13:d3:7e:6f:e3:24:30:65:5f:fd:7d:ab:dc:dd:f0:60:6f:
         a3:3b:32:07:29:84:ce:53:57:b1:fb:1c:dd:2d:88:b0:26:ef:
         de:e9:50:75:3b:7c:53:bb:c9:cd:24:da:ad:6a:0c:8b:7e:f5:
         54:c6:6b:01:cc:9c:46:1c:c5:8d:69:83:e9:74:f2:72:a5:94:
         36:0e:02:b7:ef:ce:8d:a5:33:7f:8e:d7:6f:72:3c:a7:1f:c9:
         86:7f:b9:a9:c0:1d:3a:ac:45:69:bf:56:a5:9e:72:ac:88:d1:
         02:f0:5b:5f:60:2c:07:da:74:49:01:d4:8e:aa:ce:3d:bc:bf:
         21:33:4c:7c:10:98:fe:63:37:a1:cc:3a:ea:21:84:81:eb:ab:
         cf:15:08:fe:3a:34:94:9c:7c:ba:16:91:b5:42:a5:29:8d:6c:
         fc:a1:08:e4:de:ff:5e:6e:35:94:17:55:1f:46:64:8f:bc:7f:
         f1:e6:44:44:35:cf:7e:92:83:68:51:13:0b:0e:6b:14:1f:5a:
         08:fa:ba:7d:be:78:9e:f8:b8:84:ff:5e:b3:61:94:2c:ac:9d:
         bf:b6:16:c5:92:d5:cc:f1:b8:88:1e:27:46:48:47:1f:6a:26:
         84:e3:8f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:39:56 2025 by rpki-client