Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
File:                     88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json)
Hash identifier:          PZ4N2MmqtD19Es8ZXqpjjpomyor/A+qwftIGJC/co6Q=
Subject key identifier:   61:79:9C:8D:11:05:71:B8:C2:A0:12:DF:CB:8A:3D:D8:D4:2F:9B:85
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Certificate issuer:       /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial:       22C3774C29306415A5DE1530A72EE398E46E4E65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
Manifest number:          85
Signing time:             Wed 20 Nov 2024 22:31:24 +0000
Manifest this update:     Wed 20 Nov 2024 22:26:24 +0000
Manifest next update:     Fri 22 Nov 2024 00:02:24 +0000
Files and hashes:         1: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: NKv2DY73vsQxYO+xglgJTSw+/99xUGOdEsYMCZpw4NQ=)
                          2: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: 5lNL9wmLDlet0KrRB5Z2lMcDOBbA6gqsqoS0zWeKarw=)
                          3: 3138352e3234322e3138322e302f32342d3234203d3e20323035323139.roa (hash: AhCF4sqO4Q0Rso5PdcIaUsrbWs9QVBfzYdCmt5CoiRg=)
                          4: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: Wm3IDAOfkV81JSuZK/Na7XnsHjZUJzGcxe64BY1WIhs=)
                          5: 326130643a623238373a656330303a3a2f34302d3430203d3e20323135363634.roa (hash: ZkXNpKW61UGEN6+3Eq/nkumIj3yuGpDt69ocmobqC/8=)
                          6: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: pyzsZjErsKF/r6TDE4GaASJZY8jmD+uruFgv90V9cVg=)
                          7: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: iavCedfpEd5k0rIG/kL5F/xxOAMPmZq43N15rLvPbic=)
                          8: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: WtqgmDwc3f4nCSOQ8ixLkNx8sXt7FaBWfi7I6des1c8=)
                          9: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: sx/iVfyDskrQoK42os+6TyQoUVUvVUXlGN9RH2id0Fo=)
                          10: 326130643a623238373a656363303a3a2f34322d3432203d3e20323135363634.roa (hash: GLrga7I6TmqAcqHZCyQLyo7wEkxzFEUlvkIYE9Jlscs=)
                          11: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: 9fvE/EKZJ0AUA6jRvgotTKUfh3uMQWCtvLablu7TiLY=)
                          12: AS41720.asa (hash: +RbH8buX1T5kTWMGsS+k2hctRH6+R8V1cu3+Qe3+/Rs=)
                          13: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: Qv46t81qHTc4uf1Bxldy1f/G+l9sAnh7axBU+G8+9tQ=)
                          14: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: YrKMLBs8xCiL955bvB/8G11UYsLmajFWAxqi9VeJEB4=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c3:77:4c:29:30:64:15:a5:de:15:30:a7:2e:e3:98:e4:6e:4e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
        Validity
            Not Before: Nov 20 22:26:24 2024 GMT
            Not After : Nov 22 00:02:24 2024 GMT
        Subject: CN=61799C8D110571B8C2A012DFCB8A3DD8D42F9B85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c9:ce:3d:02:f5:f5:ed:27:eb:71:24:3d:30:
                    01:68:1b:76:95:e6:cc:8e:7a:1a:26:5a:5a:fc:5f:
                    49:11:ce:8d:75:01:ee:69:27:a4:d4:17:fb:c6:ec:
                    b9:44:68:b0:4d:38:76:be:f6:b6:9a:22:bd:83:69:
                    03:f2:b2:df:b0:7c:7a:11:b6:12:8b:0d:5a:8a:54:
                    3c:65:c5:9c:9d:ac:2e:fd:c9:9f:d1:4f:7c:cf:03:
                    5f:76:57:16:19:68:6a:5f:ea:63:11:c3:dc:31:6c:
                    9c:2b:64:a3:db:13:f8:80:0b:ac:13:fe:cc:9b:ac:
                    6a:91:52:c1:ef:90:16:e8:8d:3d:f7:0a:80:5a:59:
                    8a:6a:f9:c9:49:d0:8a:f0:a3:22:fc:59:49:c0:fa:
                    91:68:09:de:56:f0:dc:a5:74:ed:13:83:5f:1d:9f:
                    b6:f9:62:10:92:cc:c0:a6:89:db:aa:e6:8a:fb:99:
                    fd:6f:a5:55:c0:eb:f4:c1:eb:04:60:81:b6:a0:e0:
                    ba:89:1d:0d:6e:1c:15:26:fc:ae:d3:76:76:13:a7:
                    3f:17:85:02:c1:60:8c:3c:5a:73:98:e0:d9:e2:2c:
                    cb:37:36:bf:5c:82:06:3f:93:3e:97:9d:af:d0:a4:
                    4d:f5:39:fb:cb:e2:96:93:ff:57:83:4e:80:f1:f5:
                    5e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:79:9C:8D:11:05:71:B8:C2:A0:12:DF:CB:8A:3D:D8:D4:2F:9B:85
            X509v3 Authority Key Identifier:
                keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:df:58:81:01:ac:95:c3:7a:9b:ae:63:0b:94:c8:5c:7e:b6:
         16:fc:38:7d:d5:7c:43:df:a5:9e:fa:df:df:56:4d:b0:a7:bb:
         68:8c:0a:17:70:ec:ac:fc:7f:cd:d3:f7:db:14:81:f5:bb:73:
         d5:43:17:fa:fe:cc:80:ec:52:ba:a1:a1:9c:9f:d1:28:58:33:
         a4:ea:56:60:1d:2d:c7:10:26:c1:48:14:c7:ae:12:c6:9e:88:
         5a:cf:24:69:9d:87:45:98:c6:59:24:f6:d9:5f:58:9c:9a:21:
         43:fd:7c:64:71:c6:de:ea:5e:5b:24:0f:1c:ca:e2:10:23:1e:
         c5:fd:f0:ec:6b:8c:5b:4c:7c:53:a1:d6:d9:a5:73:b3:47:67:
         ea:80:2c:06:a2:ad:99:1d:fe:c1:61:e9:24:02:6c:75:11:69:
         c3:3a:d0:0d:20:b0:1f:1e:ff:cb:38:68:73:4c:00:e6:48:47:
         28:a5:0d:3e:32:f1:a3:be:58:ca:56:e4:a5:a2:10:60:00:fd:
         3f:62:a3:b0:dd:99:6c:71:46:f2:7e:77:b1:71:53:f8:39:47:
         79:a9:4a:75:91:7a:08:db:88:90:a4:66:6d:fe:28:37:b5:e5:
         cc:76:20:44:89:32:cb:3c:61:5d:d2:2a:f6:5f:5e:6a:64:ff:
         91:4b:0b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:15:05 2024 by rpki-client on console-fra.rpki-client.org