Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
File:                     C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json)
Hash identifier:          UTw1/BFOyMANSKUZd39fXly+eT0saNUInrK0YhqRyhw=
Subject key identifier:   E5:4A:26:B7:BB:EB:04:59:78:36:E7:61:29:DA:AF:CD:24:DA:3A:22
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Certificate issuer:       /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial:       4D2F2DBC7407BF43797B608D21EC302140975326
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
Manifest number:          56
Signing time:             Sat 01 Feb 2025 23:45:58 +0000
Manifest this update:     Sat 01 Feb 2025 23:40:58 +0000
Manifest next update:     Mon 03 Feb 2025 00:44:58 +0000
Files and hashes:         1: 34332e3233302e38352e302f32342d3234203d3e203130313033.roa (hash: MmHSTXe2GqgxUeGm5BTVgTg5bO+oZYaF1qr1Hjlq53Q=)
                          2: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: y9uevaBeLo1M0NZi4w3HJOyvLkMWIaZEJFCi8snsYYY=)
                          3: 33312e32322e3131302e302f32342d3234203d3e20323134393931.roa (hash: vOjZjdWC1hE9h6JbEZG3iGLatE7/n3W8AescAyUg5mE=)
                          4: 34332e3233302e38352e302f32342d3234203d3e203437373431.roa (hash: EXdKw15sLb9g7z05LxL1+sMIqOyevHaLtMqVr5NXEPA=)
                          5: 3130332e34392e3133302e302f32342d3234203d3e20313531313036.roa (hash: fyyqyyghDi0idHRuMOtlEEoaVRAFwWrx/VwsQpLKbQc=)
                          6: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: iK+yx/VtDctRGDFOE/NGNWTyR4u7o2tFGRI6U0bUYZU=)
                          7: 3130332e34392e3133312e302f32342d3234203d3e20313531313036.roa (hash: v23gevgA9GDiYpdq88OOontr+HX3atmsWqXNxiZytOU=)
                          8: 34332e3233302e38372e302f32342d3234203d3e20323133383536.roa (hash: AvKvUoNctUm7Uzqhxmylt96xb0gGlgyMWffeaqO97RY=)
                          9: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: yHVodRBAsBlx/8p8lQvX33hmgwPZB9Uj6k/5yqbIyfs=)
                          10: 33312e32322e3130372e302f32342d3234203d3e20323135323837.roa (hash: cWltszs6TW43SvZ9pUz1CLIWj1+hOKG8cpnkLvtIBus=)
                          11: 33312e32322e3130352e302f32342d3234203d3e20323135303236.roa (hash: 4XlIN+3Y2uvivj3jKKbdxnHiR3dRqeJ7/xmTE8uipj8=)
                          12: 34332e3233302e38342e302f32342d3234203d3e203437373431.roa (hash: oyFuBCQBLvTGC1ImcrngWoUJ4Q8e7JxdFB2r2iiXaVA=)
                          13: 3130332e34392e3132382e302f32342d3234203d3e20313531313036.roa (hash: HL45eJnir0ANSqJxd9jJGONXxdI92IE0Znx/CdZHabE=)
                          14: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: jNzQvK975k0nFSky/OYcsFfueNL1XvYeIp3mtR/7WPY=)
                          15: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: djVaDRm15EiL/YllhV4xOqQpg+A9F5xFPywduYhDl/Q=)
                          16: 34332e3233302e38352e302f32342d3234203d3e203539353338.roa (hash: 9vIYjNNAp0sol5N7YXJx99c09S8a91IJ/P5Nh+TTmx4=)
                          17: 34332e3233302e38362e302f32342d3234203d3e20323133383536.roa (hash: +FBcWcyMzela5R1Q23uwZR/ucflGlzv329Sojb4n0MU=)
                          18: 3130332e34392e3132392e302f32342d3234203d3e20313531313036.roa (hash: nm6tKt2J8E7VSHbFz5buz+D+1W6oGfXycRXdu93D8lg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:2f:2d:bc:74:07:bf:43:79:7b:60:8d:21:ec:30:21:40:97:53:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
        Validity
            Not Before: Feb  1 23:40:58 2025 GMT
            Not After : Feb  3 00:44:58 2025 GMT
        Subject: CN=E54A26B7BBEB04597836E76129DAAFCD24DA3A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8b:c0:ee:85:fb:89:72:95:10:72:78:86:49:
                    7d:f7:e5:24:83:97:54:9c:b9:84:bd:a2:3e:c7:4d:
                    09:04:56:3e:74:d7:b6:b4:ff:00:43:5d:f5:7a:0e:
                    33:47:a8:ab:fb:b6:ab:59:ee:e2:1e:bf:3f:0d:c6:
                    ad:61:ed:bc:56:85:28:41:59:3b:c5:78:29:36:b2:
                    00:c8:23:07:1c:fc:bd:cc:63:b2:90:40:af:90:11:
                    da:8e:c4:e9:53:14:72:53:65:a2:23:55:66:dc:ce:
                    e9:03:2a:28:3e:4f:b1:68:fe:05:d1:ed:71:99:bd:
                    a6:18:71:c6:1f:56:87:e0:40:d6:ba:ae:4d:10:ed:
                    07:bc:90:0f:77:6b:ac:8b:ee:ea:8c:c9:b7:b0:88:
                    3f:cd:c6:26:e0:90:1d:22:2b:25:da:a1:d5:5e:9c:
                    93:a4:d6:1f:d6:e9:98:25:b4:c2:d2:2d:6f:d1:48:
                    aa:78:ab:2f:6b:24:bc:e3:27:0c:aa:d9:e3:b4:05:
                    04:79:b9:dd:4d:58:68:5b:e3:24:a0:76:c4:1d:09:
                    2d:7c:b4:b4:3c:d8:14:23:5b:14:40:df:5d:3a:ce:
                    c7:52:14:55:75:05:00:fa:d8:3b:42:26:f6:17:29:
                    16:46:15:6c:27:06:62:29:bf:39:b8:be:e2:19:6a:
                    80:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4A:26:B7:BB:EB:04:59:78:36:E7:61:29:DA:AF:CD:24:DA:3A:22
            X509v3 Authority Key Identifier:
                keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:fa:10:18:c3:5f:a7:28:5b:0c:3b:6e:c0:22:ed:bb:93:ee:
         52:f7:29:48:ad:f6:76:4e:fe:4a:e3:fe:fa:b2:08:d0:0f:bb:
         2a:31:1d:91:3e:f4:03:a1:c8:47:17:3a:51:f0:2c:ff:ea:ee:
         d9:bb:76:d5:96:77:81:90:66:f9:c6:ce:40:f5:8f:04:22:61:
         36:c7:1b:ea:2c:9d:c8:c9:30:08:f7:01:25:5c:98:df:d9:41:
         63:af:fc:79:b2:61:32:68:7f:53:45:36:7a:61:20:df:cd:7c:
         fe:95:d5:28:07:94:d6:f2:35:a2:fb:b1:5b:ac:87:4e:c9:0d:
         3f:2d:83:ba:0c:a0:4e:5c:e2:ea:e8:ff:ca:02:5e:a9:32:2f:
         71:7f:a6:99:c1:9d:b8:f0:81:2f:51:c8:c4:a1:58:68:93:ff:
         79:01:37:69:2f:04:51:c1:6f:33:34:81:45:89:97:11:b5:b6:
         91:65:17:04:0f:8c:d3:02:fa:18:20:d6:6f:6c:b1:60:19:b4:
         b5:5c:38:d9:83:d8:26:8b:0a:4e:d9:24:c2:ff:16:bb:22:d5:
         c0:51:7b:1b:7c:c5:92:b9:c1:07:cb:5b:b4:71:9c:76:be:7e:
         96:46:e7:9c:a3:63:b8:c0:66:bc:10:89:3f:1a:b2:a3:20:b0:
         8b:03:d4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:51 2025 by rpki-client