Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.mft
File:                     F1ABD9429F3A733668CAC698C113A9E343C99B3E.mft (raw, json)
Hash identifier:          Tea8rt6hdFOHRDEvEy9mGrj+t7vxHvdnQ3yeYZ+1KF4=
Subject key identifier:   3B:4F:A1:38:89:C8:76:54:A2:04:A3:BD:BC:8E:50:20:C8:22:04:9D
Authority key identifier: F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E
Certificate issuer:       /CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
Certificate serial:       4857C0F7955AF344A917B6A62B11CA5020433B8E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.mft
Manifest number:          A2
Signing time:             Tue 25 Jun 2024 19:07:36 +0000
Manifest this update:     Tue 25 Jun 2024 19:02:36 +0000
Manifest next update:     Wed 26 Jun 2024 22:40:36 +0000
Files and hashes:         1: 326130373a353463373a363131303a3a2f34342d3434203d3e20323136333630.roa (hash: swrQFvEQd0OH6fCpb3qIXIuutWQAC9fuG4FYezTewVQ=)
                          2: 326130373a353463373a366430303a3a2f34302d3430203d3e20323136333630.roa (hash: pzEtj2uAOsYtjWFKTEXbKper7DDbte3Ex/oHORaFXnw=)
                          3: 326130373a353463373a363030383a3a2f34382d3438203d3e20313938303537.roa (hash: l1jgXoaVcj6yZLMubHkGx5QfRcCJ1Ls/71jQJrcH/iI=)
                          4: 326130373a353463373a363030633a3a2f34382d3438203d3e20323135353232.roa (hash: q0SrNodPl7dsJULMvVPcjXYF2+Cg6ESzo8La5N79Dss=)
                          5: 326130373a353463373a363130303a3a2f34342d3434203d3e20323031393338.roa (hash: ObW606lQaDERbAr1Jku+z8Hd36wvXxKH7PV6hqKvMXE=)
                          6: 326130373a353463373a366130303a3a2f34302d3430203d3e20323135353232.roa (hash: meVKaK5e6Rl0axgIF+OPFWXAfeIaQpGrDezkKaQe220=)
                          7: 326130373a353463373a366530303a3a2f34302d3430203d3e20323136333630.roa (hash: VevqVtohE7E15MPnYrIGQKTSWA9Lx2A3Zo592w2P5IQ=)
                          8: 326130373a353463373a363030353a3a2f34382d3438203d3e20323136333630.roa (hash: NjIv1eMlyEwzJi0vlOEd6MJpvMq4M1rK+JuvJ16ubAc=)
                          9: 326130373a353463373a363230303a3a2f34302d3438203d3e20323136323635.roa (hash: VfuysCLDAA7Dsixsj+UhAksqP6Aiuk972ptv4AvPD6w=)
                          10: 326130373a353463373a366438303a3a2f34322d3432203d3e20323136333630.roa (hash: Bg89tHGoWVsdePik4nAA2+6g5eoDQ7ZZpARcfmXpjeE=)
                          11: 326130373a353463373a366330303a3a2f34302d3430203d3e20323136333630.roa (hash: H4ngrvtBYTga28GDHImveKFBxzD5H8pXfMhKtUWcuv8=)
                          12: 326130373a353463373a363030623a3a2f34382d3438203d3e20313939363933.roa (hash: 8qCQlnkcKS3Yxy7TUsz7jUEy7pH0V18cj7ijoBjZ9Rw=)
                          13: 326130373a353463373a363930313a3a2f34382d3438203d3e20323136313833.roa (hash: NYo5s1qbQ/1JlSrS70G5YUYg/O6TrwYn5HfSpWMmR6M=)
                          14: 326130373a353463373a363030373a3a2f34382d3438203d3e203434343233.roa (hash: kS8srOYwZodkst3lYWepXFm5Xpi4tG8wjvCrHhp2z/Q=)
                          15: F1ABD9429F3A733668CAC698C113A9E343C99B3E.crl (hash: j5dzhTI0+rAZ08/BWor7RgQBVjqQx9xXKuBBwEMq7bw=)
                          16: 326130373a353463373a363030363a3a2f34382d3438203d3e20323033303639.roa (hash: tNQIe2ZQ9jOVgp9Yp3FuhqV8ssPjO4/h60zQHkQAEBk=)
                          17: 326130373a353463373a363030393a3a2f34382d3438203d3e20323135363035.roa (hash: TSYY5YiMs3+6KOmylO+atN64gMOsnj8s+e9cAheU9yo=)
                          18: 326130373a353463373a366434303a3a2f34322d3432203d3e20323136333630.roa (hash: l6IAGSay1QbED9E2YWNz1+wgHGwKUfriNfzCvnSTL58=)
                          19: 326130373a353463373a366430303a3a2f34322d3432203d3e20323136333630.roa (hash: vzbobgooUtasNjpCZ1VEG0PY81XEIYAM/lqIRY0oHiI=)
                          20: 326130373a353463373a363030663a3a2f34382d3438203d3e203434333331.roa (hash: XHorKGc7/QUX1L+6fHKj5gVyzQXqz/Yy9EUggzHrHGg=)
                          21: 326130373a353463373a363030643a3a2f34382d3438203d3e20323136313332.roa (hash: NdMeuxS726T89DO5eVcEnlxXRDo5JCgSymBZrZjG718=)
                          22: 326130373a353463373a363031303a3a2f34382d3438203d3e203434333331.roa (hash: Vkk+RJMZfh/on+Z68PlfWvddnmzrx0i073cGoBkfglc=)
                          23: 326130373a353463373a366630303a3a2f34302d3430203d3e20323136333630.roa (hash: m1gpL5oDxsjPR0bMQ7WRI/0LdIMIbLL7cMqFdf6koh8=)
                          24: 326130373a353463373a363030343a3a2f34382d3438203d3e20313938393233.roa (hash: pVF7JYh0i9d7VlItCIJve18pBgfhTEEhxYWcSM8reOs=)
                          25: 326130373a353463373a363030613a3a2f34382d3438203d3e20323033303639.roa (hash: sAuBr7KifoTsavN1yyCV7AeAnhSSPwTsUtde7ESKu6Q=)
                          26: 326130373a353463373a363030653a3a2f34382d3438203d3e20323136313332.roa (hash: aIfwLq/tMIeyLzFo8ZxMfPs+Msu2CdC4IOG6jN+K8TE=)
                          27: 326130373a353463373a366463303a3a2f34322d3432203d3e20323136333630.roa (hash: gpkDT+VJGarzAZzyeoqgDX1+phCB92UTZyt2GykLTl4=)
                          28: 326130373a353463373a363930323a3a2f34382d3438203d3e20323136313833.roa (hash: 3uofGJCRExvbJ0zh2Vas4aQhOzxLT8De7PnKvFvKV4o=)
                          29: 326130373a353463373a366330303a3a2f33382d3338203d3e20323136333630.roa (hash: 1iSx/LzZ7lACkRU0j3iuCq2gSxlp8JzB1YEdIW3VXZw=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 14:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:57:c0:f7:95:5a:f3:44:a9:17:b6:a6:2b:11:ca:50:20:43:3b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
        Validity
            Not Before: Jun 25 19:02:36 2024 GMT
            Not After : Jun 26 22:40:36 2024 GMT
        Subject: CN=3B4FA13889C87654A204A3BDBC8E5020C822049D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e7:96:49:40:47:51:a9:4e:af:41:89:d7:1b:
                    56:57:c5:e2:92:96:4a:57:8d:c0:63:1e:ae:cd:e0:
                    db:65:5a:32:83:5d:fc:3f:68:74:0c:dd:cc:88:f8:
                    bc:be:f6:36:30:90:d4:b7:8e:95:9e:f8:5b:59:06:
                    fc:ae:2f:16:5d:50:50:cc:98:de:df:a5:cf:ba:11:
                    9d:f7:e6:59:35:68:d8:31:d5:4c:89:4d:6d:65:c3:
                    dc:b4:83:0a:b1:ad:eb:e6:2c:cc:a4:e6:31:e9:95:
                    f5:01:8e:b2:51:1a:91:1c:c2:1f:84:2e:07:c9:d5:
                    1e:c8:95:ed:ff:ad:90:a6:3c:89:de:e2:f5:7a:de:
                    2b:fb:4b:69:5b:45:9b:9a:7b:90:95:0f:d1:92:01:
                    c0:e0:d7:da:ae:d4:b3:67:6c:22:7e:29:a3:e3:65:
                    31:4f:ba:b0:27:2a:e8:76:9e:73:7d:80:d0:30:32:
                    24:a0:ca:a3:61:42:df:c6:de:46:aa:eb:67:8e:9a:
                    d4:b4:de:41:e6:2c:42:52:e8:71:79:cf:dc:0d:0e:
                    f8:51:f3:49:17:7c:12:3e:3f:6f:bd:94:fa:63:00:
                    51:2a:74:36:5c:b9:19:f4:35:e5:71:58:e3:b9:e2:
                    04:91:37:7e:6e:2f:b7:27:a0:d4:c5:a8:43:ad:f3:
                    7c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4F:A1:38:89:C8:76:54:A2:04:A3:BD:BC:8E:50:20:C8:22:04:9D
            X509v3 Authority Key Identifier:
                keyid:F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:85:10:4f:b1:a5:71:53:5e:1d:f5:5f:0d:62:8c:a9:bb:96:
         55:9f:ba:bb:3c:8b:72:3e:e7:41:2f:b5:87:7a:97:d0:19:a3:
         57:5d:be:03:1e:0b:fc:c9:2c:3e:6c:96:24:53:5d:a6:9b:58:
         41:c9:01:f5:7e:5f:2a:90:fc:39:74:9d:3c:d1:c2:f3:f6:f5:
         e2:11:83:54:c5:af:dc:5c:1e:7f:6a:79:80:bc:ff:60:2b:29:
         e2:3e:c6:70:48:0c:aa:d4:fa:21:cf:f6:19:fa:ce:d0:3e:90:
         68:43:d9:a7:0f:d9:ed:dc:f1:43:02:21:66:3f:98:3d:01:3b:
         87:9e:9a:bd:5b:81:33:26:f3:09:ba:f7:4e:25:db:ed:6d:f7:
         5d:78:bb:ab:e0:fa:5c:6a:ea:3c:b7:15:c6:55:56:04:ed:8d:
         c5:7d:ce:29:48:a7:ad:5e:d8:1c:c4:ba:a5:79:62:b8:d0:b1:
         55:9d:d0:cb:71:9b:e7:39:79:b5:ae:83:33:24:dd:79:93:2a:
         84:a7:24:a7:51:b0:90:c5:12:d6:cc:b6:0e:38:ed:8a:b0:b6:
         fe:bc:85:3c:59:1c:3f:46:81:7c:af:43:11:74:95:a8:86:ea:
         e2:90:78:50:f7:d6:67:2f:83:6e:91:11:ec:22:6d:32:48:f6:
         29:34:77:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 01:37:29 2024 by rpki-client on console-fra.rpki-client.org