Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
File:                     9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft (raw, json)
Hash identifier:          yMsGqm95nSZ5aAnTnNx4Bz/wmD/WROKzt3MFA2KXbLg=
Subject key identifier:   B6:AA:77:7D:73:5D:25:5E:6E:DB:29:43:0A:62:C4:F2:51:9C:41:B0
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Certificate issuer:       /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial:       140CEA3EDC881AA1182E9110690B5D2288C677F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
Manifest number:          01F2
Signing time:             Fri 04 Apr 2025 17:20:42 +0000
Manifest this update:     Fri 04 Apr 2025 17:15:42 +0000
Manifest next update:     Sat 05 Apr 2025 19:49:42 +0000
Files and hashes:         1: 39352e3136392e3136372e302f32342d3234203d3e203239383032.roa (hash: qly1Jd5CoWKjMKUUuUOiYM/Zs/B2R5A4Q72Ibqsr/4o=)
                          2: 39352e3136392e3137372e302f32342d3234203d3e20323133323530.roa (hash: mDNq/c136eOKNqGjKn9d2zCstf/WQTqMPhLPPl3D700=)
                          3: 38372e3131382e36342e302f31382d3234203d3e203331313033.roa (hash: Vr1aZgrxZrL0gy9JKVhX4vaGHNcaYEStTY8aIce9nqQ=)
                          4: 39352e3136392e3136372e302f32342d3234203d3e203631333137.roa (hash: QcG8fvTATh92/VekSQedC2ghEjJNQSXFqjoQVeRvpHE=)
                          5: 39352e3136392e3138302e302f32342d3234203d3e20323632323837.roa (hash: 1SALJGfmF6NqHKmUbt17HuIUKoud9YuQsBDbKhdURqw=)
                          6: 39352e3136392e3136382e302f32342d3234203d3e20313432313436.roa (hash: fML6Hj9Yt0ySBaRVfis1oR7SG8ts6hYL93zO0OJa8ls=)
                          7: 39352e3136392e3138332e302f32342d3234203d3e203331313033.roa (hash: 2baBigrnYhMYmvYKPj8LtufY970HhOsqc+sE+AQD+6Q=)
                          8: 36322e3134312e34382e302f32302d3234203d3e203331313033.roa (hash: 7kS8tD2VPFJgzQMEBZw7SCA8TRbBCEG0Eqq6iX7Hcz4=)
                          9: 39352e3136392e3137392e302f32342d3234203d3e203239303636.roa (hash: Iipzj6f4Bi49bY0u5HJv2nqEse0t7Tv0jGBhhc29/Qw=)
                          10: 39352e3136392e3136342e302f32342d3234203d3e203136313235.roa (hash: XtnU9KDRGcbexVufC4oH8FT4TIzcC+lGx8G64PxSKos=)
                          11: 39352e3136392e3136392e302f32342d3234203d3e203331313033.roa (hash: MKWz9yCoy3y6Dfjk4I5UESnHv6esVj8zNYuVZTU3NGU=)
                          12: 38342e31392e3136302e302f31392d3234203d3e203331313033.roa (hash: AJWT9Dw0MfA5kF1l1PxI5LAy1UFzq82jlfPy5WiZDqI=)
                          13: 39352e3136392e3138342e302f32322d3232203d3e203331313033.roa (hash: kbKS1ODj6388T6KE2JJYFOAOr1BMUVOI9SkxE/iV4q4=)
                          14: 39352e3136392e3137312e302f32342d3234203d3e203239303636.roa (hash: BPZZn4HJC8PlrSppUHHZQvRvHHJtXrB2PzggT8s5dMY=)
                          15: 39352e3136392e3138362e302f32342d3234203d3e203331313033.roa (hash: iKOjpRfff/GPlFyyfrbcPU4htA/T0g4AvLmgpIOx960=)
                          16: 323030313a316236303a3a2f32392d3239203d3e203331313033.roa (hash: shSDVh8r+fPqJx0b0TDURGPFBAhnUJHjFUW7sVETEGw=)
                          17: 39352e3136392e3137352e302f32342d3234203d3e20323133333139.roa (hash: 0RBZ/mU01xCDKSKWtmVbzc8O8NAjvYbVNwan87PBgvk=)
                          18: 39352e3136392e3136312e302f32342d3234203d3e203331313033.roa (hash: 4zvtU5r/Th8Fsr/4iPmHaFlRJkEnIBvNQ9Xhxc27aTw=)
                          19: 39352e3136392e3137382e302f32342d3234203d3e203239383032.roa (hash: Kdfiy11H9aurkjfB/aurSXFWBeH9/uj4/bkMXQUj4rU=)
                          20: 39352e3136392e3138372e302f32342d3234203d3e203331313033.roa (hash: pRxxiAEhlcXa5JB3ugCTwsrBJLHcR7Cx7CMDdB+PvsA=)
                          21: 39352e3136392e3139302e302f32332d3233203d3e203331313033.roa (hash: xRfBE2sy40y3MXWBykGYhbVP1IkiVOxNFkICZ6s2SjQ=)
                          22: 39352e3136392e3136362e302f32342d3234203d3e203633313530.roa (hash: ljBCipU/L6umRbNZL3Yvl01GVvFtdwKZQEQ9yUdxVd4=)
                          23: 3231372e3131342e3230382e302f32302d3234203d3e203331313033.roa (hash: xZLpIU9DMOijoaUoPAcW4EoDxmUzp7u0nz1I4uyqCAs=)
                          24: 9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl (hash: rQw3QSlaJTtpagVGYr6ukehSz5AqL9J/MUtFr+NqR/g=)
                          25: 39352e3136392e3138392e302f32342d3234203d3e203331313033.roa (hash: IQaZJekI3ftf/e4bkhosUPNKYSBKaSVucwcTGSqvQsU=)
                          26: 39352e3136392e3137362e302f32342d3234203d3e203631333137.roa (hash: K4zqbHrVUw1VXtnaOYskyJnZGE4ltOFdf6L4L0F2XmE=)
                          27: 39352e3136392e3137342e302f32342d3234203d3e203233383635.roa (hash: 6C7EpoIa4qwrnIHVXpHOXoM5luAbkYvf9J9q1AYwG/E=)
                          28: 39352e3136392e3136352e302f32342d3234203d3e20323032363536.roa (hash: MwcWvE4WCmvGMd3cq5xCPLkZoVatjpgb3XxyMDoeg3E=)
                          29: 38342e31392e3136372e302f32342d3234203d3e203234363736.roa (hash: FYEhChjAyd1UkfUwByrWyN0Prn/fBZBaiIbFOq50qRA=)
                          30: 39352e3136392e3137322e302f32342d3234203d3e203239303134.roa (hash: fu5YPIcFLuW37Io8xo7nb5mt6DlCGs1UK7Hlj43JIf4=)
                          31: 39352e3136392e3138322e302f32342d3234203d3e203331313033.roa (hash: NcmMnJHwOkIpKkhA/RF+SajTpN6BYjAYl54hI5oLtIw=)
                          32: 39352e3136392e3137332e302f32342d3234203d3e203235313938.roa (hash: fkawI9b1ILPJMvJMynM/vyjbeh99S5fold5V4PtTzUA=)
                          33: 39352e3136392e3138312e302f32342d3234203d3e203331313033.roa (hash: i/cmrntRWmzwPVYsD3u5wPsG45WTr6YOxTit01BDtIM=)
                          34: 39352e3136392e3138382e302f32342d3234203d3e203331313033.roa (hash: Nnr/0LY3nKF4FeUU0jzio8kf/lmEov3b7K6Vpod9Ka8=)
                          35: 39352e3136392e3136332e302f32342d3234203d3e2035303635.roa (hash: 3xqnEjRyTSra4EruGtCCDXREoEbIM2WrXuK5JAJ8sEo=)
                          36: 39352e3136392e3136322e302f32342d3234203d3e203136323736.roa (hash: G1kdCGTSUOwnfRZQYq0i/0wxHKbpQYDdINBFkzmlRsw=)
                          37: 39352e3136392e3136302e302f32342d3234203d3e203331313033.roa (hash: vgm4XJ+tMR2tTT2qfP7pKTBRX153BBtyEqDQk6ubOsE=)
                          38: 39352e3136392e3137302e302f32342d3234203d3e203239303134.roa (hash: 2241pWO+OaijNOXHiReQmtgqIszge6N3EI0Rcc6SvX0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:0c:ea:3e:dc:88:1a:a1:18:2e:91:10:69:0b:5d:22:88:c6:77:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
        Validity
            Not Before: Apr  4 17:15:42 2025 GMT
            Not After : Apr  5 19:49:42 2025 GMT
        Subject: CN=B6AA777D735D255E6EDB29430A62C4F2519C41B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ef:95:b7:83:fc:03:be:b9:69:6e:10:9b:b7:
                    58:1f:31:1a:a9:79:4c:13:3a:cc:e7:11:39:42:1f:
                    f4:4b:e0:41:1a:52:19:a7:68:2a:08:21:76:80:0a:
                    ff:66:63:86:cf:62:b6:3a:f2:04:bd:3a:5c:dc:ed:
                    27:06:f9:d9:ac:b6:1f:6c:5a:49:d0:ae:b8:3f:73:
                    df:82:25:1d:8c:4e:9d:be:e7:b4:77:c8:63:f7:84:
                    26:47:17:97:2d:f9:b2:e2:79:9d:3f:30:ab:bb:f3:
                    6e:63:0e:52:50:15:20:19:26:99:48:ef:5f:29:c0:
                    ea:11:4e:a4:65:74:07:ce:a4:19:92:3e:7b:fa:d9:
                    d5:39:7e:33:ff:a3:fa:14:0e:29:98:9d:73:f3:d2:
                    1f:ca:21:3a:c4:06:5e:f2:23:61:8f:b6:48:f4:b8:
                    6d:f6:2b:a1:56:a8:8e:d2:fc:8f:52:42:0f:74:ed:
                    4d:ea:55:be:f5:a3:5b:86:91:c2:ba:f3:eb:91:d2:
                    41:80:40:a5:33:20:10:8c:11:d3:0b:05:eb:50:37:
                    40:a6:ab:78:3d:f0:ab:52:6a:f7:45:9d:73:57:35:
                    7a:6f:0c:87:c6:df:68:ba:a1:21:9e:19:f0:f0:97:
                    88:ad:1e:ad:c9:19:ff:1d:56:1a:0e:4d:e4:23:c4:
                    61:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AA:77:7D:73:5D:25:5E:6E:DB:29:43:0A:62:C4:F2:51:9C:41:B0
            X509v3 Authority Key Identifier:
                keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:3d:04:2b:d1:11:75:a9:2a:0d:84:1c:96:47:eb:de:7f:1b:
         62:53:1c:6e:00:fe:86:b2:ea:4a:47:2a:1f:b9:a0:d9:cd:b9:
         0f:3c:9c:44:a3:4c:1b:86:46:cf:ac:fe:81:6c:f1:8d:c3:66:
         26:5e:cf:dd:f4:b8:e2:ad:f8:35:4d:fd:14:f8:c9:84:31:b8:
         a9:f0:17:0b:72:79:6f:72:8b:de:b3:c5:c0:d5:44:88:b4:d7:
         3e:6d:ce:39:c8:f8:bb:ef:1c:99:8d:9b:a1:a9:8e:b5:57:50:
         9f:db:1f:3a:da:e5:c7:a0:0c:8c:3e:bd:7e:c1:9f:cc:6c:ac:
         f7:b0:f9:03:5a:eb:60:7f:09:f4:81:e0:e0:1b:72:f8:77:1b:
         5c:46:4d:2a:35:2f:c7:93:22:fb:9d:db:45:4a:9d:e3:64:b2:
         c2:b2:82:fe:13:6d:73:2c:28:e5:e8:97:5d:05:11:40:d3:25:
         01:53:23:c2:44:df:f5:cf:01:d6:d5:f4:4c:6b:8d:bb:fe:0b:
         1c:76:2e:1f:ee:30:3a:50:34:9f:62:a6:73:7a:35:1b:46:19:
         c4:34:9b:e6:87:6f:fc:1a:93:ac:b3:c3:e5:3f:65:6d:2b:68:
         2e:e6:df:80:0a:27:e2:bf:87:91:82:32:5f:14:1a:13:e2:36:
         80:07:11:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:42 2025 by rpki-client