Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
File:                     097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft (raw, json)
Hash identifier:          iq2k+kaak83B+BKv0lS6ktFskESxCf2WZdt2IAziS+E=
Subject key identifier:   05:0C:D0:EE:45:89:3F:16:1C:4E:E9:C7:A9:D0:A3:0E:95:EB:86:8F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Certificate issuer:       /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial:       5C3E95E2E3F8DF9F463BD6C9F691B0F25E4D2F97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
Manifest number:          0A86
Signing time:             Thu 21 Nov 2024 16:44:20 +0000
Manifest this update:     Thu 21 Nov 2024 16:39:20 +0000
Manifest next update:     Fri 22 Nov 2024 19:26:20 +0000
Files and hashes:         1: 33312e3232322e3233312e302f32342d3234203d3e20313336373837.roa (hash: 2k0Z8refgJuQGraEgU6im2zeNj5AvbWAjNuQjUAJUQU=)
                          2: 3138352e3136352e38362e302f32342d3234203d3e20313336373837.roa (hash: EJ+48mbtrWEBKQ1KSRJtzBuvJnh9xOJlsYXhfqRWISI=)
                          3: 3138352e3137322e35332e302f32342d3234203d3e20313437303439.roa (hash: JG8HR1Gkjq4Xt8m01HeJcn2KEdZZxiV2UN7snCbxDP0=)
                          4: 3138352e3136322e34352e302f32342d3234203d3e20323031333431.roa (hash: auJQmPwtzsiDqzP4ycUgN4ElSEUNtfOg/xVR1IsZ7bU=)
                          5: 3138352e3136352e38372e302f32342d3234203d3e20313336373837.roa (hash: f4w/LvftkKIzXOfLyd2IU/Zen+mHv2slZw7l0gGriT4=)
                          6: 3139342e34382e3230342e302f32342d3234203d3e20313336373837.roa (hash: wBbnTnl5jy4PmfomQNDYN1LhOxeHLYzhQDhxtZCGW4s=)
                          7: 3138352e3136332e35332e302f32342d3234203d3e20323031333431.roa (hash: /0XaxXhIpCBztME9mrOVRtjh8l9tUhuQZnCgGKk8nwg=)
                          8: 3138352e3136352e38352e302f32342d3234203d3e20313336373837.roa (hash: J3spaxlT5iP6QVCkVhD11/IQu3iPYygJfKB+JPtPeIM=)
                          9: 36322e3130362e37322e302f32342d3234203d3e20323031333431.roa (hash: CkUNwTg/dqcEA9sAzKqS8ZK/vHockVNmLXzYB1yO+H4=)
                          10: 3136372e38382e33362e302f32322d3234203d3e203437353833.roa (hash: pceyeN81MQMwjWJIIjbFX1Ur22aasj3Dxrfj7nJWBXo=)
                          11: 3138352e3136332e35322e302f32342d3234203d3e20323031333431.roa (hash: vrrnmBun1nwJYVClymG5s/6QnTA5LjpkRYcFxY+kWFI=)
                          12: 3130392e3233342e37392e302f32342d3234203d3e20323035363539.roa (hash: +/hp9i0eurtZ3vbGKRBl10WrpLXOCg0Ivjptud5529I=)
                          13: 3138352e3137302e3139362e302f32332d3234203d3e203437353833.roa (hash: C1lVpQccQgQ16f6UK/cnzlPB5nUhV8bUVEsAX0GafzE=)
                          14: 3138352e3136392e302e302f32342d3234203d3e20313431303339.roa (hash: wx5+huK5jpeEa9f4LWS5Hx9xBo1Rid5hsjlAfmiy8J8=)
                          15: 3138352e3136332e35342e302f32342d3234203d3e20323031333431.roa (hash: nmHExG0Aar9d5K9XhY/D50c4EkxBblWpOV2y57jMUEE=)
                          16: 3138352e3136392e3235352e302f32342d3332203d3e203632323430.roa (hash: oioR69nroTHzyM7s8L+mDvApluLlQCZSBAwTfP8v9DI=)
                          17: 3138352e3136322e34342e302f32342d3234203d3e20323031333431.roa (hash: s1YwuFH4KBAsa6ik8xco25G1Z2P45xlUA4O8Z4VYAZc=)
                          18: 097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl (hash: q52uceijWRhhpYf8MCTX5cRJxdEWoKhu12XhfU6EzKQ=)
                          19: 3130302e34322e3138342e302f32312d3332203d3e203531313637.roa (hash: 2oTvk7ojL6AYLXHkTTRT/4wMxAXSr6+3EZ3p9NtM4BM=)
                          20: 3138352e3137342e3235322e302f32322d3232203d3e203432333636.roa (hash: fjwkVrJgHYcshi/3Y+QPCp3XnkqBApeRZ/vsoJdrJ7o=)
                          21: 3138352e3136352e38342e302f32342d3234203d3e20313336373837.roa (hash: fFSH0ezykUI/2rRJSAo+exqof2ZJtlPE+gqLmlOb20Y=)
                          22: 3138352e3137322e35352e302f32342d3234203d3e20313336373837.roa (hash: 3dVelz7BWyEODxBoB2vjISFlIvJ7nID3V+DZaHlSHqY=)
                          23: 3138352e3135332e3137362e302f32342d3234203d3e20323132323338.roa (hash: 5so44R7GOj7qeVDdtiy/qqYwCospV4qnbN/H/qIRPFw=)
                          24: 3138352e3137302e3139382e302f32332d3234203d3e203437353833.roa (hash: giMrjvcY15y9piIM2SULpjfMynjKo2MHWvAUqluMyWA=)
                          25: 3138352e3135332e3137372e302f32342d3332203d3e20313336373837.roa (hash: WakGXIwVOezrKpe9uh1Vgi2+7ZfoPoJsS9NADqzaEKc=)
                          26: 3138352e3136392e322e302f32342d3234203d3e203230383630.roa (hash: IqOcZsuS9R+EH6PQHtmps/Bh2teXAtgTAlHsfSlylXg=)
                          27: 3134362e31392e38382e302f32342d3234203d3e20313336373837.roa (hash: k/16OjibAm+bwJ+FEweKPy7ljijdjCmdtFR4ek+yJxA=)
                          28: 3138352e3136392e3235322e302f32342d3332203d3e203531313637.roa (hash: kLuSLGd/oX0ih679ZZY3SSMPbqrvs9wqtVwmOUyBp2I=)
                          29: 34362e3235332e3134312e302f32342d3234203d3e20323031333431.roa (hash: LcZq6ebgqlwWUu9VmjZ3fzizYz8J88DrwVPBWewErEk=)
                          30: 3138352e3231322e3131382e302f32342d3234203d3e20313336373837.roa (hash: J2Mu/9CbuE3YZlTdzDFVau0ZPQF+NtbqpDbzFFj+LoE=)
                          31: 3139342e32362e3231312e302f32342d3234203d3e20313336373837.roa (hash: OK3D7lB7JwYhpKRabVjWHlsUquuA6bn1BN6qXrj2+2E=)
                          32: 3138352e3136322e34372e302f32342d3234203d3e20323031333431.roa (hash: Tienk5JJgaHXXC/+f8X+liZPo/4c1yTA96iy0wg5LOk=)
                          33: 3134362e31392e3135362e302f32342d3234203d3e20313336373837.roa (hash: XydZZpeClLS38TXf3ZFttmWfWpWqLhY9kRhjEr0QIFE=)
                          34: 3138352e3137332e3131302e302f32332d3234203d3e203437353833.roa (hash: IeeCtzXzaTb5ZIWPJcxrHt6BUaLOVjZ00hLnEBxeJ7s=)
                          35: 3138352e3137332e3130382e302f32332d3234203d3e203437353833.roa (hash: /EK9b2pxfTW4BPmtC7zdhiuofiIoBMZHQsnNAA+W7I4=)
                          36: 3135372e39372e3133332e302f32342d3234203d3e20323034313730.roa (hash: 5cQX/AKm9DalELWXLYXcc5qbqAoqOUYhOP8x7WYw/dE=)
                          37: 3130302e34322e3137362e302f32312d3332203d3e203531313637.roa (hash: Axn4sRayXbgVf7/Wx2gC4odFlINBKpYlLKTc9zagQxY=)
                          38: 3138352e3137322e35322e302f32342d3234203d3e20313437303439.roa (hash: LdWeAFkfCaiEPXy7kJMKUqEzTytXYLiDiu6xQYMGj4E=)
                          39: 3138352e3137322e35342e302f32342d3234203d3e20313336373837.roa (hash: hgvIVmpSAS5fLH7ux7eHXrw66BF9K0mkB25JrkxbJNY=)
                          40: 36322e332e33362e302f32342d3234203d3e20313437303439.roa (hash: 26/dBSTf240BW9aUgJQD85EmewMvwzZmf83v49As/xk=)
                          41: 3138352e3136392e312e302f32342d3234203d3e20313336373837.roa (hash: 3JPGRftCaPDGJa4OFogJrM/ixzgJnHVQzzVJBA9qkXY=)
                          42: 3137362e3130302e34332e302f32342d3234203d3e20313437303439.roa (hash: ThjnCAjy9oAa7ciSc9+piDAE8JZTmZbEGmNmFqWbbFg=)
                          43: 3138352e3135332e3137392e302f32342d3234203d3e20313437303439.roa (hash: Lt0cXli6tSoVYi72Gl+C4zNyxSb0YrAPji8ShXZLn9A=)
                          44: 3138352e3136392e3235342e302f32342d3332203d3e20313336373837.roa (hash: AXmehYXWoh3W50kHP/Lwblhm9EphhIbW75uBGx3sH28=)
                          45: 3138352e3136322e34362e302f32342d3234203d3e20323031333431.roa (hash: XXVf1l3Aamyu4Fk2yBBmidmRJO0o15X7QjaCANazwpA=)
                          46: 3136372e38382e33322e302f32322d3234203d3e203437353833.roa (hash: nVDjZ/AAU/BtMq3QCOzVlV4/Ya9pwFsa5qsEIeLRgQk=)
                          47: 3138352e3136342e3131302e302f32332d3234203d3e203437353833.roa (hash: ae1mwCmvGzdP64KutgutMSC5sjYzXMxWi9FOSNBgIeU=)
                          48: 3138352e3136332e35352e302f32342d3234203d3e20323031333431.roa (hash: 3vRPyd9EV1M4dXMtYiR3SC+fBubUSJA2+O9g0piPzfs=)
                          49: 3138352e3135332e3137382e302f32342d3234203d3e20313336373837.roa (hash: dQwhla9irxRG4UTGZJK/nV19KdOEtPcs2n63Fo4nABc=)
                          50: 3135372e39372e3133342e302f32342d3234203d3e20313437303439.roa (hash: j6iQ7XPNgV4Xm2EiDPXy4GkmGEsz+Iskwr/eLYFe/xM=)
                          51: 3138352e3134372e35342e302f32342d3234203d3e20313336373837.roa (hash: TrjkLUJRbsP6QWcp843UgZVVU3eh3793PoNuIuiWcO4=)
                          52: 33372e3134302e3234362e302f32342d3234203d3e20323031333431.roa (hash: 5Og2gz4rXLfDAH1xmZXoYiIMdTs5aaWPdfpHDFnStG4=)
                          53: 3135332e39322e34302e302f32342d3234203d3e20313437303439.roa (hash: A503di7uDXe3BAGZSGDBqvjh6Y/sgCvwVi9LY9jAYfM=)
                          54: 3138352e3136342e3130382e302f32332d3234203d3e203437353833.roa (hash: Z7J6ZOOk99basiGnBfqX4FgYCq8zEJygv8C8QAyT2QU=)
                          55: 38302e37312e3134382e302f32342d3234203d3e20323031333431.roa (hash: Pl77wZxCKLCHrEg1ZTPuYAgFmrOBiKtLpEnWuFVH7cw=)
                          56: 3138352e3136392e322e302f32342d3234203d3e20323136313531.roa (hash: 3d0jE1jw60xlICOE8NK183LW1kBVrTNonNof3DafmHE=)
                          57: 3137362e39372e3230392e302f32342d3234203d3e20313336373837.roa (hash: grWaMIZLpaiIJIuXYqUQ1AUCt1a/12+1wyRSJlpeI6k=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3e:95:e2:e3:f8:df:9f:46:3b:d6:c9:f6:91:b0:f2:5e:4d:2f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
        Validity
            Not Before: Nov 21 16:39:20 2024 GMT
            Not After : Nov 22 19:26:20 2024 GMT
        Subject: CN=050CD0EE45893F161C4EE9C7A9D0A30E95EB868F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5c:6c:87:fc:55:35:06:a3:f9:23:ae:e8:47:
                    cd:1c:50:40:74:25:05:44:36:92:66:ab:4c:36:87:
                    bf:d3:d3:97:73:44:84:9c:cf:e1:b9:32:e6:66:ab:
                    7c:1b:08:20:c6:05:b0:dc:1e:14:d2:40:eb:9b:93:
                    8e:5d:77:d4:88:1b:bf:7f:5b:11:48:85:c6:df:3a:
                    06:a6:77:d0:65:f1:8f:a0:61:a1:59:e2:28:00:f8:
                    7e:5c:39:c6:f9:8d:92:02:53:2b:99:90:18:01:98:
                    e7:cd:23:ec:b0:c8:19:6b:62:8f:e5:e6:b9:b4:e9:
                    c0:03:a6:fb:f7:cc:16:a8:49:2b:77:bc:bf:f4:5c:
                    4e:11:9c:7a:45:46:31:6c:53:5f:11:22:07:ed:2d:
                    5c:d0:47:2c:30:38:7d:06:c2:d9:4e:89:6d:67:b6:
                    85:1d:a4:c4:9b:91:8e:1a:91:f3:00:4a:75:7e:46:
                    94:a7:41:54:63:66:1a:a3:3d:45:01:ca:45:3a:8e:
                    79:f8:60:8a:7e:c0:4b:34:17:31:6a:ef:0b:2d:ba:
                    3c:70:94:c0:64:ca:a4:90:5e:33:0d:c7:ec:49:47:
                    e6:05:e0:31:d6:85:6d:a7:d9:35:30:61:aa:32:61:
                    38:3c:19:15:ed:59:c4:29:b9:db:e8:02:da:97:87:
                    05:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0C:D0:EE:45:89:3F:16:1C:4E:E9:C7:A9:D0:A3:0E:95:EB:86:8F
            X509v3 Authority Key Identifier:
                keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:b3:ee:ea:c8:b3:4b:68:19:22:69:f6:fa:45:50:57:e0:ae:
         a0:62:85:d8:e7:b0:f5:c6:01:7e:72:c0:c6:60:f8:1f:25:85:
         7a:fe:54:67:21:f6:e1:19:17:4a:8c:d9:07:fe:cc:20:13:d1:
         97:17:69:4a:51:71:eb:fa:1d:f9:ec:00:69:a6:e0:fa:53:b5:
         94:64:93:39:dd:9d:67:50:b6:72:37:52:c2:06:83:6d:e6:dd:
         8f:64:61:dd:f2:f9:8f:97:fb:38:6e:b2:c9:6d:0a:25:cf:d7:
         1f:3f:1b:c2:6a:de:61:69:8e:55:89:68:92:03:fc:63:53:e7:
         78:2d:46:58:bd:86:68:03:71:67:08:31:ae:ce:c8:72:04:91:
         87:fa:37:cc:80:8d:bf:e1:3c:20:1f:eb:9e:11:87:b4:5d:99:
         35:7a:de:e1:aa:f5:5d:e4:34:3f:f0:2a:ea:7c:0f:91:9e:3c:
         48:25:5e:f5:b8:65:8a:64:6b:66:9f:0d:6a:f7:4b:cf:68:c1:
         70:11:02:28:01:78:63:fd:5b:9d:89:e6:23:7b:b9:28:7f:9b:
         a3:17:84:39:3e:59:68:db:31:03:a4:42:4e:51:6c:fa:ba:a5:
         af:e4:ed:21:fa:d2:7e:05:8d:da:82:05:3b:42:67:4d:ad:9d:
         ba:f8:32:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:21 2024 by rpki-client on console-ams.rpki-client.org