Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          94DSQc+bAa8WHT8aBfkJ3DpmqX1ws4woCATY2CT4Qtg=
Subject key identifier:   58:41:8F:91:FF:3A:71:FE:5C:6B:14:FC:F1:1E:D8:A0:CC:44:44:D0
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       07E90830900DC516ED5B59E01863FBC1A602D03D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          04F4
Signing time:             Fri 09 May 2025 01:40:25 +0000
Manifest this update:     Fri 09 May 2025 01:35:25 +0000
Manifest next update:     Sat 10 May 2025 02:17:25 +0000
Files and hashes:         1: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: A0XKJ5LQE2xdMm4Ben97C7myJjFSIvK/gRy57S/U13Q=)
                          2: 3134362e31392e3136372e302f32342d3234203d3e203633303233.roa (hash: ZHdW+pei9XIhTbcUkYdHIOR86A1hj8LVQhQf+2OeqZ0=)
                          3: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: b7J5ZHAXcSY0Xj1PSon6tEeZ1GDcJuT1aGzIBTYCrpo=)
                          4: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: 1rledH/nQm8w0NijGoGbm37JgiwE6dNG9uQzsEzjcaQ=)
                          5: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: tJ6A7U51n+GmIhk14F2miBqIQAmoLzM8TwWGKyDUw/Q=)
                          6: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: PY8NObpnksEy4Gap1Hc7MyHqiFU62dabk5L2A/Q0beE=)
                          7: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: cUer1fFgoUaMXBv/Ofy3VHFv8QPdEE9BGuKF+6jEGKA=)
                          8: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: q2CusaPkf+9tq5tpeWHdsbDXlriozRiwrVa0ak4+VcM=)
                          9: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: w5NU7XhSCx4TB+ZVVuz65lQXaRG4sh/qolM03TzoQNc=)
                          10: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
                          11: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: K/AgWhdBwRNuHNiBHXtZ25SaRir/NPec0zhFlGbzmks=)
                          12: 3231322e31382e3131342e302f32342d3234203d3e203133333335.roa (hash: vO05yPqpp4iOUltzxMrFn4LhWc4dalJCoS4kQJCbZB8=)
                          13: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=)
                          14: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: IZ1FK1LtUNnpDGA40P5RIJ6ZOXsvB1S0Y5ORDGh7xcg=)
                          15: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: wXll8iGOq5bo/V4iKTWa0gWLbXOr0lpoVBYORUbUhI0=)
                          16: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0tQfil3TCFdk5LEcr0D0xtOoBgJdLwmHivVySWFI/b8=)
                          17: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: 6dfl8lI1/2dWL8ffIUYhSFUUS7mSu5VjjS42Z8HkW7c=)
                          18: 38352e3230392e3232392e302f32342d3234203d3e203536353934.roa (hash: QX9ueohVOd3OqmtIdot9+eGuIdzLX4v81/D0nXHE6p0=)
                          19: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: DSrssF4mQ2FpkJ2bTT0rXZrpSPxbZ/p2NNnVGrB1zBA=)
                          20: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: CcTcBdbonCUzXWQkXfUzd9CNDkT7d6acKjiVXDKXCdc=)
                          21: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: NPvxKSNfdGX2aoCtCwLVMBnzeoN7AU2GpBh+K+JOMMc=)
                          22: 352e3138312e3138362e302f32342d3234203d3e203239303636.roa (hash: 5g1iTpy4+Ocf7g6idB3LUlopM7lH9cpsMczTTuu+hV0=)
                          23: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: fFoVzPmBBS3RRm+U3RPtjG4VEvF1de7uQ6FGaPF9XH0=)
                          24: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: Jcj6Q6hffLq9mVMv6ZE1OGTsaSIAKmWUVH3PL5R7nSM=)
                          25: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: D9JHULDkg0M1wT0M8wVTfDaCTJBMJIgvLcTza5q7f5c=)
                          26: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: DI+7B0d39E77tFTkTia6zu1RCWn3fqL6yGNbGxzKPto=)
                          27: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: e4sOWlDxZzPIXQ3Vnqya07udsUK1KYBFfN3K3q4TdIQ=)
                          28: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: EGBFBscvQ1YWstG9kbxkZOotMsNA8UcpxsIuwRfrnH4=)
                          29: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: LvALS0QzJUIn2y2aM1WJBNeefzd38B8yBzedKpN4nB8=)
                          30: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: SFZs2oMtwnIqXXrJ+wKfTfWn9twNuN9+e0KffE2zcpE=)
                          31: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: Sd3ATX2JXuJGwYyTznY75JAJsfCeqEXX3vuSL4tLhwo=)
                          32: 3231322e31382e3131342e302f32342d3234203d3e20323635393139.roa (hash: hab4hIGZSaDFVIiuhh8M27XjJNP2UIzC71avB4BPqKc=)
                          33: 322e35392e36332e302f32342d3234203d3e20323039363432.roa (hash: RaxlZegunO166WwhSyVfZX5K+6/U6SSWAALUv6FWG/c=)
                          34: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: Hiowcu87+rnRP4VBm949hK9/XoAe1JP45hqg/KNcyVc=)
                          35: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: tMu2dDNgxRe+VDjoQWDh2D5B14b9X3sh+JRsGfPn8q4=)
                          36: 38352e3230392e3233302e302f32342d3234203d3e20383334.roa (hash: +YwKgorgvo1CvmKan+owoUGLWhiNoyaWQV/LPfZU7RI=)
                          37: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: u4qzpzCcpcy7ZWgFmuZevTcx8Lt6OWg/1tciNCqCqYM=)
                          38: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:e9:08:30:90:0d:c5:16:ed:5b:59:e0:18:63:fb:c1:a6:02:d0:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: May  9 01:35:25 2025 GMT
            Not After : May 10 02:17:25 2025 GMT
        Subject: CN=58418F91FF3A71FE5C6B14FCF11ED8A0CC4444D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:81:86:51:52:8a:a2:1b:96:2d:2f:61:28:
                    66:81:7b:b6:9a:01:47:9f:f9:e7:73:da:dd:97:65:
                    4c:2b:a9:4b:33:da:a7:3e:42:cd:25:1a:2d:4f:9c:
                    20:bf:58:de:5f:ec:a3:48:fb:38:04:ef:cf:88:fa:
                    bd:12:40:52:7f:74:cd:7f:fb:db:6b:65:9f:6b:b1:
                    d1:69:cb:12:9c:83:73:7d:86:99:71:42:24:7b:b6:
                    23:c5:a8:aa:77:f5:d4:0d:9a:3a:b5:da:95:bb:6e:
                    59:d4:28:9f:e3:92:d6:d9:09:0c:b5:d7:c5:39:ef:
                    88:85:73:f2:b7:62:1f:2c:7a:0e:23:6b:44:d9:5e:
                    4a:05:0f:c3:19:33:a7:eb:87:c2:16:53:69:73:7f:
                    56:79:bd:c8:8f:eb:33:31:51:fb:65:af:bb:49:f0:
                    80:7d:1f:16:b3:86:69:06:0a:4e:40:c9:88:f2:80:
                    ca:8c:6f:dc:2e:3f:c5:32:be:d4:fa:b0:6a:bd:82:
                    9a:c3:39:34:37:4f:ae:6f:80:b9:26:32:07:62:43:
                    bf:23:d5:3b:ae:7f:fb:f8:53:2c:5a:16:5c:bc:1e:
                    ce:f6:a1:50:1d:f8:8f:87:d4:59:b3:7e:1a:ba:b0:
                    9a:9b:8f:98:24:5b:81:7b:c5:05:11:ed:63:36:82:
                    f5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:41:8F:91:FF:3A:71:FE:5C:6B:14:FC:F1:1E:D8:A0:CC:44:44:D0
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:75:de:76:18:31:81:10:89:f4:13:7b:3c:94:50:cf:b5:5f:
         c0:ae:34:74:5a:ea:fa:67:e0:17:f9:99:72:59:c6:6b:5e:9d:
         e6:d0:0a:5e:08:c3:ae:ff:d9:2a:df:77:bb:16:52:00:dc:93:
         6b:b1:60:e3:80:21:9d:b6:aa:f8:c3:1f:3c:e9:f2:97:b2:a3:
         ca:b5:a3:b1:1c:78:40:07:57:9a:2f:40:7d:05:a0:87:ff:a9:
         4c:3f:29:fd:fe:07:be:71:d2:3c:c8:6f:2c:d3:78:a8:b1:d2:
         31:07:b9:64:7f:f1:3f:4f:2c:33:a0:ef:91:a2:d1:87:e4:66:
         97:3d:87:7f:89:d4:66:5f:1f:05:be:86:91:1b:d4:1c:97:87:
         d3:0f:4d:7f:88:81:22:79:7a:c6:0e:73:94:c6:61:e4:4d:96:
         c1:08:08:05:82:87:90:f2:ad:87:35:47:94:ce:ef:45:44:b9:
         08:aa:80:46:a8:b4:ea:25:55:5a:ec:2a:e7:9d:9c:33:5d:ac:
         3e:16:0c:6e:d2:70:09:ea:36:7f:a0:59:74:26:97:e8:f3:8d:
         17:7c:d6:7e:5e:e6:06:a5:ce:55:e1:6a:8e:8e:b9:49:dd:e0:
         ee:1f:16:77:22:9c:b5:28:65:c5:1a:17:bc:a9:93:c7:2f:e3:
         d3:72:5a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:04:14 2025 by rpki-client