Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft
File:                     ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft (raw, json)
Hash identifier:          zjZZ6G8685aIownZ1s+mtIRRP9Bc/jj/K5McQosfDOM=
Subject key identifier:   A3:08:80:DF:8E:7B:E3:1B:B7:73:88:A3:12:3D:D4:78:13:B4:47:7F
Authority key identifier: ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29
Certificate issuer:       /CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429
Certificate serial:       373057DBA84606D650DEA3AE9A99A63ABCF05A5F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft
Manifest number:          80
Signing time:             Fri 09 May 2025 10:09:28 +0000
Manifest this update:     Fri 09 May 2025 10:04:28 +0000
Manifest next update:     Sat 10 May 2025 11:21:28 +0000
Files and hashes:         1: 326130613a363034343a616131303a3a2f34382d3438203d3e20323134323233.roa (hash: KQuKUZL8gd5sT2aK4fAeEoGOF4zcj5xw/DVnFe2Ltsw=)
                          2: 326130613a363034343a363430383a3a2f34382d3438203d3e20323134323233.roa (hash: qtaVVllap8QfA9Nfp3H+glqc4pf+903yRwgdMDsmuxs=)
                          3: ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl (hash: lhZ9PtZzypZfxns5nAtpT9f5I4luXngsRZkxQscgnHc=)
                          4: 326130613a363034343a363431303a3a2f34382d3438203d3e20323134323233.roa (hash: 9lwecFjUgWAR1jqPOIwIBIuw9i2A3sNTOuf6ZF50tpM=)
                          5: 326130613a363034343a363430393a3a2f34382d3438203d3e20323134323233.roa (hash: eCEK+yM9jVZwcza/zKNUCq6Q/P7RdirvvA3W3giolog=)
                          6: 326130613a363034343a363430313a3a2f34382d3438203d3e20323134323233.roa (hash: 9NYGqo2Ls6hbV6+1P7vXYDKtF8hmmGEM+wvhFByd8+4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 04:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:30:57:db:a8:46:06:d6:50:de:a3:ae:9a:99:a6:3a:bc:f0:5a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429
        Validity
            Not Before: May  9 10:04:28 2025 GMT
            Not After : May 10 11:21:28 2025 GMT
        Subject: CN=A30880DF8E7BE31BB77388A3123DD47813B4477F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:95:dd:31:d0:9c:57:28:55:a7:c3:80:99:b9:
                    c4:f1:74:cd:8a:88:e7:09:cf:bc:90:91:82:7c:fb:
                    48:98:c2:38:5d:95:00:dc:29:bf:d2:27:2f:85:3d:
                    1d:c1:cf:a7:2a:21:09:1d:d7:af:a1:80:60:cb:4b:
                    69:b7:17:d1:c9:de:25:0b:14:ff:06:26:7a:74:82:
                    83:f5:a4:0c:d2:33:2e:cb:06:ce:3d:1c:c2:a4:74:
                    ba:86:c8:26:30:be:0e:3c:4f:a7:f6:d1:a9:f6:3d:
                    11:1d:c2:bb:71:13:e2:da:4a:1c:97:00:c3:22:53:
                    bb:16:78:f1:cf:57:99:f9:5f:e3:e9:2d:6b:95:a7:
                    84:ec:14:64:31:ae:43:fe:45:e7:32:87:73:9e:ad:
                    e1:43:ef:b6:5a:14:9d:97:9f:06:1e:bd:7e:aa:3b:
                    2a:30:03:15:31:04:f3:d5:21:a4:9c:bb:57:40:52:
                    ee:d0:5a:7d:36:8d:bf:fd:f4:a1:8b:dd:54:9e:50:
                    8c:59:90:b0:1c:81:50:d7:a4:6c:a0:f6:5f:f1:58:
                    53:31:ca:1a:4b:6d:bc:2a:c0:68:64:54:d1:8c:b2:
                    6a:28:7f:c0:f1:8e:45:76:c2:ae:ee:c0:d9:b3:cf:
                    26:77:29:60:73:95:39:09:ed:14:e0:8d:0e:8d:d1:
                    51:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:08:80:DF:8E:7B:E3:1B:B7:73:88:A3:12:3D:D4:78:13:B4:47:7F
            X509v3 Authority Key Identifier:
                keyid:ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:7f:3e:fb:0c:90:1a:4b:2a:6a:5c:b2:4b:8d:26:56:fa:6c:
         e9:90:42:a3:88:d0:a5:2c:d1:aa:ef:bd:4c:9a:a6:02:f1:ce:
         f0:96:af:84:8a:69:36:df:3f:a6:f6:c4:f8:e6:e9:6e:55:78:
         fc:8f:53:26:4a:a6:b7:de:75:3c:4e:1f:16:43:e8:40:9f:c5:
         14:7b:2e:f2:c8:cd:a9:69:5e:79:8e:ba:7d:0e:b6:ac:a2:dc:
         b2:63:15:52:b1:05:d9:42:92:94:91:7e:44:1d:3c:66:c6:af:
         fa:ac:5d:ce:cb:9e:b4:45:4b:18:cd:58:3d:b1:7d:55:4c:a5:
         75:55:41:9b:3b:70:c3:0a:3a:71:f7:c4:a9:8f:da:79:4f:54:
         7a:15:bc:0d:15:97:b2:6f:92:05:6a:e1:95:8b:c2:3b:70:b4:
         ef:02:37:01:55:22:c0:25:bd:4e:ee:99:6f:09:ae:91:f0:ea:
         fa:cc:87:2c:f4:af:1b:d9:bc:09:6c:46:e6:81:a1:45:c5:36:
         25:b1:ae:ea:4c:95:86:74:3c:5f:6c:5a:a3:36:4a:30:1b:e6:
         31:f5:93:37:82:56:59:7f:54:fa:46:4f:b8:80:05:44:7a:a5:
         b6:98:66:49:c8:e0:4a:17:ab:a3:08:91:a7:59:52:7b:c6:fc:
         bc:f4:94:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:58:19 2025 by rpki-client