Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
File:                     3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft (raw, json)
Hash identifier:          vrjgOp0Wo6SOMPv46Od/3vZf1YxQnnTwfIGL9XZt+uw=
Subject key identifier:   97:0C:C3:25:78:0E:2C:D8:D4:96:D3:8C:91:CA:0D:80:B6:8F:D5:0E
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Certificate issuer:       /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial:       2D57FB8374F311C71610168F984C07C558C787CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
Manifest number:          01CA
Signing time:             Thu 08 May 2025 16:18:11 +0000
Manifest this update:     Thu 08 May 2025 16:13:11 +0000
Manifest next update:     Fri 09 May 2025 19:30:11 +0000
Files and hashes:         1: 326131343a366634353a646561643a3a2f34382d3438203d3e203438343336.roa (hash: D8dy67lH7mKpFtKbPMaHWGtbJcZylACehWx+4H0irZc=)
                          2: 326131343a366634343a623030623a3a2f34382d3438203d3e20313939353832.roa (hash: MYKoEmllVAyYKTmfRaWUIl1KQBpJiM51RTw82pBlZ/0=)
                          3: 04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer (hash: 2lYT3gtC49tqrkD3HaWeKlDKSbKBNwQiIvyLld9YaQk=)
                          4: 326131343a366634343a623030623a3a2f34382d3438203d3e20313937393139.roa (hash: GcC1OOQic3vs9xDhV0qGl8u3fvABcPb7eRlO7suqV/c=)
                          5: 3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl (hash: 746rmpNRUpgVGnlcrfEUgaeC15z9qYwSpUTTvZiZizo=)
                          6: 326131343a366634353a633030303a3a2f33362d3438203d3e203438343336.roa (hash: 84yN8GMB2a5DXwGkFW2zsyLvfW/TnY6P5ZHEy29emgk=)
                          7: 326131343a366634353a646561643a3a2f34382d3438203d3e20313938333432.roa (hash: /s9FD+BuCvCOu4sZBij0Yh1eY8Nr8NHCtVi0OvPiCyY=)
                          8: 326131343a366634323a3a2f33312d3438203d3e20323030323432.roa (hash: TPvNwHsZw7UbSxFzI4ZEU2RQRB0eOXJX5J17JfLQpnQ=)
                          9: 326131343a366634343a646561643a3a2f34382d3438203d3e203534363831.roa (hash: 4vV1NPLNtJ5Sem5fwMjyfRCUw2Hm0zuf9K0F0M5JmTU=)
                          10: 326131343a366634343a623030623a3a2f34382d3438203d3e20323130363637.roa (hash: 5aLekRp0Z/nDkL3quTBST646++5Or5kPuLfIwZxGWPU=)
                          11: 326131343a366634353a633030303a3a2f33362d3438203d3e20313938333432.roa (hash: kj+wMZhCYMt0Z9jhqZmZtaHQjz2obXZ+/J2z1ua51wg=)
                          12: 326131343a366634353a3a2f33362d3438203d3e203530323234.roa (hash: mvEo9ltQv4jrZCOh4EYz0yzaY9D43IlA4B9MK3lgwdw=)
                          13: 326131343a366634343a633730313a3a2f34382d3438203d3e203438343336.roa (hash: kN+6glZZqj1lvl+f3cQSjIHuGxniqs1l2hL+N9PCMXg=)
                          14: 326131343a366634303a3a2f32392d3438203d3e20323030323432.roa (hash: c5+sIF6SVWQEOk60+gid/kKFxdzO9Q59QB0rcaeUFAg=)
                          15: AS200242.asa (hash: 1AlMG2dsNj+2a3kLp0CpSmy1LKhmLk73ZFr/4CSbD+w=)
                          16: 326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa (hash: OSQQWXQC8Doo46F92DSw83gpWUJg/I3ZjbHjihzygko=)
                          17: 326131343a366634343a633064653a3a2f34382d3438203d3e203438343336.roa (hash: bY9e62A4gu/86iUTHSumKPvi2hGZoe5ZTShnEctU4SM=)
                          18: 326131343a366634343a623030623a3a2f34382d3438203d3e20323135343733.roa (hash: L8GmqvJ1QVmWAKscHOFBmFM5vDJ8hADh4YYnfT4JEAM=)
                          19: 326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa (hash: zQ/yzhK7qvzoSsvDcyClVn7AKwYrbUYHcG3F64niJUE=)
                          20: 326131343a366634303a3a2f33322d3438203d3e20323030323432.roa (hash: qhoj8vou0d4ZtC5V1DKyyM7rrTWsmPFrHxQlmlsE9nQ=)
                          21: 326131343a366634343a633066663a3a2f34382d3438203d3e203534363831.roa (hash: /yWZfagoJlrySMZHREX961tilL5M+CVEvfwwfIOvULs=)
                          22: 326131343a366634343a656465383a3a2f34382d3438203d3e20323035373839.roa (hash: K1pgngmKcNIjyWdBpbyb8yrU4+AFj1FA0WE8csGiSxU=)
                          23: 326131343a366634343a636166653a3a2f34382d3438203d3e20323035373839.roa (hash: jDOaIGvPgjhenzPsT0baoWOtCBD2JafI5qghnSCs9Dw=)
                          24: 326131343a366634343a633064653a3a2f34382d3438203d3e20313938333432.roa (hash: JbFcx8NYIQrxy++ssCWok53ycSawtedKXeTKz2IS1/I=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:57:fb:83:74:f3:11:c7:16:10:16:8f:98:4c:07:c5:58:c7:87:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
        Validity
            Not Before: May  8 16:13:11 2025 GMT
            Not After : May  9 19:30:11 2025 GMT
        Subject: CN=970CC325780E2CD8D496D38C91CA0D80B68FD50E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:da:cd:fc:b9:0b:28:15:67:f5:f5:41:ec:a9:
                    63:0e:cf:c5:d3:e9:8f:81:03:00:97:1a:2f:a2:29:
                    b4:92:fb:fb:04:80:48:e6:75:e9:15:ae:d3:6f:40:
                    a0:4d:dc:89:9b:bd:f9:0e:97:62:cb:49:2e:87:ac:
                    fd:f6:d4:fa:61:8e:96:4f:b0:af:1a:e0:5a:7a:52:
                    7f:33:2a:c4:24:a4:af:44:cc:c3:4f:5b:4f:28:5b:
                    6c:b9:02:52:42:29:41:fa:a9:be:ee:ec:bc:80:04:
                    ba:a5:7b:67:9d:55:1d:76:e1:c9:af:0c:fa:71:52:
                    00:b2:d5:74:6c:87:8d:cd:2e:d9:c5:d9:8e:50:e3:
                    8a:7c:cd:d2:ca:27:5d:76:94:d4:63:06:49:e5:cf:
                    dc:1b:a8:c7:9f:ab:89:8d:30:75:45:e6:5a:82:a4:
                    00:5d:ce:58:c0:3b:0c:59:54:d2:80:e0:80:ab:96:
                    67:05:93:f2:3c:cf:06:80:13:ba:e2:50:83:f6:39:
                    7e:27:b4:95:e4:ab:93:fb:c5:fa:f4:e4:71:12:74:
                    e0:7a:12:4e:e2:6e:bb:0e:04:56:7c:7f:d1:60:2d:
                    6e:6d:5d:45:ce:24:9a:da:ae:37:d8:e5:9a:bc:00:
                    06:8a:e5:d8:76:f5:cc:79:00:13:32:19:01:1a:70:
                    ba:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0C:C3:25:78:0E:2C:D8:D4:96:D3:8C:91:CA:0D:80:B6:8F:D5:0E
            X509v3 Authority Key Identifier:
                keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:da:2d:29:95:b5:bd:77:1d:2d:96:fd:f0:ff:d8:67:e8:58:
         d7:3b:6c:1c:29:37:c6:aa:f8:d4:5f:0c:1b:b7:39:35:c0:59:
         64:c8:99:7c:20:87:80:ab:8d:9e:03:36:d9:ac:52:ac:0b:34:
         4e:9d:1e:91:54:d8:e9:9d:c8:81:97:7e:cd:a7:6b:3b:c9:b3:
         3e:37:c0:db:4d:4d:d8:5b:8b:e9:3f:53:f3:3a:ce:3f:76:99:
         e7:70:13:ad:9d:55:03:83:cc:25:8b:af:ed:b6:8f:42:3a:64:
         15:80:c7:ec:55:29:b8:5d:f8:ed:90:72:04:72:46:63:87:43:
         4e:e7:07:67:7d:ca:c0:8a:ba:9e:8c:2f:1e:ab:23:fd:69:ca:
         14:99:62:4d:44:23:4f:6d:0b:61:c5:f3:3a:02:57:35:8a:f6:
         7b:e5:26:7b:37:8f:ed:49:a1:00:7f:34:ea:87:b5:b6:3d:ba:
         4c:ab:c5:f1:8b:58:41:f2:e2:06:cb:02:61:e5:bc:31:96:08:
         06:25:7c:2e:83:82:ab:1e:d4:da:23:8e:22:bb:db:76:fd:45:
         54:67:19:82:f5:2d:9e:7b:d5:65:b8:88:86:18:ec:d9:49:bd:
         4a:91:5f:b5:32:f7:57:43:10:98:52:e9:7e:3f:55:65:07:1f:
         04:a5:98:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:40:21 2025 by rpki-client