Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
File:                     B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json)
Hash identifier:          mC4yyPYOIjoM1WncrEvAlDNbXXz25dnSUfREhoe+Vcs=
Subject key identifier:   B3:4E:9E:9A:CD:D3:B4:36:C2:8E:40:46:68:52:97:2A:B7:A2:5C:1B
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       2E10B4A53511F6D4E5FD0DC6B9AF1AF9079D81E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
Manifest number:          0526
Signing time:             Sun 04 May 2025 23:45:15 +0000
Manifest this update:     Sun 04 May 2025 23:40:15 +0000
Manifest next update:     Tue 06 May 2025 02:01:15 +0000
Files and hashes:         1: 3231332e3133392e36362e302f32342d3234203d3e203136353039.roa (hash: 1hlK3K+inj21DftfAPCqNx9Ur756v/RvYDQKchDD0RY=)
                          2: 3231332e3133392e39322e302f32342d3234203d3e20383334.roa (hash: v0tNFH1u/s9uww1+x0zLopoqAlrYrdWeRhsSzqaLV6I=)
                          3: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (hash: 4HobDf2IR5LvPu11gvXGRRjA/4KYDCBMeX1L5falDQI=)
                          4: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (hash: CZYh6lYb4N4Hi46B2oVp46GIE/gWlkXTwUlUU+TKpIw=)
                          5: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (hash: zOTGboIZBsrY2C4wOPiGbp4YdGPWL/CIf9OR+DPh8lw=)
                          6: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (hash: pjnqIb4dxS7ohemcNICs3/5MSebDeHfZm+o3ScY7Wbs=)
                          7: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: M5KJEFx6ngzgWcWaswPQRo9lko/DzsisbWDI/JPapI0=)
                          8: 3231332e3133392e36362e302f32342d3234203d3e203134363138.roa (hash: KfrtJjSrdaJP5uvqRj2CQapVnmUpyN82iN3vrd+6yjk=)
                          9: 3231332e3133392e38302e302f32332d3234203d3e20383334.roa (hash: qiWvZJxXyA1T8nIVbLoZ99OExdcS5mc15RZxXCZOFJM=)
                          10: 3231332e3133392e36372e302f32342d3234203d3e20383334.roa (hash: D6SogqGmOJbzVtDCb1JuxW8Fgqo7v+Dc/bOrJE9HIsI=)
                          11: 3231332e3133392e37392e302f32342d3234203d3e20323132313530.roa (hash: 0JPdHuSbHUk0VXaqk6MQ9H7eLXZuOQ1QZwBPgp3LcZ4=)
                          12: 3231332e3133392e38362e302f32342d3234203d3e2039303039.roa (hash: FfLZiCS8Nd3284OE5qfthGu+7ch+27qC/k5QS2NyeLA=)
                          13: 3231332e3133392e36352e302f32342d3234203d3e203538303631.roa (hash: 4CxK/2nsy4IlLMM6spVwFLEFITyK9i3ABeG638HSk98=)
                          14: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: NjWmld7in/C2wyn6DXt7Xnv7mQPq1jiHpZcTZuGeBQ0=)
                          15: 3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa (hash: qcqTb3VE7m+UGKYwU3pX6Cz4rtaboRvLfOlujiKOavY=)
                          16: 3231332e3133392e37332e302f32342d3234203d3e20333936333536.roa (hash: p9bl2cITeGqyDsp+qYa6XKu0+IBsfcA9I2MK2L2iu7Q=)
                          17: 3231332e3133392e38342e302f32342d3234203d3e2039303039.roa (hash: recgwGLHRmHMtvRRJVUhe6BWHyw6Djaciag4FXuYftw=)
                          18: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: +A7YZkvAN81rPDpTJkId3sZMflwrFWtwJvc3yTwbIVs=)
                          19: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: vs2b7sm3b3a6ih0FOLh30+kJAWgxfwtdRLZicKgW2iY=)
                          20: 3231332e3133392e37352e302f32342d3234203d3e20323731393837.roa (hash: k/dg+vn2LRgJwjRiBw+dTVhqGlwM5OEWHrHzMTRZgGU=)
                          21: 3231332e3133392e39332e302f32342d3234203d3e2039303039.roa (hash: 9cktvEdh4jpik+wY0YHKxFgG9OCHki2tIjn/mKo9IKg=)
                          22: 3231332e3133392e37372e302f32342d3234203d3e20383334.roa (hash: O5jVvFaTWVNtfUZ2xsHPpB6aWw/5pLDoGWzZv5bE6BQ=)
                          23: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: pcqczpZd3N8rkxbwgnioI5KV9SeSdrdvwmseTG1EX1s=)
                          24: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: aplL4eWGO1854T22hYUsUkBTP8Rpw5inKqfwVoAi4uA=)
                          25: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (hash: CLzyfVEPAwKX3mhx3cFkDV2A+7c3eW1iEPnVFN3/un0=)
                          26: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: 3sBgBPhXGekAATE8XJ410DzQWJqVxKjP0XKZZazqwjc=)
                          27: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: az44LpIhGHAnwTXqf+rWe6nqexe2z65oXo0XPHlLHVY=)
                          28: 3231332e3133392e37392e302f32342d3234203d3e2033333230.roa (hash: PtRMyKTdbfZGfPE5XdhdhFh3qhxKx8+kxVjMWXNcsWU=)
                          29: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (hash: IdSy9DI41okmJzC8kiYhvPIkxbhT29hGtDcstol94Gs=)
                          30: 3231332e3133392e39312e302f32342d3234203d3e2039303039.roa (hash: iHrVGYqO0jEnmhXvt0u+E3Fi7EyKrYFB7bEQzlX2suw=)
                          31: 3231332e3133392e36392e302f32342d3234203d3e20313337353137.roa (hash: HH3jqYI0MpU2yLi9Hw8yJjtic3EBakXCP+g63lrfqjg=)
                          32: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (hash: m9VEyjC6AstkEvUHZu0nndWjDPejGmt2Un1d+bIvwNg=)
                          33: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (hash: euqkb79t1OVkqJLV4h0sY2Fb9LyHpO6FssRdPdeta2o=)
                          34: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (hash: FBtJ+MNYwdWO4In9hmlePFb198UWpspP65HhFA9Ht28=)
                          35: 3231332e3133392e37392e302f32342d3234203d3e20323037333838.roa (hash: ++GZ339S0KrF867J3TV0tr4TdthWz9Doq5ZUIyvykVE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:10:b4:a5:35:11:f6:d4:e5:fd:0d:c6:b9:af:1a:f9:07:9d:81:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: May  4 23:40:15 2025 GMT
            Not After : May  6 02:01:15 2025 GMT
        Subject: CN=B34E9E9ACDD3B436C28E40466852972AB7A25C1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:42:e1:0b:95:a0:4d:ae:0a:a6:76:0e:94:1d:
                    9b:f6:71:43:8e:e1:ae:1f:79:64:07:87:13:c6:55:
                    dd:06:39:99:05:9d:7c:ad:47:11:63:70:c0:84:c2:
                    1a:34:61:ff:3a:c3:27:bc:47:35:7e:57:b1:de:b0:
                    ce:d2:d7:24:f7:54:85:b4:17:77:da:b2:72:e8:b7:
                    82:11:44:c4:29:4b:43:6b:39:22:c4:12:21:b3:9c:
                    82:a0:4c:8e:80:a0:a5:b0:a4:3b:c3:7f:ce:b2:b6:
                    d6:0f:ef:eb:ce:ca:b5:4c:e4:0e:90:34:91:b1:17:
                    32:5a:89:81:66:70:a9:ae:f5:6f:34:92:8d:d9:e1:
                    86:86:f6:8d:42:ea:ee:3a:de:79:ed:18:eb:2a:7a:
                    bb:4b:f0:27:f0:14:5f:96:df:f8:60:7e:18:d0:b2:
                    bc:cb:d1:61:7e:9d:26:e7:0c:d2:0d:80:74:e9:bc:
                    f6:8e:5c:63:d6:3f:58:fe:6a:c2:97:6b:f9:54:c0:
                    cd:df:12:4c:87:5e:24:26:91:9f:76:be:a8:c3:93:
                    1a:30:3d:95:95:3e:ed:f7:3b:0a:d3:16:86:05:76:
                    97:c3:09:72:08:d3:3b:bc:70:9a:bd:f1:92:c7:c5:
                    4c:25:79:0f:ec:83:53:85:91:90:79:3e:e2:6a:8b:
                    17:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4E:9E:9A:CD:D3:B4:36:C2:8E:40:46:68:52:97:2A:B7:A2:5C:1B
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:0c:d6:97:a5:3a:a1:c5:21:67:c7:50:c0:0e:ad:58:87:4c:
         eb:20:c2:4d:a1:0e:c0:cd:e8:7d:ce:b0:f4:73:1f:1c:4b:e6:
         40:bb:2a:f5:a4:1b:70:72:69:a3:d8:e0:73:94:c7:6b:1e:a4:
         da:47:a2:68:b3:d7:1f:80:29:e6:ce:42:a1:ac:21:f9:4e:42:
         32:ea:ef:b7:65:67:ab:4f:e9:4e:a8:60:87:3d:83:b4:a1:32:
         a8:e4:15:78:fc:d9:91:6c:e1:18:b9:64:1a:9c:7d:db:e4:3d:
         4f:f0:96:f6:be:9c:cd:8d:03:04:d8:b7:e6:1c:72:f9:95:95:
         80:c4:23:48:3c:d1:10:91:df:f3:54:fe:fe:42:e3:22:26:a4:
         7e:94:1f:7b:8c:ab:01:42:a9:0f:8e:b2:56:ff:ef:c5:9b:48:
         cd:74:ab:d5:c5:5f:99:e1:ef:62:24:06:94:05:6d:1f:6c:13:
         a3:a0:36:48:24:82:ba:e9:33:31:77:e4:c1:c0:59:09:72:80:
         87:f2:84:67:db:6e:f3:ed:e0:34:0d:fc:43:7a:4f:95:41:ff:
         00:5e:96:55:c0:1c:8f:b3:f1:8a:34:30:2d:60:17:82:8b:e8:
         14:84:d9:0a:29:88:fe:0f:4a:da:ab:91:59:61:a7:51:f9:49:
         5b:66:88:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:32 2025 by rpki-client