Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
File:                     1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json)
Hash identifier:          d43RQ66OI18wESNi3rk3AwRpfpwAHTI+4YhISFCgGNA=
Subject key identifier:   0E:80:0D:76:6B:BB:47:4D:7F:7B:19:48:47:55:A5:1C:B9:FF:3C:92
Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
Certificate issuer:       /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
Certificate serial:       4F4D67F5B433CDD8580229CE32842F71CF7CFF06
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
Manifest number:          01B9
Signing time:             Mon 05 May 2025 16:43:56 +0000
Manifest this update:     Mon 05 May 2025 16:38:56 +0000
Manifest next update:     Tue 06 May 2025 20:08:56 +0000
Files and hashes:         1: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: LBwr2IIvIEK5xOuNpQkeW83enlWLrYAsIaYysvPQEas=)
                          2: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: UnaMFJ4LqZmUQNqlqG5yZayY3BN6lWYzE1n4NGCmei8=)
                          3: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: AF+Ua5qWjlXSmRcISzVN1U/rrOe/cIos4w3BIP5f38s=)
                          4: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: suIl/3chBmz4SE6S2JNws6yO1vlc1iZKVLvbUUyDaA0=)
                          5: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: KADA3zDKXvL/4R+46HmNoDL3xG2RVXCQ+Fx+Q057jPA=)
                          6: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: wu4NApOfezgLJjsC2U+bzWwjgdcgVOBFq6UL7NyfBkc=)
                          7: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: AFknu0V1C2MuQMiRuCNbBD3lRoZ3gLruh5ACQw6l440=)
                          8: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: WILaErOtYEwaER07cW7IGwEP87dFlbxnPw+ZhGtPeTA=)
                          9: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: mbo+9PjAf+is8MQEYQcjnTe6biSi8K+HHfmzFB/JEuY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 20:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:4d:67:f5:b4:33:cd:d8:58:02:29:ce:32:84:2f:71:cf:7c:ff:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
        Validity
            Not Before: May  5 16:38:56 2025 GMT
            Not After : May  6 20:08:56 2025 GMT
        Subject: CN=0E800D766BBB474D7F7B19484755A51CB9FF3C92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:17:6d:8c:8c:91:1a:c2:48:52:6d:6e:ff:d5:
                    71:a1:69:58:c3:67:52:1b:d7:d4:8a:28:36:00:e9:
                    c4:e1:ef:2e:fb:bf:81:ca:4c:49:55:04:c3:ff:ea:
                    04:c5:2f:4c:82:b3:2a:e9:7a:de:a9:25:f2:4a:48:
                    86:f7:5f:44:51:fb:f3:18:03:28:a8:59:8d:82:95:
                    f5:a4:51:d8:60:2a:6e:27:96:af:b6:4d:e4:c9:fc:
                    41:72:a0:40:1b:ad:86:2b:c7:7d:2e:c2:3f:ad:d2:
                    69:43:60:b8:ea:6f:ef:b7:be:7c:8c:15:95:cf:34:
                    75:9e:9d:88:a7:fa:0b:db:5e:a3:a1:65:0e:71:a0:
                    8b:23:c3:d9:60:ac:3d:60:21:59:d2:0f:12:3e:fa:
                    9b:91:c6:36:52:7f:89:fc:b5:86:5a:60:ce:b3:b1:
                    97:d8:3c:4f:27:c0:fe:af:f6:8c:22:27:2d:d7:d0:
                    79:a5:16:9b:70:52:f2:79:f9:34:a5:5c:fc:4f:aa:
                    32:7b:92:e8:be:d1:75:ea:08:c8:28:73:8f:20:81:
                    d7:37:7a:10:2e:1a:c7:b1:3d:fb:04:19:36:0f:0d:
                    dd:05:d1:4f:fb:71:ec:e9:62:ae:6f:f4:0e:11:f4:
                    9f:80:b8:1a:a6:83:51:c6:1d:f6:4d:36:3f:87:5d:
                    02:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:80:0D:76:6B:BB:47:4D:7F:7B:19:48:47:55:A5:1C:B9:FF:3C:92
            X509v3 Authority Key Identifier:
                keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:21:42:8d:93:d8:d4:76:3f:c8:3f:f8:51:cf:ff:71:95:98:
         28:7e:7a:3c:8f:f4:51:95:06:bb:6b:d3:65:22:68:69:6f:56:
         5d:d1:ef:d0:fb:94:ec:d0:82:64:1c:f9:46:9a:1a:b9:df:05:
         b4:c6:66:59:f9:02:36:48:a0:c3:3c:b9:74:3c:14:d6:f6:5b:
         9a:64:0f:54:ad:70:09:ec:2a:36:6e:32:a5:45:9c:06:fe:76:
         7a:d3:dc:40:fb:5c:9f:11:db:b4:b6:c3:7e:28:ff:20:38:05:
         b0:01:68:2b:f0:f1:11:ec:6b:cf:39:24:82:72:5d:ab:34:68:
         73:3d:79:05:f7:42:27:1d:6d:36:d4:e0:84:05:da:c4:3e:ae:
         19:16:cc:5a:89:30:78:83:46:f3:97:a8:75:0f:68:70:64:8c:
         01:d3:bc:c4:18:49:48:9a:c9:e4:5f:97:9c:d4:4b:64:6b:03:
         e3:47:45:9d:43:ff:e2:54:d1:42:ca:49:60:c8:fd:63:56:59:
         7a:5f:82:71:07:b4:6f:d6:3a:4c:32:ca:19:6d:a3:33:d7:34:
         8d:e1:64:48:b8:75:22:11:80:39:e2:c6:c7:5d:6d:a7:5f:13:
         82:87:45:72:88:a0:f4:44:22:02:34:9c:cf:86:e2:49:85:12:
         ee:f1:d9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:57:58 2025 by rpki-client