Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
File:                     E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft (raw, json)
Hash identifier:          o2CA0o7ka5gNzPYp9DWiYwin2SeINc2kdClzHBf3PFQ=
Subject key identifier:   58:7B:35:3D:3E:84:76:4B:B4:9E:F6:63:F5:7A:08:66:B0:57:33:8C
Authority key identifier: E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8
Certificate issuer:       /CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
Certificate serial:       131CEFDDAD1BB94C2016ECC6028FFCE002C808BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
Manifest number:          01CF
Signing time:             Wed 07 May 2025 21:19:57 +0000
Manifest this update:     Wed 07 May 2025 21:14:57 +0000
Manifest next update:     Fri 09 May 2025 00:11:57 +0000
Files and hashes:         1: 323030313a3637633a6535633a3a2f34382d3438203d3e20323135313331.roa (hash: /8lHhKIuzTcsmBKH0ioYgR3QJ/GmZe2e/TKZ5GWlTv0=)
                          2: AS215131.asa (hash: fdxXAZ8vlKpf5EccUmAW+hZmsZidklCajd1vBNkiavk=)
                          3: E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl (hash: MDoshH0fWwcoP3WUvz7b78ECcpRIXljf4jogiZ+N21A=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1c:ef:dd:ad:1b:b9:4c:20:16:ec:c6:02:8f:fc:e0:02:c8:08:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
        Validity
            Not Before: May  7 21:14:57 2025 GMT
            Not After : May  9 00:11:57 2025 GMT
        Subject: CN=587B353D3E84764BB49EF663F57A0866B057338C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:06:9e:a0:68:b5:cf:a7:7e:05:4d:86:b6:e6:
                    32:e7:56:50:16:07:72:e3:b9:5d:7e:ce:d8:82:0e:
                    5b:cd:d8:45:3f:38:77:37:2e:68:cb:17:81:e6:1a:
                    54:04:9d:ed:84:f4:73:02:99:91:72:0c:f6:ab:85:
                    9e:4f:a7:9e:fc:38:c8:0e:d6:90:52:88:40:1a:c2:
                    33:0b:2e:05:fc:77:f9:2d:65:93:55:4b:0f:ba:05:
                    7d:fc:d6:49:8c:2d:30:00:0a:d8:8e:90:4d:a1:b7:
                    b3:47:fd:6e:5b:42:01:d7:a6:71:60:0a:5b:ef:cd:
                    23:cb:bc:65:5a:35:a8:33:e5:a6:cd:9a:47:1f:e2:
                    e4:2a:8d:33:e6:ac:c8:7e:ec:96:bc:2e:55:46:8e:
                    c1:ca:bf:cf:5d:8d:88:a6:75:36:c9:a5:c2:65:8c:
                    a3:20:87:65:0a:48:d4:73:fa:8c:72:25:4c:0c:e0:
                    d0:68:89:32:4a:21:46:0d:e8:9d:9f:83:ab:da:4d:
                    c8:39:7b:e9:16:8a:bc:52:30:15:ab:5b:05:e7:61:
                    37:12:83:60:a5:e2:21:ff:14:79:10:4d:77:42:ba:
                    25:b1:13:4c:c6:ab:86:24:08:fb:08:d3:bb:68:8f:
                    61:4c:3f:26:81:1d:93:51:90:ff:44:d6:9b:68:ea:
                    73:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7B:35:3D:3E:84:76:4B:B4:9E:F6:63:F5:7A:08:66:B0:57:33:8C
            X509v3 Authority Key Identifier:
                keyid:E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:46:ee:65:0c:1b:0b:c6:4d:c0:ff:eb:0d:45:5d:b5:9d:de:
         83:c6:a2:7a:bb:8a:75:b6:42:0e:57:2a:da:f0:a1:5d:24:12:
         b3:06:2c:b4:6e:4c:22:67:ef:bf:22:9c:ab:cd:a8:1c:41:dc:
         ef:42:92:04:4d:00:ff:6b:25:bd:b8:c8:31:a3:21:da:e7:c7:
         be:48:57:8a:7c:1e:4c:0c:1e:98:b1:08:9a:6a:da:98:c0:62:
         df:22:69:a8:b6:f1:3f:bc:e0:12:c9:0c:d1:ed:17:6b:7f:1b:
         fa:c7:d3:17:a1:20:78:b7:4a:2b:3b:a3:e5:fe:2a:24:34:4c:
         39:51:ee:f8:56:1e:69:7f:44:b4:5b:c7:13:ec:85:0d:eb:c5:
         e8:5a:58:27:51:c3:5f:f7:de:2e:aa:97:bf:86:33:2f:99:e0:
         88:87:9a:df:e8:2e:fd:4a:f8:95:5f:f7:41:d2:96:e9:ae:1d:
         f7:89:84:32:58:d2:f7:26:9b:44:8c:32:f2:65:c8:90:e6:00:
         0a:67:91:30:2e:df:66:ee:78:96:c2:44:5e:df:03:16:1f:e3:
         04:75:5d:38:90:06:56:55:9c:bb:45:09:2b:35:b8:07:a3:0f:
         5e:12:5d:09:40:a1:bb:ed:4b:96:0a:3c:6b:f1:5e:f1:81:a7:
         b2:da:f6:71
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUExzv3a0buUwgFuzGAo/84ALICL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTRiYTk4ZmMzZWJlODA2Yzc4MmU1ODlmYWY1Mjk1YzMy
NTkyMTJhODAeFw0yNTA1MDcyMTE0NTdaFw0yNTA1MDkwMDExNTdaMDMxMTAvBgNV
BAMTKDU4N0IzNTNEM0U4NDc2NEJCNDlFRjY2M0Y1N0EwODY2QjA1NzMzOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGBp6gaLXPp34FTYa25jLnVlAW
B3LjuV1+ztiCDlvN2EU/OHc3LmjLF4HmGlQEne2E9HMCmZFyDParhZ5Pp578OMgO
1pBSiEAawjMLLgX8d/ktZZNVSw+6BX381kmMLTAACtiOkE2ht7NH/W5bQgHXpnFg
ClvvzSPLvGVaNagz5abNmkcf4uQqjTPmrMh+7Ja8LlVGjsHKv89djYimdTbJpcJl
jKMgh2UKSNRz+oxyJUwM4NBoiTJKIUYN6J2fg6vaTcg5e+kWirxSMBWrWwXnYTcS
g2Cl4iH/FHkQTXdCuiWxE0zGq4YkCPsI07toj2FMPyaBHZNRkP9E1pto6nNfAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUWHs1PT6Edku0nvZj9XoIZrBXM4wwHwYDVR0j
BBgwFoAU5LqY/D6+gGx4Llifr1KVwyWSEqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjY0MjE5MDgtNzVkYy00MzBiLThmYjktNzQ4Yzc1YmIw
MmMyLzAvRTRCQTk4RkMzRUJFODA2Qzc4MkU1ODlGQUY1Mjk1QzMyNTkyMTJBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVMcVlfRDYtZ0d4NExsaWZyMUtWd3lX
U0VxZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iNjQyMTkwOC03
NWRjLTQzMGItOGZiOS03NDhjNzViYjAyYzIvMC9FNEJBOThGQzNFQkU4MDZDNzgy
RTU4OUZBRjUyOTVDMzI1OTIxMkE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkbuZQwbC8ZNwP/rDUVd
tZ3eg8aieruKdbZCDlcq2vChXSQSswYstG5MImfvvyKcq82oHEHc70KSBE0A/2sl
vbjIMaMh2ufHvkhXinweTAwemLEImmramMBi3yJpqLbxP7zgEskM0e0Xa38b+sfT
F6EgeLdKKzuj5f4qJDRMOVHu+FYeaX9EtFvHE+yFDevF6FpYJ1HDX/feLqqXv4Yz
L5ngiIea3+gu/Ur4lV/3QdKW6a4d94mEMljS9yabRIwy8mXIkOYACmeRMC7fZu54
lsJEXt8DFh/jBHVdOJAGVlWcu0UJKzW4B6MPXhJdCUChu+1Llgo8a/Fe8YGnstr2
cQ==
-----END CERTIFICATE-----
Generated at Thu May 8 01:50:30 2025 by rpki-client