Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft
File:                     847138B5401830B89B52403C777718BB40B2B6B5.mft (raw, json)
Hash identifier:          0NYWIylgQj8jyXAdjprXAXAyqXvUX+nmmi0n6pbrXdc=
Subject key identifier:   1B:E2:A2:FC:C7:C2:26:E1:D9:78:A0:BC:74:63:B8:C7:33:9F:8E:8E
Authority key identifier: 84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5
Certificate issuer:       /CN=847138B5401830B89B52403C777718BB40B2B6B5
Certificate serial:       18B3EF8D4C464D9E33C56BF1EA340AC01278F275
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft
Manifest number:          04D9
Signing time:             Tue 29 Apr 2025 14:19:27 +0000
Manifest this update:     Tue 29 Apr 2025 14:14:27 +0000
Manifest next update:     Wed 30 Apr 2025 15:39:27 +0000
Files and hashes:         1: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: nMmiIj2RlJjYPT/1+XLEzvCEDF/otDgwrHV2q/RTde4=)
                          2: BE8A7AC02556C14368364036D5427F53187B6D9D.cer (hash: DgZZLJZ9Eml763gunc/aU0nCab1SiHrkxw0oRdopVbY=)
                          3: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: B/V5ud+StvDXjqEGvB3k810Cv5LJwyUE9nhfaTbPqMk=)
                          4: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: lqIlXTFIWSBiRqL977xA8LwWmhjqpimo3uxiYjVeS/M=)
                          5: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: HYPQYH9q04uUtQ2nRIqre2hb3Qbqb6C2ZO6Rxb9EvzQ=)
                          6: 847138B5401830B89B52403C777718BB40B2B6B5.crl (hash: jGZluDdBYRJ5AW0ZetCaGG+6VRXjKzC0LiBwTbCZmcY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b3:ef:8d:4c:46:4d:9e:33:c5:6b:f1:ea:34:0a:c0:12:78:f2:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847138B5401830B89B52403C777718BB40B2B6B5
        Validity
            Not Before: Apr 29 14:14:27 2025 GMT
            Not After : Apr 30 15:39:27 2025 GMT
        Subject: CN=1BE2A2FCC7C226E1D978A0BC7463B8C7339F8E8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:35:b5:c8:12:f4:24:3d:a3:18:2f:b9:c6:d7:
                    b2:3a:2e:9f:ae:da:b2:78:fb:f4:7a:b7:d3:72:a5:
                    93:40:c4:fd:80:1e:fa:0c:35:2c:63:cd:6d:ca:94:
                    54:c9:48:76:54:89:c8:68:1f:05:8f:46:10:2d:16:
                    83:7b:61:00:b7:0c:76:fc:a6:4b:ba:1d:56:27:43:
                    15:78:f6:36:8a:e8:cd:1c:32:a4:01:77:b5:3a:43:
                    05:fa:41:dc:f0:8e:3f:56:84:7d:2e:a2:97:ab:38:
                    b5:1c:32:d1:1f:46:eb:2d:a5:92:f2:cc:20:2c:20:
                    be:76:c8:e6:85:5b:ff:ea:15:43:ce:65:85:b4:d7:
                    eb:f4:bb:c2:68:58:3b:90:31:6a:b4:77:16:30:30:
                    58:61:25:47:02:ea:73:c9:c4:84:44:d0:18:0c:8c:
                    44:ec:cf:ad:79:54:91:57:69:30:ac:da:b1:8f:3f:
                    a2:61:17:06:0d:ba:fa:02:9d:da:63:54:83:3c:9c:
                    fa:20:8c:2a:2b:07:af:e3:80:27:96:97:c2:a7:53:
                    f7:7a:2f:6c:a6:e9:a0:46:70:23:fb:6b:cd:9b:af:
                    b3:20:9b:eb:ab:d3:00:b6:9b:fa:a6:82:06:5e:95:
                    4b:ef:d2:aa:5c:c5:e8:2a:14:28:98:03:38:d7:ae:
                    92:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E2:A2:FC:C7:C2:26:E1:D9:78:A0:BC:74:63:B8:C7:33:9F:8E:8E
            X509v3 Authority Key Identifier:
                keyid:84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d1:af:e1:ed:64:bb:1e:da:b7:28:f0:72:bb:15:f2:8c:e9:
         b1:99:30:2a:16:7b:eb:79:ab:0d:57:5f:85:e0:60:b1:a3:69:
         0f:1e:25:90:23:74:a4:76:af:2b:59:ae:e1:91:bc:cd:51:e2:
         f4:79:85:4f:4c:57:fc:8b:3d:19:7e:1c:b7:ad:38:2f:63:c4:
         c5:25:85:91:8c:75:3f:39:ad:6b:36:55:13:58:81:fa:67:7c:
         1b:25:95:f3:c1:4f:ba:01:95:20:51:d0:59:1b:d0:6b:6f:03:
         f8:28:48:74:5c:8c:03:4d:ba:e6:d9:17:ad:b0:33:d1:55:68:
         cc:ab:98:55:b2:21:ef:86:36:9f:25:cc:a0:fd:31:0c:99:48:
         30:17:66:d9:bc:a9:66:76:78:76:81:cd:9b:54:fe:5d:b2:e9:
         e9:91:0b:fc:36:a8:24:f0:dc:ee:98:75:82:16:af:5a:85:b1:
         76:88:a3:87:31:ce:e6:63:a4:a6:b5:95:6c:3d:be:61:63:65:
         86:0e:c6:7d:41:19:10:e7:ef:90:92:6a:fb:3c:a9:5a:df:ac:
         07:4d:86:68:da:f8:ec:a3:ef:d1:1b:a1:b6:3f:d4:25:c7:a7:
         4a:02:c8:49:d5:98:22:50:b2:bb:cf:cb:b9:b0:f7:4c:ed:ac:
         d8:f2:4a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:19:03 2025 by rpki-client