Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft
File:                     847138B5401830B89B52403C777718BB40B2B6B5.mft (raw, json)
Hash identifier:          amDzpKgliSrr+t/e1Vo7fC8BuVdjkaFAxEzbWHcOYoQ=
Subject key identifier:   87:07:B9:8B:E6:CC:77:78:2E:6A:AC:49:93:DB:67:5F:B5:5F:F9:32
Authority key identifier: 84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5
Certificate issuer:       /CN=847138B5401830B89B52403C777718BB40B2B6B5
Certificate serial:       225FE97482A5DC44F3F2CBE49E3F322C0C4171AF
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft
Manifest number:          04D7
Signing time:             Mon 28 Apr 2025 03:19:54 +0000
Manifest this update:     Mon 28 Apr 2025 03:14:54 +0000
Manifest next update:     Tue 29 Apr 2025 06:08:54 +0000
Files and hashes:         1: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: lqIlXTFIWSBiRqL977xA8LwWmhjqpimo3uxiYjVeS/M=)
                          2: 847138B5401830B89B52403C777718BB40B2B6B5.crl (hash: bAExfd0l8n4TY3f/L7RcsgpBZhgutFB4llM2wDBzax8=)
                          3: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: nMmiIj2RlJjYPT/1+XLEzvCEDF/otDgwrHV2q/RTde4=)
                          4: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: B/V5ud+StvDXjqEGvB3k810Cv5LJwyUE9nhfaTbPqMk=)
                          5: BE8A7AC02556C14368364036D5427F53187B6D9D.cer (hash: DgZZLJZ9Eml763gunc/aU0nCab1SiHrkxw0oRdopVbY=)
                          6: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: HYPQYH9q04uUtQ2nRIqre2hb3Qbqb6C2ZO6Rxb9EvzQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 06:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:5f:e9:74:82:a5:dc:44:f3:f2:cb:e4:9e:3f:32:2c:0c:41:71:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847138B5401830B89B52403C777718BB40B2B6B5
        Validity
            Not Before: Apr 28 03:14:54 2025 GMT
            Not After : Apr 29 06:08:54 2025 GMT
        Subject: CN=8707B98BE6CC77782E6AAC4993DB675FB55FF932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:84:7e:93:89:cf:d4:0d:76:04:c8:6f:50:33:
                    5d:cc:16:06:23:f7:1a:23:62:bd:94:00:43:c0:55:
                    48:88:72:33:da:b2:df:5d:8f:37:b7:39:fb:75:c9:
                    54:c0:fa:0c:df:8e:67:51:e2:90:17:73:df:69:ad:
                    11:22:25:29:bb:0c:5e:14:52:26:f7:74:ce:8d:f8:
                    b5:98:7f:95:69:07:53:4f:75:44:23:13:38:d8:25:
                    b4:d3:0b:0a:91:9c:f7:37:a8:91:1b:ff:ab:9f:6a:
                    12:77:53:c6:98:ed:1f:fe:94:3e:48:3e:2c:5d:e9:
                    e8:c4:fa:8f:58:05:e5:56:1e:93:48:e3:30:6e:b8:
                    24:3d:9a:37:02:41:14:16:ee:2e:0d:07:2e:c1:3f:
                    5c:4c:09:01:36:91:9e:1c:70:bd:13:a1:48:86:f6:
                    58:0a:7d:71:5d:80:8d:b4:68:8c:98:fe:2d:4c:24:
                    e1:53:97:1d:51:26:1f:63:36:0d:92:91:9e:2d:76:
                    9d:46:18:65:07:3e:57:a6:f9:05:c5:e0:bd:05:0f:
                    d4:e3:51:6d:98:a0:49:11:e5:18:f6:71:c0:ea:13:
                    29:f0:53:bb:ad:d0:64:42:13:91:c1:fd:05:7e:83:
                    b6:55:f2:81:bb:ff:cf:7b:c0:2d:62:6c:a6:ae:35:
                    c6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:07:B9:8B:E6:CC:77:78:2E:6A:AC:49:93:DB:67:5F:B5:5F:F9:32
            X509v3 Authority Key Identifier:
                keyid:84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:59:f9:7a:60:b4:52:8c:78:68:38:d2:f8:df:24:a6:df:c6:
         bf:30:6e:2a:5d:21:a8:2c:f9:26:f5:31:2d:79:83:5f:c4:08:
         38:e9:23:82:67:1a:4d:65:8a:3b:ec:b8:e8:5e:22:21:56:89:
         71:6e:13:7d:c7:28:be:ab:70:e8:32:e3:08:06:ca:a9:ad:ca:
         9b:ec:87:8f:36:54:a0:66:aa:bb:93:8a:26:1b:66:ad:94:22:
         56:c7:97:2b:cf:83:ac:cf:c8:fa:53:d7:16:e3:6b:32:82:d2:
         a0:a6:86:03:03:d8:a4:f2:5f:b4:86:0b:52:58:d7:e5:2b:33:
         f0:4f:ff:1d:2a:09:61:a8:d3:08:48:46:ee:8e:89:18:53:9d:
         4d:56:4a:7c:b9:1e:d6:10:4f:1a:fe:b9:93:3f:44:fd:34:5d:
         51:9b:63:5c:ec:8b:c5:87:c7:0a:6e:60:ef:93:b7:c4:73:97:
         41:46:8e:de:24:61:82:f4:e5:e3:c9:4e:80:41:cb:06:be:9a:
         45:c6:c1:1b:2e:01:d9:84:fd:a4:77:29:b6:79:7b:d0:21:32:
         da:4e:7f:e4:da:dd:6e:4f:35:0f:ed:49:31:b2:f1:d0:42:c2:
         e8:c7:b3:47:38:50:02:32:ec:a8:67:8f:20:4a:18:70:67:11:
         64:48:af:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:26:49 2025 by rpki-client