Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
File:                     92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft (raw, json)
Hash identifier:          dG0mdL9qNSfIrb89sHfT/mOoOzjxcgpRbHg0f3JbpZU=
Subject key identifier:   7D:02:B9:25:1C:0E:F9:B6:00:B1:23:42:1F:62:57:B9:D6:7B:41:08
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Certificate issuer:       /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial:       7FD116FDC174CD402A17A3DE63363320B5B37D55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
Manifest number:          08
Signing time:             Sat 26 Apr 2025 14:54:59 +0000
Manifest this update:     Sat 26 Apr 2025 14:49:59 +0000
Manifest next update:     Sun 27 Apr 2025 17:47:59 +0000
Files and hashes:         1: 39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa (hash: 7RDjli52ea3Y5rIxOBi7CoAOYzObgN76cF1oNhGaH/0=)
                          2: 39352e3231342e3138312e302f32342d3234203d3e2039303039.roa (hash: /rVPc1wOKgDgg5OwHuEoirI3/VXCM0oS5sqBVQJB6eg=)
                          3: 34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa (hash: JaeJstE2poR1Rlm8a7RHcBFfHeeu7vNkxKzYr0p4Jc8=)
                          4: 39352e3231342e3138312e302f32342d3234203d3e20323134303235.roa (hash: 1UxYccK9JJCwmCQOcrxMzUmtYqXMEA+sXJKMK+TMi4g=)
                          5: 3138352e3131352e3230372e302f32342d3234203d3e20313939373037.roa (hash: 5Sl2Z3ptNbtvr3FBhOdZcqrM9plEnj22ST5HcnfsBGc=)
                          6: 34352e3133392e3139382e302f32342d3234203d3e20323134343636.roa (hash: 9KX5zC7UuI47N7heL//vNyLO3x7YEi1CucEhFX8SUR0=)
                          7: 39352e3231342e3138332e302f32342d3234203d3e20323039313831.roa (hash: lTsB3YA1lHFbSl1Cmaufvak87ZyxIaRmoFdP+J/wwxc=)
                          8: 39352e3231342e3137332e302f32342d3234203d3e203433363431.roa (hash: lEcRDdf6cIhY1Oa3628nbp4zU28+wjCf+aFM7KnL8Ho=)
                          9: 39352e3231342e3138302e302f32342d3234203d3e20323033373538.roa (hash: yeHT2siMw+46e40lrxlb+yyyQe2+Rk/4CH0GwC6laEg=)
                          10: 39352e3231342e3137352e302f32342d3234203d3e20313335333931.roa (hash: dZLABnxKpTxFiKmt1/yK20i3zGqpWgZ6NnQoPD/883U=)
                          11: 39352e3231342e3137322e302f32342d3234203d3e20313937343737.roa (hash: PxR9Gj8WOc/7LwGO5t67j8SuO3iXayzi64SIiemjFkw=)
                          12: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl (hash: ZT08rY/9FZOgPibr+Te/fVKwBNXdobEtltYrlknlk68=)
                          13: 34352e3135362e35322e302f32322d3232203d3e2039303039.roa (hash: eK18gsMy8+wzgYZmaz7TkcO08JcfPTkHAWlv0aJXuz0=)
                          14: 39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa (hash: EnyfxlxrEZoOAQu439Mhaj0MSgN4o3Cr584mhVLUCgw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d1:16:fd:c1:74:cd:40:2a:17:a3:de:63:36:33:20:b5:b3:7d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
        Validity
            Not Before: Apr 26 14:49:59 2025 GMT
            Not After : Apr 27 17:47:59 2025 GMT
        Subject: CN=7D02B9251C0EF9B600B123421F6257B9D67B4108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dc:51:de:a2:bb:b7:0a:9c:64:e2:51:71:b8:
                    28:5d:b5:23:10:57:59:3b:e0:4c:d0:56:1c:40:f7:
                    21:f7:4f:9c:ea:64:c3:83:03:17:fa:41:06:ff:76:
                    37:f3:f7:a9:e4:b9:95:2e:41:88:85:ec:75:3e:eb:
                    58:b2:f7:f7:2d:2d:ee:af:a3:94:54:59:0b:87:b5:
                    a6:e9:4b:08:28:18:92:12:4f:02:cf:b3:61:5b:10:
                    ce:dd:c5:d1:5f:75:9b:52:23:0e:ef:bd:87:29:f8:
                    9e:b0:71:43:a6:66:39:c7:41:3d:79:dc:97:b0:8c:
                    64:09:6f:94:4d:f0:c0:e0:6b:47:da:d3:f0:4b:ca:
                    5a:d8:9d:cc:73:91:64:de:ef:dd:a5:1c:dc:39:74:
                    0e:ad:a5:aa:61:e4:33:06:a7:43:a3:ac:3a:73:17:
                    44:3a:ca:73:b3:b7:14:bf:65:07:ef:80:d0:d0:6e:
                    f6:b5:10:dd:fc:dc:d5:0d:da:3f:18:ca:e5:36:61:
                    76:28:df:fa:9f:60:85:7a:6f:8a:20:d0:0d:ab:ce:
                    72:d0:e8:61:e9:e8:56:12:67:a9:41:db:ac:c1:80:
                    aa:80:44:2b:5b:c0:fa:8b:86:3e:80:e6:68:6c:8c:
                    58:ed:e3:e9:00:b7:3e:50:70:1f:37:da:c5:51:ea:
                    0e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:02:B9:25:1C:0E:F9:B6:00:B1:23:42:1F:62:57:B9:D6:7B:41:08
            X509v3 Authority Key Identifier:
                keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:27:5a:32:f1:a8:ed:a8:86:c8:c3:ad:65:f2:a8:01:23:cc:
         ab:8c:91:3d:f6:45:0b:48:19:b7:ee:4a:8a:c4:db:99:33:c1:
         f6:4d:b3:38:b8:e8:fa:aa:71:2a:ce:58:66:73:60:32:56:ca:
         e8:d9:d4:97:36:f2:4c:2f:77:32:91:21:ed:97:3d:8d:88:bc:
         2e:c0:82:83:78:b4:df:38:aa:b0:bb:23:5a:34:bb:fe:50:15:
         68:d3:47:d0:6e:83:80:10:67:6f:3c:01:30:a5:ce:dd:51:32:
         8f:4e:2d:30:73:15:50:2d:91:a9:5e:28:d6:24:79:8c:91:45:
         8d:9a:8a:ef:7a:40:47:e7:be:52:9d:65:93:10:1b:3a:21:fb:
         0f:4b:97:55:90:5c:27:bb:22:c7:ef:5f:0c:d5:65:53:aa:13:
         ae:84:17:0a:87:eb:87:91:cf:40:ca:6c:65:eb:79:f2:2c:9e:
         f2:77:72:89:f7:69:fa:a7:e9:fd:d0:3e:55:ed:ba:69:40:6f:
         f0:3f:f5:03:92:0f:34:f0:fb:9c:af:8e:e3:04:4b:be:42:f8:
         e8:4c:ed:32:02:09:2b:1b:bb:30:cd:4b:ca:1b:57:5b:3c:e1:
         d5:92:6f:e9:03:d4:5c:3f:ea:7f:a3:b3:36:e0:19:44:e2:72:
         bf:5b:85:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:59:40 2025 by rpki-client