Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
File:                     6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft (raw, json)
Hash identifier:          KO30HANke1cvHH6dSN9LshybGI4OWzQUex9J3HJHBH0=
Subject key identifier:   66:58:AD:2F:B5:4F:E6:1A:A9:86:34:76:FE:CC:61:F3:17:AF:2A:50
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Certificate issuer:       /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial:       7233FF111B08FBC6CA48A757CBC96D387BA1C2A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
Manifest number:          02F5
Signing time:             Mon 28 Apr 2025 11:53:54 +0000
Manifest this update:     Mon 28 Apr 2025 11:48:54 +0000
Manifest next update:     Tue 29 Apr 2025 13:41:54 +0000
Files and hashes:         1: 3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa (hash: ds98Ml9DDwJOnbFWnKuYftmXTBL5e6vB9e43egQhGMs=)
                          2: 32332e3137342e3230302e302f32342d3234203d3e203135333533.roa (hash: FFpmdrmFTQ1EwGGJtpsh2GlWAknLs7PduieofwpgPt8=)
                          3: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl (hash: /T6JFZ9rsKsiJFX60LLQmGKbnoEsDlkoR7jCzm84kQ4=)
                          4: EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (hash: HGmIGZLAwtENWMckwsQ8hWTMC9jCNzhQYJENgR6PUlg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 13:41:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:33:ff:11:1b:08:fb:c6:ca:48:a7:57:cb:c9:6d:38:7b:a1:c2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
        Validity
            Not Before: Apr 28 11:48:54 2025 GMT
            Not After : Apr 29 13:41:54 2025 GMT
        Subject: CN=6658AD2FB54FE61AA9863476FECC61F317AF2A50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1c:d6:67:5d:0a:4d:96:cb:2d:96:73:39:df:
                    97:e6:42:5f:4c:49:7a:65:68:ef:b9:7a:84:73:9f:
                    3e:90:1a:63:60:b7:be:e7:4c:db:70:17:8d:3e:9a:
                    50:4a:d2:82:d7:95:77:f6:37:e9:b8:0c:c8:2f:07:
                    20:63:5a:ae:48:98:9f:19:fa:8c:33:1a:5d:4d:8e:
                    4c:bd:ed:55:04:5d:28:d5:1b:23:bf:26:52:34:e6:
                    de:94:e9:85:5f:bc:5e:d7:e2:d0:cf:e7:6e:4e:e6:
                    ce:0a:ed:65:5f:a7:33:86:c0:91:f1:1f:1c:b8:7c:
                    02:dc:9c:bf:47:01:69:84:ca:dd:ba:c7:01:03:51:
                    93:f7:60:47:64:87:48:97:4d:7b:f7:62:2b:69:0f:
                    ad:dc:68:94:e4:6f:5f:f5:29:3c:fd:bf:f0:ca:c2:
                    e8:28:50:60:cf:22:db:94:12:d9:3e:81:e0:72:fb:
                    3a:e0:38:8b:91:5b:b2:9d:a5:2e:70:48:70:b8:36:
                    0f:59:7b:bc:ad:b6:0d:b3:41:af:49:ad:18:35:8d:
                    28:22:8c:4c:74:c6:be:b9:f0:ac:f8:38:23:00:ac:
                    59:27:47:ed:8a:5c:fe:60:53:5a:49:99:48:3e:3e:
                    7c:c2:05:7b:f5:5d:9d:d1:4f:00:00:41:f5:62:72:
                    6a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:58:AD:2F:B5:4F:E6:1A:A9:86:34:76:FE:CC:61:F3:17:AF:2A:50
            X509v3 Authority Key Identifier:
                keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:12:2f:c1:26:d7:06:73:55:4a:1c:16:7b:20:8c:2b:8c:1d:
         c7:22:19:25:9d:f7:2e:37:14:4d:d4:41:d1:30:e5:a4:93:ff:
         5c:d6:c9:77:73:e9:82:d3:78:3c:d4:8f:c0:1f:91:c7:9b:02:
         cf:2b:dc:dc:e1:0b:1d:3d:8c:97:2e:e7:84:7a:ad:f2:62:33:
         c4:27:6b:b5:2a:3f:3b:64:90:82:3f:b6:1f:7f:82:19:90:7c:
         7a:7e:48:e4:eb:d7:3f:82:1f:6f:18:ac:8a:73:af:7a:bb:65:
         90:4b:b5:51:bf:d1:d3:3f:94:ed:25:13:71:04:2e:ba:03:1f:
         13:4f:b1:22:fd:26:64:fb:ab:c1:50:9f:7c:8d:5a:71:37:b6:
         c3:68:b6:96:eb:bf:4a:e5:0c:50:9a:59:14:94:3d:93:b8:11:
         e5:80:f4:0b:0b:fb:e2:7e:58:87:bc:92:28:76:f5:c0:b3:3a:
         a3:29:1a:01:3e:5a:c0:19:6c:91:95:cf:63:19:8e:24:34:81:
         91:0d:2d:08:83:4c:8d:db:f8:e7:0b:f5:d8:b7:fc:a0:d7:15:
         73:d9:0e:d7:01:46:a9:ae:ae:43:04:b1:07:4c:48:c5:71:91:
         52:77:d9:77:a1:b5:36:b0:fe:7e:45:8e:67:2e:4f:87:e4:64:
         e9:5a:db:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:01:40 2025 by rpki-client