Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
File:                     830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft (raw, json)
Hash identifier:          GXuTS/5a3Ec1zl6lsa0xe4dt1vDmrUE4XQuHtI6+JIs=
Subject key identifier:   66:6B:12:EF:54:0D:80:E0:E1:15:C1:23:8E:6B:E0:08:4A:6F:10:A1
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Certificate issuer:       /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial:       26C2605194854B10B888B0BEF55C0775CB59414D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
Manifest number:          0379
Signing time:             Sat 26 Apr 2025 15:09:59 +0000
Manifest this update:     Sat 26 Apr 2025 15:04:59 +0000
Manifest next update:     Sun 27 Apr 2025 19:00:59 +0000
Files and hashes:         1: 34352e38392e3135302e302f32332d3234203d3e20323130353432.roa (hash: wFozge1poHwEF4lXqXXlfcFZR2pYAANkE7nE8OvV8ZE=)
                          2: 34352e3132382e31322e302f32342d3234203d3e20313336353537.roa (hash: GI/aZsOCGO0eol75QgiKGdLVWPN+m00XjhLbN7VPSj8=)
                          3: 34352e3132382e31322e302f32332d3234203d3e20383334.roa (hash: TV142dkIfjlXVF18mfQXIHSlB6/BpS7NTRR0FAI1u74=)
                          4: 34352e3134302e33382e302f32342d3234203d3e203330363434.roa (hash: fJwttlRoX6x8pHVPArebGf7Mfzm6Mhd98H+STIQz6RU=)
                          5: 34352e3133322e3231382e302f32342d3234203d3e2032393134.roa (hash: XAQUwYZRZsl9fSajT51guouTeRdM0ajH9Rg10zFWPr0=)
                          6: 34352e3133322e3231362e302f32342d3234203d3e203437353835.roa (hash: zXX5KIzUPLMpoL5WZ5dxh/5Elb9YEKqPzGlTC3maexc=)
                          7: 34352e3134352e3234312e302f32342d3234203d3e20323134353739.roa (hash: ecd3AYkEVnl/nPIUjiZIW5gPIFDZnDrC7h/lE1jMOGA=)
                          8: 34352e39332e3138342e302f32332d3234203d3e203436383434.roa (hash: TGlDdvU4w10Euo8HgTetP9ViEjknUhAwENZAinoPE6I=)
                          9: 34352e3134352e3234332e302f32342d3234203d3e203231383539.roa (hash: PJH1dFKAQPoULr+aUgsQadg9xagPIWIzP9msLqf5QP8=)
                          10: 830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl (hash: W+PJWkoqlKFf8xVyTMgYspNfAK1k0th32xvreu0KOBo=)
                          11: 3138352e3235302e34312e302f32342d3234203d3e203439363038.roa (hash: LBV8F/iD30s0hCk74chhKHNekeGmi8j1ngokGHn2u2A=)
                          12: 34352e38392e3135302e302f32332d3234203d3e20313532313739.roa (hash: bmojzZeepyIZ/0OgLjhR5pc6BgvPZg2mTK4vcnODns8=)
                          13: 34352e39332e3138362e302f32332d3234203d3e2033333230.roa (hash: VAeKGs9UHtqpVRcDtQW520o4iavD4BPJNFtFxFrs4yY=)
                          14: 34352e3134302e33372e302f32342d3234203d3e20323638363234.roa (hash: FqBzJG7QyS5rhAL6kP0DnaUbBW+1O9qvi1K+fqN47FU=)
                          15: 3138352e3235302e34322e302f32332d3233203d3e203338313935.roa (hash: j7KQ1jRl+b2zWBCscj5VAuhfgmA4IoWIw8q8V/vmDKc=)
                          16: 34352e3134302e33392e302f32342d3234203d3e20323132333834.roa (hash: L7EHGwvWSSXWjiN+ge5rSBcePeV6DFnXvflhKIMhGIM=)
                          17: 34352e38392e3135302e302f32332d3234203d3e20313338393937.roa (hash: 5clR9Wtor+IOuKjeunidIbaSD2QfHPe706FuAFkxWsI=)
                          18: 34352e3132382e31342e302f32332d3233203d3e20323734373836.roa (hash: V6mtJWR732G/FJGWxHZiLboD66+fB4OqjGMzuHg8F6s=)
                          19: 34352e38392e3134382e302f32332d3234203d3e203436383434.roa (hash: I4Zwtx9y1lG5Qu9j58BlxoVuwPPlNmIUlv4j5y+vmAA=)
                          20: 34352e3134352e3234302e302f32342d3234203d3e20323639303730.roa (hash: ZZTeFnnkmIFoyKByZKAoXkqiW3x9U8bfEnkF0EICwb0=)
                          21: 3138352e3235302e34302e302f32342d3234203d3e2035303635.roa (hash: vADHpi7lqq2FTz+I44BCLsWOTCezg1eq9mEd669wIuU=)
                          22: 34352e3132382e31332e302f32342d3234203d3e20313939393235.roa (hash: lbqo8bVd2bNDEcGLFAZKGWs5cX8HuFPs445xJs/ijC4=)
                          23: 3138352e3235302e34312e302f32342d3234203d3e2037303138.roa (hash: 472NYYGv0C/3B2qITHOxxHP7TJ1kODHDvPJfJ6twel8=)
                          24: 326130653a666363303a3a2f32392d3239203d3e20323031393633.roa (hash: qdebRShI1BsDkowxWmjmO/ySQ67z1G0tcY+aaojgUVA=)
                          25: 34352e3134302e33362e302f32342d3234203d3e203136323736.roa (hash: bbdkgz3gQGx4brckdYck4FKHluP707hNf2aov4e5c2A=)
                          26: 3138352e3235302e34312e302f32342d3234203d3e203536393133.roa (hash: roziV6oiwLxYriq3btcjbyRlDtjQhKQCS8sQ1/6hMWI=)
                          27: 34352e3133322e3231392e302f32342d3234203d3e203536393133.roa (hash: AxLNZDyeHINJ0r0eh4VNHb6q4DdnWSgJt/pD0neyKdY=)
                          28: 34352e3133322e3231372e302f32342d3234203d3e203231383539.roa (hash: dXFRkKkCKVRo3kheY7TxPeD7qb8C1qNLHcvWTQZirTA=)
                          29: 34352e3134352e3234322e302f32342d3234203d3e203631333137.roa (hash: ikgi1ZDn+JlqvEXD23SCdDljFp0ZwM53qtOl2sujyPg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c2:60:51:94:85:4b:10:b8:88:b0:be:f5:5c:07:75:cb:59:41:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
        Validity
            Not Before: Apr 26 15:04:59 2025 GMT
            Not After : Apr 27 19:00:59 2025 GMT
        Subject: CN=666B12EF540D80E0E115C1238E6BE0084A6F10A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c9:39:25:a6:ea:9b:e0:0c:b6:2e:1e:ee:65:
                    40:e1:ad:3c:11:24:af:96:10:0f:5a:20:06:e3:90:
                    52:2a:39:c4:c3:74:63:5e:18:60:3d:cc:23:3c:be:
                    9c:dd:4f:90:3e:4b:03:98:29:de:08:79:a6:d2:70:
                    b7:93:28:0d:ef:c0:a3:34:af:ce:2e:c6:f9:90:24:
                    b9:ba:3f:cb:a2:dc:3e:29:40:2b:d1:29:3e:93:0b:
                    58:ec:31:1c:95:3d:f4:ec:3a:34:35:73:d0:77:1d:
                    b7:35:b5:a4:46:a3:d7:3d:6b:9b:95:6d:d4:3d:c1:
                    9b:70:a2:ed:79:0a:7c:c9:1e:6a:58:bd:82:90:cf:
                    81:dd:96:e5:13:15:64:db:40:27:33:80:da:05:4d:
                    a7:9e:49:20:b8:ec:f9:32:39:3e:6f:c7:e5:5d:8d:
                    31:44:6a:d9:55:0d:1b:a7:ca:79:b9:7c:1c:fd:06:
                    7e:1f:9a:76:62:a8:18:71:6e:a9:18:39:ef:21:b3:
                    a3:7c:33:e6:9c:44:59:0f:18:90:82:6d:ee:2a:e6:
                    d8:92:ed:1e:e4:25:0e:1a:32:79:dc:2d:3c:e6:bc:
                    91:cc:0d:0c:bb:4c:94:11:87:7e:94:4e:2c:99:1a:
                    e5:a0:03:11:63:8f:84:cc:57:5b:7b:0f:3f:fc:09:
                    66:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6B:12:EF:54:0D:80:E0:E1:15:C1:23:8E:6B:E0:08:4A:6F:10:A1
            X509v3 Authority Key Identifier:
                keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b4:c5:02:62:73:91:2c:9c:15:ec:78:a2:c0:7b:50:54:b2:
         c1:44:c7:aa:74:fa:7a:16:f3:da:7a:a7:ae:d9:1d:04:34:67:
         8a:21:77:3f:1f:30:c2:e2:78:be:95:5b:34:68:04:16:27:e2:
         00:16:13:03:9d:78:2f:15:56:4e:6f:20:fa:b0:b6:fb:7c:9c:
         b3:dd:39:85:8a:bc:dd:1d:d6:9a:aa:f6:88:17:17:9b:6a:a2:
         63:14:b9:a3:da:96:ee:a2:1e:37:f5:1b:11:46:8d:70:13:71:
         eb:25:81:33:f4:32:0b:4b:79:e5:42:7b:6f:69:2d:6f:88:39:
         11:1d:8d:99:46:11:d5:98:5a:e4:f7:16:85:69:c9:df:17:08:
         7b:bc:81:c1:88:53:f3:fc:af:1c:f9:9e:cc:9a:b1:99:4d:d0:
         ab:5f:c6:33:42:41:40:6c:27:76:e3:e9:30:d6:c0:c0:e4:3d:
         b4:e6:ff:8d:11:82:fe:e8:37:2e:06:e5:bb:7b:48:92:65:00:
         13:b9:8c:24:73:86:c4:f3:b4:04:ec:80:fd:1f:89:1e:99:c0:
         ce:81:ad:cc:72:a0:46:60:4b:45:3d:38:52:5f:c4:49:5f:25:
         8f:b3:e4:72:de:80:d8:11:97:96:65:44:53:69:32:eb:57:5a:
         ea:da:dd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:00:54 2025 by rpki-client