Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
File:                     8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json)
Hash identifier:          WQJTfC5zgC9zzItWAE7iWRrCVocVzynp8rXUs0YtjEk=
Subject key identifier:   F0:91:A6:89:10:BD:0F:2B:C6:C9:11:B8:23:11:1F:60:B0:72:C0:7B
Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
Certificate issuer:       /CN=8184669b0189b7fabe05e700325a0d74957beb27
Certificate serial:       4C13E5DCC17BA825CD0EE6084FFFD73C4CBCF6EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
Manifest number:          24
Signing time:             Sat 26 Apr 2025 03:14:57 +0000
Manifest this update:     Sat 26 Apr 2025 03:09:57 +0000
Manifest next update:     Sun 27 Apr 2025 03:14:57 +0000
Files and hashes:         1: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: fkThFrWbc2SNg5nWL/DjCmp7efO9LKVSLfyHO63Odeo=)
                          2: 3231332e3135372e3132312e302f32342d3234203d3e20383334.roa (hash: KzRDONoUEdWtAmYoE3nM54cz2mZ3OTHGtsETHEM2i5I=)
                          3: 3231332e3135372e3132332e302f32342d3234203d3e20313337353137.roa (hash: 101KeXXnBE7X7QLTvc7Gr7DVuO0YIAuTdg47tJ4yQUU=)
                          4: 3231332e3135372e3132322e302f32342d3234203d3e20383334.roa (hash: XBixnko3qtEccfsl7C8E/1A0CemeZocPCP9lkkwrqDw=)
                          5: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: u6D0nQIamyf1rwT6EphlkmgpGmdsHhrROhbEzSFSSxQ=)
                          6: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: U2rsj2GmpPBYV9RPLITNHzbaDI2Gxelnlov5msxX9eI=)
                          7: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: oXC9Asr9SJ7DSslxSZaWUX9xWnSBbY5iUxbxwvvcFUI=)
                          8: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: obPbW0ZKO9rq4yp7c5UqzqijavPW0CV78gaYhHaBReI=)
                          9: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: cK22q6rO6KtktflqsQYlSr1z73xEpoVM/WNGnd6YIEI=)
                          10: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: qdsAswZOdK1qGO/a+4aa8G8xkpVNVYqv5yiH/GtoSmA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 03:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:13:e5:dc:c1:7b:a8:25:cd:0e:e6:08:4f:ff:d7:3c:4c:bc:f6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27
        Validity
            Not Before: Apr 26 03:09:57 2025 GMT
            Not After : Apr 27 03:14:57 2025 GMT
        Subject: CN=F091A68910BD0F2BC6C911B823111F60B072C07B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:db:a1:44:d8:d4:52:24:43:42:fc:b2:01:b8:
                    b4:24:43:ee:de:5e:a6:07:0a:37:53:86:7f:ad:46:
                    ca:96:1f:cd:81:7e:9b:d0:96:55:cc:71:50:73:dd:
                    bc:da:db:96:b5:0d:f2:0f:4a:31:a9:6c:ca:97:2f:
                    44:bc:56:a9:66:94:d3:4e:37:40:ac:41:55:a8:49:
                    09:3e:31:38:29:66:e0:3c:48:be:8a:f1:5d:03:1b:
                    fa:00:44:29:b7:5d:86:2e:05:a9:cc:65:45:af:d6:
                    75:9b:98:8f:cd:37:09:8a:10:ca:4f:3f:de:59:71:
                    da:cb:57:0c:66:45:9a:b5:3a:2f:ad:d1:77:78:7b:
                    6c:d9:aa:78:a1:8d:7d:64:80:73:7f:49:95:43:2a:
                    c7:a7:78:a9:e3:28:fb:7d:1e:64:d6:d1:01:8a:16:
                    9c:dd:72:a0:62:5b:c2:af:c2:5a:9c:b9:37:80:25:
                    b0:7b:da:a5:59:80:78:68:83:70:3f:02:e2:66:c4:
                    3e:39:ba:2b:dc:b2:f3:42:2f:7f:fe:f0:cf:78:8d:
                    cf:7c:78:bc:1c:e6:7d:23:3a:0a:0e:10:27:94:9b:
                    a6:96:91:1b:18:e1:bc:dd:c1:ab:0e:a0:1b:34:34:
                    49:17:7f:07:6a:cc:60:a8:8e:75:47:3d:77:a7:9b:
                    d5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:91:A6:89:10:BD:0F:2B:C6:C9:11:B8:23:11:1F:60:B0:72:C0:7B
            X509v3 Authority Key Identifier:
                keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:9c:a4:88:11:d3:2b:d6:95:7b:9c:07:21:b0:59:d0:ba:5a:
         c0:fd:99:40:52:32:16:6e:9f:53:e0:ba:8f:f8:4e:91:d5:3d:
         cb:2a:67:32:f0:4b:ca:80:49:2c:2a:b4:7a:ad:c3:c9:01:0c:
         57:79:22:5d:f5:c2:49:bf:27:be:55:39:07:a6:28:a0:ca:d5:
         a6:af:8e:a6:9e:32:a6:38:06:02:0e:56:03:20:70:9e:f5:00:
         8f:62:26:58:f1:ca:6e:b2:41:bb:99:54:61:40:7d:b0:d4:f5:
         d8:82:ba:5c:74:9f:71:84:44:f7:93:ac:4d:ff:5e:b1:16:f8:
         a9:56:c8:11:01:53:c8:ee:c7:73:37:95:92:45:91:51:98:9c:
         8e:dc:c7:8e:94:d7:66:29:3b:b2:c8:3a:95:13:4d:19:40:40:
         03:87:87:36:fb:4d:09:16:6d:bb:95:7b:7f:8a:be:c3:f6:b0:
         b5:78:a9:8d:c4:69:09:8c:c2:13:9d:c1:8e:ab:f0:47:62:eb:
         8e:cf:09:4b:98:95:a8:c6:d5:84:7f:72:3d:0c:9f:75:0a:34:
         7c:b9:58:a9:72:89:07:31:bd:de:b1:55:ae:ac:33:eb:2a:a9:
         41:0a:fb:da:57:63:64:d0:6e:1e:35:70:9d:bc:1f:1c:ed:38:
         61:14:16:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:41:25 2025 by rpki-client