Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
File:                     CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json)
Hash identifier:          0Qte63kISVc7zJXFWKqGWXVdmxOBAiF0JyvQwQhJwNE=
Subject key identifier:   B7:E0:0B:DF:33:BE:98:42:D7:15:78:65:D4:D5:DE:AE:EA:FB:11:78
Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
Certificate issuer:       /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Certificate serial:       2B48A076280BF811BEB8C84F46AF10B8673EEDDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
Manifest number:          78
Signing time:             Mon 16 Jun 2025 18:53:02 +0000
Manifest this update:     Mon 16 Jun 2025 18:48:02 +0000
Manifest next update:     Tue 17 Jun 2025 22:02:02 +0000
Files and hashes:         1: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: 9aMpbWbh/ZLSMOSS8yX6kc0tIg31gMJ2OyJ5WpqFWQo=)
                          2: 3139342e3132342e3233342e302f32342d3234203d3e20393936.roa (hash: ZoxbCHQMtNZPfbUxrxLpOcXkuKUfw+Blft69mSm2oZk=)
                          3: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: 4eRihxuyWrFmyrmWNHP+q80BiQuGj/+XTMKJH0kDcVI=)
                          4: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: hZUNrJfyUHgUntGAqdSVlBaE4wglKTi9y0zmmly1bMY=)
                          5: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: E+WPtm+HS9AVsakqcLrBjACoAm/NbChhrd4PG4s+X5o=)
                          6: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: 0XA7loK9zcLZ4LH8gJRLIhKhFochpbrC40dXD0XEE/8=)
                          7: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: ad3eCylfdMfYW/Id31ooquQQLvZwumdWGj+lszfaEsA=)
                          8: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: sUFXVk5mJuzGXi+txvF0jHfWX/7COhdmW+wdhnGLLbA=)
                          9: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: Bvg0bczZRvr0hNeXj13n0Q8N1O34FXLeiihKmXvd96c=)
                          10: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: lmVh0tkdqz2ZaktlfIJzzJLuyL6wItEcUEPI+PVNqdo=)
                          11: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: MbX2Jo3+qNy9yJ51qumhhpSA5fjjpKXnL9+Ixdd7q/M=)
                          12: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: Wt7cVymDfWBwMzR8hqsJLmmyo1G55vHli1MG8ova8P4=)
                          13: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: yq+hWHhfyocRCOJbnYGyzdHlkfHxXD4gPxuVgEPCc0g=)
                          14: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: qgpa17rXBGEZyX0zTURKp2TS7HA9WA0LAdj3r9yq+jg=)
                          15: 3139342e3132342e3233342e302f32342d3234203d3e203534333339.roa (hash: wdUsagydvVBIUao6PJHWRop4oPMEKXc9pJyNsG4SW9o=)
                          16: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: bLMKUTu2LDh7TH4JEFo2TwGKCx3JiqqNy6hRd14etMM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:48:a0:76:28:0b:f8:11:be:b8:c8:4f:46:af:10:b8:67:3e:ed:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
        Validity
            Not Before: Jun 16 18:48:02 2025 GMT
            Not After : Jun 17 22:02:02 2025 GMT
        Subject: CN=B7E00BDF33BE9842D7157865D4D5DEAEEAFB1178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f7:82:b6:e7:25:12:f1:ec:04:e1:a0:04:1f:
                    cb:8a:b6:36:f7:a7:10:82:80:78:74:e7:80:c8:76:
                    4f:06:97:f2:fd:5c:5a:a6:b9:fb:00:53:02:ae:f7:
                    04:3d:b6:19:20:81:62:15:ad:29:7b:8e:a0:d4:e0:
                    3b:b8:e8:62:cb:0c:0c:ad:b5:63:4e:0c:cb:f8:6a:
                    de:74:2b:8e:37:c0:b9:e0:bb:69:d1:ac:fd:ec:ae:
                    cd:0d:31:63:06:b5:4b:e9:d5:12:15:37:48:66:78:
                    45:7b:4f:f1:95:76:f3:03:9b:2d:98:21:6f:65:11:
                    d8:be:b2:84:85:30:52:9e:e8:a8:02:ff:16:1b:40:
                    ac:e1:ed:c7:ae:80:41:7c:c6:ba:ee:c6:cb:fd:1a:
                    c6:d1:3b:63:c3:76:d8:c3:31:8b:99:65:c3:c0:a9:
                    f1:57:e9:ad:c9:5d:cb:1d:b1:71:38:fe:8d:93:0a:
                    9d:94:e7:77:e7:61:81:f0:ed:ef:e1:11:50:28:a3:
                    1d:d4:36:1a:50:6b:45:df:a6:91:b7:ac:14:eb:24:
                    87:a7:11:e4:f6:04:e9:80:6c:46:1d:df:4a:61:98:
                    bc:94:c1:21:4d:c9:d4:a3:78:9b:a0:16:48:30:8e:
                    b5:ac:92:ab:df:7a:d4:1d:27:bf:3d:1d:54:52:cf:
                    c4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E0:0B:DF:33:BE:98:42:D7:15:78:65:D4:D5:DE:AE:EA:FB:11:78
            X509v3 Authority Key Identifier:
                keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f1:de:dc:d0:25:b1:e0:eb:6b:b6:52:ad:d7:a9:97:5d:7d:
         f0:c8:c9:73:73:be:4a:1b:38:de:ec:36:8f:b7:6e:d2:f3:f1:
         cf:13:b0:11:a8:e8:2c:71:0f:6e:da:da:e2:b0:a4:44:2c:79:
         d9:39:49:1b:c9:bd:cb:a2:01:09:8f:a2:fa:6e:42:78:40:9e:
         e2:a7:1b:7e:2c:b2:a8:40:02:7b:ad:a5:7b:45:70:25:5c:f5:
         7e:b1:9a:a9:41:bc:15:92:2a:88:6f:15:2f:38:01:23:2d:19:
         97:3e:c7:fb:5c:70:eb:72:05:0a:7e:41:ce:21:47:e2:90:b9:
         c0:02:18:5a:70:73:9f:3d:8b:bc:75:d0:23:2b:4f:69:18:7b:
         64:0c:14:54:42:b1:ab:60:f3:f0:35:65:ed:b4:6a:e5:3e:00:
         a3:e3:41:95:d9:9e:43:07:8a:ac:08:93:e2:1f:dc:5a:62:4b:
         9b:21:51:19:5d:3a:36:c2:58:6c:cf:1a:23:c9:95:ec:20:21:
         a0:f0:33:ae:cb:34:c3:34:0b:95:bf:5a:5a:2e:de:1f:3f:b8:
         9b:86:5b:40:ff:91:ed:9e:6c:81:6b:c8:30:40:8e:bc:d3:62:
         bf:0e:b9:ad:63:88:7f:92:9f:36:1f:15:ba:ad:e8:57:6d:b0:
         85:f2:49:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:20:20 2025 by rpki-client