Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
File:                     E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json)
Hash identifier:          7wv6PnQaVtvIaL0DsiPYsuYHnMKmCuKodlmm5+/+aeM=
Subject key identifier:   4E:09:01:34:5C:5A:2A:3E:0B:DD:D6:65:09:18:6F:3A:02:5E:BF:42
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Certificate issuer:       /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial:       4E08AD733B4BB7D6EEA98CB7B66E0E5FC99C1986
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
Manifest number:          48
Signing time:             Sat 26 Apr 2025 03:14:57 +0000
Manifest this update:     Sat 26 Apr 2025 03:09:57 +0000
Manifest next update:     Sun 27 Apr 2025 04:54:57 +0000
Files and hashes:         1: 326130663a356663303a626565663a3a2f34382d3438203d3e203438393831.roa (hash: e3YPpDvHx8rPIAwM+wwNU0p7blaAVCCQT3k3Y+xIeS4=)
                          2: 39312e3230392e34302e302f32342d3234203d3e2034353135.roa (hash: CC7fp5nOaibQP3hFHxX7FW2H/9NjDOElJ2PAdK2zC6Y=)
                          3: 326130663a356663303a646561643a3a2f34382d3438203d3e203339363733.roa (hash: gO+lPcmBJ3b3FFlaD55CICvRL4LDSg56OGDANGd62H4=)
                          4: 326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa (hash: K3dsxrFQ81jShWe7HJ7EQUeBE0EnGjXf57qbgrA7Yxc=)
                          5: 39312e3230392e34302e302f32342d3234203d3e20313337383937.roa (hash: eXBnQ+s+mB7Cc4NOSlBtRRCSpKfKjJW6/ZyNzVf/Dqo=)
                          6: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: UjFw0WQQLm//XoiWgykA8VWz+amzh0YCKaelwGihPq4=)
                          7: 39312e3230392e34382e302f32342d3234203d3e2035353131.roa (hash: pWHUy4sfDHhMYcXOwCmnLzzNUiYAcTbJlR4z9A6zTiI=)
                          8: 39312e3230392e35382e302f32342d3234203d3e203634323637.roa (hash: vVPhAwxMoGbJX95BZTqrmZCi086rlFMNDRhMBQEniYs=)
                          9: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: +4BSZjvIiAUq2fdaZRBJ1v4k64dJRVvJX1RiZKI0wIs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 04:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:08:ad:73:3b:4b:b7:d6:ee:a9:8c:b7:b6:6e:0e:5f:c9:9c:19:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
        Validity
            Not Before: Apr 26 03:09:57 2025 GMT
            Not After : Apr 27 04:54:57 2025 GMT
        Subject: CN=4E0901345C5A2A3E0BDDD66509186F3A025EBF42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2b:e4:69:8a:39:36:15:8b:c9:fd:f1:51:d6:
                    43:79:96:d5:49:44:16:59:06:e5:62:7f:95:23:a8:
                    74:b8:47:5c:4e:a8:7c:9c:f7:6b:9e:a7:d8:d2:c1:
                    1e:09:22:e5:a5:bc:74:f6:67:4a:1e:fc:33:10:71:
                    53:f9:bc:84:a7:2f:40:d5:64:f6:5a:a8:33:a5:a3:
                    ce:85:35:66:ef:73:c9:82:7b:b4:8a:7b:53:40:6e:
                    4f:0c:b7:f2:59:f6:e9:96:f5:f5:fa:96:ce:d0:55:
                    be:c0:aa:ef:23:2e:7a:b5:23:e7:66:d5:7b:14:9c:
                    ca:b8:b0:8b:7e:70:8a:73:ea:95:92:c9:b2:d9:3e:
                    2d:37:2a:af:4a:43:a0:43:4f:54:5a:a2:3a:6a:8e:
                    ff:32:ba:2a:a1:28:d0:ed:97:23:83:c8:e7:af:6a:
                    00:6f:1a:94:4b:d5:09:ad:c2:eb:06:76:74:62:a4:
                    37:65:62:7d:69:cf:b8:a6:77:2e:3d:bb:fb:57:f9:
                    0c:34:ae:34:f5:d9:74:3d:25:b1:31:8e:5b:bb:a1:
                    e2:1c:2a:18:df:38:85:63:95:03:90:e2:7b:3e:bc:
                    de:af:ee:4d:85:8f:79:89:8b:cc:74:8f:5a:22:a8:
                    c1:74:32:cc:65:a8:f6:9e:80:bd:33:be:dc:a1:b5:
                    00:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:09:01:34:5C:5A:2A:3E:0B:DD:D6:65:09:18:6F:3A:02:5E:BF:42
            X509v3 Authority Key Identifier:
                keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ab:8b:b8:5e:1e:3e:8b:7d:d8:d4:21:4d:1a:e9:f9:92:89:
         8c:15:b7:86:a5:c5:82:0e:30:69:43:8a:2f:69:6e:95:b3:d0:
         36:bb:39:16:a7:00:80:fa:bc:68:65:31:b1:40:32:32:d6:b8:
         61:1e:e2:bf:b3:c7:6c:ef:67:76:f5:08:28:a0:ab:d2:ba:5b:
         1a:4b:cf:d6:ed:26:34:41:eb:2c:24:e5:17:5b:0c:7a:99:2f:
         8f:9d:79:ba:dc:3b:cd:36:69:53:22:0d:4a:3c:51:b1:65:72:
         47:3c:2d:f4:3a:bd:1a:96:74:b4:c3:65:89:90:9d:03:2d:bd:
         b6:ca:0c:e4:46:d6:8f:3c:42:da:e5:1d:a5:88:bd:21:a0:7e:
         db:c3:6e:0b:c9:f5:25:dc:c0:09:dc:ba:a0:72:d2:59:a5:30:
         ab:ee:a1:b0:6e:41:db:f1:97:73:52:c7:a5:36:47:e9:1c:2f:
         12:de:56:c4:c8:f4:52:be:a8:6b:c3:21:6d:36:2f:b9:c0:9d:
         36:34:66:63:1c:c9:5b:0f:20:b3:6b:3e:18:ab:f6:f4:b9:96:
         ab:d1:e7:4d:9a:53:eb:42:2f:17:94:7d:06:a1:bb:2e:9a:f3:
         0b:73:82:d3:b7:67:23:0c:11:03:22:13:7f:5b:db:53:84:fa:
         81:2b:b8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:31:31 2025 by rpki-client