Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
File:                     0D059F10D18D00052C808EB8069F90D47E30564A.mft (raw, json)
Hash identifier:          Li+bbUy/OoSXhyddc7xx1s4eiz4nKncwAiv+cJAfAG0=
Subject key identifier:   08:37:E0:B1:68:BA:BC:AD:F6:D4:F7:93:EC:67:10:64:E3:9E:A4:96
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Certificate issuer:       /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial:       3A805041FBD7C3D4DC3E7BE16B5923D9AC95B19F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
Manifest number:          042C
Signing time:             Sat 26 Apr 2025 11:04:59 +0000
Manifest this update:     Sat 26 Apr 2025 10:59:59 +0000
Manifest next update:     Sun 27 Apr 2025 13:03:59 +0000
Files and hashes:         1: 38322e3131382e32392e302f32342d3234203d3e20323036313530.roa (hash: ObvBZ0BgvPmpYKSU7UXxFVu4DfmLWeh07WVvdAVP4Ls=)
                          2: 3134312e39382e37352e302f32342d3234203d3e20313439353032.roa (hash: QkAmsbQ1VDurz0UtTYd6ic8fZJgfvwFJxSRMbsepsqI=)
                          3: 34352e3133322e39382e302f32342d3234203d3e20323036353035.roa (hash: VcsmT3OZYFjllF+ZnmgjjohYySHvI6W996nabZuRsbM=)
                          4: 3134312e39382e37352e302f32342d3234203d3e203531383437.roa (hash: X2j2qrEASFLuubxYZleJzcWl9m0S63UAIqnrbnUjV9c=)
                          5: 34352e3133322e39362e302f32342d3234203d3e20323037393932.roa (hash: Yo2QeRhSWKrPSxgf10CKLGvhI3BowbRpnYdLAxewDqY=)
                          6: 34352e38302e352e302f32342d3234203d3e20323039303433.roa (hash: o6enGTC5V+kKAcp8sqb+UwVYgbVDuHe6XfnpsX3I21c=)
                          7: 3231322e322e3233382e302f32342d3234203d3e203432383331.roa (hash: ttuwafCCa+ztwrZDZ0nta/hJT/8v8k1iDpHgbxuaBZU=)
                          8: 34352e3133322e39372e302f32342d3234203d3e203434383033.roa (hash: BPvd6mllPGeWik8FeyrmmVN7SLaH08JPqlabf7tERlc=)
                          9: 3134312e39382e37332e302f32342d3234203d3e203531353631.roa (hash: Qa1dbKJe4+Dd1UoQ3xXDywTR9j4XgSIExxzLHnYTH8M=)
                          10: 34352e3134362e3130372e302f32342d3234203d3e203136323736.roa (hash: RFbXESMgm50Dxr0CjF0ufu5FThorKlskbs0XvxrMVcY=)
                          11: 38322e3131382e32382e302f32342d3234203d3e2034353135.roa (hash: X/DhygSlrPVO/eF/GlFtoVCSofbVFOhLzL3AIGC/ojw=)
                          12: 38322e3131382e33312e302f32342d3234203d3e20313431313538.roa (hash: LsFTl/kkclLnXGVAOnhI1QjalE+07xRLUihbF17vqI4=)
                          13: 38322e3131382e32372e302f32342d3234203d3e20313532333638.roa (hash: aQhTEX+vxeV3ZZfNL5D+dCcUW9S6viOj1Qv7aJUTDOo=)
                          14: 0D059F10D18D00052C808EB8069F90D47E30564A.crl (hash: QsqwpJKT217E44TU5n/7iXW1Ds0tfrMzg8WkaCMqlSQ=)
                          15: 38322e3131382e33312e302f32342d3234203d3e203134363138.roa (hash: wvDzUoP7CPq9aLULkOQpWdOz0A0iOdA1o16i2vJZZa4=)
                          16: 3231332e3232352e3233382e302f32342d3234203d3e20323732363932.roa (hash: AVdkqhp0phQFlAd+yWjOG1O0TvrPMG2mXD10FNHbrqw=)
                          17: 38322e3131382e33312e302f32342d3234203d3e203136353039.roa (hash: dZw70y9MdcV4j1toR8ga+BOcGz6A4O9fJ5Btq1Os/bs=)
                          18: 39322e3131342e352e302f32342d3234203d3e203631333137.roa (hash: xaHjixp8lH5Sy/rciOJCUUptTg7sKnd3y05l7Xcmf1k=)
                          19: 3134312e39382e37322e302f32342d3234203d3e20333935333734.roa (hash: gf9HuATHXVe/lyqqs3j3nw5YDy365165XnbbdnbEcHU=)
                          20: 38322e3131382e32392e302f32342d3234203d3e20323036303932.roa (hash: uLUXrefiNXN8kmVmzHSF89K0flnZSJLa0AIllUoq5G0=)
                          21: 34352e38302e342e302f32342d3234203d3e20323132323338.roa (hash: m5qEGwTWA0BsIVJ8QluKa4rxXqZrttPNHEQorCS21pk=)
                          22: 34352e3134362e3130362e302f32342d3234203d3e203230343733.roa (hash: G78YmllKyw52z8K9JyEJkeus3wMTTEayXclVoIlGwdY=)
                          23: 38322e3131382e32342e302f32342d3234203d3e203537323338.roa (hash: HvuSbyQPRAWtpR9N0geEwYGFZ7cXzWDm5WkdaOeDEoY=)
                          24: 38322e3131382e32382e302f32342d3234203d3e20313337383937.roa (hash: o6CrgiOis+FzbmQ6katG0ikcJU2QqoFZjBkkMemMqJQ=)
                          25: 38322e3131382e32352e302f32342d3234203d3e20323030303137.roa (hash: /OyIJaLE+mhRhZIR2yKBo2hL3SVr5nE9pQSCUdwkC1I=)
                          26: 3231332e3232352e3233362e302f32342d3234203d3e20333239303937.roa (hash: HI6Yt71bBKgzpJqbMZLP7zgZYHdbltd9KJ7ekJ5IXU4=)
                          27: 38322e3131382e32362e302f32342d3234203d3e20323132343737.roa (hash: fPcUpNy+WOhAEIKu4xebTqjF/pK5l+6MORmL6bSk7iA=)
                          28: 39322e3131342e342e302f32342d3234203d3e20323136313832.roa (hash: ZVbO/lwzg9cSMLR25eMggHkY5uRD+typfYUl8D8mbZY=)
                          29: 34352e3134362e3130342e302f32342d3234203d3e20323039303433.roa (hash: s79HfX4aoKI3s4FYYSfKzGcE5D7Ac3JiaCA4u87NafU=)
                          30: 3231322e322e3233392e302f32342d3234203d3e203631333137.roa (hash: eNAVzwMCeewTwuyQhFgO71z2K+Ot8c12vSF4r204UcM=)
                          31: 326130333a323738303a3a2f33322d3332203d3e203537323338.roa (hash: 3ogyUPr1c5N2o9ugaR891m0jcGM4rFLaSDjN0j4tkaY=)
                          32: 3231322e322e3233362e302f32342d3234203d3e203632313634.roa (hash: vFrBa38OjLdBB7Kr+vGdEmJ15PlI5ZGLsK2m/+Ou9uE=)
                          33: 34352e38302e372e302f32342d3234203d3e203631333137.roa (hash: 8mi788twFjgJ0TWWd72rYD+5N5INSXxTrbQc0AT4uDU=)
                          34: 34352e3134362e3130352e302f32342d3234203d3e20323132323338.roa (hash: U5dSGqoMezTdbG0zMWXZ+R+R6nHgvRF4TKwez3UT6Is=)
                          35: 38322e3131382e33302e302f32342d3234203d3e20323036303932.roa (hash: xEUwTVN0T1kCySOuAi3sG9aFDJlCk0a7jxrttP9gwng=)
                          36: 38322e3131382e33302e302f32342d3234203d3e20323036313530.roa (hash: GQbNUBbyharUaqO4XvFcJE4s5q8l077rf+QS1KmAnxo=)
                          37: 34352e3133322e39392e302f32342d3234203d3e20323134303235.roa (hash: B8d2+hncDJwYWFBE/6NU4UUNL6b5ndRIKavdpX9Gi6o=)
                          38: 3231322e322e3233372e302f32342d3234203d3e203231383430.roa (hash: thfIB2w0Z7cg7w1ieyFzdfAA2+rdPX1EGyH5OYRS5yI=)
                          39: 38322e3131382e32372e302f32342d3234203d3e203530313034.roa (hash: 8A0oPojpsmXFybf4dgdnJDERfo+KI/6jndzKf+FvCFk=)
                          40: 3231332e3232352e3233392e302f32342d3234203d3e20323030343335.roa (hash: pXrEjYqaUxFd7llIbTL2YVTmDzTfPIRRCCp2v7pacLY=)
                          41: 3134312e39382e37352e302f32342d3234203d3e20313437323933.roa (hash: aj2+quOBBuiersuDwNqMK6KB60d2vVLzFpEPHAXgc+w=)
                          42: 3231332e3232352e3233372e302f32342d3234203d3e203538303631.roa (hash: /wg3gTPHe5+eDxx0AOHsn87gI89vGKJVhux0/3gaI50=)
                          43: 34352e38302e362e302f32342d3234203d3e20313337343039.roa (hash: pm9cJ+vac8WKhRqiukbzmT8ZtptDNEkRCRed1I/WuCM=)
                          44: 34352e3133322e39392e302f32342d3234203d3e20323135333034.roa (hash: Ndf9OFnDxNqD2zXKOsCa6FNv++EyXy6ubwNEoMJVJfI=)
                          45: 3134312e39382e37342e302f32342d3234203d3e20343030383130.roa (hash: KVa82wI/FeK7G+zHplEfv7DPRWirQW5iuszUr5TC2UY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:80:50:41:fb:d7:c3:d4:dc:3e:7b:e1:6b:59:23:d9:ac:95:b1:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
        Validity
            Not Before: Apr 26 10:59:59 2025 GMT
            Not After : Apr 27 13:03:59 2025 GMT
        Subject: CN=0837E0B168BABCADF6D4F793EC671064E39EA496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e2:cc:e0:0b:8b:7f:f9:75:e8:8d:b7:a1:55:
                    0f:eb:04:92:01:89:52:25:7b:ae:64:fb:09:5e:90:
                    12:a3:ba:5b:53:0c:fc:7a:67:28:e7:f4:8c:46:80:
                    41:0e:d0:72:92:ce:95:65:1c:24:06:d5:4d:87:65:
                    51:a7:3e:42:fb:67:2d:1f:f6:44:64:af:55:90:c2:
                    53:70:5e:ce:e5:9e:f8:84:5f:ef:8f:16:4a:55:f1:
                    01:99:81:6c:f1:f4:6e:a1:d2:95:f8:5a:e8:f9:99:
                    d2:fd:4f:7e:b2:e4:54:89:5d:4a:35:39:e7:8d:cc:
                    4c:9a:25:77:50:27:f6:4b:fb:b7:e8:bb:af:6b:87:
                    d6:c2:41:9e:09:6d:e0:22:dd:49:6c:58:c2:63:2d:
                    5c:5c:99:45:f7:4e:0c:dd:71:c6:f4:b9:7b:e5:ed:
                    25:78:cc:f5:36:6e:51:69:c1:5f:9d:5b:88:e0:18:
                    d8:66:50:1f:6d:69:6b:18:ab:7c:9f:7d:56:18:12:
                    0a:a0:43:7f:5f:9a:7b:79:5e:b5:7c:bc:c0:67:99:
                    72:30:f3:93:44:d3:a3:03:9c:f6:d6:e7:30:29:d9:
                    2f:35:34:49:a5:b4:3c:80:51:2c:5b:b8:10:69:60:
                    56:0a:3f:7c:66:19:6c:c9:a4:04:95:05:3c:35:e1:
                    1d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:37:E0:B1:68:BA:BC:AD:F6:D4:F7:93:EC:67:10:64:E3:9E:A4:96
            X509v3 Authority Key Identifier:
                keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:40:e7:88:a3:06:c8:7d:af:e9:35:33:ea:f1:e0:5b:0f:24:
         7d:c6:9c:06:55:77:ab:4b:d5:f6:72:59:ab:c0:c2:e4:db:39:
         d7:fa:02:5b:dc:59:8a:f1:f4:7f:7f:5e:29:02:ea:a7:a0:6a:
         cf:21:ad:19:39:25:52:f9:42:4a:6f:84:c9:87:6e:20:cb:66:
         8f:70:76:1f:c9:e6:c8:b7:98:2e:3e:e2:cb:af:17:71:6b:0a:
         79:7c:63:f8:7b:32:1e:cb:db:b9:13:d9:61:0f:fb:a6:73:4f:
         f9:b8:b1:5e:5f:1c:ea:74:db:0c:5d:6e:43:51:1c:76:a0:b9:
         98:f8:86:4f:b9:d3:5c:c3:70:6e:24:69:dc:b6:41:cb:3b:d1:
         d1:a9:08:18:45:d1:29:ae:48:21:57:01:b7:58:80:5e:de:5f:
         a5:6c:f5:36:a5:60:cd:e3:3c:c1:9e:e5:46:c9:22:a0:2b:78:
         32:63:7b:8a:e8:68:df:04:90:47:a7:8f:7f:09:ba:ff:8f:21:
         a1:85:af:0c:63:e0:69:37:e9:49:d4:06:55:70:29:88:07:79:
         0a:28:8a:bc:52:6a:47:7f:46:25:20:5f:3e:8f:2b:73:1c:1a:
         96:b7:4a:23:3a:d6:52:cd:d8:48:16:5d:9e:73:0c:e2:b9:80:
         ea:86:42:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:22:43 2025 by rpki-client