Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.mft
File:                     D7D838DED871774D2E875C9CB99B810DC1B38301.mft (raw, json)
Hash identifier:          rpQwSYGGD9IPlDwRd464/93jS3AavczlHPKylBEMarc=
Subject key identifier:   7E:9B:67:DA:C1:A8:D6:D1:34:89:4A:63:D4:4F:41:AF:67:AB:13:04
Authority key identifier: D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01
Certificate issuer:       /CN=D7D838DED871774D2E875C9CB99B810DC1B38301
Certificate serial:       6409E7D74C4B61B300AA847C43A7FD5DF6A0B258
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.mft
Manifest number:          53
Signing time:             Wed 19 Jun 2024 02:38:56 +0000
Manifest this update:     Wed 19 Jun 2024 02:33:56 +0000
Manifest next update:     Thu 20 Jun 2024 05:38:56 +0000
Files and hashes:         1: 326130613a363034343a613530303a3a2f34362d3438203d3e20323135393536.roa (hash: wMhaQeQzHFzlfUB6q98Ifh7F1Zx3oQXok0tgZrkTEdc=)
                          2: 326130613a363034343a613531383a3a2f34362d3438203d3e20323135393536.roa (hash: w7jGlBeudsxDuBybj2Z7foNpsZ2ejEKlrbT9NuMG4+A=)
                          3: 326130613a363034343a613530633a3a2f34362d3438203d3e20323135393536.roa (hash: M2UnMXVicQbwGrxYBWokhW9CxL+5gU/xLlthKn/Rfkk=)
                          4: 326130613a363034343a613530383a3a2f34362d3438203d3e20323135393536.roa (hash: AJ73UEch0cpVB30C741eQxJt9O5WjtnvX5DTcTSzQtE=)
                          5: 326130613a363034343a613531343a3a2f34362d3438203d3e20323135393536.roa (hash: pOOK05ExVjmg/IvROy8S5ajO+yNEfS9kDc4x//g7LdU=)
                          6: 326130613a363034343a613531303a3a2f34362d3438203d3e20323135393536.roa (hash: jNX1edO3NoBKPchWeescD+9QVzaj0+EJNOj2vK8tYok=)
                          7: 326130613a363034343a613530343a3a2f34362d3438203d3e20323135393536.roa (hash: dfLgCSPeR7nfOa9hWb3Vtx7TDJdHmIvgqmB4byoQLA4=)
                          8: D7D838DED871774D2E875C9CB99B810DC1B38301.crl (hash: KKfHJjl4U2h8S1tJjiB/i7nRaoUyvkmc+BmwAIbrT+I=)
                          9: 326130613a363034343a613531633a3a2f34362d3438203d3e20323135393536.roa (hash: R6DMdqxKM0NGHLCukoZuI61XlGyFV5IlGm6WPX9M8/E=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 17:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:09:e7:d7:4c:4b:61:b3:00:aa:84:7c:43:a7:fd:5d:f6:a0:b2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7D838DED871774D2E875C9CB99B810DC1B38301
        Validity
            Not Before: Jun 19 02:33:56 2024 GMT
            Not After : Jun 20 05:38:56 2024 GMT
        Subject: CN=7E9B67DAC1A8D6D134894A63D44F41AF67AB1304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bd:7c:4c:73:e7:fe:e0:28:c7:63:b3:d9:7a:
                    62:e2:3c:88:9b:8e:f6:0d:d9:c6:4b:3a:c2:5d:f1:
                    77:52:bd:54:b5:a9:34:a6:5a:40:ab:58:c6:93:e1:
                    7b:35:49:32:95:97:ab:74:9b:9c:f8:2f:54:2f:d1:
                    87:83:be:98:4f:a1:a2:d8:32:78:d0:4c:63:ea:37:
                    96:ee:fd:a3:22:91:e2:b9:54:cc:65:b0:75:c7:84:
                    96:4d:d8:27:98:ec:5e:de:3a:cb:69:21:01:cd:b1:
                    81:ad:bb:a1:a9:ab:2a:ba:5c:39:35:67:2f:3a:c9:
                    dd:ff:2c:5a:47:4e:f5:92:a8:9a:15:37:0d:4d:f2:
                    6b:a4:36:d7:d8:ac:03:ca:10:15:ba:c2:b0:ef:2d:
                    90:f3:e8:85:6d:bf:37:e2:9d:f1:a9:19:e5:4c:dd:
                    ca:d1:b0:e1:d7:f7:5e:65:1a:17:02:c1:c7:96:6b:
                    e5:af:30:e9:1b:f5:c4:8d:4e:80:29:4f:7e:ea:f3:
                    a0:6f:9f:72:7c:f8:35:06:2e:1a:6b:4e:da:6c:b4:
                    85:b9:71:3f:14:ef:c0:98:6b:a7:c3:80:f2:b5:85:
                    03:36:01:f1:68:f7:fe:59:c1:0a:bb:f2:d7:74:86:
                    26:d0:90:70:52:4a:86:37:0f:b6:ce:b0:a6:f2:bf:
                    c2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9B:67:DA:C1:A8:D6:D1:34:89:4A:63:D4:4F:41:AF:67:AB:13:04
            X509v3 Authority Key Identifier:
                keyid:D7:D8:38:DE:D8:71:77:4D:2E:87:5C:9C:B9:9B:81:0D:C1:B3:83:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D7D838DED871774D2E875C9CB99B810DC1B38301.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc615ebd-5c28-4334-8d2c-ec3158afdc8c/0/D7D838DED871774D2E875C9CB99B810DC1B38301.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:3e:9d:6d:4b:9c:e9:89:8f:1a:af:c7:14:5a:5f:a6:76:8f:
         43:3e:e4:58:5a:8b:32:19:88:83:ce:8e:5d:ae:bc:4f:21:79:
         bd:0e:57:a7:f7:72:57:02:dd:1a:e8:94:e6:de:4f:de:11:90:
         cc:75:28:f1:6b:01:c7:8f:cf:00:b4:46:6d:8c:5a:da:f7:d3:
         97:5e:c9:42:13:42:d3:e2:a9:34:5e:45:7e:6a:f3:0e:8c:8f:
         b0:06:e5:b5:b7:2f:0f:84:26:17:62:da:b0:4b:ee:ef:2e:f2:
         1d:d1:2b:46:3d:f9:8b:d2:31:3e:4a:d3:7e:58:15:93:26:85:
         27:58:8f:46:bc:3d:9d:70:c1:fc:7f:e9:93:e7:b0:27:13:97:
         18:38:da:23:13:69:d6:ac:12:56:d7:1c:e4:ca:c2:a6:74:81:
         66:71:f6:5b:8e:db:56:d8:59:12:e1:bd:a6:2a:e7:99:e0:fa:
         da:b5:e0:42:3b:81:34:09:69:e2:57:2b:a2:6e:3b:1b:2d:e9:
         60:65:a7:c1:04:59:e7:72:e3:8f:30:17:16:ce:1a:ae:f3:c5:
         21:df:21:bf:4c:5d:40:a7:7d:07:9f:21:d4:48:7b:fe:d6:76:
         2b:dd:6d:92:ae:64:f3:a8:a0:54:fe:cb:b3:5d:f3:b5:30:20:
         b3:30:54:6b
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUZAnn10xLYbMAqoR8Q6f9XfagslgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdEODM4REVEODcxNzc0RDJFODc1QzlDQjk5QjgxMERD
MUIzODMwMTAeFw0yNDA2MTkwMjMzNTZaFw0yNDA2MjAwNTM4NTZaMDMxMTAvBgNV
BAMTKDdFOUI2N0RBQzFBOEQ2RDEzNDg5NEE2M0Q0NEY0MUFGNjdBQjEzMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrvXxMc+f+4CjHY7PZemLiPIib
jvYN2cZLOsJd8XdSvVS1qTSmWkCrWMaT4Xs1STKVl6t0m5z4L1Qv0YeDvphPoaLY
MnjQTGPqN5bu/aMikeK5VMxlsHXHhJZN2CeY7F7eOstpIQHNsYGtu6Gpqyq6XDk1
Zy86yd3/LFpHTvWSqJoVNw1N8mukNtfYrAPKEBW6wrDvLZDz6IVtvzfinfGpGeVM
3crRsOHX915lGhcCwceWa+WvMOkb9cSNToApT37q86Bvn3J8+DUGLhprTtpstIW5
cT8U78CYa6fDgPK1hQM2AfFo9/5ZwQq78td0hibQkHBSSoY3D7bOsKbyv8IlAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUfptn2sGo1tE0iUpj1E9Br2erEwQwHwYDVR0j
BBgwFoAU19g43thxd00uh1ycuZuBDcGzgwEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmM2MTVlYmQtNWMyOC00MzM0LThkMmMtZWMzMTU4YWZk
YzhjLzAvRDdEODM4REVEODcxNzc0RDJFODc1QzlDQjk5QjgxMERDMUIzODMwMS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9EN0Q4MzhERUQ4NzE3NzREMkU4NzVDOUNC
OTlCODEwREMxQjM4MzAxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2ZjNjE1ZWJkLTVjMjgtNDMzNC04ZDJjLWVjMzE1OGFmZGM4Yy8wL0Q3RDgzOERF
RDg3MTc3NEQyRTg3NUM5Q0I5OUI4MTBEQzFCMzgzMDEubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJPp1t
S5zpiY8ar8cUWl+mdo9DPuRYWosyGYiDzo5drrxPIXm9Dlen93JXAt0a6JTm3k/e
EZDMdSjxawHHj88AtEZtjFra99OXXslCE0LT4qk0XkV+avMOjI+wBuW1ty8PhCYX
YtqwS+7vLvId0StGPfmL0jE+StN+WBWTJoUnWI9GvD2dcMH8f+mT57AnE5cYONoj
E2nWrBJW1xzkysKmdIFmcfZbjttW2FkS4b2mKueZ4PrateBCO4E0CWniVyuibjsb
LelgZafBBFnncuOPMBcWzhqu88Uh3yG/TF1Ap30HnyHUSHv+1nYr3W2SrmTzqKBU
/suzXfO1MCCzMFRr
-----END CERTIFICATE-----
Generated at Wed Jun 19 07:16:23 2024 by rpki-client on console.sobornost.net