Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
File:                     1E74494683D8D2A4E029AAD4573928D2A55FA411.mft (raw, json)
Hash identifier:          SWpJ+0jv5o/NhCzLGVkExCt68dO6hQoziJ/iAmUVY84=
Subject key identifier:   93:BC:F6:E4:09:C1:07:AB:4B:A1:90:05:FF:D0:E2:4A:C3:D9:92:CA
Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11
Certificate issuer:       /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411
Certificate serial:       423C157EE5B7C3313A59700F2524A1B6862AF774
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
Manifest number:          93
Signing time:             Tue 28 Jul 2026 13:00:15 +0000
Manifest this update:     Tue 28 Jul 2026 12:55:15 +0000
Manifest next update:     Wed 29 Jul 2026 14:43:15 +0000
Files and hashes:         1: 326131333a633863343a663130303a3a2f34302d313238203d3e20323134323035.roa (hash: llWttPtFxzSvHdRpuA4UR+5ss5mF3yPJlws0jwD0FEM=)
                          2: 326131333a633863343a3a2f33362d3438203d3e20323035393431.roa (hash: MHTbuB6+g+ci+W3xhK1wq8aUoLgunvms/wXlaRYr9A4=)
                          3: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer (hash: qnGfja2gp1Dt5eiLazr0XeABKN1iXqNbT2nfPewlL3k=)
                          4: 326131333a633863343a663530303a3a2f34302d313238203d3e20323035393431.roa (hash: PxxBGQ7SipAzWoOzhhkRsumojkCUT+Er192+snUK4gs=)
                          5: 09FD34FF6836F9DD01AC7FDF357840C752BB91A5.cer (hash: zWi5rFdGQYwJBXDhW9PKUkb3++OgSqlJ6YAaEWudTiw=)
                          6: 300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer (hash: WUexCqCUAvgyF/Iv7z1a1aWJ8dcJnS0fgUUz16Pzr18=)
                          7: 326131333a633863343a3a2f33322d3332203d3e2030.roa (hash: gSZ+pcHkiMWO1K79/Mncci1lQFYMKmKkgDaeUtpna0Y=)
                          8: 326131333a633863343a666630303a3a2f34302d313238203d3e20323134373632.roa (hash: eFBa4OwWuclMBCgU5m433/KeC4fb2SOvKkGDpf2qYGU=)
                          9: 326131333a633863343a313030303a3a2f33362d3438203d3e20323134373632.roa (hash: JofSJio1ZSiKcgoMirJLUr+PbzVMXTI571DpwJP8INM=)
                          10: 326131333a633863343a666630303a3a2f34302d313238203d3e20323135393235.roa (hash: DCRzh/+o5rf4TeU7EAqLSelJkyKiofWcnaurItVLmfU=)
                          11: F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer (hash: QeIsnFtF/EdZr3eDL8K0OYPSz/bi5xfqK6RvjhvtAeE=)
                          12: 1E74494683D8D2A4E029AAD4573928D2A55FA411.crl (hash: 3cEp5SCvBm3JMjIb/lhS1teRrls6ORxuiQx/NwBr530=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 03:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:3c:15:7e:e5:b7:c3:31:3a:59:70:0f:25:24:a1:b6:86:2a:f7:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411
        Validity
            Not Before: Jul 28 12:55:15 2026 GMT
            Not After : Jul 29 14:43:15 2026 GMT
        Subject: CN=93BCF6E409C107AB4BA19005FFD0E24AC3D992CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ac:e0:00:4a:f7:cf:06:a0:0f:18:4a:55:ea:
                    eb:f1:b4:cf:ae:d8:6e:cf:02:12:38:96:74:a8:c3:
                    57:ad:5a:05:61:9f:01:b9:29:b4:47:a0:a9:45:40:
                    cc:69:88:4b:78:3c:b3:3b:b1:73:bf:12:fa:aa:57:
                    75:e2:68:2e:f6:45:8d:c0:d3:88:10:ee:f2:f0:91:
                    fb:7c:82:83:0e:39:98:ba:30:8c:f9:b9:9e:5d:1a:
                    af:43:53:7e:7e:53:11:72:25:bd:6c:a5:4d:1f:b5:
                    d7:81:ab:03:db:09:63:61:bf:36:19:24:c0:16:2f:
                    c1:97:2f:5a:b6:1e:9a:07:b5:2f:86:eb:80:92:4c:
                    68:21:3b:a6:5a:09:1e:b8:07:dc:dd:a9:c9:67:45:
                    6f:9b:2f:8e:fb:ca:fd:c1:7c:86:03:13:37:7e:b0:
                    cb:ea:39:b7:07:71:67:a1:5e:a5:97:5d:80:e3:f1:
                    4b:a1:e6:f9:f1:47:f5:26:98:a3:83:4c:60:e9:d2:
                    05:2c:a2:3f:a9:cb:13:2b:f6:ab:90:cc:35:65:c5:
                    8c:fb:3d:ce:75:ae:3c:8c:7f:c7:66:2c:b9:61:8e:
                    8b:98:40:76:ac:4f:01:79:23:c5:8f:96:6a:90:d2:
                    e3:1d:ae:e3:7a:92:77:58:b2:75:e7:87:8e:e0:83:
                    3c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BC:F6:E4:09:C1:07:AB:4B:A1:90:05:FF:D0:E2:4A:C3:D9:92:CA
            X509v3 Authority Key Identifier:
                keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:e1:95:2a:41:67:08:38:e0:0c:17:ed:2a:fd:6a:84:15:c6:
         2e:7a:63:b0:73:c3:9b:0f:05:0a:57:ef:f4:78:53:7b:cb:75:
         0f:68:41:42:23:1f:0a:bc:80:5d:d5:14:75:27:bf:8e:ed:cc:
         05:6a:1e:48:75:9d:69:be:74:d1:8a:70:10:a9:7a:c2:84:ad:
         1a:73:eb:be:53:31:b0:4e:f7:1f:bf:8e:90:84:10:cf:d6:b9:
         7a:a2:41:c9:d0:86:ce:e3:8e:df:a6:5c:fb:5e:ce:f2:44:10:
         c4:94:bd:d9:6f:03:37:b4:b5:a2:df:07:71:ca:5c:0c:a8:21:
         6a:65:dd:6a:0b:9f:ed:e9:ee:56:42:af:35:4e:75:b2:c4:a5:
         39:f8:3b:82:07:f0:3d:5f:55:a9:a5:f3:87:00:84:a2:0f:e2:
         32:f8:e4:68:6b:f9:25:c0:ab:e2:b5:6e:91:4a:a2:64:08:e4:
         e9:f6:64:a4:0c:ca:88:63:06:c3:61:d0:68:dd:88:b4:1a:d8:
         dd:db:ba:68:ba:25:2c:19:ea:22:c4:73:ac:2a:61:35:d9:59:
         a1:2d:bb:27:29:f2:0b:b1:25:d9:a0:f9:50:f7:c8:01:80:08:
         0f:3d:80:0c:c5:83:e5:26:8a:f6:fb:ab:cf:5c:96:14:5e:d7:
         6e:59:b3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:56:45 2026 by rpki-client