Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
File:                     1E74494683D8D2A4E029AAD4573928D2A55FA411.mft (raw, json)
Hash identifier:          ZsqCL3WNYCnW+dXhhabfiNwq8LrrEyNRgFDNiUG3V0E=
Subject key identifier:   4B:02:34:49:AE:B5:B0:1E:ED:92:E4:20:79:04:A3:77:DD:BC:D4:6E
Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11
Certificate issuer:       /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411
Certificate serial:       07BD7F4D76B023976749B9A45627BF4C2ECCCD42
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
Manifest number:          E4
Signing time:             Tue 22 Sep 2026 04:40:09 +0000
Manifest this update:     Tue 22 Sep 2026 04:35:09 +0000
Manifest next update:     Wed 23 Sep 2026 07:30:09 +0000
Files and hashes:         1: 1E74494683D8D2A4E029AAD4573928D2A55FA411.crl (hash: zA1OiNKz2bsduQbeJxGUSkB+BBt/5Yc7lh/joFZYiE8=)
                          2: 326131333a633863343a666630303a3a2f34302d313238203d3e20323135393235.roa (hash: DCRzh/+o5rf4TeU7EAqLSelJkyKiofWcnaurItVLmfU=)
                          3: F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer (hash: QeIsnFtF/EdZr3eDL8K0OYPSz/bi5xfqK6RvjhvtAeE=)
                          4: 326131333a633863343a666530303a3a2f34302d3430203d3e2030.roa (hash: lRwRWYrxiGTqXR9JW+d3Dce/wBwgk0miE3YSYcNIgOA=)
                          5: 326131333a633863343a313030303a3a2f33362d3438203d3e20323134373632.roa (hash: JofSJio1ZSiKcgoMirJLUr+PbzVMXTI571DpwJP8INM=)
                          6: 09FD34FF6836F9DD01AC7FDF357840C752BB91A5.cer (hash: zWi5rFdGQYwJBXDhW9PKUkb3++OgSqlJ6YAaEWudTiw=)
                          7: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer (hash: qnGfja2gp1Dt5eiLazr0XeABKN1iXqNbT2nfPewlL3k=)
                          8: 326131333a633863343a3a2f33362d3438203d3e20323035393431.roa (hash: MHTbuB6+g+ci+W3xhK1wq8aUoLgunvms/wXlaRYr9A4=)
                          9: 300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer (hash: WUexCqCUAvgyF/Iv7z1a1aWJ8dcJnS0fgUUz16Pzr18=)
                          10: 326131333a633863343a3a2f33322d3332203d3e2030.roa (hash: gSZ+pcHkiMWO1K79/Mncci1lQFYMKmKkgDaeUtpna0Y=)
                          11: 326131333a633863343a663130303a3a2f34302d313238203d3e20323134323035.roa (hash: llWttPtFxzSvHdRpuA4UR+5ss5mF3yPJlws0jwD0FEM=)
                          12: 326131333a633863343a663530303a3a2f34302d313238203d3e20323035393431.roa (hash: PxxBGQ7SipAzWoOzhhkRsumojkCUT+Er192+snUK4gs=)
                          13: 326131333a633863343a333030303a3a2f33362d313238203d3e20323035393431.roa (hash: 97shXnpfJislpBbqVEqju6Q/sYqLAovLtvyjPdhr0V4=)
                          14: 326131333a633863343a343030303a3a2f33362d313238203d3e203430343139.roa (hash: dcoRck7LWZ+s3AnLux3w6i69H91cy2y1ItvIJro8d4c=)
                          15: 326131333a633863343a663939303a3a2f34382d313238203d3e20323138393931.roa (hash: k853DvbN3iiS1Slm5LVndazbumM9csvV2y0CQquqjmY=)
                          16: 326131333a633863343a666630303a3a2f34302d313238203d3e20323134373632.roa (hash: eFBa4OwWuclMBCgU5m433/KeC4fb2SOvKkGDpf2qYGU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 07:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:bd:7f:4d:76:b0:23:97:67:49:b9:a4:56:27:bf:4c:2e:cc:cd:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411
        Validity
            Not Before: Sep 22 04:35:09 2026 GMT
            Not After : Sep 23 07:30:09 2026 GMT
        Subject: CN=4B023449AEB5B01EED92E4207904A377DDBCD46E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fd:40:43:91:25:9a:45:23:78:89:4d:7b:a8:
                    56:97:d2:d6:b4:8b:4f:7b:9e:ea:a1:6a:7d:db:97:
                    f6:66:45:b8:e5:03:4e:fb:2a:c1:86:af:85:f6:3f:
                    4e:14:51:26:ee:95:cd:5d:65:28:d4:37:75:64:27:
                    b2:be:22:b0:ee:2a:1c:8b:d1:9d:44:90:49:07:4e:
                    de:47:6b:a2:6f:c5:16:32:40:c8:69:c9:b4:b2:bb:
                    c8:a4:e9:e7:f0:ff:4e:b6:56:a4:65:0e:c5:53:8d:
                    67:77:ba:42:75:a9:a1:ed:77:c6:f1:13:36:64:ef:
                    5a:6c:77:b1:e3:f5:8a:7e:6f:37:62:67:7d:d4:eb:
                    16:6a:29:ea:c5:e9:ef:0c:d9:ea:15:85:88:18:72:
                    fa:8d:f7:0b:43:b8:0b:bd:93:c2:aa:2e:64:a9:0e:
                    cd:ed:82:fe:47:52:04:ba:87:cf:54:04:b6:f5:9a:
                    03:f7:6d:a0:23:43:9a:ef:9b:2b:fd:54:ae:94:97:
                    88:8e:c5:7f:07:d4:96:24:c2:14:5f:bf:5a:14:55:
                    da:06:02:18:8a:13:b6:e1:68:a1:40:9c:64:88:f6:
                    25:c0:2e:5a:1c:60:89:66:e3:42:ba:7a:29:bf:f4:
                    86:49:76:36:6c:3d:12:d9:45:66:46:11:6f:e4:bc:
                    e9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:02:34:49:AE:B5:B0:1E:ED:92:E4:20:79:04:A3:77:DD:BC:D4:6E
            X509v3 Authority Key Identifier:
                keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e4:68:5b:3c:00:54:f5:db:ac:18:bf:86:de:36:a8:ef:23:
         71:37:f0:d0:c9:72:8e:8a:50:da:25:c1:1f:67:29:bd:86:24:
         db:92:af:a0:67:63:09:f8:c4:84:1b:5b:09:71:69:43:e7:26:
         b1:bf:23:dc:32:d3:f7:c6:6a:d0:e9:34:08:1d:85:0f:6a:3a:
         a2:24:87:08:3d:78:a0:2f:ff:26:db:3f:f2:4d:8d:9f:cf:93:
         e6:6d:71:c2:47:5b:78:6e:fa:a7:c1:d3:4a:81:42:ac:70:36:
         6c:fd:80:45:df:b4:25:9e:cb:9a:85:2c:e6:68:84:c0:ff:7c:
         22:cb:fb:79:f5:82:86:63:d8:69:86:f9:81:be:9e:90:55:d2:
         db:dc:98:34:2d:55:28:22:0f:90:6b:e8:bf:20:17:45:c1:ed:
         de:9b:7c:e6:aa:d5:9c:60:40:de:fb:ee:36:b4:44:57:a4:f2:
         1f:30:f6:79:f6:dd:2b:61:4a:a8:5b:c7:ce:6e:7c:7e:bd:8c:
         1e:ea:6d:f6:65:5e:93:c0:20:55:ab:bd:2a:f5:f6:9f:d3:71:
         dd:b5:00:4a:2c:94:85:5a:45:34:17:1e:74:27:68:77:05:0f:
         cf:ae:e1:93:1b:fe:65:fb:38:97:f0:31:36:aa:36:cf:a8:ba:
         a7:3f:27:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:42:31 2026 by rpki-client