Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft
File:                     B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft (raw, json)
Hash identifier:          une/fmC8R0b6PoGVUVW1kQQ5LO9H8jKc8cV3bVWfpdo=
Subject key identifier:   7E:AA:DB:AF:A1:3A:48:E9:03:48:A5:26:B1:EE:5E:B5:27:55:BA:74
Authority key identifier: B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2
Certificate issuer:       /CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2
Certificate serial:       51C7C646E7262C517D52F2F98588F695492F8F7D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft
Manifest number:          B7
Signing time:             Fri 17 Apr 2026 12:05:57 +0000
Manifest this update:     Fri 17 Apr 2026 12:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 15:36:57 +0000
Files and hashes:         1: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: a3vn+r3Xd1ZweP+VfXPkybQsxnlpFwKhPGkq1Aja1ws=)
                          2: 326131343a373538313a393966333a3a2f34382d3438203d3e20323134333434.roa (hash: J6emFQdlETu7H0STfMe+srRexcrGlCk0y+BgTI9eJls=)
                          3: 326131343a373538313a393930303a3a2f34382d3438203d3e20323134333434.roa (hash: kGAxqipewjTBEOV3BSA8JRTiGthe14AWzEgdY5VhMKs=)
                          4: 326131343a373538313a393966353a3a2f34382d3438203d3e20323134333434.roa (hash: HcA7KRdnBWzY7hEKVhGFuUdyfwcYU7b6FuC/duUcRFU=)
                          5: 326131343a373538313a393938383a3a2f34382d3438203d3e20323134333434.roa (hash: dhPIT0Huo/8bMcCCD9CENzV8Oc7GRGv2lkOyyJSz4lY=)
                          6: 326131343a373538313a393966313a3a2f34382d3438203d3e20323134333434.roa (hash: uczfpozVS217kWRATgpEenuL/t1nbJiCmQMwvAEpV8o=)
                          7: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (hash: JSmiAu7ed33+J2eg2ZQ/ocsiovRypTOUdvXbpKPSbI8=)
                          8: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (hash: WvJ+nlXPCuTRZnP7e6XF03QrjAocsMrvYbQ3ZQ/eNBY=)
                          9: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: TyFBqgR7vYeMd4/BuVueO5zwkcDAg7G5uk0/d+OPki0=)
                          10: 326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa (hash: spTh8DstCVqtG/UUp5lMqUt7m9/HXGTEzcFQEa7vRbE=)
                          11: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: odpWIoGfrHyjA/EqLrY/tj6kKgasd1C7YcR9JizUkBA=)
                          12: B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl (hash: HltaDPgBDE9XILfm0HcIxTE2fz64531kbwQAD+ZNnPU=)
                          13: 326131343a373538313a393966323a3a2f34382d3438203d3e20323134333434.roa (hash: Oe9b7D8DtLCyHfTEelgxQzMm3GoJ4G9/0gwwATaJfro=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c7:c6:46:e7:26:2c:51:7d:52:f2:f9:85:88:f6:95:49:2f:8f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2
        Validity
            Not Before: Apr 17 12:00:57 2026 GMT
            Not After : Apr 18 15:36:57 2026 GMT
        Subject: CN=7EAADBAFA13A48E90348A526B1EE5EB52755BA74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:76:57:1a:8d:09:be:94:9d:3e:c0:ef:31:c7:
                    80:25:6c:fe:b1:71:c4:52:29:59:ff:a2:40:f0:06:
                    12:7e:c9:d2:ea:c2:7c:01:26:5a:66:f7:1e:5d:6c:
                    d3:49:c7:3a:47:88:c4:d1:42:29:e2:05:b7:1c:b1:
                    21:d0:1d:06:ef:38:31:1e:64:14:75:a2:e9:f0:9b:
                    9b:95:9c:7e:e6:f3:9c:de:b2:88:ba:8c:c8:3e:06:
                    49:89:52:a0:ed:75:5a:42:45:24:e1:81:b9:83:5e:
                    6d:79:ca:dd:24:8c:b6:87:dd:74:a7:70:07:b5:7e:
                    52:e8:5a:19:6b:ec:29:cf:f9:9e:6c:b7:84:ba:63:
                    c4:1a:e9:08:9d:f3:8e:33:dc:bb:37:b1:13:e0:67:
                    68:1d:50:90:94:dd:9e:4c:be:75:ea:e9:43:91:2d:
                    d6:58:4d:25:de:49:cd:e0:62:69:3e:f0:1d:95:e2:
                    9e:89:fb:22:e8:1e:f7:bb:e1:22:9a:f4:23:2b:9f:
                    f3:9a:61:66:4b:35:86:3c:41:e3:43:8a:ef:ba:75:
                    20:fd:6b:2d:6a:65:e8:b3:65:e5:59:20:7f:3e:c8:
                    01:bb:0c:30:1c:e6:52:e0:7e:e9:7d:58:08:8e:10:
                    80:f5:34:b2:bc:71:1f:4f:cf:ef:96:a1:25:91:ee:
                    90:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AA:DB:AF:A1:3A:48:E9:03:48:A5:26:B1:EE:5E:B5:27:55:BA:74
            X509v3 Authority Key Identifier:
                keyid:B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b6:4c:7f:a9:bb:af:7c:d3:63:7b:c4:97:84:48:79:7f:d9:
         f8:12:bb:89:80:01:a3:dc:2d:7b:1c:83:71:77:80:39:25:e1:
         59:a7:db:cf:72:45:aa:4b:15:b3:6b:42:d2:aa:de:77:c2:38:
         ed:3e:63:6b:53:b4:7f:0e:c5:25:2e:f8:85:17:4a:c3:07:d8:
         ff:a8:cf:70:96:2e:38:2f:41:dd:fe:83:bb:01:34:c8:6d:1d:
         6f:27:4a:0d:6a:6d:a0:78:c1:52:b3:31:aa:a8:64:2d:d7:49:
         ae:8a:d7:05:00:de:fd:99:b4:af:70:12:61:24:41:5d:06:39:
         79:65:b7:c9:10:40:7b:68:cc:f1:57:38:6e:6d:b7:c5:b4:82:
         dc:b4:16:8b:5e:ed:12:4a:51:21:90:39:28:0c:8e:1a:db:90:
         1b:74:1e:50:5e:80:9e:d6:3f:3a:d7:5d:ab:e3:d3:f7:bb:86:
         50:c1:e1:a7:de:60:ab:5d:ca:e2:c1:17:b4:c5:18:01:94:ac:
         d9:e4:a7:2b:d4:d9:44:87:ee:7e:e2:8f:e8:9b:d7:03:a8:28:
         02:84:60:6a:f4:39:e1:23:20:9c:23:6e:0a:03:ce:fc:1c:71:
         38:0c:33:84:17:f0:14:9a:c0:7b:86:c7:60:d5:a1:8f:6b:e0:
         74:fc:ec:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:34:58 2026 by rpki-client