Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
File:                     B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft (raw, json)
Hash identifier:          GIExjh8BAvVq0PFmsslWCPt/yaokJvXvPtIr3S4U70Y=
Subject key identifier:   6E:C8:86:43:8B:F4:A6:97:01:AB:1B:2C:76:63:7C:8C:D6:F3:BC:04
Authority key identifier: B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C
Certificate issuer:       /CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C
Certificate serial:       1220F28FF0BA762F28C829879DBC556D9CCA615D
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
Manifest number:          0222
Signing time:             Sun 20 Sep 2026 14:32:00 +0000
Manifest this update:     Sun 20 Sep 2026 14:27:00 +0000
Manifest next update:     Mon 21 Sep 2026 15:04:00 +0000
Files and hashes:         1: 326130623a396534303a3a2f33312d3332203d3e20323134343531.roa (hash: Kwvgoy8rYmD0xpV60BQdFB5n1PMXF0SutBXK7a1aRaY=)
                          2: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl (hash: NnnAnBuS4i71bXjJUIVnlqLJbsZREQI7nFIPeYgIRUA=)
                          3: 326130623a396534373a666666663a3a2f34382d3438203d3e20323132333936.roa (hash: e3h2ZTUNZXjv98ArysnYSYWhaEkUBmjS0VqOuj8+VAI=)
                          4: 326130623a396534323a3a2f34342d3434203d3e20323134343531.roa (hash: Zck6J2syHDIk/NrGxsNjciGhnmYGMCo7e0kQNyx+lQM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:20:f2:8f:f0:ba:76:2f:28:c8:29:87:9d:bc:55:6d:9c:ca:61:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C
        Validity
            Not Before: Sep 20 14:27:00 2026 GMT
            Not After : Sep 21 15:04:00 2026 GMT
        Subject: CN=6EC886438BF4A69701AB1B2C76637C8CD6F3BC04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:41:98:a8:5b:8b:94:b8:bb:8b:ef:4f:c7:3d:
                    70:e2:57:74:d5:6e:d6:6d:4e:a3:b5:ce:59:5d:58:
                    58:2f:81:e1:6f:97:ba:4a:bb:5f:59:e5:85:4e:95:
                    6f:f5:46:f3:16:02:74:78:d1:67:15:19:ac:e4:89:
                    17:49:ba:ac:71:ca:e6:4a:21:00:50:04:5f:d8:23:
                    e1:1f:a3:4e:77:f7:48:a5:79:6e:27:44:bf:d4:d6:
                    20:8c:eb:9f:80:fe:1b:bd:af:78:75:70:2a:a2:ef:
                    bf:4c:87:58:17:30:c2:2d:53:56:4e:d7:45:75:e2:
                    82:a2:06:db:9e:77:08:15:da:67:40:27:9b:bd:21:
                    0c:49:fc:da:4e:3b:8a:f7:ed:6c:92:93:fc:5d:d2:
                    8c:2d:aa:a4:d6:eb:43:ae:40:0c:e8:dc:5b:ec:15:
                    55:8b:b9:ae:a0:9b:73:e6:4c:06:d8:e6:ca:d6:00:
                    08:9a:90:a8:38:2a:e6:f6:db:c1:83:ee:94:ab:87:
                    30:26:3e:0c:aa:0a:50:03:e5:5d:30:fb:4d:21:36:
                    ed:71:a5:0d:55:83:2a:d9:b8:11:54:9a:be:c3:a9:
                    88:95:b6:86:af:24:15:3d:75:03:f3:b0:58:af:dd:
                    6e:3e:04:a3:f9:c5:f1:3b:9e:80:be:ea:c6:90:4c:
                    e7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C8:86:43:8B:F4:A6:97:01:AB:1B:2C:76:63:7C:8C:D6:F3:BC:04
            X509v3 Authority Key Identifier:
                keyid:B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:c5:a3:09:84:af:78:c7:d7:7a:7f:61:bd:1c:aa:20:ac:fd:
         a6:db:50:9a:b4:4a:da:8c:fc:0c:30:6d:14:f9:fd:e4:fe:a2:
         90:0b:86:7d:f3:93:57:68:8f:ca:f2:a6:4a:21:f7:4e:af:e9:
         ee:4d:76:c7:74:7e:23:16:b9:4e:f2:3e:7d:77:dd:f0:4d:50:
         e3:7a:72:df:e9:ad:23:2d:2e:22:cd:db:b4:54:29:63:59:b8:
         c7:bc:f9:ac:a9:90:9d:ad:d6:84:d1:db:d6:b7:ec:49:dd:8d:
         29:b8:d4:c4:ab:92:8e:db:d9:a7:ba:17:18:6e:88:29:f3:eb:
         d9:f2:88:99:21:10:ca:9f:46:e1:45:c4:17:29:a6:18:91:b3:
         86:77:33:4a:7c:86:f6:5e:72:2f:08:9c:65:f9:2f:31:c3:89:
         4e:e6:96:46:e3:e3:f6:86:f9:0e:67:39:af:e1:42:d2:75:75:
         1e:bc:34:f4:1c:6c:30:cf:b4:ca:66:71:2f:ef:27:02:23:df:
         80:8e:0b:01:a9:42:ad:6b:61:94:78:47:a6:b6:60:b8:5b:1d:
         a7:bb:88:8a:62:ce:b9:67:c8:7f:a7:58:98:5e:ce:0f:8e:33:
         32:78:8c:0d:37:ee:2a:d0:cf:5c:c6:44:78:7a:f8:48:74:fb:
         a2:ac:71:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:49:52 2026 by rpki-client