Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
File:                     8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json)
Hash identifier:          XtbTpMGoh4R1JvCaPPHnzVTxmM7CAH8UnBbfNpzoup0=
Subject key identifier:   B8:1C:38:04:8F:4D:62:9C:E0:E4:6F:BA:70:02:84:41:92:F9:C5:94
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Certificate issuer:       /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial:       162BAE1964338FAFE19829401ED16882C71134AE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
Manifest number:          03FE
Signing time:             Tue 28 Jul 2026 00:42:17 +0000
Manifest this update:     Tue 28 Jul 2026 00:37:17 +0000
Manifest next update:     Wed 29 Jul 2026 03:13:17 +0000
Files and hashes:         1: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: JCFWJgEKOIfNC/UVmwFEJVNgIuAfElA5+DwW/Ff9XGw=)
                          2: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 6pSA0kSz3996g9/BXeNESbR6lV0s0HcQ+D2Slss3z5w=)
                          3: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: 8xEoc2WbgF3aR/A4BmGA/5swJlN4eULU8RI9MBQf5A8=)
                          4: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: fudCQ5HvpSkAFWaORqCftP85E1ijbMZ/SJYbFT8n65o=)
                          5: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: a74YsL1qU7MZs6Id2KBnat9Mk42FfInZrWbOj9uOpkE=)
                          6: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: OJXw4bailhln27dAWvZZO7aSgL/bQWfg+Oqf5sYF+sE=)
                          7: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: W5Heh9gse8mKUAV/4KyRLY8JwjKj+jz/mhW/8Nexm6w=)
                          8: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: 7mp0zmnlMvREYQITFuGqaUnQo4881uWLywgG1Fg4GUU=)
                          9: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: 9VIFUmaELJ+SuXK7+C+ONAUKoDB5ufOLiduhS88tcKE=)
                          10: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: Yud6VyEfzu6bUn3ZGGTJfpmlFiOU2yKLbFt5IH7TKH4=)
                          11: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 2UDjxG4RlvjPmviPQqGqAVVrCPWdscmfmRM0j7DODko=)
                          12: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: MBbahVlOUY0BFTONMtnmzy3HTHvtjPISBdqoM0Cyb4U=)
                          13: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: CSBs9yO0/hlVbn5mDcS+x9322JHxcsWH4LodiliIjxE=)
                          14: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: iqN0K0kqjE2jNtYdeLoflK5x6Z7cJoriz0IZPsDEpKs=)
                          15: 326131343a373538313a343835363a3a2f34382d3438203d3e20313530323439.roa (hash: +BTOyGnB3/SY/p8Ckxmoo0odwD52ixx8ttyy1kP23KM=)
                          16: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (hash: fNKVMMPiiUgfbMZ2Oos538UVQ2g0QakPLvgkCLIakls=)
                          17: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: C+V4kSeLDw3sO8d40Phfc7PlZ5G8vdBgrmtSr5gkXYw=)
                          18: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: wlujEilvSGoE2xmgZ9r1cOQVVwj+z/fdPDzPxBXeMcU=)
                          19: 326131343a373538313a343835653a3a2f34382d3438203d3e20323134363737.roa (hash: iHR6gaBLhEeuJStOmjFzEe4Moo+lPwxxC1xTUcqx6g4=)
                          20: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: GiP4GD8ggd65aZhgm+mIHhBgcxctP4oM9yKA+INTEK4=)
                          21: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: TeM7Pek2amM1UgjzSeE/qaGScbmirVVYpr/gbbLkRM4=)
                          22: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: iVSqmJC3EENf/XVlR6YpWn7MgLMOJzCIs/ETJKcPCZ0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 03:13:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2b:ae:19:64:33:8f:af:e1:98:29:40:1e:d1:68:82:c7:11:34:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
        Validity
            Not Before: Jul 28 00:37:17 2026 GMT
            Not After : Jul 29 03:13:17 2026 GMT
        Subject: CN=B81C38048F4D629CE0E46FBA7002844192F9C594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:12:1c:66:42:2d:3a:32:f1:86:30:35:8a:aa:
                    a8:50:b4:f6:cb:39:cc:e9:94:51:3a:96:78:31:77:
                    af:18:bb:2d:c4:52:ca:87:41:31:29:a4:fd:5a:bb:
                    bb:25:73:0b:42:a9:39:92:c1:3c:5e:74:5a:b8:e3:
                    85:14:6e:0e:29:ef:d3:f2:2e:38:ef:af:d3:8e:c3:
                    92:38:78:0c:ab:2f:61:d8:5a:35:24:ae:00:07:ca:
                    44:9e:f9:dc:fd:50:a5:26:12:58:da:34:62:6e:08:
                    7c:75:f0:1e:b0:2f:85:01:8d:f2:25:41:88:5f:cb:
                    77:d7:e3:e9:39:12:3d:4b:cc:72:fd:64:e8:98:83:
                    f1:eb:60:5b:95:16:ea:81:23:e1:a7:0e:a6:54:b7:
                    72:0e:88:17:82:97:0a:a2:1f:64:39:1a:c4:42:24:
                    14:9f:ed:13:42:bc:bb:26:c7:2c:86:39:25:87:de:
                    7e:6b:8d:80:2d:df:cf:35:f5:a6:e3:34:9d:fa:dc:
                    2f:09:ae:66:c2:5c:5d:4d:67:6d:fd:ec:ca:99:04:
                    5d:47:3e:7f:24:f5:30:00:28:7a:81:68:46:58:68:
                    1c:dd:e2:51:f2:da:28:fe:31:b8:9c:48:1f:ae:3a:
                    c4:d2:c5:c7:ad:a9:df:a5:26:02:7e:5f:34:ba:25:
                    7e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1C:38:04:8F:4D:62:9C:E0:E4:6F:BA:70:02:84:41:92:F9:C5:94
            X509v3 Authority Key Identifier:
                keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:eb:54:a6:64:22:8a:c1:22:7b:df:e8:8a:ac:ae:47:69:79:
         0a:4d:46:54:61:61:b4:e1:b9:bf:cc:6f:13:4f:d1:62:ac:22:
         2e:3f:05:1f:3d:1a:5f:18:95:49:ef:90:d6:5c:ee:91:f0:f7:
         19:ec:38:f7:99:00:d7:7e:6c:dc:3a:2d:fb:88:d7:a2:d0:12:
         4c:03:43:16:ba:73:7c:55:b8:03:47:9a:89:74:08:cf:7f:eb:
         02:94:a2:9e:05:b5:c1:da:97:16:b5:b8:80:f9:1a:6d:11:c3:
         90:0f:df:0a:fc:71:07:92:c7:ef:a6:17:d8:d9:8a:13:72:0e:
         d3:30:93:35:04:25:13:87:36:e3:84:a5:51:cd:ed:99:99:7c:
         7f:74:66:88:71:37:bf:8d:2f:78:11:e2:40:fd:53:12:35:6e:
         d9:75:ea:3a:66:a7:06:92:24:bd:f5:03:97:57:51:50:e2:8b:
         62:a6:b3:3c:cf:5c:8d:dc:0e:2d:9f:75:8d:44:ef:75:b2:78:
         d6:2d:91:e4:c9:8a:bc:7d:2f:54:26:a5:97:3d:cc:b2:cc:46:
         20:0e:97:da:d4:13:b7:b0:da:35:c5:df:7c:76:d1:bc:58:aa:
         88:94:bc:0b:2c:f8:0c:c1:b9:45:70:30:81:d2:f1:49:de:8a:
         72:48:f0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:19:02 2026 by rpki-client