Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft
File:                     702B79B445330AC21D237308277A4472598CE771.mft (raw, json)
Hash identifier:          QcWWc2uZIUSFvNVsq6IFT2AzPyhPrm+3PL0FaOVFHmI=
Subject key identifier:   75:04:9C:00:F0:2C:B9:94:E8:FE:FC:0A:39:F2:3E:E9:A5:E8:98:C3
Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71
Certificate issuer:       /CN=702B79B445330AC21D237308277A4472598CE771
Certificate serial:       4A9988ADFD3BA8883F93CD38BCE62BA649ED6159
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft
Manifest number:          0155
Signing time:             Fri 17 Apr 2026 06:35:50 +0000
Manifest this update:     Fri 17 Apr 2026 06:30:50 +0000
Manifest next update:     Sat 18 Apr 2026 07:38:50 +0000
Files and hashes:         1: 326131343a373538333a663730323a3a2f34382d3438203d3e20323134393535.roa (hash: j1h3rUtpYcXTQ9tg2+zKR1MIHOPPCpnwfhKyK3a6mSc=)
                          2: 326131343a373538333a663730623a3a2f34382d3438203d3e20323134393535.roa (hash: kLF1pGobCPtSBqVgUGHgu1by1e7kkegKpHMRpd10cN0=)
                          3: 326131343a373538333a663730393a3a2f34382d3438203d3e20323134393535.roa (hash: ody+MZu+p9r7722qUv+nib+WdzL08bt7JIhdIl0nBOM=)
                          4: 702B79B445330AC21D237308277A4472598CE771.crl (hash: 0kxqcMJv+oZDSzSSPC4oUes22v9iREiscHmp4nK2SHg=)
                          5: 326131343a373538333a663730313a3a2f34382d3438203d3e20323134393535.roa (hash: RzicPZXer6PLdeFy+vOsancgSNcjrm95+RPOXY7LoDc=)
                          6: 326131343a373538333a663730613a3a2f34382d3438203d3e20323134393535.roa (hash: KrncfgwV2JNmUMMX9XTAiUcGcVNG82mQHu5/P0lF/YQ=)
                          7: 326131343a373538303a666666613a3a2f34382d3438203d3e20323134393535.roa (hash: h/rRMvyqafFU+yTlCYjO1aoLzPvMYTq8Atefyqn1aw8=)
                          8: 326131343a373538333a663730333a3a2f34382d3438203d3e20323134393535.roa (hash: 9+boFqIS6keyE5RNh9z/i3/Vy3fO+EE8pDJc8uN4NyQ=)
                          9: 326131343a373538333a663730353a3a2f34382d3438203d3e20323134393535.roa (hash: v1ff3/5opCg79B8vnRLLf35N5RlDFleXR6jWqIzcy+A=)
                          10: 326131343a373538333a663730373a3a2f34382d3438203d3e20323134393535.roa (hash: KKLY1zCTXfmGMrjDFuT7b/5dqeecgqHT0wX+vU1j/NU=)
                          11: 326131343a373538333a663730363a3a2f34382d3438203d3e20323134393535.roa (hash: HF0IXoiIoV1vsEb3Y7UE6hceXgn4rnvPt86H7Wi7oFU=)
                          12: 326131343a373538333a663730633a3a2f34382d3438203d3e20323134393535.roa (hash: MCTGvJAm8U3NtPMr0TfqstCKnf65Svz4B5aqt1Vg4GE=)
                          13: 326131343a373538333a663730343a3a2f34382d3438203d3e20323134393535.roa (hash: GR7y7aRgVAUP5lUmI8IZDhrv8mAyuuXgZxhshW1ruYs=)
                          14: 326131343a373538333a663734343a3a2f34382d3438203d3e20323134393535.roa (hash: 2S+JbymcjIynwfVZAKfR00rXladCcxDgshwKEZR1YsA=)
                          15: 326131343a373538333a663734333a3a2f34382d3438203d3e20323134393535.roa (hash: F//u8b8URxPoSW5tKZ7gI7LWdU+B7yQQrxeBR/nXITQ=)
                          16: 326131343a373538333a663730383a3a2f34382d3438203d3e20323134393535.roa (hash: s15NOBRzlJhT8Ilr0QxZxBoPvIfuNlcjTL4p1JyK0Rg=)
                          17: 326131343a373538333a663736343a3a2f34382d3438203d3e20323134393535.roa (hash: zM36/OphB/KbTgVAZhJZfKncuog5pc9Z90qFovwCspo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:38:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:99:88:ad:fd:3b:a8:88:3f:93:cd:38:bc:e6:2b:a6:49:ed:61:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=702B79B445330AC21D237308277A4472598CE771
        Validity
            Not Before: Apr 17 06:30:50 2026 GMT
            Not After : Apr 18 07:38:50 2026 GMT
        Subject: CN=75049C00F02CB994E8FEFC0A39F23EE9A5E898C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a9:62:77:23:9b:74:a0:9f:67:2c:9b:1b:c1:
                    62:2a:74:f6:41:7b:d4:dd:5a:9c:15:93:c5:3b:35:
                    45:83:ba:2b:d7:ae:40:3c:97:f1:b7:d0:99:fc:ff:
                    6a:7e:6f:48:99:07:48:1c:94:1f:0b:72:44:ae:03:
                    ae:03:c5:2d:47:7c:89:1c:a2:83:6d:4c:6a:05:7c:
                    4d:9a:d4:36:30:39:69:1d:d7:e1:8b:92:a5:a5:7e:
                    d2:5b:f3:a9:59:da:84:74:7c:f3:bb:01:90:51:c5:
                    b5:62:5d:d6:81:29:63:cc:0d:94:bc:39:b3:18:68:
                    03:ed:0a:d7:d3:fa:d4:a2:b2:d0:c3:5b:73:67:d5:
                    74:9b:3c:c5:51:90:70:16:05:0c:55:08:c7:7c:67:
                    4c:ab:a0:35:38:d8:c4:3a:23:1e:2b:90:66:d5:a8:
                    fd:5f:27:c7:c4:58:8d:29:b6:eb:49:18:94:2e:5e:
                    de:e6:13:d0:2b:41:f6:37:18:da:07:53:8b:62:59:
                    c2:91:16:c0:f7:1a:b6:a3:f4:d8:b3:19:57:67:a3:
                    ce:ca:e4:db:9b:30:4a:11:24:e4:8c:87:5f:07:31:
                    ec:60:ee:35:24:5a:d6:62:51:48:6c:73:c3:aa:ac:
                    bc:d1:b6:da:cd:9b:b8:ca:54:37:86:dc:90:dc:86:
                    1a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:04:9C:00:F0:2C:B9:94:E8:FE:FC:0A:39:F2:3E:E9:A5:E8:98:C3
            X509v3 Authority Key Identifier:
                keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:61:31:0f:44:f5:ed:37:ac:74:65:d0:89:a2:da:55:87:02:
         9e:41:d4:b3:71:3a:17:1b:e2:53:26:d1:3a:5e:47:17:b2:81:
         51:5f:32:f1:e1:89:9c:39:be:c0:a5:43:a8:9a:44:e5:6d:2f:
         85:e4:9a:a2:c3:1a:91:5c:74:bf:59:65:6e:ff:b3:db:61:23:
         a9:c3:ef:8f:8e:25:66:40:08:b9:04:ff:93:d5:a3:e4:37:54:
         f0:63:7e:a8:e0:98:09:b7:53:87:99:ad:c5:df:6f:87:e9:74:
         9a:d2:a0:d4:ab:ec:9d:b0:44:09:36:92:30:29:73:9e:4e:38:
         81:73:00:89:79:f7:ad:42:16:13:60:d3:e8:87:90:5f:fe:c9:
         24:b8:ac:6d:1c:74:d5:dd:e6:1e:36:d9:7c:3c:19:02:ba:4e:
         fa:81:fd:7c:d6:4c:16:dc:02:7a:6d:cf:78:cf:e5:1e:6c:ff:
         43:be:69:cc:cd:bd:0b:a0:97:e6:42:3d:f9:72:ca:2d:8e:31:
         22:81:1d:9e:64:1b:ff:be:c0:8b:d4:71:fa:8d:fa:a1:e3:a0:
         c9:73:2e:82:1c:d8:55:47:f1:d1:e1:55:3c:54:bd:d1:7f:ef:
         c2:dd:d4:83:72:14:86:89:5e:84:f4:a2:81:a1:3d:a7:d0:b6:
         7d:d3:17:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:20:02 2026 by rpki-client