Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
File:                     1F84A2481D280DE0A103598276DB0C954193C755.mft (raw, json)
Hash identifier:          v96PjXo/+ET1DOJ1W046Hu2zCiwUfJmbTi2IsfAQX2U=
Subject key identifier:   9A:73:3A:A9:C2:FC:FB:D5:99:59:BA:9E:40:C4:1A:F5:10:73:9A:D8
Authority key identifier: 1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55
Certificate issuer:       /CN=1f84a2481d280de0a103598276db0c954193c755
Certificate serial:       0F341DD7C6D4E2976410550648A545AD2151565C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
Manifest number:          014A
Signing time:             Tue 22 Sep 2026 01:15:47 +0000
Manifest this update:     Tue 22 Sep 2026 01:10:47 +0000
Manifest next update:     Wed 23 Sep 2026 03:15:47 +0000
Files and hashes:         1: 1F84A2481D280DE0A103598276DB0C954193C755.crl (hash: ENKZo+KwEjrynN+JhhSYqzlBahPGDOZF2HuYGMaB4Vk=)
                          2: 3139332e32342e302e302f32342d3234203d3e203530333835.roa (hash: ZF+yUQjQ8mafUSh2s0Gf6Vv2FDEQSv7tGMKU59lfZ0Y=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 03:15:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:34:1d:d7:c6:d4:e2:97:64:10:55:06:48:a5:45:ad:21:51:56:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f84a2481d280de0a103598276db0c954193c755
        Validity
            Not Before: Sep 22 01:10:47 2026 GMT
            Not After : Sep 23 03:15:47 2026 GMT
        Subject: CN=9A733AA9C2FCFBD59959BA9E40C41AF510739AD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:06:69:df:33:89:0c:35:1f:8e:40:13:de:ba:
                    ed:c4:65:5e:8a:2b:5e:23:3f:e3:cc:04:da:ca:56:
                    d2:3c:96:22:dd:16:f6:bf:15:8d:83:e7:e2:7c:89:
                    9e:55:d7:5f:81:9b:9a:34:08:83:ea:00:0f:6d:82:
                    38:e7:38:4d:76:70:f5:09:95:d2:6f:b6:71:a1:06:
                    3b:22:8b:f6:e1:53:95:e3:c4:74:5b:02:9a:f2:9f:
                    44:0c:ac:bb:e3:d7:16:9b:e4:6c:40:9b:d1:7d:33:
                    25:12:af:d9:a2:85:f3:3f:53:93:54:c7:6c:b4:be:
                    52:d9:69:21:fe:0d:4f:5d:c8:2e:c0:2f:24:27:e7:
                    37:58:8b:06:c4:3c:11:1f:31:8e:ab:6f:59:9c:bb:
                    50:f9:95:c5:da:4f:62:f9:c2:4c:ab:9c:82:95:06:
                    46:3f:4f:29:4b:b9:fa:ba:3e:64:8f:99:a9:58:03:
                    2f:cb:29:8f:e3:8b:ab:f1:43:e2:b2:f1:3a:28:9a:
                    f8:7b:aa:d1:67:69:00:9a:a3:04:c1:6c:a7:fa:b0:
                    f9:fb:b2:50:41:a1:b5:42:29:ea:30:3d:83:fe:90:
                    74:9e:ed:44:ce:ed:19:a9:a7:4b:54:77:cd:17:77:
                    a4:a0:1b:a0:cc:e3:82:37:78:a3:2b:ac:f5:68:2d:
                    a9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:73:3A:A9:C2:FC:FB:D5:99:59:BA:9E:40:C4:1A:F5:10:73:9A:D8
            X509v3 Authority Key Identifier:
                keyid:1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:80:cf:d4:8b:cf:10:a6:d0:cd:6d:0f:44:11:5e:31:c8:15:
         d9:e3:16:d9:59:57:8f:b4:21:60:60:e4:07:60:ad:37:3f:23:
         68:fc:ed:63:14:30:55:2b:40:da:f7:e5:93:c2:1c:09:ca:15:
         f6:c2:55:75:85:e3:5e:ac:57:02:75:2b:20:34:e1:25:13:99:
         7a:7c:0b:31:f5:24:db:a7:6c:7c:e7:0c:6d:3d:bf:26:55:5e:
         8e:12:10:91:c3:97:10:2e:fc:1a:52:a0:71:67:49:a6:eb:56:
         aa:59:10:25:e7:8c:72:f9:88:31:36:1e:98:a3:95:e2:78:02:
         c8:7d:f3:e1:df:9f:de:5c:18:c6:f3:cc:f1:13:2f:39:37:b8:
         76:16:14:b2:92:33:3b:39:91:fd:41:5a:b6:c3:ba:fd:8c:ae:
         b2:e5:22:e4:d7:05:c6:ff:f8:78:2f:d8:34:1e:4a:28:b5:0c:
         2f:cb:95:c7:6f:0a:2c:38:20:72:1b:7f:2d:ce:65:20:fa:24:
         56:d5:c9:30:69:89:9f:1d:e6:4f:2d:47:c2:ff:4c:2b:e2:cf:
         f6:24:26:8d:37:8b:e0:4f:d6:36:56:c9:73:84:bc:9c:fd:b1:
         c5:7b:63:f6:f5:f9:3e:00:d7:f3:dd:29:77:f0:6e:d6:cc:53:
         14:54:f2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:55:46 2026 by rpki-client