Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
File:                     1F84A2481D280DE0A103598276DB0C954193C755.mft (raw, json)
Hash identifier:          qonTX7cPd6iaoCiYoRcFzkIAyy7bSVj01YOKh/5Ee84=
Subject key identifier:   CA:CC:B1:0F:D2:0C:09:E3:84:35:CB:55:41:DE:6C:41:3F:8E:71:A0
Authority key identifier: 1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55
Certificate issuer:       /CN=1f84a2481d280de0a103598276db0c954193c755
Certificate serial:       6DEEBBCAD3FD5B597EB61281024EDD8A60436DCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
Manifest number:          73
Signing time:             Sat 18 Apr 2026 17:39:54 +0000
Manifest this update:     Sat 18 Apr 2026 17:34:54 +0000
Manifest next update:     Sun 19 Apr 2026 18:36:54 +0000
Files and hashes:         1: 3139332e32342e302e302f32342d3234203d3e203530333835.roa (hash: ZF+yUQjQ8mafUSh2s0Gf6Vv2FDEQSv7tGMKU59lfZ0Y=)
                          2: 3139332e32342e312e302f32342d3234203d3e20323134303235.roa (hash: jKZGDyyKq3h02DI7Wpr6sZVdYeHyFe7w8PzFXBoOgS0=)
                          3: 1F84A2481D280DE0A103598276DB0C954193C755.crl (hash: wkWPzaAEXue5oB2x1tV45nMhBp7p1IUMOkKyP7Wfp0A=)
                          4: 3139332e32342e342e302f32342d3234203d3e20323134303235.roa (hash: +v1QY3ywM3Na8NpQTw4Tmpm5P4ulC0E6x+1GOZGs6FI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 18:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ee:bb:ca:d3:fd:5b:59:7e:b6:12:81:02:4e:dd:8a:60:43:6d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f84a2481d280de0a103598276db0c954193c755
        Validity
            Not Before: Apr 18 17:34:54 2026 GMT
            Not After : Apr 19 18:36:54 2026 GMT
        Subject: CN=CACCB10FD20C09E38435CB5541DE6C413F8E71A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:2e:78:22:96:79:cf:a5:7e:d5:8e:84:62:
                    bc:4d:d3:5f:14:e4:3d:e4:36:c2:00:02:c4:e3:92:
                    cf:ae:25:a7:c8:33:cd:7b:27:f8:bc:60:fc:7d:8b:
                    12:c8:57:7c:b9:48:35:31:78:15:65:0f:b0:0a:3d:
                    22:e6:a1:61:71:55:b4:8b:74:a3:05:1f:80:36:ae:
                    9d:b3:75:5b:79:26:f1:8d:bd:42:cf:17:57:9d:c9:
                    11:50:04:9c:9b:fc:36:88:3b:b2:09:99:ef:66:59:
                    07:67:74:a6:c1:7a:34:41:5c:c6:50:fb:0f:d9:ed:
                    c3:30:12:4d:56:41:ef:5e:45:a3:1a:f4:c7:77:3f:
                    b4:f8:89:a0:c5:3a:a6:aa:3b:19:8c:b8:2a:c2:b5:
                    39:9e:04:e3:06:bb:a3:3d:a0:bb:c2:c5:72:ff:9b:
                    bc:ce:9b:bd:26:20:9a:f9:f3:29:1a:08:f2:92:50:
                    31:1c:42:4a:6d:c7:c1:29:99:98:6e:47:93:5e:1d:
                    6a:a2:2f:36:c2:78:1a:30:98:2d:6e:01:9d:ff:15:
                    b9:f6:80:d6:0d:1f:b8:e3:2c:bc:a3:04:ef:64:47:
                    39:d0:11:dc:67:ff:0e:90:af:2a:ae:a5:f3:d4:fe:
                    49:4b:24:8f:90:ad:2f:8f:f0:25:3e:8c:07:ac:92:
                    ab:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CC:B1:0F:D2:0C:09:E3:84:35:CB:55:41:DE:6C:41:3F:8E:71:A0
            X509v3 Authority Key Identifier:
                keyid:1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:0d:0d:e3:1f:3c:40:a3:b8:35:b1:26:6c:b6:93:ee:d3:04:
         e0:51:02:d3:87:c3:61:36:e8:8c:23:f2:c1:24:ca:b8:f4:ec:
         86:c2:47:22:55:25:1f:02:a3:ee:b1:d2:a4:8f:ac:b2:68:3c:
         72:fb:4d:6d:06:68:9c:bb:b0:2a:7b:5a:18:26:81:83:94:23:
         9f:2f:69:89:3d:b5:b1:69:a0:7c:a7:8c:19:13:72:4e:9c:3e:
         21:d6:77:a7:20:f3:c4:5b:4c:1e:6c:9a:67:2b:f7:38:11:6c:
         a2:ba:db:30:b8:a4:2e:df:bb:6c:6c:62:a7:60:5b:57:8b:13:
         a8:71:a6:a4:1b:e2:f3:7e:83:be:4f:ec:34:60:e9:16:41:40:
         f7:1d:b1:80:5c:11:fe:32:c7:4c:15:94:64:68:52:5c:1d:52:
         b1:4a:01:75:b7:f8:bc:ee:2a:77:5e:55:ef:e9:0a:6e:c7:05:
         c9:1f:be:03:79:9f:3e:27:c2:32:27:18:2c:e5:d6:1a:12:f8:
         b0:59:56:1d:c7:1e:1c:24:35:8f:42:2d:6e:83:7d:70:3e:7d:
         9c:80:83:3c:1e:59:cb:7c:d0:8a:88:be:3d:dd:d9:4b:57:71:
         2e:b5:28:34:3e:5d:5a:77:ab:21:01:da:eb:35:9a:5e:5f:cd:
         53:ed:66:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:57:39 2026 by rpki-client