Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
File:                     EF023FDC2BBA283513C6A587F907770B26EFF569.mft (raw, json)
Hash identifier:          jwQqhnqwviclESWctZQ0k6Jj+H7/ULGALgnrQjVHlus=
Subject key identifier:   2A:EE:EA:BB:64:14:AD:4E:BB:DF:86:25:77:1A:2F:6D:A8:45:EF:82
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Certificate issuer:       /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial:       5C4C60CE6F2EFB72145856861B24514BB7E9081F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
Manifest number:          22
Signing time:             Sun 11 Oct 2026 08:52:23 +0000
Manifest this update:     Sun 11 Oct 2026 08:47:23 +0000
Manifest next update:     Mon 12 Oct 2026 10:23:23 +0000
Files and hashes:         1: AS208905.roa (hash: WgnCwzYbuspQDAouOie2zLhpVS8ZrcTsc7par8P5kTI=)
                          2: AS51606.roa (hash: hp76icXk02fuzP/0pj/rqIBLDAekg+JO3Qy86MrcLvU=)
                          3: AS8203.roa (hash: P1Cw3250li/55dT8QU7EyF8oDQj3EJYjxYvBK/sx5vg=)
                          4: AS57666.roa (hash: eYbGXewDemTRoyNxoc/pjViPyhTBrhw09fdwK3scvDA=)
                          5: AS201073.roa (hash: vkXSOLMq1cayc8ewj6k6WcWglm+OZrFx6+7XCtJb2IA=)
                          6: AS207360.roa (hash: caBxOOKx4TjZ0oHpLZ9LQV8mSRLA/r3bPLww0Fiu/Nc=)
                          7: AS6810.roa (hash: wMrKR4Vi2tDigA9qtBX2pUOydf1rfv6IrQJjIXfsEww=)
                          8: AS212238.roa (hash: IvNkQXIvcQq9BHIGZ3vhZ5S725i3cMAIWbTItWFjaQc=)
                          9: EF023FDC2BBA283513C6A587F907770B26EFF569.crl (hash: Q42evelJalJglidsTEh2v2RCuTXbflYEf1c6ENb7Osg=)
                          10: AS22363.roa (hash: dU0H3HOqAFzvSS0oq+C/hDeUF9qszI3CRj95pOjjFuM=)
                          11: AS51407.roa (hash: /xydsMhEbhBPviuwb99XYq7DVmZK44NiKM3E8wnBw9M=)
                          12: AS214693.roa (hash: 6UqUPuDgaUuTYsMAe4pOqONSywbnVySoDB4ReuWkNrg=)
                          13: AS202940.roa (hash: 9JIXB3A0eiPVCclVGMdzokKMowFxo/aw+dwomc0iwN4=)
                          14: AS61102.roa (hash: 6ubl/6jtumndYPbDK/32BpzbW1NyO07UcJiucVmKd7g=)
                          15: EE62537B84730FEF19A4F83414308039BC848047.cer (hash: 37FbESbRxYYIldwtbAu1T9NIomzhG1zTKxBpfM0nRCI=)
                          16: AS13335.roa (hash: YX9YfQGt5z781gZMiTnmuivBnKEOnQcOw4ypfW5NDo8=)
                          17: AS44709.roa (hash: tStAszCGeUKc60DjC3oOa17w0RaO5thDPfKqUwipzQ0=)
                          18: AS202818.roa (hash: TuRGVf2ssT6NDeCFyxwERkEpnfnN2B7ejBK5TBSnBbo=)
                          19: AS8551.roa (hash: ErMNEtqtuj3wJYD6J4zBvjnuZed/4fah9G/YBXaMAKo=)
                          20: AS16158.roa (hash: Mr5d3LQZbmVb+HP+M+9JkRR1RgAwZDLpsDxYuu2ftrI=)
                          21: AS65024.roa (hash: 3dsdNli0vGKhHJRBaJd+SI6KfmyM5zQG0X9xhEdPLQw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 10:23:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:4c:60:ce:6f:2e:fb:72:14:58:56:86:1b:24:51:4b:b7:e9:08:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
        Validity
            Not Before: Oct 11 08:47:23 2026 GMT
            Not After : Oct 12 10:23:23 2026 GMT
        Subject: CN=2AEEEABB6414AD4EBBDF8625771A2F6DA845EF82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6d:c3:46:07:2e:e0:ce:5c:39:e2:0c:60:71:
                    ca:4f:a7:cc:5b:7b:e0:3c:c2:33:33:5e:39:99:ae:
                    b1:e3:9c:b2:e3:93:a5:aa:a4:2e:e0:29:9b:72:7c:
                    2f:a5:34:f5:22:ca:89:bb:8d:c3:87:4f:bc:a2:a9:
                    7e:f4:e0:29:ea:41:5d:54:d8:8f:bb:7a:c2:20:94:
                    fb:1d:89:f7:d9:90:ed:01:33:63:a0:0d:da:b7:64:
                    b1:24:85:d3:eb:92:d1:1b:47:00:4d:71:07:f7:1d:
                    c3:d7:21:a1:2a:e1:e6:4d:0a:ca:97:a0:ad:5b:b8:
                    37:da:67:80:7b:94:8e:16:ce:82:5c:ea:dc:18:d4:
                    68:b0:22:fd:28:04:04:78:35:8d:f1:61:7e:d7:c0:
                    fd:4f:f5:aa:58:d3:58:5f:8e:7b:f0:bf:e8:88:d1:
                    95:51:b2:e1:52:f9:55:9a:d3:8c:b0:06:bb:4d:4c:
                    6c:84:6c:08:d4:90:a3:ca:07:66:cc:35:ac:05:df:
                    9d:8d:47:11:85:4f:c8:97:cd:7f:e5:a8:6e:3b:db:
                    04:32:a3:12:4f:0f:3d:f4:dc:f4:d4:3a:c4:73:4a:
                    93:8d:69:e8:89:4f:7c:0a:74:01:ba:b0:a6:a6:04:
                    ba:f5:f5:a4:22:49:d3:3d:d1:7f:6c:0d:c3:2c:6d:
                    ef:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EE:EA:BB:64:14:AD:4E:BB:DF:86:25:77:1A:2F:6D:A8:45:EF:82
            X509v3 Authority Key Identifier:
                keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:fd:a0:69:1e:e9:f8:72:47:95:3e:1f:e8:a2:d8:57:1a:26:
         69:fe:ec:8c:fa:bb:1e:87:6c:fb:ed:be:9c:69:d8:70:c7:ce:
         40:89:b3:7e:a9:7a:24:0a:13:1a:b9:b4:24:92:1e:58:04:96:
         aa:37:cf:2d:e0:c4:ae:5e:81:59:d5:ac:c4:e0:4b:d8:4a:42:
         f3:fd:f5:95:c1:a5:f7:e3:e3:6e:4f:b9:a3:dd:25:50:48:e5:
         24:97:ba:cc:f8:95:6d:36:62:d5:d2:0c:87:03:47:3b:df:20:
         27:ea:4c:b7:ca:18:87:b9:a2:e2:6b:26:55:a0:ef:a9:c2:00:
         3c:c6:f5:18:a2:e8:76:46:23:e1:ae:b1:a1:f3:24:60:85:7a:
         d1:55:41:66:cc:b2:07:89:a2:0b:94:ff:78:55:07:be:b0:dc:
         a1:6c:a4:eb:7c:15:18:ba:15:dd:ac:f5:37:73:dc:59:74:2a:
         48:0c:be:ca:99:bf:4e:f4:4f:0f:15:07:44:a8:ce:44:eb:f4:
         6a:df:c8:07:d4:e2:92:d6:fe:ec:99:c2:99:47:1a:2a:3b:5b:
         d1:93:f0:75:b4:5d:53:80:a0:e0:78:b1:ac:23:75:f7:40:18:
         4b:94:e0:96:f6:eb:d6:76:04:45:54:3f:19:42:83:37:75:d9:
         11:ac:94:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:20:06 2026 by rpki-client