Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft
File:                     E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft (raw, json)
Hash identifier:          Ny/Rx8+h//nk3wAhtVXKwMUm0BTHbUKnnKxJoNOUBGQ=
Subject key identifier:   27:45:4F:4C:D2:18:02:78:8F:F2:AE:50:B2:95:D9:13:44:2B:55:B5
Authority key identifier: E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE
Certificate issuer:       /CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE
Certificate serial:       39B78EBADA988FE1EDAD6EC60F1A6F77055FF59F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft
Manifest number:          0161
Signing time:             Tue 28 Jul 2026 19:36:41 +0000
Manifest this update:     Tue 28 Jul 2026 19:31:41 +0000
Manifest next update:     Wed 29 Jul 2026 20:07:41 +0000
Files and hashes:         1: 326131343a373538313a6230303a3a2f34302d3438203d3e20323134353735.roa (hash: YwVA55nGhmg50Nrcm1+tsq8Rc4xtCFLwJqkp0AhkdXQ=)
                          2: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl (hash: 9BmaPyyL/dpHRWaqmjfJ54E95/u6WK6Mvreim04xgOM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b7:8e:ba:da:98:8f:e1:ed:ad:6e:c6:0f:1a:6f:77:05:5f:f5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE
        Validity
            Not Before: Jul 28 19:31:41 2026 GMT
            Not After : Jul 29 20:07:41 2026 GMT
        Subject: CN=27454F4CD21802788FF2AE50B295D913442B55B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:74:0c:99:d6:d5:2e:9a:df:86:20:56:a8:
                    69:b0:9b:ba:bf:4f:a3:2d:68:a3:2b:79:f7:b4:ce:
                    4b:aa:38:6d:c9:6f:49:3c:11:16:24:d7:ab:df:43:
                    53:61:11:4c:22:17:5b:f7:e8:cc:67:6e:ac:d5:bd:
                    fb:c1:2d:31:c6:1a:6b:6a:6c:ad:25:4d:f7:6f:53:
                    29:56:55:4a:51:d8:e4:2b:97:0f:0e:65:80:42:d8:
                    03:da:ec:b7:d5:56:1b:09:b9:fb:5f:6f:e7:c2:0d:
                    15:e1:c8:d2:2c:29:08:42:a9:f9:79:f1:a4:5c:34:
                    a2:b2:4f:ec:62:ee:fc:30:2d:f2:c7:0b:1f:28:ae:
                    84:e4:b3:29:7e:22:5e:89:ff:19:26:d0:f5:f7:87:
                    f2:55:10:93:2e:c9:06:fc:ee:07:47:99:4e:28:0b:
                    8b:27:ce:ad:e3:a9:c2:96:f6:32:9f:6e:89:38:7c:
                    a7:46:77:7b:75:d2:88:34:ab:97:ea:6c:a7:53:7b:
                    23:49:2f:5c:d5:b4:c8:6e:95:fc:79:13:f7:a8:fb:
                    58:ab:29:cd:7b:52:5e:bd:c9:86:15:7d:1a:30:d8:
                    90:85:62:f2:ea:a0:56:b8:20:26:89:0e:14:01:46:
                    67:21:1c:03:a7:77:f3:96:ea:03:96:7b:c7:3e:3e:
                    bc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:45:4F:4C:D2:18:02:78:8F:F2:AE:50:B2:95:D9:13:44:2B:55:B5
            X509v3 Authority Key Identifier:
                keyid:E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:27:ab:d9:07:0d:46:e1:b0:18:eb:e3:dd:5e:c7:84:c4:1d:
         45:2c:78:c2:4f:8d:44:1a:c2:e4:b7:8b:55:f1:be:ea:9f:10:
         38:69:7e:5f:3e:6d:a8:50:6d:8a:f4:a6:8d:19:2f:d7:1f:dd:
         5b:17:a5:45:71:c7:97:37:b6:4c:ac:0b:6a:8b:35:14:f4:4b:
         ac:e3:9c:61:1b:72:20:2a:0d:c6:9e:5b:3d:14:10:c1:94:d9:
         30:f1:59:73:29:f7:f1:dc:b1:cb:d3:50:d7:32:2d:01:64:b5:
         0b:99:ac:1a:2f:84:a6:45:28:45:98:91:69:65:58:c8:5a:ed:
         dd:2d:47:48:6a:4d:ec:bc:68:44:24:c1:e7:90:59:6f:3e:33:
         fe:c0:b4:fd:eb:2c:a2:b9:e7:c8:30:fb:9e:26:17:aa:de:18:
         fc:57:41:52:5d:3e:23:7f:0c:d0:e7:4f:0f:91:8d:9a:e7:ad:
         a3:11:e5:d1:a7:e5:3b:b9:ed:8d:78:bb:a2:0c:4a:1c:11:f7:
         57:07:c2:a8:01:0e:79:7e:e5:51:b3:3c:76:3c:ea:a5:c1:54:
         f5:4e:d6:89:fa:20:09:a8:71:b1:a8:94:7e:da:cc:f9:58:c4:
         bf:ae:cc:7b:fb:9c:27:b5:61:0f:11:23:ad:49:53:f4:4b:1b:
         bc:5d:fb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:22:44 2026 by rpki-client