Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
File:                     E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft (raw, json)
Hash identifier:          7+vZYCgwtwv1O07cjTV+zIzpIbRyW7Nz854boR+4o7s=
Subject key identifier:   B6:BC:90:B3:3B:09:C9:1B:E2:C6:BD:0B:05:E2:B9:34:DF:F6:E7:5F
Authority key identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A
Certificate issuer:       /CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A
Certificate serial:       3C91A60D53103E40E7E3E20524947D40CD22BC5A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
Manifest number:          7B
Signing time:             Thu 16 Apr 2026 22:16:59 +0000
Manifest this update:     Thu 16 Apr 2026 22:11:59 +0000
Manifest next update:     Fri 17 Apr 2026 23:41:59 +0000
Files and hashes:         1: 326130663a316363353a313032303a3a2f34342d3438203d3e20323136323939.roa (hash: PhJ22uKOLkIyMB26jpFkBLaf94CPZDjFlKqxP4B3DyA=)
                          2: 326130663a316363353a313033303a3a2f34342d3438203d3e20323136323939.roa (hash: sj4hnBEpnD4akX8jpgCsQPvr+ht2QjoESczHJBDU000=)
                          3: 326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa (hash: GrABHnm92+umbLrVFGaFsGRxCk28MTZckUcjsaOY0Ow=)
                          4: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl (hash: YGyTDcx9do8A407rA1yct9qq6ZbjfwmZMhKX235r0VQ=)
                          5: 326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa (hash: 6lZvvFWPvSfdQUMPjqUZGcuEJ5oDxzIDckdsgacq+JE=)
                          6: 326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa (hash: alWdZcWOVcqLJ+t8VCXLM/51cMrMQD6vIi6z5Hkb/rM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 23:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:91:a6:0d:53:10:3e:40:e7:e3:e2:05:24:94:7d:40:cd:22:bc:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A
        Validity
            Not Before: Apr 16 22:11:59 2026 GMT
            Not After : Apr 17 23:41:59 2026 GMT
        Subject: CN=B6BC90B33B09C91BE2C6BD0B05E2B934DFF6E75F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:01:8d:7b:e8:de:87:43:a2:37:59:ac:f3:a3:
                    16:37:a6:1f:5c:3b:a9:dc:0a:30:a7:97:bd:6d:e6:
                    dd:e8:39:5e:58:db:eb:62:02:41:40:1c:e6:b6:cb:
                    a9:3e:db:31:e4:48:87:2c:1d:2f:69:8b:9f:40:65:
                    4e:80:2f:bb:8d:65:f5:8a:d8:61:04:20:bc:7a:64:
                    c7:e8:d4:b5:78:73:61:af:79:4c:18:29:57:20:4a:
                    a8:eb:31:3c:2b:ba:b3:40:0b:a6:9d:ad:5b:13:0b:
                    64:dc:28:d6:78:74:fe:4f:95:79:38:6c:55:e8:8e:
                    86:43:a3:68:80:75:43:5c:25:ce:7d:0b:e6:e7:cc:
                    aa:25:dd:89:cf:a4:89:ba:ea:14:ac:f7:d7:fc:e7:
                    c2:9d:62:5a:5d:46:6f:54:84:4e:11:f4:d4:ba:5c:
                    52:30:4e:2f:43:13:7a:b3:ff:74:43:97:0a:fe:80:
                    f2:26:2e:24:4d:ff:b9:86:42:86:33:0a:60:6c:0f:
                    7f:83:ba:95:85:dd:f1:50:d1:9d:82:2a:06:4f:9c:
                    98:9f:2e:f5:3d:35:49:d9:8b:05:be:24:f8:c3:dc:
                    ef:88:ec:2b:d4:63:a1:04:7b:69:0d:b0:09:08:f8:
                    9d:d1:5d:b1:e0:1f:45:76:5a:f5:5a:f9:91:65:b5:
                    ce:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BC:90:B3:3B:09:C9:1B:E2:C6:BD:0B:05:E2:B9:34:DF:F6:E7:5F
            X509v3 Authority Key Identifier:
                keyid:E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:75:40:c0:60:11:91:fe:b2:28:cb:79:9e:77:37:8d:f7:45:
         49:82:f9:09:cc:84:e0:7a:d2:b9:8e:70:fd:65:d2:68:79:e2:
         f8:88:be:f3:80:59:e2:2b:af:7a:2d:28:9c:f7:c6:50:b9:d3:
         99:28:75:55:1e:dd:4b:25:11:08:50:21:f5:cd:2c:36:67:c1:
         1c:9e:60:9c:34:e0:cc:54:20:ff:c5:19:c1:4e:55:79:18:b5:
         b3:da:9e:1d:5e:86:37:4d:56:3c:a2:e4:18:3a:6e:e5:08:5b:
         e2:1a:7e:29:ed:d3:99:c1:3f:c8:88:00:b1:34:0a:88:63:14:
         93:42:86:6c:92:1a:cf:c1:a8:93:2c:71:73:97:61:a4:9f:10:
         3a:9d:4a:59:61:a1:5d:ad:d5:ce:31:5f:bd:9c:9b:22:9e:b5:
         a5:66:a1:cf:95:54:fc:e5:ed:6a:2b:39:66:ad:82:86:88:57:
         5a:84:83:0b:68:54:2f:43:70:aa:39:23:9c:80:a9:ab:34:c7:
         4c:b2:d7:99:82:54:26:86:29:85:d8:14:c9:97:56:df:92:97:
         2c:ba:a0:25:0c:3c:c8:0b:fa:e5:b8:6b:9b:94:22:b5:52:f7:
         d4:4f:53:43:8b:31:8d:55:0b:8e:7a:ce:26:1c:59:94:03:12:
         10:85:ef:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:56:43 2026 by rpki-client