Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
File:                     E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft (raw, json)
Hash identifier:          3uK0d+xvT50Sscaa2Y0ajYcU9sVW9mofOuMSGiWql9M=
Subject key identifier:   8C:46:D0:75:55:9A:19:24:99:82:61:FF:9A:0C:58:9D:B9:53:1A:79
Authority key identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A
Certificate issuer:       /CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A
Certificate serial:       264B519885438C44A9FAA74E66E449F92B9A0793
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
Manifest number:          3B
Signing time:             Sat 28 Feb 2026 23:28:24 +0000
Manifest this update:     Sat 28 Feb 2026 23:23:24 +0000
Manifest next update:     Mon 02 Mar 2026 00:21:24 +0000
Files and hashes:         1: 326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa (hash: GrABHnm92+umbLrVFGaFsGRxCk28MTZckUcjsaOY0Ow=)
                          2: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl (hash: so9jzJsDz7i7rmdaxL7OqOwQic266EImW4DkDK22A1E=)
                          3: 326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa (hash: 6lZvvFWPvSfdQUMPjqUZGcuEJ5oDxzIDckdsgacq+JE=)
                          4: 326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa (hash: alWdZcWOVcqLJ+t8VCXLM/51cMrMQD6vIi6z5Hkb/rM=)
                          5: 326130663a316363353a313033303a3a2f34342d3438203d3e20323136323939.roa (hash: sj4hnBEpnD4akX8jpgCsQPvr+ht2QjoESczHJBDU000=)
                          6: 326130663a316363353a313032303a3a2f34342d3438203d3e20323136323939.roa (hash: PhJ22uKOLkIyMB26jpFkBLaf94CPZDjFlKqxP4B3DyA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Mar 2026 23:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4b:51:98:85:43:8c:44:a9:fa:a7:4e:66:e4:49:f9:2b:9a:07:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A
        Validity
            Not Before: Feb 28 23:23:24 2026 GMT
            Not After : Mar  2 00:21:24 2026 GMT
        Subject: CN=8C46D075559A1924998261FF9A0C589DB9531A79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:57:f2:c1:f9:84:79:b5:f7:da:7b:26:48:2b:
                    d6:61:65:58:8b:d8:88:c1:e9:9c:95:e7:c6:d8:5c:
                    ee:8e:db:da:15:b3:b7:85:8f:47:3b:97:00:35:b3:
                    07:36:a6:d7:e8:ea:01:06:72:97:87:b6:82:5d:16:
                    9c:a9:3d:01:e1:ce:99:89:e9:a6:f2:56:1c:9e:7f:
                    f0:21:fc:ea:c8:c5:e3:8b:f5:90:43:c5:a2:11:a6:
                    aa:43:28:88:a1:86:b6:86:5a:47:cd:52:20:27:52:
                    d2:47:06:fa:90:8f:c7:a8:d1:04:00:3a:bb:e4:ea:
                    06:83:df:b0:56:17:fc:65:1d:52:b7:3c:a9:b9:e4:
                    7c:05:89:e9:2a:6a:31:42:4d:f8:b8:8b:17:46:45:
                    54:d8:c1:a5:1e:00:e3:ab:fd:bd:fd:4b:ea:12:97:
                    24:c5:90:13:c2:b8:6b:82:f3:df:b8:0d:76:11:57:
                    3f:66:55:09:f2:e6:7f:ff:95:af:63:9d:cd:78:6c:
                    81:c1:db:5e:79:6d:8b:71:e9:bc:c0:a7:8f:cb:04:
                    76:5b:9f:32:15:bf:7b:0a:2b:43:74:56:16:6d:bb:
                    90:1b:9c:52:6d:db:2f:39:4f:74:d8:82:65:e5:eb:
                    ca:87:97:ca:9d:97:45:90:c8:46:47:bc:68:41:3c:
                    a3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:46:D0:75:55:9A:19:24:99:82:61:FF:9A:0C:58:9D:B9:53:1A:79
            X509v3 Authority Key Identifier:
                keyid:E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:fb:16:13:b3:a8:3e:c3:d3:39:e9:72:11:fb:97:df:3b:10:
         4f:db:8d:bb:3f:9c:f6:20:8b:c3:7f:91:a7:e9:ad:93:16:e7:
         1f:f6:ff:bc:f0:7f:dc:c8:8f:ef:e4:25:38:b3:f4:d8:f1:9b:
         cf:a6:7d:45:67:c6:50:ba:f3:33:23:55:12:ad:ca:59:99:94:
         57:1e:80:b1:56:50:91:bb:4e:f5:76:fe:d0:a7:5b:45:6f:10:
         8d:5c:3d:63:f9:73:49:6b:a3:c0:a7:d5:81:89:f2:50:28:4b:
         c8:a6:7b:01:4c:39:4b:59:d9:84:c9:09:1c:47:54:f4:78:49:
         ed:43:a8:d9:40:12:3b:0e:f0:bd:a4:13:05:ac:b5:1b:83:b2:
         7e:fa:ef:81:d3:ca:91:bb:06:d5:4b:b3:97:00:56:b2:09:f6:
         c1:13:33:1d:70:58:05:40:01:02:d3:d8:35:7c:97:57:25:1c:
         c0:ba:69:5e:05:1d:51:7d:e3:1d:ae:2c:06:f5:99:6d:44:5d:
         e3:99:70:19:9f:ad:55:44:af:f5:af:b0:ed:78:74:9c:7a:f0:
         e5:25:bb:12:b0:d7:55:c6:fb:45:b6:92:42:9b:b1:83:11:14:
         4f:93:a0:45:14:cd:78:37:56:0f:a6:f7:53:36:97:9b:3e:d8:
         00:31:35:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:34:52 2026 by rpki-client