Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
File:                     92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft (raw, json)
Hash identifier:          39bp9AJbfDPaX1KdEc+hV2uYMzjPZIoqbrLzBsTqyXo=
Subject key identifier:   53:CB:6C:E6:71:21:67:06:31:8E:84:08:97:C1:5B:9F:69:75:4A:FE
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Certificate issuer:       /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial:       2EE831C0DDE6B413FC89F30EDE0BB1ECF6D79C0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
Manifest number:          01B6
Signing time:             Mon 02 Mar 2026 11:39:34 +0000
Manifest this update:     Mon 02 Mar 2026 11:34:34 +0000
Manifest next update:     Tue 03 Mar 2026 15:07:34 +0000
Files and hashes:         1: 34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa (hash: JaeJstE2poR1Rlm8a7RHcBFfHeeu7vNkxKzYr0p4Jc8=)
                          2: 39352e3231342e3138322e302f32342d3234203d3e20323132333834.roa (hash: ahvCpQCYKDC5UmCWINUE1+9+R3CEuxDs9xpt+/mHGMc=)
                          3: 39352e3231342e3138332e302f32342d3234203d3e20333933393432.roa (hash: ppvL8ONO4VguHbFDU1oqqBQJIOG4rM+WNvZk8GO+7nk=)
                          4: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl (hash: zl5h3ZxPz9FB57P/88Z91QxtOOFp5cBIrFz/K3jB2sM=)
                          5: 39352e3231342e3137352e302f32342d3234203d3e20313335333931.roa (hash: dZLABnxKpTxFiKmt1/yK20i3zGqpWgZ6NnQoPD/883U=)
                          6: 34352e3135362e35322e302f32322d3234203d3e2039303039.roa (hash: Bs9P6MukVIk3Mqg2bASja42eYp9YV11upUqwTKj8Pqc=)
                          7: 39352e3231342e3138322e302f32342d3234203d3e20323132363039.roa (hash: AjgG1gM1OxMVlGFutJS1mpX2Qd4qqtcRZt6UVKIG+j4=)
                          8: 34352e3135362e35322e302f32322d3232203d3e2039303039.roa (hash: eK18gsMy8+wzgYZmaz7TkcO08JcfPTkHAWlv0aJXuz0=)
                          9: 39352e3231342e3138302e302f32342d3234203d3e20323033373538.roa (hash: yeHT2siMw+46e40lrxlb+yyyQe2+Rk/4CH0GwC6laEg=)
                          10: 39352e3231342e3137332e302f32342d3234203d3e20383334.roa (hash: Jg1Q0RqkgI1Bru+o5L0tV+On7fhjEQhtHFzUtySiiHA=)
                          11: 34352e3135362e35322e302f32342d3234203d3e2039303039.roa (hash: TVTxbW5Hn/uwBDAOJAxsysgEid6g/rYwKpFkj0KhHLI=)
                          12: 39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa (hash: 7RDjli52ea3Y5rIxOBi7CoAOYzObgN76cF1oNhGaH/0=)
                          13: 3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa (hash: yFl38PxDDUPllDewnZ7MEFH9Z5qJaOTL0zY/pvxRoUY=)
                          14: 34352e3133392e3139382e302f32342d3234203d3e20323134343636.roa (hash: 9KX5zC7UuI47N7heL//vNyLO3x7YEi1CucEhFX8SUR0=)
                          15: 39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa (hash: EnyfxlxrEZoOAQu439Mhaj0MSgN4o3Cr584mhVLUCgw=)
                          16: 39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa (hash: P3AXSCPo5qCcqJ/tF9UnDRiSqmNKJoNVWYccPe9dv1w=)
                          17: 39352e3231342e3137322e302f32342d3234203d3e20313937343737.roa (hash: y8hcJrulcRceTx871qhtDNBcbMxDEQZoJON7Dc+UpGA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e8:31:c0:dd:e6:b4:13:fc:89:f3:0e:de:0b:b1:ec:f6:d7:9c:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
        Validity
            Not Before: Mar  2 11:34:34 2026 GMT
            Not After : Mar  3 15:07:34 2026 GMT
        Subject: CN=53CB6CE671216706318E840897C15B9F69754AFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:7b:a4:c5:77:2a:dd:ad:fe:2a:f3:1b:f0:
                    e0:b5:13:fd:64:75:84:a7:55:71:6a:cd:f8:b4:6d:
                    ff:d9:55:e8:5a:9d:06:b4:b1:ac:05:19:39:d2:13:
                    f4:2b:fb:68:9e:0a:a3:16:2b:30:b8:7d:d0:96:b5:
                    40:4b:20:69:d3:d5:9c:c3:a2:f0:15:0b:0f:4d:5e:
                    61:9c:3c:14:3b:aa:b9:cb:cb:7f:d6:bc:f5:48:bd:
                    39:48:35:a8:d7:d0:48:2e:e9:95:90:09:9e:68:f1:
                    2c:10:0c:a5:a5:5a:41:f8:1a:22:10:67:df:38:4c:
                    c5:74:ec:91:49:a1:c7:5e:0c:e5:cc:24:39:c0:d6:
                    2e:8c:37:52:58:1b:df:8c:26:3d:f7:eb:ad:03:96:
                    34:6c:f7:b6:d4:36:32:9d:47:b1:40:89:c6:27:20:
                    98:d0:2a:b7:16:34:5a:9f:0e:e0:d1:57:26:23:49:
                    24:57:f2:67:51:fc:25:5f:35:b6:d2:8c:63:74:e9:
                    56:33:e0:17:b5:01:2d:8d:ba:6e:97:26:4e:49:f4:
                    6a:f5:e2:97:16:8c:64:7c:7b:fd:68:82:81:da:f5:
                    d9:bf:47:bb:07:7a:a5:36:89:12:dd:43:4d:d8:ca:
                    8e:a8:02:65:cb:e1:84:7c:3c:6d:c5:74:0d:17:de:
                    3c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CB:6C:E6:71:21:67:06:31:8E:84:08:97:C1:5B:9F:69:75:4A:FE
            X509v3 Authority Key Identifier:
                keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:91:ed:ff:fe:d7:d8:05:20:24:d8:fe:36:30:06:8a:e8:01:
         14:78:46:80:02:5c:dd:21:cf:ea:ff:a2:bd:56:d7:b3:dc:9d:
         39:bc:56:74:78:91:18:79:32:a9:2b:92:72:43:8d:f4:d0:74:
         90:87:5f:3e:80:24:98:6b:d4:bc:e0:c0:14:f4:76:8d:25:dc:
         f5:d4:41:a3:45:05:9a:2d:d9:05:f9:00:b8:aa:cd:3a:90:cb:
         d5:8e:b2:4c:9b:2d:84:74:d2:a1:df:a3:92:ff:e8:05:ca:e0:
         33:85:15:79:71:71:c3:ba:5b:57:a9:c4:6d:49:14:75:db:86:
         1f:14:4c:17:28:ea:33:e1:46:2b:e9:7b:13:6e:99:2b:dd:cf:
         9b:c9:51:43:64:9e:51:26:8c:9e:4d:18:2b:be:e6:43:da:85:
         5e:58:91:c1:ae:24:80:7c:24:6a:62:6b:bb:75:75:e5:06:ad:
         68:07:30:5e:5d:86:7e:8a:ba:fd:40:f9:13:4a:c4:fb:e3:b8:
         fa:61:c5:14:ee:ed:de:9d:59:15:06:03:42:f7:f8:b4:1f:66:
         f5:77:00:77:79:8e:30:74:18:d2:43:6f:4c:d9:de:60:bf:b9:
         1f:f4:58:69:29:93:6b:f2:9a:1d:3d:27:ed:41:10:9b:f0:dc:
         d3:cf:d1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:48:00 2026 by rpki-client