Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
File:                     92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft (raw, json)
Hash identifier:          3SB8nfwx/c6J5uVWnm4bn38/mGifre5TUXG0qUtLDzk=
Subject key identifier:   6F:1A:9B:B5:B7:7B:21:D4:BA:58:90:F7:30:DB:E1:B7:8B:92:3B:75
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Certificate issuer:       /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial:       0DF3648A27FD299D06CD3A61A98688B733243520
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
Manifest number:          01F8
Signing time:             Fri 17 Apr 2026 10:04:42 +0000
Manifest this update:     Fri 17 Apr 2026 09:59:42 +0000
Manifest next update:     Sat 18 Apr 2026 11:31:42 +0000
Files and hashes:         1: 39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa (hash: P3AXSCPo5qCcqJ/tF9UnDRiSqmNKJoNVWYccPe9dv1w=)
                          2: 39352e3231342e3138322e302f32342d3234203d3e20323132363039.roa (hash: AjgG1gM1OxMVlGFutJS1mpX2Qd4qqtcRZt6UVKIG+j4=)
                          3: 34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa (hash: jnmt3whqRbI6D2vf6sBU5xOTdVKUeUwqqqV6QhoXPsE=)
                          4: 39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa (hash: 6VJ0BRDW5vzl9vSQFhJrbqoPj47Dkmz6QrWwxneNt7M=)
                          5: 39352e3231342e3138322e302f32342d3234203d3e20323132333834.roa (hash: 9sHNJMiehNbP1O+jWpsdoBoSI67XbsxRM7NeVaaB37s=)
                          6: 34352e3135362e35322e302f32342d3234203d3e2039303039.roa (hash: TVTxbW5Hn/uwBDAOJAxsysgEid6g/rYwKpFkj0KhHLI=)
                          7: 39352e3231342e3137322e302f32342d3234203d3e20313937343737.roa (hash: 0Nw79EMxO4DuYLh23x86SyP3DqFJicDqK5+0xzSE8zA=)
                          8: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl (hash: g/M11bZXzk/QWt9isn6AUvHS1aPPCbRTACEEvsr4k8o=)
                          9: 39352e3231342e3138302e302f32342d3234203d3e20323033373538.roa (hash: IltzG0K+W6/4OY3N4Cei605pBnUrFv4cf5U0zN9qrBQ=)
                          10: 3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa (hash: yFl38PxDDUPllDewnZ7MEFH9Z5qJaOTL0zY/pvxRoUY=)
                          11: 34352e3135362e35322e302f32322d3232203d3e2039303039.roa (hash: yBIbgSutRM6w0CO+SuN+puGD+EsV9mNPvZ8qHnyid+k=)
                          12: 39352e3231342e3138332e302f32342d3234203d3e20313938323530.roa (hash: Ov/x1oZaBVg9UzR84S4kZKaf9zCxK3034xSjk7KKlY4=)
                          13: 34352e3135362e35322e302f32322d3234203d3e2039303039.roa (hash: Bs9P6MukVIk3Mqg2bASja42eYp9YV11upUqwTKj8Pqc=)
                          14: 39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa (hash: S4ddw73hDoSEhNKtyBEjIhztHOdB0qUYUD8sWKdWm3o=)
                          15: 39352e3231342e3137332e302f32342d3234203d3e203231383430.roa (hash: ufGlQ+DrhT42dGKvfqF9MmDLago1FeOS1zGb2GQoeMQ=)
                          16: 39352e3231342e3137352e302f32342d3234203d3e20313335333931.roa (hash: 7k+RlsbEAvDIHt5Is/doveA233QJ/dZMJOIDSEPgfCs=)
                          17: 34352e3133392e3139382e302f32342d3234203d3e20323134343636.roa (hash: 0kzSFbUQv3IPSe44pUr9DkaCNbLJS/E0eVH3iom57gk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f3:64:8a:27:fd:29:9d:06:cd:3a:61:a9:86:88:b7:33:24:35:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
        Validity
            Not Before: Apr 17 09:59:42 2026 GMT
            Not After : Apr 18 11:31:42 2026 GMT
        Subject: CN=6F1A9BB5B77B21D4BA5890F730DBE1B78B923B75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d0:25:6d:9c:10:22:d5:97:d5:28:15:6d:31:
                    5f:d8:b6:76:84:22:3a:48:d4:39:fc:c6:db:a1:23:
                    95:57:f5:db:a9:e2:81:97:40:15:73:9c:18:bc:8f:
                    3a:ed:3c:57:1a:cb:19:c4:ea:4a:80:1e:22:c6:2c:
                    1b:4e:20:22:82:71:39:57:7e:83:ff:f7:37:b2:3b:
                    87:e0:ed:f4:93:80:77:76:5a:0f:47:26:51:df:17:
                    55:61:14:2e:1c:dc:c8:6a:31:08:e7:7f:3f:cc:35:
                    3c:89:40:cf:89:c0:99:fd:ef:2b:df:c7:bc:2e:a6:
                    ba:91:5a:c2:87:a6:25:c5:e0:68:cf:bb:f4:03:4d:
                    a8:4e:80:4e:57:31:8f:6a:15:52:d6:4d:d3:ed:59:
                    87:63:09:91:2a:1c:e3:29:80:45:9b:2d:6b:a0:91:
                    47:99:a3:78:80:89:06:ef:c9:f0:93:5c:6e:b9:fb:
                    ae:cc:78:ac:ed:9a:a9:a2:7f:8b:57:7c:17:6a:1d:
                    70:84:00:67:b5:08:33:09:22:61:0d:de:c1:01:80:
                    e1:31:9f:37:1f:d7:db:38:d1:a3:db:fa:87:7b:dc:
                    d5:36:f7:54:04:9a:66:26:12:9c:c2:9a:93:cc:d0:
                    bd:ee:c9:6b:36:7f:9c:ad:bb:85:a3:62:a1:20:46:
                    17:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1A:9B:B5:B7:7B:21:D4:BA:58:90:F7:30:DB:E1:B7:8B:92:3B:75
            X509v3 Authority Key Identifier:
                keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7b:84:62:af:4b:5e:5f:2d:13:75:56:1f:91:0a:14:8a:42:
         23:12:c6:25:6a:6e:a8:75:c4:57:96:b5:d4:02:6f:cf:78:1a:
         d6:04:67:fb:87:63:43:e7:d8:1d:76:93:2b:ce:eb:ac:29:22:
         44:24:64:8e:06:a9:3d:7e:db:84:52:43:bd:c9:a7:54:b3:f1:
         03:a4:69:15:11:45:38:17:7e:b3:a7:f8:9e:33:42:a7:1c:42:
         96:5a:26:30:6c:2b:0d:21:38:a4:8b:9c:77:63:52:36:24:a5:
         ee:08:4a:54:dc:64:db:03:ee:b6:db:56:f5:89:95:30:da:c5:
         0d:03:8d:0e:ab:fb:f8:3a:80:e1:14:10:99:53:d5:81:79:cf:
         cc:50:53:18:15:74:df:8e:8a:73:cc:ce:ff:b5:a6:0e:61:93:
         a6:50:93:c5:a4:de:a1:d5:b3:69:dd:27:38:a6:12:ec:c7:c1:
         9a:cd:b5:9c:65:01:2d:f8:07:db:7f:7f:29:81:5f:19:d1:7d:
         89:01:11:df:ed:29:fd:0e:f4:48:79:1b:3e:2b:ad:ff:0c:f6:
         9a:8b:32:77:ac:74:1d:65:6b:37:60:3d:82:93:bf:49:6b:22:
         92:9a:2f:88:fd:54:05:fe:c5:08:52:3a:89:3f:10:03:38:3c:
         dd:5d:a5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:34:11 2026 by rpki-client