Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
File:                     CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft (raw, json)
Hash identifier:          WJ+5izhkXCxmsyvD3rnDJlq0Qk4kYn6TYBnNJieTZ18=
Subject key identifier:   13:17:EB:D2:E0:BE:91:8D:AD:9E:69:2B:ED:3B:A6:33:59:B3:D2:BF
Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
Certificate issuer:       /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Certificate serial:       72C23A3821B49130A5B3D01A9AE0D5773FDB5483
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
Manifest number:          013F
Signing time:             Fri 12 Jun 2026 17:53:25 +0000
Manifest this update:     Fri 12 Jun 2026 17:48:25 +0000
Manifest next update:     Sat 13 Jun 2026 18:21:25 +0000
Files and hashes:         1: 38392e3138352e31322e302f32342d3234203d3e203630383630.roa (hash: KsOBm/IW9m6wYWtDKEPIq17pdU+n9YXSV9XxpyK0qLc=)
                          2: 3130392e37322e3132322e302f32342d3234203d3e203630383630.roa (hash: 2mjBtJiNX2GgtlTBc9elrwUynjPTbiI/Km0f5EIklUM=)
                          3: CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl (hash: jCe3CQ72I1hm1HqOwOdt/DeSBkSFtSWddFohbrlWp2I=)
                          4: 3138352e33302e3230332e302f32342d3234203d3e203630383630.roa (hash: +hLj8/wzU4ALLxe4Xdt3WSnzJEJQWXiNiu+hY32JK2w=)
                          5: 3138352e33302e3230302e302f32332d3233203d3e203630383630.roa (hash: EjHevTTMahznqtckt7aLMDXLh3y0kx9bdoI4UFB/hKw=)
                          6: 38392e3138352e382e302f32342d3234203d3e203630383630.roa (hash: uuMWj0BWrTugTcot2BIIjLN4CmKo0TjrBWjA0TJKmTM=)
                          7: C972E8671DEDC43FE908B548531C969A051CD34C.cer (hash: d7NBPzoR5U51KQ6xM8aVu3af+Il1XYsfzuoeH65sh5k=)
                          8: 3138352e33302e3230322e302f32342d3234203d3e203630383630.roa (hash: tBh4T597HLyGCSugLkif66QABd9ufnpWRf3NI++UCNc=)
                          9: 39332e3138352e3231342e302f32342d3234203d3e203630383630.roa (hash: I4ydkJ2r2j2i1g1xPyPsffo9hUpPo3RLQo6MfTdRh1Q=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 18:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c2:3a:38:21:b4:91:30:a5:b3:d0:1a:9a:e0:d5:77:3f:db:54:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
        Validity
            Not Before: Jun 12 17:48:25 2026 GMT
            Not After : Jun 13 18:21:25 2026 GMT
        Subject: CN=1317EBD2E0BE918DAD9E692BED3BA63359B3D2BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:91:6a:e6:c7:7a:bd:4b:60:bd:47:3f:8d:5d:
                    36:bd:a0:e3:c3:8d:06:ae:7f:af:96:20:dc:bd:1a:
                    24:a0:de:b5:4d:33:2f:d9:4d:01:c9:8b:1f:05:05:
                    be:ba:07:f5:ad:04:dc:4d:93:77:a7:32:fa:87:9d:
                    14:62:8c:96:78:9f:96:19:12:ef:3f:82:74:16:bc:
                    41:b8:04:bf:70:a3:0d:db:b3:da:28:3d:6e:1b:05:
                    91:b1:e7:0f:97:15:56:b1:8a:f1:62:44:df:df:ee:
                    7a:76:6f:0a:fb:a2:f4:a1:1b:dc:28:e0:40:de:55:
                    a7:c7:c4:7f:28:60:8d:cd:dc:2f:5d:17:e5:ae:a1:
                    85:c2:4f:30:64:e0:a5:57:3e:69:a6:a8:34:17:6e:
                    7e:19:2a:f6:ec:1d:3a:1f:a8:96:94:14:5c:f0:a4:
                    d6:53:23:ac:af:43:07:8a:a6:6e:5a:45:90:d9:9a:
                    45:c5:f8:4e:ae:0c:9b:bd:91:e8:92:f1:ff:5e:76:
                    0d:e6:fb:86:bf:5a:a1:6c:88:cc:58:be:18:dd:05:
                    04:b2:27:02:37:85:6c:a1:a0:70:61:ba:21:b2:96:
                    d1:88:62:2c:b9:ad:dc:e7:dc:1b:74:0d:c9:5d:ad:
                    24:aa:62:e7:9b:63:b4:6c:51:83:09:ee:92:b3:84:
                    be:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:17:EB:D2:E0:BE:91:8D:AD:9E:69:2B:ED:3B:A6:33:59:B3:D2:BF
            X509v3 Authority Key Identifier:
                keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:65:1c:cc:3e:6e:3a:dc:0e:22:a4:00:0d:5e:53:dd:ed:42:
         c5:d0:56:89:16:34:19:a7:00:f8:b7:b1:78:d0:e2:50:92:44:
         c9:13:f6:92:85:52:bc:c1:ce:73:47:71:d7:a6:ca:70:fe:7d:
         9b:32:93:0c:d2:8c:49:ce:64:12:d6:ec:6f:66:a3:ca:ef:19:
         66:3d:6d:a8:1e:cf:86:32:b9:8b:fe:83:0a:79:51:b0:93:2a:
         02:a5:79:21:0f:a7:c4:e8:2a:1c:57:9f:2c:c8:a5:01:a2:92:
         fa:0c:17:ab:aa:6d:bd:2b:13:99:ad:b3:d8:50:65:e4:6a:7c:
         93:1a:53:54:fb:ec:26:49:df:56:d8:dc:52:87:90:c2:04:5f:
         af:e1:42:52:17:89:ea:10:b3:93:c3:e6:56:5b:ca:29:3c:cd:
         14:31:a5:5e:fb:9d:be:37:5c:84:c5:06:48:fd:2b:cc:45:73:
         ca:f2:0f:4b:4c:78:27:82:0b:44:34:b3:80:6d:d0:e3:70:76:
         24:ab:ca:2f:1a:e8:7a:b5:cd:17:40:71:b8:53:57:15:07:6e:
         35:d2:7c:28:c9:4d:16:e3:ab:fd:e5:33:57:c1:4a:c1:d2:58:
         d0:8a:95:a1:de:63:3d:92:20:a5:40:9c:c9:f4:10:33:8c:bb:
         ea:65:38:ce
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUcsI6OCG0kTCls9AamuDVdz/bVIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4
Mzg2NTdhMzAeFw0yNjA2MTIxNzQ4MjVaFw0yNjA2MTMxODIxMjVaMDMxMTAvBgNV
BAMTKDEzMTdFQkQyRTBCRTkxOERBRDlFNjkyQkVEM0JBNjMzNTlCM0QyQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnkWrmx3q9S2C9Rz+NXTa9oOPD
jQauf6+WINy9GiSg3rVNMy/ZTQHJix8FBb66B/WtBNxNk3enMvqHnRRijJZ4n5YZ
Eu8/gnQWvEG4BL9wow3bs9ooPW4bBZGx5w+XFVaxivFiRN/f7np2bwr7ovShG9wo
4EDeVafHxH8oYI3N3C9dF+WuoYXCTzBk4KVXPmmmqDQXbn4ZKvbsHTofqJaUFFzw
pNZTI6yvQweKpm5aRZDZmkXF+E6uDJu9keiS8f9edg3m+4a/WqFsiMxYvhjdBQSy
JwI3hWyhoHBhuiGyltGIYiy5rdzn3Bt0DcldrSSqYuebY7RsUYMJ7pKzhL4tAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUExfr0uC+kY2tnmkr7TumM1mz0r8wHwYDVR0j
BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4
NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP
R1Y2TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02
YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvMi9DRjA2MzFEMzNBM0M5REM1QzQ1
NDI0RDU1QzNFNzY2MzgzODY1N0EzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArmUczD5uOtwOIqQADV5T
3e1CxdBWiRY0GacA+LexeNDiUJJEyRP2koVSvMHOc0dx16bKcP59mzKTDNKMSc5k
Etbsb2ajyu8ZZj1tqB7PhjK5i/6DCnlRsJMqAqV5IQ+nxOgqHFefLMilAaKS+gwX
q6ptvSsTma2z2FBl5Gp8kxpTVPvsJknfVtjcUoeQwgRfr+FCUheJ6hCzk8PmVlvK
KTzNFDGlXvudvjdchMUGSP0rzEVzyvIPS0x4J4ILRDSzgG3Q43B2JKvKLxroerXN
F0BxuFNXFQduNdJ8KMlNFuOr/eUzV8FKwdJY0IqVod5jPZIgpUCcyfQQM4y76mU4
zg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:01:58 2026 by rpki-client