Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft
File:                     E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft (raw, json)
Hash identifier:          ORbaTVJpNh6oIWgo7sq1bstdIjfJN7qy6TAJt1GfSOg=
Subject key identifier:   1D:A7:06:6F:56:AD:66:CE:DC:C9:2B:2C:A7:93:D6:28:7D:CF:12:8E
Authority key identifier: E0:EB:C3:E1:88:E3:5D:38:BC:8D:CC:68:6C:A2:76:C6:5D:6D:A2:AF
Certificate issuer:       /CN=e0ebc3e188e35d38bc8dcc686ca276c65d6da2af
Certificate serial:       57174A54E507CB6DED7620C58550C9B935295590
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4OvD4YjjXTi8jcxobKJ2xl1toq8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft
Manifest number:          93
Signing time:             Mon 02 Mar 2026 00:13:24 +0000
Manifest this update:     Mon 02 Mar 2026 00:08:24 +0000
Manifest next update:     Tue 03 Mar 2026 03:48:24 +0000
Files and hashes:         1: 3139332e3130372e38322e302f32342d3234203d3e203630383630.roa (hash: x3oBjxqc7sXsiScFg8HANPn6SPGL7AD0sdvQlu75w7g=)
                          2: E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.crl (hash: HdWDPqFp8y7CCJ6e4B0IhR/NkHhvDAHrHkyrfP1jJDM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4OvD4YjjXTi8jcxobKJ2xl1toq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 03:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:17:4a:54:e5:07:cb:6d:ed:76:20:c5:85:50:c9:b9:35:29:55:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0ebc3e188e35d38bc8dcc686ca276c65d6da2af
        Validity
            Not Before: Mar  2 00:08:24 2026 GMT
            Not After : Mar  3 03:48:24 2026 GMT
        Subject: CN=1DA7066F56AD66CEDCC92B2CA793D6287DCF128E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:39:ef:14:46:c9:19:f3:58:c7:1d:7c:2b:22:
                    ea:99:a8:0f:04:3a:a6:4e:21:8f:8b:5d:b0:aa:90:
                    0e:a5:10:57:48:f6:4b:35:75:69:1a:de:3c:b0:97:
                    ad:2f:69:a9:a7:be:6b:bf:24:f4:1b:4c:25:a6:81:
                    6a:16:07:b5:bf:72:55:e7:a3:0a:60:66:47:bb:a1:
                    a6:10:85:65:f5:df:06:58:a4:09:cd:33:40:75:65:
                    b5:5b:ea:92:67:fc:2f:a9:ed:22:57:2f:f2:f7:f2:
                    3c:49:17:bf:68:26:7c:92:28:de:32:78:64:54:df:
                    23:00:2f:b3:03:43:bf:15:95:5a:a7:b2:f4:65:44:
                    52:7a:b1:bd:e6:12:bd:6c:58:ba:03:b3:ec:f8:c0:
                    dd:09:22:04:41:e3:a1:17:aa:64:18:66:d3:e4:3e:
                    b5:ff:dc:e0:92:a6:71:5f:78:2c:ae:0d:7f:dc:b3:
                    f8:69:d4:a3:a7:1f:b3:b4:5c:47:cf:52:83:e8:47:
                    0f:0c:02:17:35:e0:21:8f:d4:f0:b5:85:b5:be:dd:
                    36:7e:66:8a:05:63:76:3b:f9:0a:72:ed:57:44:24:
                    1d:2d:b7:30:3a:75:bf:12:26:db:a6:43:b5:26:db:
                    30:2a:64:ca:10:f6:3f:29:f0:90:90:67:8d:55:d6:
                    d2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A7:06:6F:56:AD:66:CE:DC:C9:2B:2C:A7:93:D6:28:7D:CF:12:8E
            X509v3 Authority Key Identifier:
                keyid:E0:EB:C3:E1:88:E3:5D:38:BC:8D:CC:68:6C:A2:76:C6:5D:6D:A2:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvD4YjjXTi8jcxobKJ2xl1toq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:45:ec:24:1a:44:ce:c9:15:0d:2e:cd:c6:a9:af:1c:a1:b2:
         25:39:cd:29:ec:e4:48:42:50:26:8b:05:46:10:c7:d8:4b:a1:
         a4:79:d3:b8:3e:1f:3a:d1:13:72:33:3f:7f:94:78:a9:15:4b:
         92:71:03:8c:8a:80:7c:1f:91:69:e5:87:d9:cd:ba:16:f1:d3:
         41:5e:ea:7c:6a:9d:f5:26:a0:90:f6:7b:50:c1:68:4b:34:7e:
         eb:20:c0:2c:ed:f0:df:d5:0f:3f:69:42:90:df:23:b0:47:c2:
         15:8e:4e:1c:d7:2d:f2:3c:6e:f3:8a:dd:c3:0f:be:9d:c5:0b:
         e4:49:a6:40:bc:76:b2:cb:9d:ec:9c:bc:00:c5:c2:bc:e5:b6:
         d0:87:cf:44:f1:81:d0:75:e5:19:29:a4:d1:25:c7:8f:1c:3e:
         c5:25:11:56:77:6b:a8:65:b6:3a:c6:2e:c4:90:75:03:1c:bb:
         0f:9f:e2:ed:0a:8b:45:af:e0:0e:05:1b:81:92:7f:00:ca:25:
         3b:34:9f:0a:a0:be:14:ff:ec:9c:58:f1:ef:68:6a:b0:04:ac:
         e7:1d:f4:99:33:df:da:9c:2e:a5:7a:8a:d0:db:16:ca:50:62:
         da:41:d4:24:b5:0a:dd:30:89:bc:22:8d:d4:d0:b1:2c:b2:07:
         d1:e1:c6:39
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUVxdKVOUHy23tdiDFhVDJuTUpVZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTBlYmMzZTE4OGUzNWQzOGJjOGRjYzY4NmNhMjc2YzY1
ZDZkYTJhZjAeFw0yNjAzMDIwMDA4MjRaFw0yNjAzMDMwMzQ4MjRaMDMxMTAvBgNV
BAMTKDFEQTcwNjZGNTZBRDY2Q0VEQ0M5MkIyQ0E3OTNENjI4N0RDRjEyOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmOe8URskZ81jHHXwrIuqZqA8E
OqZOIY+LXbCqkA6lEFdI9ks1dWka3jywl60vaamnvmu/JPQbTCWmgWoWB7W/clXn
owpgZke7oaYQhWX13wZYpAnNM0B1ZbVb6pJn/C+p7SJXL/L38jxJF79oJnySKN4y
eGRU3yMAL7MDQ78VlVqnsvRlRFJ6sb3mEr1sWLoDs+z4wN0JIgRB46EXqmQYZtPk
PrX/3OCSpnFfeCyuDX/cs/hp1KOnH7O0XEfPUoPoRw8MAhc14CGP1PC1hbW+3TZ+
ZooFY3Y7+Qpy7VdEJB0ttzA6db8SJtumQ7Um2zAqZMoQ9j8p8JCQZ41V1tKbAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUHacGb1atZs7cySssp5PWKH3PEo4wHwYDVR0j
BBgwFoAU4OvD4YjjXTi8jcxobKJ2xl1toq8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4
NDhjLzMvRTBFQkMzRTE4OEUzNUQzOEJDOERDQzY4NkNBMjc2QzY1RDZEQTJBRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRPdkQ0WWpqWFRpOGpjeG9iS0oyeGwx
dG9xOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02
YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvMy9FMEVCQzNFMTg4RTM1RDM4QkM4
RENDNjg2Q0EyNzZDNjVENkRBMkFGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuEXsJBpEzskVDS7Nxqmv
HKGyJTnNKezkSEJQJosFRhDH2EuhpHnTuD4fOtETcjM/f5R4qRVLknEDjIqAfB+R
aeWH2c26FvHTQV7qfGqd9SagkPZ7UMFoSzR+6yDALO3w39UPP2lCkN8jsEfCFY5O
HNct8jxu84rdww++ncUL5EmmQLx2ssud7Jy8AMXCvOW20IfPRPGB0HXlGSmk0SXH
jxw+xSURVndrqGW2OsYuxJB1Axy7D5/i7QqLRa/gDgUbgZJ/AMolOzSfCqC+FP/s
nFjx72hqsASs5x30mTPf2pwupXqK0NsWylBi2kHUJLUK3TCJvCKN1NCxLLIH0eHG
OQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:35:29 2026 by rpki-client