Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/64c0f781-751d-4eef-bd2d-7bba70e04831/0/55922B591EB7B4993B927EDD420825BCD8B40A76.mft
File:                     55922B591EB7B4993B927EDD420825BCD8B40A76.mft (raw, json)
Hash identifier:          TwbWy+TWtvqIgf+aCLUQBEye0mfds83pvxd5l6c28Ps=
Subject key identifier:   C5:0A:7E:48:E6:A9:EA:15:B5:4D:B9:C6:CB:45:3A:CF:75:38:45:E7
Authority key identifier: 55:92:2B:59:1E:B7:B4:99:3B:92:7E:DD:42:08:25:BC:D8:B4:0A:76
Certificate issuer:       /CN=55922b591eb7b4993b927edd420825bcd8b40a76
Certificate serial:       7677CEB0B36F94D06D885A1EEDA71B7380883318
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZIrWR63tJk7kn7dQgglvNi0CnY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/64c0f781-751d-4eef-bd2d-7bba70e04831/0/55922B591EB7B4993B927EDD420825BCD8B40A76.mft
Manifest number:          44
Signing time:             Sun 20 Sep 2026 09:32:58 +0000
Manifest this update:     Sun 20 Sep 2026 09:27:58 +0000
Manifest next update:     Mon 21 Sep 2026 10:42:58 +0000
Files and hashes:         1: 326130393a646438303a3a2f33322d3438203d3e20323039383636.roa (hash: XUMCzia5n6bhU7/RAQLBWxlweY2JCcEmQbxvxt1Uxj4=)
                          2: 55922B591EB7B4993B927EDD420825BCD8B40A76.crl (hash: 7ipged25lhWRoQUsPc4ZYvZcwC/tmuT6Ev39JBoSzx8=)
                          3: 326130393a646438313a3a2f33322d3438203d3e20323039383636.roa (hash: jiT4efqPqZ6t9KrByhtnGL/3sVj6Xw7bylchaOdBskw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/64c0f781-751d-4eef-bd2d-7bba70e04831/0/55922B591EB7B4993B927EDD420825BCD8B40A76.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/64c0f781-751d-4eef-bd2d-7bba70e04831/0/55922B591EB7B4993B927EDD420825BCD8B40A76.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VZIrWR63tJk7kn7dQgglvNi0CnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 10:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:77:ce:b0:b3:6f:94:d0:6d:88:5a:1e:ed:a7:1b:73:80:88:33:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55922b591eb7b4993b927edd420825bcd8b40a76
        Validity
            Not Before: Sep 20 09:27:58 2026 GMT
            Not After : Sep 21 10:42:58 2026 GMT
        Subject: CN=C50A7E48E6A9EA15B54DB9C6CB453ACF753845E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8a:9e:e9:f4:ae:92:a3:6f:21:11:be:d4:7a:
                    82:83:68:d1:0d:5d:f6:cf:e1:c5:85:42:f1:f2:ac:
                    b7:78:08:1d:9e:83:b3:6e:8e:02:e9:53:4c:9c:3a:
                    60:34:49:45:e9:e2:4b:d7:12:b4:00:44:2c:d5:f3:
                    7c:e5:16:3e:4d:95:4c:ca:cc:6d:7d:52:a3:f5:58:
                    c0:94:8e:91:04:ff:0a:38:4e:d8:02:04:b3:f0:fb:
                    d3:3b:ff:83:fa:a8:49:de:fa:39:34:bd:88:07:81:
                    43:5e:e0:e2:db:27:fa:d3:e4:89:5f:75:bc:30:a3:
                    d8:bf:ba:1a:25:3b:8f:39:7a:c5:70:c3:26:d5:75:
                    5f:7f:60:c9:b6:42:c9:69:cc:12:19:4a:18:aa:f6:
                    88:e4:72:a2:34:b1:93:47:38:9e:8b:2e:dc:b4:08:
                    a6:75:37:0b:11:7b:1b:b4:71:33:a1:a6:70:a0:c7:
                    39:55:5b:dd:91:e8:f6:73:7d:6a:73:eb:67:8e:02:
                    a3:88:9b:d5:2c:c9:da:a4:3b:0a:6b:7b:1b:47:cd:
                    ef:ff:ce:80:a4:0c:94:cc:b4:8f:24:5e:1b:38:99:
                    ca:59:4b:02:c8:43:96:5e:c7:da:7e:2d:65:a7:32:
                    ba:d5:34:5e:ed:3a:97:69:cd:06:23:19:53:4f:8e:
                    90:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0A:7E:48:E6:A9:EA:15:B5:4D:B9:C6:CB:45:3A:CF:75:38:45:E7
            X509v3 Authority Key Identifier:
                keyid:55:92:2B:59:1E:B7:B4:99:3B:92:7E:DD:42:08:25:BC:D8:B4:0A:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/64c0f781-751d-4eef-bd2d-7bba70e04831/0/55922B591EB7B4993B927EDD420825BCD8B40A76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZIrWR63tJk7kn7dQgglvNi0CnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/64c0f781-751d-4eef-bd2d-7bba70e04831/0/55922B591EB7B4993B927EDD420825BCD8B40A76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:50:c8:23:93:37:51:c5:04:7e:ca:76:76:00:cf:6f:96:58:
         d1:8a:20:cd:4f:2d:95:54:ed:db:16:aa:a0:fc:9e:80:9a:d1:
         f1:56:ac:4a:3b:7e:96:ea:73:48:20:04:7e:ce:2e:d1:7c:e7:
         fe:41:55:71:e0:20:48:70:87:7e:0e:99:ef:2d:eb:7a:0f:0e:
         d9:02:20:99:ce:8a:43:06:90:f0:3f:07:c4:e5:3a:41:5d:82:
         e1:d7:36:60:cb:57:fc:78:f8:29:79:ec:7b:48:48:9c:ec:41:
         fe:3d:a0:cc:4b:e7:58:f2:31:a8:c5:89:81:73:75:08:0b:e8:
         5a:32:7a:3f:a2:90:02:19:d4:6e:df:65:aa:c6:39:13:df:12:
         15:04:03:cb:09:c8:0f:c7:23:46:27:9b:b4:95:13:4d:aa:d0:
         ab:4d:6d:6b:d3:bf:c2:31:56:a0:92:77:ee:2a:df:b3:3d:91:
         52:e0:b7:ef:a3:f1:ae:d4:e5:28:6f:af:28:09:68:39:c0:6f:
         79:f8:62:50:95:e7:80:f1:e6:a3:81:9e:cb:f7:8d:c8:25:68:
         eb:56:43:f1:f7:e0:bc:86:7a:42:4f:1c:2f:f0:3e:f0:0c:20:
         1f:b3:7c:b8:f9:c2:5f:e4:ed:c1:19:cc:39:24:c1:76:5f:c0:
         82:61:4c:a0
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUdnfOsLNvlNBtiFoe7acbc4CIMxgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU5MjJiNTkxZWI3YjQ5OTNiOTI3ZWRkNDIwODI1YmNk
OGI0MGE3NjAeFw0yNjA5MjAwOTI3NThaFw0yNjA5MjExMDQyNThaMDMxMTAvBgNV
BAMTKEM1MEE3RTQ4RTZBOUVBMTVCNTREQjlDNkNCNDUzQUNGNzUzODQ1RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCip7p9K6So28hEb7UeoKDaNEN
XfbP4cWFQvHyrLd4CB2eg7NujgLpU0ycOmA0SUXp4kvXErQARCzV83zlFj5NlUzK
zG19UqP1WMCUjpEE/wo4TtgCBLPw+9M7/4P6qEne+jk0vYgHgUNe4OLbJ/rT5Ilf
dbwwo9i/uholO485esVwwybVdV9/YMm2QslpzBIZShiq9ojkcqI0sZNHOJ6LLty0
CKZ1NwsRexu0cTOhpnCgxzlVW92R6PZzfWpz62eOAqOIm9UsydqkOwprextHze//
zoCkDJTMtI8kXhs4mcpZSwLIQ5Zex9p+LWWnMrrVNF7tOpdpzQYjGVNPjpBvAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUxQp+SOap6hW1TbnGy0U6z3U4RecwHwYDVR0j
BBgwFoAUVZIrWR63tJk7kn7dQgglvNi0CnYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjRjMGY3ODEtNzUxZC00ZWVmLWJkMmQtN2JiYTcwZTA0
ODMxLzAvNTU5MjJCNTkxRUI3QjQ5OTNCOTI3RURENDIwODI1QkNEOEI0MEE3Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1ZaSXJXUjYzdEprN2tuN2RRZ2dsdk5p
MENuWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82NGMwZjc4MS03
NTFkLTRlZWYtYmQyZC03YmJhNzBlMDQ4MzEvMC81NTkyMkI1OTFFQjdCNDk5M0I5
MjdFREQ0MjA4MjVCQ0Q4QjQwQTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1DII5M3UcUEfsp2dgDP
b5ZY0YogzU8tlVTt2xaqoPyegJrR8VasSjt+lupzSCAEfs4u0Xzn/kFVceAgSHCH
fg6Z7y3reg8O2QIgmc6KQwaQ8D8HxOU6QV2C4dc2YMtX/Hj4KXnse0hInOxB/j2g
zEvnWPIxqMWJgXN1CAvoWjJ6P6KQAhnUbt9lqsY5E98SFQQDywnID8cjRiebtJUT
TarQq01ta9O/wjFWoJJ37irfsz2RUuC376PxrtTlKG+vKAloOcBvefhiUJXngPHm
o4Gey/eNyCVo61ZD8ffgvIZ6Qk8cL/A+8AwgH7N8uPnCX+TtwRnMOSTBdl/AgmFM
oA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 02:43:53 2026 by rpki-client