Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft
File:                     8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json)
Hash identifier:          vGw44YWNDjyKVR0k+gsuKtbDnj8x8aW+6/ITte/L/UA=
Subject key identifier:   93:F2:08:56:16:EE:07:8E:7E:4B:D7:8C:2C:AE:06:6A:E8:CE:71:7D
Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C
Certificate issuer:       /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C
Certificate serial:       05B38314249EB354E7DC1B2D94FD2D1360B309D7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft
Manifest number:          0392
Signing time:             Tue 28 Jul 2026 12:25:24 +0000
Manifest this update:     Tue 28 Jul 2026 12:20:24 +0000
Manifest next update:     Wed 29 Jul 2026 13:17:24 +0000
Files and hashes:         1: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: C6hqMYO+iDZ7yOYpNiILUpTct4heoXWQfOXqZh+8IPA=)
                          2: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: YgD4FXqTWmPFPjeYHziBG/J6IaO/Hxlen1UWzQrfC/Y=)
                          3: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: /APvQtIczoMdPeFgS8yLWOSzDbhA86h5Cc1N87vUKRI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:17:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b3:83:14:24:9e:b3:54:e7:dc:1b:2d:94:fd:2d:13:60:b3:09:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C
        Validity
            Not Before: Jul 28 12:20:24 2026 GMT
            Not After : Jul 29 13:17:24 2026 GMT
        Subject: CN=93F2085616EE078E7E4BD78C2CAE066AE8CE717D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:91:be:a1:97:74:aa:e7:fa:42:20:a7:10:
                    f6:f8:5f:13:bd:4a:48:c2:f9:8b:21:8c:9a:be:ae:
                    45:f5:6c:17:85:22:11:65:98:f9:85:86:68:d3:b1:
                    d4:55:76:ef:b1:b3:d2:d8:00:87:b8:2e:16:2d:8b:
                    f0:7a:e0:c5:d9:92:66:b3:dc:5d:27:79:4f:ed:65:
                    fd:22:1a:76:74:6d:5a:8b:60:0a:f4:58:71:b8:e7:
                    08:94:47:38:29:1e:32:82:9a:22:16:95:e1:8a:bc:
                    83:c3:d4:f1:2f:7c:37:87:a8:1e:b6:c6:14:91:53:
                    b8:c9:ce:d5:cb:47:4b:ba:0a:27:0b:ab:eb:ff:9b:
                    66:da:43:de:8f:85:de:df:43:74:83:bc:f0:4d:8f:
                    aa:62:73:56:de:d8:9a:e5:2b:f9:74:97:23:59:6a:
                    ea:11:98:db:88:56:d6:be:f2:a0:ff:39:28:45:f3:
                    b1:b2:91:d7:c5:b4:b7:90:bc:b9:f6:73:d4:bc:64:
                    43:f5:d6:33:dd:db:90:52:b9:41:fb:56:e0:bc:61:
                    1d:0a:4e:e6:7b:bb:01:35:d3:80:31:3e:ee:12:f8:
                    ca:58:5a:6d:97:05:7b:0d:39:cf:75:5f:f4:1c:d5:
                    09:cc:4c:91:d4:db:c0:0f:3c:20:b2:e6:bb:a9:cd:
                    09:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F2:08:56:16:EE:07:8E:7E:4B:D7:8C:2C:AE:06:6A:E8:CE:71:7D
            X509v3 Authority Key Identifier:
                keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:cb:7c:f2:a2:50:5a:59:f1:e6:3e:3c:de:a4:24:3e:c1:73:
         83:c0:f4:94:1c:9f:e0:fd:e9:dd:00:2c:11:ce:37:40:36:b3:
         42:ac:4c:1f:0f:12:aa:5e:db:47:70:30:10:13:2c:55:bd:7e:
         b6:54:6a:27:47:cb:d0:b9:a2:be:e5:2c:e4:62:69:35:e3:33:
         e0:6c:cb:00:a7:87:36:8e:c2:d7:d5:53:98:3a:8c:57:2b:bd:
         07:22:34:83:e1:58:78:d7:49:b5:90:0c:a6:32:d5:eb:fb:66:
         ac:90:6a:a4:b6:2b:6d:bc:d0:f6:6e:db:47:99:84:59:bf:f1:
         b7:1b:6d:11:ec:4a:3a:e8:ce:49:04:35:b4:21:25:7a:64:15:
         3e:5a:6f:d8:ef:e7:a5:6f:22:99:57:e8:2f:61:2a:f8:a4:e0:
         17:15:9b:00:b4:c9:8c:66:76:a3:1e:31:52:d5:d0:7a:5e:e8:
         53:73:2f:d1:5f:1c:87:89:03:53:83:dd:02:0b:e6:d9:2b:08:
         39:77:35:e3:c7:ef:22:9e:eb:a2:ac:9f:0f:0d:c0:32:d8:2c:
         d7:a5:74:17:1b:c9:ab:e5:e7:b5:e3:eb:d5:27:f1:9d:0c:e4:
         9b:56:d9:fd:c8:4b:21:5a:ee:13:89:67:1f:f1:f8:b9:fa:f7:
         96:9f:0b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:05:33 2026 by rpki-client