Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
File:                     25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json)
Hash identifier:          McVFifx9GAFAyGG1FBTK5oZbTgBgUAZY2k79nyhTPRo=
Subject key identifier:   0E:2A:F8:18:A0:19:B9:1A:AE:25:E1:98:EE:5D:0B:E2:BB:55:1F:0F
Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
Certificate issuer:       /CN=25827d84056b8444cc2a7842759035354b8416bc
Certificate serial:       3141A2021BB656DEC39BA0F504534DDF2514384D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
Manifest number:          047A
Signing time:             Tue 13 Oct 2026 18:36:05 +0000
Manifest this update:     Tue 13 Oct 2026 18:31:05 +0000
Manifest next update:     Wed 14 Oct 2026 19:02:05 +0000
Files and hashes:         1: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: dHA6HLPOR3IQCPs+KBxka5EoTXTVzS3+Rk/fPIxN15o=)
                          2: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: AULHfw30fC5JPuaDQ09QijzFEojRfFb5/T1vtTj7hIM=)
                          3: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: NlN3fbd4xPs8oXDjI1+pTaPhc7vLifacDO0nMI7gkYc=)
                          4: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=)
                          5: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: GCZBa8Q0I/FVfCtxsIbtD99MmVi2LkFzoX6rN7jCUY8=)
                          6: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: eBGi76bk+i5KfnHGqq9jtzpn0gh813x0+GlA90AUkZI=)
                          7: AS207487.asa (hash: s3p6b4UEGWgtzDLFmXDHf89hF7XtnQxEviO1lAFHwO4=)
                          8: AS18607.asa (hash: ol8lct09PZ1pqBOGDq6LTNV0i5NYMmiHGhSWuOi+FwQ=)
                          9: 3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa (hash: b2vN+3qPM1Kt77HuQ8RzenF0xuc+QJpvrF7GjBac7y0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 19:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:41:a2:02:1b:b6:56:de:c3:9b:a0:f5:04:53:4d:df:25:14:38:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc
        Validity
            Not Before: Oct 13 18:31:05 2026 GMT
            Not After : Oct 14 19:02:05 2026 GMT
        Subject: CN=0E2AF818A019B91AAE25E198EE5D0BE2BB551F0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cd:9e:99:c3:e6:6e:73:53:10:c2:24:71:9e:
                    b4:b7:57:1c:d8:f3:3e:44:49:09:b2:2d:c3:b3:db:
                    1e:c1:e4:e2:2d:7b:0f:9e:04:91:61:54:31:ef:9f:
                    d3:19:16:d3:a7:db:6a:25:dd:70:57:80:4a:f0:d0:
                    fb:9a:3b:13:e6:cf:bd:3c:f1:14:b0:22:b3:f8:6c:
                    15:d4:69:9d:3a:7e:0d:ba:60:ef:be:1f:ff:cc:12:
                    c7:2c:f1:d1:30:93:92:96:a9:eb:96:3e:08:2d:4c:
                    52:47:60:dd:5b:89:5c:c7:5a:ba:89:b0:ee:22:f1:
                    22:f6:12:8b:be:15:4b:4a:c0:b7:82:b9:ed:ff:8c:
                    0b:dc:25:fb:7f:7a:c8:c9:2a:63:70:a3:a1:5e:8d:
                    13:2d:9b:ef:7e:2d:08:d0:d6:43:e0:4a:2c:13:ec:
                    b0:8f:ae:42:8e:de:e6:ca:e4:01:85:27:28:52:73:
                    f3:e4:3f:e0:af:2e:38:5a:24:2c:c3:65:4c:16:47:
                    86:2d:4d:e1:d5:b9:96:13:4f:2f:65:01:1d:bb:34:
                    bd:a9:8b:07:e6:39:e5:de:f3:ef:7a:8d:96:4d:cf:
                    78:6d:67:7e:46:eb:bc:af:9c:3f:f2:b2:fc:cf:4f:
                    19:6e:19:49:89:cf:8b:34:06:1a:39:a0:13:93:37:
                    81:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2A:F8:18:A0:19:B9:1A:AE:25:E1:98:EE:5D:0B:E2:BB:55:1F:0F
            X509v3 Authority Key Identifier:
                keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:5d:ea:a8:de:ae:24:d0:84:0c:af:05:9f:96:87:aa:4d:8d:
         7f:ed:96:cf:7a:44:6a:1e:43:65:20:a7:10:33:d3:7a:c5:4e:
         c5:87:91:ec:fd:f8:fe:e4:64:d1:04:2f:03:ac:2c:27:93:20:
         84:b8:19:21:fe:c0:d0:d6:a8:e8:d5:40:93:cf:f6:01:f9:a2:
         35:46:d5:de:9f:ec:06:35:2d:bc:b0:af:d7:51:d3:64:a0:94:
         4c:7a:0c:36:39:7c:bf:a5:d5:ac:8c:8f:a7:e6:bc:d7:e8:3b:
         45:0e:66:32:f8:b6:c9:13:00:4c:c2:79:91:74:98:f3:8a:57:
         90:ce:38:68:ae:35:78:62:5c:93:5f:69:c7:64:ae:3e:6e:c3:
         9e:af:8a:5a:81:f7:a3:b1:a5:0c:99:67:bb:43:05:8f:12:87:
         38:a4:38:d3:2d:9d:ae:ba:64:a1:db:92:e3:02:c5:6e:29:c3:
         1e:27:16:ce:cc:63:85:fe:5c:65:c8:24:5d:26:ad:1f:39:95:
         d3:09:12:a1:2f:90:bf:65:97:d9:42:9f:bb:71:45:91:97:19:
         91:05:cf:c8:81:25:5e:6d:65:60:05:48:e2:12:04:a0:73:02:
         ed:f3:81:9d:ca:63:c9:be:65:a4:6f:4b:93:0a:b3:22:aa:56:
         97:13:9b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 09:10:29 2026 by rpki-client