Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
File:                     ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft (raw, json)
Hash identifier:          ps5Csf6kd/b0c2Npuq70FNikGu2HLbDxemmcBrdQHNA=
Subject key identifier:   1F:60:97:33:99:F5:7F:48:B8:F4:6B:AC:69:1F:66:38:5A:61:D2:C8
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Certificate issuer:       /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial:       5D21F620B230F05AA86FABB23669FCC75E7516A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
Manifest number:          01B2
Signing time:             Tue 22 Sep 2026 09:10:47 +0000
Manifest this update:     Tue 22 Sep 2026 09:05:47 +0000
Manifest next update:     Wed 23 Sep 2026 12:58:47 +0000
Files and hashes:         1: 34352e3134392e36312e302f32342d3234203d3e20313337353137.roa (hash: bPblgjM8vXENfZasylb5ZzMp1DkYcmu6TBL1HJESdOc=)
                          2: 34352e3134392e36322e302f32342d3234203d3e20383334.roa (hash: llP8g/0WrRmSn1X308T/5f3EuZAU9g/XCLuH1bMAcIY=)
                          3: 34352e3134392e36332e302f32342d3234203d3e20323134343833.roa (hash: mQg7Rad/kKZcSLKWUMcvftwu7Gok/Q3zJLvicbmuesI=)
                          4: 34352e3134392e3136372e302f32342d3234203d3e20323132363639.roa (hash: G5FQ1l+cRk3n7sDIEiJiOqD91u3IjodfdNcjTCN0Zms=)
                          5: 34352e3134392e3136352e302f32342d3234203d3e20323039303433.roa (hash: xof4y/WucaiGMtyPzgbTPsOcPFlb9obn6jFW42zp3IM=)
                          6: 3139342e35302e312e302f32342d3234203d3e203534323532.roa (hash: ruvdsYTXtE0Ab54FYmgOEkBccmfDScUwXgNFAX7lgcQ=)
                          7: 34352e3134392e3136342e302f32342d3234203d3e203235333639.roa (hash: a0LqwFPI6pwa1fZnOKWJVr+UvNzZLlo/pfpnRlcnUlw=)
                          8: 3139342e3234372e34352e302f32342d3234203d3e20313337353137.roa (hash: 7Uz0iGXKq5oSbUI44D0T64XUT0jHl47mRLVxjRhD2eU=)
                          9: 3139342e3234362e33372e302f32342d3234203d3e20313437323831.roa (hash: Je8vOuvO8vmi0C+HW9/2FSLCLUlPSQcN2eHpx1G3DXw=)
                          10: 34352e3134332e3136302e302f32342d3234203d3e203232313638.roa (hash: R01FRlBDr9pZoq05BG3LRHuNkIAJs+FNxUn/NkK9at8=)
                          11: 3139342e3234372e34342e302f32342d3234203d3e20313432313436.roa (hash: TqX0P9wlnvbZoWAo8DlV20oJQITx6kCNiVhWbz6v/l4=)
                          12: 3139342e35302e302e302f32342d3234203d3e203438333134.roa (hash: BtX3QzIneVP4peKGNcyeJeMDG5hgOoQ4i/5PEk0YGmY=)
                          13: 34352e3134332e3136322e302f32342d3234203d3e203233343730.roa (hash: OcZ6EMgc6x8+IMfJh9quglLv9DVchqMI90FMfGysZqA=)
                          14: 3139342e35302e312e302f32342d3234203d3e203634323637.roa (hash: Y111o5heSVgTuvX1afqOIbWwexv6C9e08p+YRNlvpVI=)
                          15: 34352e3134392e36302e302f32342d3234203d3e2039333034.roa (hash: z9ItEX8PaLlf+9uchVJAZNUpHljuvgQ+N1QS8/y6ykI=)
                          16: 3139342e35302e342e302f32342d3234203d3e20343030303339.roa (hash: 1KQ8U/cyI6RlRLUmJsQ7MnZR4YGCCRfjVSVg2/aEhuA=)
                          17: 34352e3134332e3136312e302f32342d3234203d3e203631333137.roa (hash: 8ZjMd6obm3N7HBniZT8uftJQwQbBGvAMihymyaoAi+E=)
                          18: 34352e3134392e3136362e302f32342d3234203d3e20323132333834.roa (hash: oGRqBKIGwkwo89Qzo8J8QE2XhyVF3R37X5VJTJkYTLY=)
                          19: 34352e3134332e3136332e302f32342d3234203d3e203139343337.roa (hash: M8Y5TaWjTiVOLanqncdwCCTpjaAInXMAJmIU/gVIuL8=)
                          20: 3139342e35302e312e302f32342d3234203d3e20333937363330.roa (hash: TeUJtf1ikY7LLYRPrAz/E+BsfW9QE1+7cNe6Ilv12VI=)
                          21: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl (hash: 5gBnhPAl2z/+CVwxWMQM9PeMcozQLyOufVXboaP0oBs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:21:f6:20:b2:30:f0:5a:a8:6f:ab:b2:36:69:fc:c7:5e:75:16:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
        Validity
            Not Before: Sep 22 09:05:47 2026 GMT
            Not After : Sep 23 12:58:47 2026 GMT
        Subject: CN=1F60973399F57F48B8F46BAC691F66385A61D2C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d4:0a:a8:27:88:00:2a:7a:29:d8:8c:c1:36:
                    f7:bf:cb:b4:61:b3:71:e7:1a:11:ab:d2:38:7f:a5:
                    f1:89:1e:5e:e9:13:55:3d:6d:15:1b:27:2e:b6:bf:
                    9b:34:7a:cc:c6:70:da:af:d9:3f:fd:ff:d5:32:d4:
                    43:b2:c1:b5:c0:82:9d:f2:05:4d:f4:f1:89:7c:4f:
                    9d:73:0c:27:75:a9:dd:54:dd:d0:d6:a8:3d:38:bb:
                    bf:69:91:f0:4b:39:67:21:f4:e6:e9:11:75:c8:c5:
                    a7:99:1d:88:de:eb:f3:48:64:8d:fd:48:c9:f3:06:
                    fb:ba:2f:9b:8d:c2:00:f6:29:32:e0:26:11:e2:2f:
                    98:9f:5e:9e:03:12:a7:98:2a:98:04:bb:1e:9d:77:
                    6e:4c:ad:c5:4e:fe:34:29:eb:06:7e:74:79:45:8a:
                    63:8b:dd:24:6f:22:1d:9d:10:bb:12:9a:23:f2:9a:
                    cd:f9:14:8d:d1:e2:49:c4:2f:59:db:36:b1:81:4e:
                    9e:f6:53:8c:b8:c3:2c:c5:a3:c5:21:7d:24:22:e8:
                    da:d5:34:c7:f8:60:e2:75:a7:15:e5:87:b8:1e:3e:
                    04:f0:c3:c9:39:36:30:0e:76:94:51:12:cd:0f:48:
                    7c:fb:a4:b5:c7:9e:22:12:46:38:53:f1:70:8f:f6:
                    c7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:60:97:33:99:F5:7F:48:B8:F4:6B:AC:69:1F:66:38:5A:61:D2:C8
            X509v3 Authority Key Identifier:
                keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:8f:e1:ff:33:14:b6:b8:68:3a:20:32:43:d0:af:aa:23:89:
         24:b8:7f:8b:7f:e8:43:c0:2d:b1:5f:8b:32:f4:22:8c:a4:5b:
         8a:e9:0b:10:74:fc:8f:cf:47:3b:25:62:b5:53:73:0d:7c:73:
         4f:76:2f:a6:4c:e4:f2:86:b5:48:ef:17:bb:6b:64:07:b8:a5:
         65:68:6e:b7:31:40:fc:d5:2f:0d:a2:9d:78:07:dd:f6:d9:12:
         1d:33:35:bd:49:bc:f4:1e:18:f0:8f:f6:dd:d4:38:0f:2c:58:
         45:93:e7:92:44:29:00:8e:a3:82:cb:ea:de:c6:eb:cd:58:a1:
         00:23:e7:c9:b6:af:ee:3b:d2:8d:0d:19:fb:dc:07:1f:3d:2a:
         cc:e2:b1:e3:70:81:44:69:cd:6b:b2:7e:25:ec:4b:a3:1f:16:
         6d:7c:f6:5a:67:8a:8e:aa:23:6c:6d:1f:ba:37:23:9e:b8:00:
         a7:2d:a1:32:d1:5c:ed:f6:f9:49:51:3b:79:78:dd:6b:dc:72:
         f1:dc:7e:20:d8:5d:e1:f8:52:9f:2e:27:0c:31:82:74:5c:36:
         d0:9c:c7:5f:7c:93:34:00:62:67:37:70:b6:c7:d4:cd:86:3d:
         f8:87:c7:fc:94:b6:22:ca:3e:85:e0:85:e6:66:d1:18:f5:53:
         63:29:87:30
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUXSH2ILIw8Fqob6uyNmn8x151FqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm
ZjZkNjQ1YjAeFw0yNjA5MjIwOTA1NDdaFw0yNjA5MjMxMjU4NDdaMDMxMTAvBgNV
BAMTKDFGNjA5NzMzOTlGNTdGNDhCOEY0NkJBQzY5MUY2NjM4NUE2MUQyQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1AqoJ4gAKnop2IzBNve/y7Rh
s3HnGhGr0jh/pfGJHl7pE1U9bRUbJy62v5s0eszGcNqv2T/9/9Uy1EOywbXAgp3y
BU308Yl8T51zDCd1qd1U3dDWqD04u79pkfBLOWch9ObpEXXIxaeZHYje6/NIZI39
SMnzBvu6L5uNwgD2KTLgJhHiL5ifXp4DEqeYKpgEux6dd25MrcVO/jQp6wZ+dHlF
imOL3SRvIh2dELsSmiPyms35FI3R4knEL1nbNrGBTp72U4y4wyzFo8UhfSQi6NrV
NMf4YOJ1pxXlh7gePgTww8k5NjAOdpRREs0PSHz7pLXHniISRjhT8XCP9sc7AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUH2CXM5n1f0i49GusaR9mOFph0sgwHwYDVR0j
BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz
NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5
dFpGcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MDMwNzlkZS0z
OGE3LTQ1ZjMtYWE4Mi01NDJlYWYzNzM3NjAvMC9FRDhGOUE3QzcxRDk0MDA3MzlC
QjhGQzk3MTZFNDM0MkZGNkQ2NDVCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARo/h/zMUtrhoOiAyQ9Cv
qiOJJLh/i3/oQ8AtsV+LMvQijKRbiukLEHT8j89HOyVitVNzDXxzT3Yvpkzk8oa1
SO8Xu2tkB7ilZWhutzFA/NUvDaKdeAfd9tkSHTM1vUm89B4Y8I/23dQ4DyxYRZPn
kkQpAI6jgsvq3sbrzVihACPnybav7jvSjQ0Z+9wHHz0qzOKx43CBRGnNa7J+JexL
ox8WbXz2WmeKjqojbG0fujcjnrgApy2hMtFc7fb5SVE7eXjda9xy8dx+INhd4fhS
ny4nDDGCdFw20JzHX3yTNABiZzdwtsfUzYY9+IfH/JS2Iso+heCF5mbRGPVTYymH
MA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:54:33 2026 by rpki-client