Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
File:                     892C2C5990DF4D7045BB55A011F473261F0643F6.mft (raw, json)
Hash identifier:          k99H11kaROBmrlC1OyrXoLOLuCMG3h6Z3l76W521oQo=
Subject key identifier:   9A:03:69:FB:53:CF:7E:A5:51:F5:53:2B:04:57:CB:92:70:A6:30:57
Authority key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6
Certificate issuer:       /CN=892C2C5990DF4D7045BB55A011F473261F0643F6
Certificate serial:       1848632F732B9D34F0AD1AF04CAE0D26DCDBFB78
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
Manifest number:          78
Signing time:             Fri 17 Apr 2026 04:50:50 +0000
Manifest this update:     Fri 17 Apr 2026 04:45:50 +0000
Manifest next update:     Sat 18 Apr 2026 07:29:50 +0000
Files and hashes:         1: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (hash: hu2ypRUPAbYRtYy+M6vE/W8hAPWUPIin1Y9THyO12k8=)
                          2: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: eEYD+/uvxh4zHSJ/ztOoyn4X0s3MJpPiWt8uJufCQxo=)
                          3: 892C2C5990DF4D7045BB55A011F473261F0643F6.crl (hash: ZQdbgxnEDSUVRmzU+GXZaddqOCuezfjmRvc9RZANJwE=)
                          4: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: BopLEf/ZmGSLBYK/WoER81ANZkew9Ua3lUbCSl9Jp8M=)
                          5: 326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa (hash: zvsXrWVsgBSXSyUjh+x5IMf/onv6HLNx12EoyFofF0E=)
                          6: 326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa (hash: zJsseoUx2WfsGKQLt6/5bb4va41JRgL/bMceecvpwjU=)
                          7: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (hash: YStl04IuWDei0D2oH+P/iOh9DAuPICnaprLiyMtF9EQ=)
                          8: 326131343a373538313a366630303a3a2f34342d3438203d3e20323035353932.roa (hash: tGdxxPffiEkwkQ8zZYSEAsNxiyZw0E/Szbr/GF6Tp3w=)
                          9: 326131343a373538313a366666303a3a2f34342d3438203d3e20323035353932.roa (hash: tJECAkp2L4ouOi5S7tH2woZZkAUIydRlFynQO3qJTRU=)
                          10: 326131343a373538313a366661303a3a2f34342d3438203d3e20323031393433.roa (hash: JBtcFivWNaxAMDtrHXjCq5obdYQeQd+Iuq7/0LpltBs=)
                          11: 326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa (hash: qRdEAnTHQewkn5xjFMDkvIHao/PLgA0XfOA580oQ+Wc=)
                          12: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: xJNDYcDRMGL3P/Oo1HJdC8ak3UBswnP71D60lUjKtOU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:48:63:2f:73:2b:9d:34:f0:ad:1a:f0:4c:ae:0d:26:dc:db:fb:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892C2C5990DF4D7045BB55A011F473261F0643F6
        Validity
            Not Before: Apr 17 04:45:50 2026 GMT
            Not After : Apr 18 07:29:50 2026 GMT
        Subject: CN=9A0369FB53CF7EA551F5532B0457CB9270A63057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8a:2d:f1:dc:07:a0:de:06:13:83:20:de:7d:
                    48:9e:34:1b:f3:2e:0f:e2:4a:86:79:c6:87:d1:1f:
                    8b:b9:b6:8e:f3:ba:39:f6:4c:63:47:42:de:2e:ae:
                    79:73:af:7e:26:12:e1:1b:17:7b:ab:1b:c8:ef:e9:
                    1a:51:6c:2d:93:e6:92:c9:d7:8f:e0:6b:7d:f1:6c:
                    bb:c9:10:ea:f3:0b:e4:7a:8f:9a:f4:7a:01:74:4b:
                    75:f4:a3:58:34:a7:36:78:81:f6:3f:ad:47:49:c6:
                    8c:36:dc:1d:01:13:de:db:1a:ae:46:38:e9:60:ef:
                    f2:aa:76:c2:56:23:cf:ef:7f:f5:85:1f:ba:52:07:
                    ed:90:ca:f6:8a:e0:7a:5a:0d:89:ac:f6:df:01:ac:
                    8b:73:2b:2e:18:25:e3:22:77:3e:82:be:85:90:96:
                    27:e0:2b:e1:b9:76:54:d5:5d:af:36:9d:b8:7a:e1:
                    71:8d:13:3e:14:cd:b1:9b:8a:26:7e:2b:66:5f:36:
                    eb:34:4c:50:fc:e0:ee:54:ee:81:ca:8f:97:39:27:
                    31:1d:50:26:72:8b:2d:e1:96:49:ce:fc:6e:4c:8f:
                    42:01:93:b0:32:a2:51:5f:d2:30:cd:63:06:ac:95:
                    5a:41:42:84:2d:12:2e:9c:15:21:d9:bc:86:6f:8a:
                    aa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:03:69:FB:53:CF:7E:A5:51:F5:53:2B:04:57:CB:92:70:A6:30:57
            X509v3 Authority Key Identifier:
                keyid:89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:82:55:2e:c4:c5:d5:ba:6c:76:2b:15:df:cd:44:a4:0f:05:
         c9:a6:e1:fc:4c:e5:85:18:80:43:5b:29:70:1d:b8:c8:e0:5f:
         c0:1e:cc:ea:cd:9e:50:10:b4:91:45:b0:69:bd:45:9e:76:17:
         7e:bf:10:5e:19:56:84:62:2d:67:85:ae:6b:93:d0:af:06:bf:
         9e:a5:4f:eb:ef:5b:fa:92:00:7c:34:31:68:3e:5e:02:99:75:
         e2:9e:54:1b:e5:d3:17:aa:73:43:bb:88:6c:7f:61:b4:1b:73:
         6c:15:b1:0f:c9:97:04:4c:e1:a4:43:d7:d1:57:93:91:73:e9:
         02:49:7e:50:16:ec:06:af:57:ca:2d:75:3f:0d:b5:2d:51:d2:
         cc:7f:44:15:3a:c0:8d:9e:9f:ea:bd:3b:44:c0:31:6b:12:39:
         73:46:ce:9c:61:18:76:42:77:b5:c4:d4:e6:d4:e3:99:62:6d:
         16:35:55:b9:ed:e8:88:dd:d5:65:07:23:1e:bf:c3:1d:2d:e0:
         64:29:bf:03:15:72:4c:f5:12:53:6b:29:a6:13:98:db:e1:df:
         10:5c:fe:db:ff:9c:6b:63:3d:c9:eb:26:b3:42:b3:ea:33:ef:
         2a:61:da:ea:0e:74:eb:11:78:86:75:e5:00:5f:7b:6a:73:56:
         0c:59:4b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:22:33 2026 by rpki-client