Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
File:                     892C2C5990DF4D7045BB55A011F473261F0643F6.mft (raw, json)
Hash identifier:          bFFXfZOMhGBTYOeczYnH5lWD09K14/Zua7iqweJH0KE=
Subject key identifier:   8F:F6:93:B1:9F:36:73:01:B3:BF:05:C3:E6:FB:9C:D8:F7:94:83:C7
Authority key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6
Certificate issuer:       /CN=892C2C5990DF4D7045BB55A011F473261F0643F6
Certificate serial:       696CD2D7DE58070486DF57F846AC1EDD862FD5A8
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
Manifest number:          014E
Signing time:             Mon 21 Sep 2026 11:38:22 +0000
Manifest this update:     Mon 21 Sep 2026 11:33:22 +0000
Manifest next update:     Tue 22 Sep 2026 15:34:22 +0000
Files and hashes:         1: 326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa (hash: zvsXrWVsgBSXSyUjh+x5IMf/onv6HLNx12EoyFofF0E=)
                          2: 326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa (hash: zJsseoUx2WfsGKQLt6/5bb4va41JRgL/bMceecvpwjU=)
                          3: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: BopLEf/ZmGSLBYK/WoER81ANZkew9Ua3lUbCSl9Jp8M=)
                          4: 326131343a373538313a366661303a3a2f34342d3438203d3e20323031393433.roa (hash: JBtcFivWNaxAMDtrHXjCq5obdYQeQd+Iuq7/0LpltBs=)
                          5: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: xJNDYcDRMGL3P/Oo1HJdC8ak3UBswnP71D60lUjKtOU=)
                          6: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: eEYD+/uvxh4zHSJ/ztOoyn4X0s3MJpPiWt8uJufCQxo=)
                          7: 892C2C5990DF4D7045BB55A011F473261F0643F6.crl (hash: orVSbBh4w6El1L1gbB2rA59wx2/fZh0GKjqdmQ0BqHM=)
                          8: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (hash: hu2ypRUPAbYRtYy+M6vE/W8hAPWUPIin1Y9THyO12k8=)
                          9: 326131343a373538313a366630303a3a2f34342d3438203d3e20323035353932.roa (hash: tGdxxPffiEkwkQ8zZYSEAsNxiyZw0E/Szbr/GF6Tp3w=)
                          10: 326131343a373538313a366666303a3a2f34342d3438203d3e20323035353932.roa (hash: tJECAkp2L4ouOi5S7tH2woZZkAUIydRlFynQO3qJTRU=)
                          11: 326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa (hash: qRdEAnTHQewkn5xjFMDkvIHao/PLgA0XfOA580oQ+Wc=)
                          12: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (hash: YStl04IuWDei0D2oH+P/iOh9DAuPICnaprLiyMtF9EQ=)
                          13: 326131343a373538313a366336393a3a2f34382d3438203d3e20323136313233.roa (hash: HgdPJda6r5W610xVzMNjTKP68bG2jdXcdcTL6VaTf2E=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:6c:d2:d7:de:58:07:04:86:df:57:f8:46:ac:1e:dd:86:2f:d5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892C2C5990DF4D7045BB55A011F473261F0643F6
        Validity
            Not Before: Sep 21 11:33:22 2026 GMT
            Not After : Sep 22 15:34:22 2026 GMT
        Subject: CN=8FF693B19F367301B3BF05C3E6FB9CD8F79483C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:da:7f:58:4b:3d:91:68:d8:8e:56:2e:87:0a:
                    33:6f:a2:21:c1:33:14:74:6f:97:3c:6b:17:ef:f0:
                    07:aa:5d:20:68:d0:5e:f9:96:df:e3:65:68:b5:77:
                    bc:45:a7:60:94:82:d9:db:d7:ed:5d:8f:81:37:56:
                    a9:0b:6c:da:7c:e8:fc:6e:0c:83:fd:d2:33:3c:ca:
                    f2:3f:84:eb:96:65:7a:85:2b:a2:b6:5f:41:ad:d8:
                    e0:27:4a:35:fc:ca:81:72:1a:ce:5e:01:53:b2:c5:
                    87:70:93:50:81:c4:85:fa:ee:b0:a3:f2:a1:65:4b:
                    98:24:0a:a9:34:36:57:52:02:aa:67:63:27:af:20:
                    32:91:c1:5a:89:da:e2:c5:7d:ef:35:a3:91:b8:18:
                    5c:be:f1:12:a4:72:1d:97:44:65:06:46:25:df:e2:
                    c6:d8:ab:4c:9c:ca:44:93:f2:11:44:ec:8c:85:35:
                    95:a5:35:e9:64:de:68:06:5b:f8:2a:a2:b0:db:a7:
                    ff:cc:30:52:68:db:a8:a0:ee:a4:d3:52:b4:c7:df:
                    22:7c:5c:a1:93:65:ea:12:93:41:13:9f:1c:0b:87:
                    04:b2:1d:32:1c:9d:1f:0b:73:5d:01:94:c0:b4:15:
                    e7:dc:9e:79:e8:9c:db:5f:0d:0c:b3:5c:8d:71:5a:
                    de:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F6:93:B1:9F:36:73:01:B3:BF:05:C3:E6:FB:9C:D8:F7:94:83:C7
            X509v3 Authority Key Identifier:
                keyid:89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ad:3d:ec:d1:16:e1:c5:63:51:86:4f:af:70:87:ab:42:ff:
         e0:94:7e:13:09:28:96:6d:9f:85:a2:82:31:a0:1c:83:8d:45:
         3d:1d:6a:4f:bd:37:dd:6d:95:94:23:95:cf:7b:6b:da:66:69:
         bb:c2:94:14:b0:d9:83:5d:71:5d:4b:70:5c:fa:d1:a0:86:1b:
         87:3e:5c:aa:36:25:57:9e:1a:e2:64:26:82:17:b7:b5:3e:0b:
         f8:4e:fa:72:77:26:29:17:eb:c3:66:c8:47:90:2d:05:ca:89:
         8b:da:1e:36:4e:9c:b2:1e:c0:a9:b6:33:85:cd:ab:4e:68:8f:
         9e:fe:e7:10:18:cc:65:30:c6:73:9d:d0:f1:ce:7a:5e:2d:f6:
         f9:7e:a5:a8:fe:5c:1b:61:e1:bc:63:c4:c9:7a:6d:00:6e:a6:
         0b:8f:81:85:4b:ac:06:6a:c4:7c:d3:ee:57:36:d5:7e:44:e7:
         07:84:74:65:e1:46:3b:89:5d:3e:bc:19:cf:be:59:ca:2e:ef:
         fb:cf:54:5f:41:ca:9f:82:b6:ab:68:74:4d:3a:89:e8:bc:0c:
         ef:c4:9a:cc:3c:2d:d5:93:32:99:3d:ed:f7:de:68:e0:93:d7:
         6f:07:4c:60:d7:f5:bf:98:7b:d8:ba:99:90:94:ef:0c:9d:7c:
         fc:f7:ec:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:43:08 2026 by rpki-client