Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
File:                     4158AB6E76F847695C8FEB594CB05DE3191E7877.mft (raw, json)
Hash identifier:          M8SytkuHx0T8gst8zuOS3ixpN+RY0Npz2fHN0CN2zX8=
Subject key identifier:   92:E5:D5:8E:5A:7C:9C:08:8E:F1:8B:B5:95:D5:11:CA:BE:6D:33:16
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Certificate issuer:       /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial:       5484B77B70B678335AA1E87D32CCEB488D331730
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
Manifest number:          02EE
Signing time:             Mon 21 Sep 2026 08:57:43 +0000
Manifest this update:     Mon 21 Sep 2026 08:52:43 +0000
Manifest next update:     Tue 22 Sep 2026 10:49:43 +0000
Files and hashes:         1: 3230312e342e31322e302f32322d3332203d3e20393137.roa (hash: dM5HSwOUNmEnlGbv7ZT9pdO1x5lxVVoCWSo1pXl1GwY=)
                          2: 3230312e342e33322e302f31392d3234203d3e2038383838.roa (hash: 88uKKmosMU8QWurDK/eF4tR2RZHe7yQN2jm6tp8Qx98=)
                          3: 3230312e342e33322e302f31392d3234203d3e2033323134.roa (hash: RqpDVwFKUVJ4KXL9OMqnTfidvT/47+lHjhOmK+YPi50=)
                          4: 3230312e35302e302e302f32302d3332203d3e203233393631.roa (hash: x1nzhHbSXkkPXE9Cj4iypMmjIOnW38aYFhMxIaEDc4c=)
                          5: 3230312e35302e33322e302f31392d3234203d3e2039333132.roa (hash: cjeOGY6nCjdAT/hEk3/0FGXwsaf/Bg3Zzc4O5AGGMT8=)
                          6: 3137372e3137372e302e302f31392d3332203d3e203335343837.roa (hash: FhNumEvNBAPQ2E3f+BoZr2srux+Hc8OraRoB9QFpC2c=)
                          7: 3230312e35302e33322e302f31392d3234203d3e2033323538.roa (hash: B+7eeENIirWUXLBYi6Gdu/QL872sGXdRYHqgd1hn4gM=)
                          8: 3230312e342e312e302f32342d3332203d3e203530303639.roa (hash: yCPwiHlSYGyN7DUJMOMTwc4KlrDr6ee2eRkrRvYrukw=)
                          9: 4158AB6E76F847695C8FEB594CB05DE3191E7877.crl (hash: DGeap2PZfoXi4FdMSK6QlcJ8WxduJb6TujwdvXtpq48=)
                          10: 3230312e342e352e302f32342d3332203d3e203530303639.roa (hash: EEXiCogld0jiCpGpaGf8puqkOYyieyMdz+HB/WP5ab4=)
                          11: 3230312e35302e33322e302f31392d3234203d3e2034373835.roa (hash: GhLtRoDjlqNHphHRdRApCsni62HttlSYQnl4FDsPCxk=)
                          12: 3230312e35302e302e302f32302d3332203d3e203335343837.roa (hash: cxmy3kIvPh6s/1LnEwWKks49FiEuuQvkqmFi12hPpdI=)
                          13: 3230312e342e33322e302f31392d3234203d3e2039333132.roa (hash: l48ICNEOZSUFsv60Oe/8RzlWGIiclCXu4mnDrM98Rag=)
                          14: 3230312e35302e302e302f32302d3332203d3e20393137.roa (hash: LV5vXg1tBVGVGbGvuwuejlVcIl0gybi5ijTXlVnWnYs=)
                          15: 3230312e342e322e302f32332d3332203d3e203530303639.roa (hash: ere/v3sb0RHIzq2vnbrgSDPEImJtyblbjxi3tF1BIoQ=)
                          16: 3230312e35302e33322e302f31392d3234203d3e2036323333.roa (hash: Lv+ZvhTtVlYc/JvDCP4pL2DuKvKs1Y5SiCDu8gR+7Ns=)
                          17: 3137372e3137372e3232352e302f32342d3234203d3e203630333236.roa (hash: Mq/JzSvGU5lIzO/TaOmEgCjy319Aw/U4Udxf9FpuSFA=)
                          18: 3230312e342e312e302f32342d3332203d3e203136353039.roa (hash: ox9/J9tAboo2XRgTvirVB5Q0oV+/xLNvFO2aInogmMg=)
                          19: 3230312e342e31302e302f32332d3332203d3e20393137.roa (hash: 7DbKYuvrYYcMc4FJjAjREZxF0j1+7/joCPmYoc/EHe4=)
                          20: 3230312e342e312e302f32342d3332203d3e203134363138.roa (hash: mvQmoRedgx4S6LRwa0SlJVlpATt4GGTM28ypKNbLfkw=)
                          21: 3230312e342e33322e302f31392d3234203d3e2034373835.roa (hash: HzdUv+l0E/f7AUZqSmhM8rTExNCjiFWuqHPsfDzLrYM=)
                          22: 3230312e342e302e302f32332d3332203d3e20393137.roa (hash: 3XwO613XjTcJvibqlowu29uDf0sqrqGl9LF3k3R7qN8=)
                          23: 3230312e35302e33322e302f31392d3234203d3e2038383838.roa (hash: Id0lD9Oi+RFE/S2xLodJ4oFQZxHVtg1X/xF7a5feNlk=)
                          24: 3137372e3137372e31392e302f32342d3332203d3e203538333432.roa (hash: uhL5qKKRO2qWA9YVVLwXgDMutAoJMmazOlzWjeSTGTY=)
                          25: 3230312e342e33322e302f31392d3234203d3e2036323333.roa (hash: WdBX9P0O+wUAyIeyoPquWCOx0wam+Enxn9GHVit4ex0=)
                          26: 3137372e3137372e3232342e302f32342d3234203d3e203630333236.roa (hash: IN+YllwkR1FWZAEbAPZjDy8pp86M2J4Vo+MuthHkyLk=)
                          27: 3230312e342e382e302f32312d3332203d3e203233393631.roa (hash: S33h+aDRfgdvF1EOJk6OEOLimNuns4MAvwGMN64MpPI=)
                          28: 60D5CF86368D32D8BD736410814916DA300E83CF.cer (hash: h9K1/FoQIn4IQ+Pj55UDAEkL6w9NDH2w/iYJJkzSELI=)
                          29: 3230312e342e33322e302f31392d3234203d3e2033323538.roa (hash: mPkCpSJR7Ox8U53hcqwZhn2X5roIkg0pkz9RDiEMY8s=)
                          30: 3137372e3137372e372e302f32342d3332203d3e203530303639.roa (hash: UDM9uAdn5LfzILf/mJRfKDKeql8VK1sk34KeXiw7cEI=)
                          31: 3230312e35302e33322e302f31392d3234203d3e2033323134.roa (hash: ccY703myVDD41xHnGS5gI1MUGhj3xhz4NQq+ZVDdal0=)
                          32: 3230312e342e362e302f32332d3332203d3e203233393631.roa (hash: 6dgSDcNhm53ie+bsgD7J8IGn5nBp0ZbLPHVHuPecMnc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:84:b7:7b:70:b6:78:33:5a:a1:e8:7d:32:cc:eb:48:8d:33:17:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
        Validity
            Not Before: Sep 21 08:52:43 2026 GMT
            Not After : Sep 22 10:49:43 2026 GMT
        Subject: CN=92E5D58E5A7C9C088EF18BB595D511CABE6D3316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:53:8c:73:19:49:7d:78:87:2b:fa:fc:bf:4e:
                    f4:c5:95:c0:4a:3b:f5:ca:e6:21:a8:f5:a7:4f:d6:
                    1c:4b:36:f4:92:f0:4f:24:b8:a0:92:17:c0:cb:5c:
                    b1:a9:a8:76:c2:37:d2:50:14:90:53:c4:93:19:f6:
                    77:53:e2:10:65:d1:d6:ae:dd:40:0c:89:c4:ff:bd:
                    fa:d7:91:d4:45:56:96:4d:6f:90:b5:ae:50:70:ac:
                    d6:f0:32:28:3c:ab:c5:26:81:ab:5b:8e:16:a2:e4:
                    6d:67:fb:0a:6b:7c:0c:6a:45:d0:7f:0c:75:95:19:
                    8b:40:14:8f:c7:17:e7:ed:cb:a8:e7:8b:5b:f6:13:
                    a1:09:9d:99:1e:30:1e:b3:43:ad:65:df:f8:5d:66:
                    2f:33:a7:b2:95:a2:b8:08:ea:59:f3:57:11:f1:87:
                    e0:65:21:13:c4:df:35:e0:8b:20:2b:46:d6:13:62:
                    c5:77:5b:71:40:2c:64:20:4b:3a:c5:29:d2:2f:4a:
                    ae:ff:a1:8f:dd:cd:94:65:17:32:a3:b5:f6:6b:44:
                    57:44:6b:93:f5:1e:95:5c:00:95:bd:26:16:4f:19:
                    2c:9d:f4:09:44:62:5e:aa:22:96:04:fb:1f:e9:d9:
                    aa:4d:92:90:66:41:e9:c2:71:80:90:0d:ff:08:c6:
                    1c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E5:D5:8E:5A:7C:9C:08:8E:F1:8B:B5:95:D5:11:CA:BE:6D:33:16
            X509v3 Authority Key Identifier:
                keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f6:c8:d1:d6:b9:fa:d7:9a:e0:5a:d1:9d:32:81:03:f9:73:
         0a:1b:17:ef:59:5f:80:da:8b:d0:86:6a:c8:06:7c:55:24:89:
         dc:fb:b5:9d:a2:2c:a6:b1:a5:c1:55:0a:4c:35:b1:43:b7:26:
         e6:af:b1:b1:a2:e9:ab:ca:39:03:7f:df:22:57:fa:61:5f:ba:
         71:23:76:31:8a:0a:63:5b:03:ba:73:63:bb:28:7a:24:c9:50:
         d2:ec:d2:32:f7:9d:6a:cd:03:1e:30:4b:51:89:5f:9e:68:01:
         f3:5d:5f:d6:3e:3f:6d:87:51:78:66:11:05:ce:04:2f:1e:52:
         49:b8:f5:c1:08:7d:50:3b:e3:60:ee:b8:d5:66:60:2c:ab:65:
         ff:53:81:c3:7e:eb:4c:4f:a5:9a:27:00:2e:02:6e:83:83:a3:
         14:5d:c1:69:0c:ee:52:bf:23:87:c9:3d:5e:e0:5f:83:23:a5:
         79:91:94:8f:38:fa:21:ec:86:6e:93:b3:f5:f4:74:8d:98:f4:
         f5:ea:57:35:5b:0e:da:21:75:47:08:a1:c2:99:5f:e7:dd:fd:
         3b:bc:00:3a:a3:81:9f:29:d0:f2:9f:44:cb:c0:30:f6:ad:18:
         7a:06:0f:54:ce:df:93:8a:c9:10:1b:8a:6a:81:24:a2:fd:b3:
         04:49:04:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:24:47 2026 by rpki-client