Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/52722DE3E767BA8FC1EB29A7D1679F734C55966D.mft
File:                     52722DE3E767BA8FC1EB29A7D1679F734C55966D.mft (raw, json)
Hash identifier:          n0i0tR/9FBAMhHOnWRTRp2e4YKcKxvbjFiiH/6sAV3Q=
Subject key identifier:   87:58:55:92:0A:CD:09:72:AE:48:D5:96:81:03:92:22:F0:3F:1E:ED
Authority key identifier: 52:72:2D:E3:E7:67:BA:8F:C1:EB:29:A7:D1:67:9F:73:4C:55:96:6D
Certificate issuer:       /CN=52722DE3E767BA8FC1EB29A7D1679F734C55966D
Certificate serial:       D80F84C1FBD895AED9298832AC784B205A1817
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52722DE3E767BA8FC1EB29A7D1679F734C55966D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/52722DE3E767BA8FC1EB29A7D1679F734C55966D.mft
Manifest number:          15
Signing time:             Tue 16 Jun 2026 14:52:00 +0000
Manifest this update:     Tue 16 Jun 2026 14:47:00 +0000
Manifest next update:     Wed 17 Jun 2026 17:24:00 +0000
Files and hashes:         1: 326131343a373538343a333030303a3a2f33362d3336203d3e20323135383439.roa (hash: EhQvT5ZMCX9huG89IO3Xb6heQ+ZoxMGHcoAExi8XBfA=)
                          2: 326131343a373538343a333030303a3a2f33362d3438203d3e20323135383439.roa (hash: mRoIFmsCmEGH6SUTDOuYeSSlx3FrBmmk9tb2GFLY9aI=)
                          3: 52722DE3E767BA8FC1EB29A7D1679F734C55966D.crl (hash: t7slVKpf677Wf7cfPpAFRXjJpJtdCUAxGL93DZn7GY8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/52722DE3E767BA8FC1EB29A7D1679F734C55966D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/52722DE3E767BA8FC1EB29A7D1679F734C55966D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52722DE3E767BA8FC1EB29A7D1679F734C55966D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 17:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d8:0f:84:c1:fb:d8:95:ae:d9:29:88:32:ac:78:4b:20:5a:18:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52722DE3E767BA8FC1EB29A7D1679F734C55966D
        Validity
            Not Before: Jun 16 14:47:00 2026 GMT
            Not After : Jun 17 17:24:00 2026 GMT
        Subject: CN=875855920ACD0972AE48D59681039222F03F1EED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1d:c8:c2:f8:25:b3:e0:3b:38:5e:fe:28:bc:
                    55:4b:7a:56:bc:98:aa:b2:85:b1:f5:75:8b:15:e9:
                    9a:40:86:b3:2c:68:1e:13:7c:2c:a8:06:97:93:0b:
                    f9:f9:17:54:1d:13:3a:79:25:ae:6e:bb:84:29:f9:
                    bf:9c:44:0d:73:e6:98:8c:62:3b:f9:25:c6:c9:6f:
                    00:04:19:f6:9a:44:7d:1d:b7:58:c2:a4:7b:c3:c2:
                    cb:62:34:bc:1e:26:f6:fb:a1:99:92:25:e3:43:ad:
                    f5:35:bb:3e:01:9f:b8:c5:1f:da:55:3a:5e:0f:20:
                    b0:ff:ab:ab:9c:a2:89:8a:11:00:87:e6:e7:65:d3:
                    66:9e:58:97:34:99:98:4c:21:65:d9:a0:e7:35:53:
                    d0:2b:a4:3c:e6:24:03:39:8b:56:37:de:a5:f1:f5:
                    7c:94:b3:e4:f1:61:af:36:7a:ac:17:ee:2f:fb:96:
                    88:2b:9d:b7:0a:07:7a:8e:c8:87:4a:16:4a:76:59:
                    e5:0b:f8:c7:1b:46:1e:9e:ad:f2:15:21:b2:66:28:
                    e1:0a:b4:dd:d2:6e:92:70:0b:79:b5:f4:1e:da:b8:
                    d3:5a:ec:84:14:34:ad:e4:8c:ab:49:93:17:ac:c9:
                    d4:32:de:0d:e6:2a:48:af:91:bd:40:83:d6:1a:7a:
                    2d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:58:55:92:0A:CD:09:72:AE:48:D5:96:81:03:92:22:F0:3F:1E:ED
            X509v3 Authority Key Identifier:
                keyid:52:72:2D:E3:E7:67:BA:8F:C1:EB:29:A7:D1:67:9F:73:4C:55:96:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/52722DE3E767BA8FC1EB29A7D1679F734C55966D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52722DE3E767BA8FC1EB29A7D1679F734C55966D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/52722DE3E767BA8FC1EB29A7D1679F734C55966D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a2:13:1f:91:94:c2:02:76:a0:19:8d:ef:c6:18:0f:9d:3f:
         97:dc:98:12:36:e6:ff:4c:5d:3f:99:b2:df:2b:a2:10:b7:42:
         e9:ab:b7:bd:24:b8:57:fc:46:f3:90:81:76:01:77:71:48:9e:
         82:19:c1:b6:c2:0a:0a:a6:eb:fa:46:d7:55:1f:8e:71:16:4a:
         d8:8c:48:66:ed:6c:c7:26:45:dc:cd:11:9f:b6:fd:e7:05:9b:
         d7:ff:f0:bb:19:c3:5e:9a:b8:d0:d1:da:7b:69:8d:a3:ec:0c:
         d2:28:5b:11:13:d0:52:f2:ed:26:1a:e2:58:3d:ae:1f:ea:b4:
         1c:79:de:9c:ec:ff:ce:66:f1:55:27:ed:a2:29:86:73:bb:24:
         f6:27:d6:cd:1f:a0:4e:2a:39:60:30:fb:1a:b4:2f:1b:4a:88:
         c9:4a:73:e3:a5:42:5c:ca:88:88:2c:e5:b6:21:ec:d0:22:11:
         52:67:90:bc:e8:5b:cf:14:76:af:85:67:c3:ce:e5:81:e3:66:
         e3:b6:4e:5f:af:f1:c2:01:64:72:f6:74:35:36:e1:36:a5:ce:
         99:30:64:4d:06:84:4d:d9:aa:19:91:0f:75:64:f9:6a:d3:cd:
         9c:65:e5:f4:39:c2:d2:66:1b:da:7c:c6:a7:44:db:94:22:67:
         60:33:3e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:27:57 2026 by rpki-client