Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
File:                     830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft (raw, json)
Hash identifier:          y7dnCTwXaa+fMRi1M4LxYprL+JBj4aSwjZ63RwbsjZA=
Subject key identifier:   CF:8C:E5:43:B7:7D:7A:19:33:B2:80:CB:9F:02:1C:E9:31:76:F0:F4
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Certificate issuer:       /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial:       44C7D3219899A5078E3E8730E459C8640E58F4E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
Manifest number:          0587
Signing time:             Thu 16 Apr 2026 13:49:42 +0000
Manifest this update:     Thu 16 Apr 2026 13:44:42 +0000
Manifest next update:     Fri 17 Apr 2026 14:26:42 +0000
Files and hashes:         1: 830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl (hash: anKSvSgiz5HKWeOmXmZ2NHfWdJpxuokU12qsQ34qgEM=)
                          2: 34352e3133322e3231362e302f32342d3234203d3e203232343237.roa (hash: tUuPnhV53bW4URPIQtmcdJ9t+c19vj++YF4z51T+ooE=)
                          3: 34352e38392e3135302e302f32332d3234203d3e20313338393937.roa (hash: smn3sboQyoA3CPmf3JjoxNaRPhD1ofeV3o7i3x5m8hU=)
                          4: 34352e39332e3138342e302f32342d3234203d3e20323135333438.roa (hash: WuhjfEGxgnUblhWiSTciY5olX30b9mmfrhJBU4OPYFY=)
                          5: 34352e3133322e3231372e302f32342d3234203d3e20333935333734.roa (hash: 3xSg64X6b/VGeaW1sbUHbRQvvDa5xSkfsAgZrM/ksog=)
                          6: 34352e3134352e3234322e302f32342d3234203d3e203239383032.roa (hash: v8WZ7RYy4JJX3c+2bplIJcsM84fR+H/I4nQ04Jg2R9g=)
                          7: 34352e3134302e33372e302f32342d3234203d3e20323638363234.roa (hash: vQUyftefjL6i5dozCp9sc9uxGMaQuzN4Dd7LhfPpuCM=)
                          8: 34352e3132382e31322e302f32332d3234203d3e20383334.roa (hash: eLJWCWbxEQgDeE1wotxgC/UVUKhDY5SIchlsKqSoar0=)
                          9: 3138352e3235302e34302e302f32342d3234203d3e2035303635.roa (hash: eNCzJzvkQZD3jcD9ovrxYY4NST6Lp1yCS+1FWuKURvI=)
                          10: 326130653a666363303a3a2f32392d3239203d3e20323031393633.roa (hash: 8+yPsa43TFpd5bryniVq+R/mS0l3RvJVwdUmjJuuDIk=)
                          11: 34352e38392e3135302e302f32332d3234203d3e20313532313739.roa (hash: hd+a1khpY29A3GDYfNLzWao9yX3aCS4vUId7ZnXPCC4=)
                          12: 34352e3134352e3234302e302f32342d3234203d3e20323639303730.roa (hash: Jv5hg7ZMCRB06s35wjHY/AJp0QtnS8MPIuq3o7PIiYc=)
                          13: 34352e3132382e31342e302f32332d3234203d3e203531383437.roa (hash: JqNf81e+9xZB/Ktbtl3NtzVud3yC2akiKQxuRnMeC20=)
                          14: 34352e39332e3138362e302f32332d3234203d3e2033333230.roa (hash: QsFkBfitbwvpDW+gZ0ARVvjc1k4LIU/KZWDeJAgWITQ=)
                          15: 34352e38392e3135302e302f32332d3234203d3e20323130353432.roa (hash: Ymdbnf0H8VIDp2h5OwlBLkLPkpG++nC20m+3X7rdp/E=)
                          16: 34352e3134302e33382e302f32342d3234203d3e203330363434.roa (hash: pgys4dKx+35Hg2BzEkcta2TxxholJ1T4995uIhT8Aeg=)
                          17: 34352e3132382e31332e302f32342d3234203d3e20313939393235.roa (hash: s2TQDlDgm+LKEqHBlB2hd8f187DM1tFrRFf93seXSWo=)
                          18: 34352e39332e3138352e302f32342d3234203d3e2039303039.roa (hash: YsgVKvqjDSfl5cY3VgnMOM/cSxhu5cHJw+NQE7V5wtA=)
                          19: 34352e38392e3134382e302f32332d3234203d3e203239323038.roa (hash: 1Nfh1VLDTlm3mX16h4DdBDZdtN8HRIROVIY0BOsOd2o=)
                          20: 34352e3134352e3234312e302f32342d3234203d3e20383334.roa (hash: pPd1T7/n7wSEex84D0bbPA7sw5pSmXLYFj3f9wYPbC0=)
                          21: 34352e3132382e31322e302f32342d3234203d3e20313336353537.roa (hash: Og0W7TwDKg18gSOzRskc5OEF19lsnNis615D+7M7BhY=)
                          22: 34352e3134302e33392e302f32342d3234203d3e20323132333834.roa (hash: Esl6ulWYD18TsVsX1ACUNU7ssOutotmIieLYjxGWe6k=)
                          23: 34352e3132382e31342e302f32332d3234203d3e203133333335.roa (hash: Kl1FMB/Itc6QAARMXjrFYcnaEl8+WCl6eKpyc+Mm9yg=)
                          24: 34352e3134352e3234322e302f32342d3234203d3e203631333137.roa (hash: pTg06oxajXpI71ZXI8g/lx5GH1NCIopoua34IGLJlFw=)
                          25: 34352e3133322e3231382e302f32342d3234203d3e20383334.roa (hash: pbWgbf3Z9k/Vp5McQhjO5BRe+dobiN8M8hutoOHnDIA=)
                          26: 34352e3134302e33362e302f32342d3234203d3e20383334.roa (hash: E26KncRSdogUnZcFsEbrJHun85gzi+RuPAbBa89CNDs=)
                          27: 34352e3133322e3231392e302f32342d3234203d3e203536393133.roa (hash: LgxsptwYXiKaAUBWPl2FzHApl9GRPHPCKLBon5Z4Y1I=)
                          28: 34352e3134352e3234332e302f32342d3234203d3e20313337323335.roa (hash: Vyj6lQsSFmsAqcK6RGLYVMn7iV5vJhAX4GBUoB1+oMo=)
                          29: 3138352e3235302e34312e302f32342d3234203d3e203136323736.roa (hash: e593QIRSwVx3PBIVSSf8HqCfMhSG+94/3uc22EyTMaw=)
                          30: 3138352e3235302e34322e302f32332d3233203d3e203338313935.roa (hash: N+mjQzTN9eKn05wWYxGO3ym5VpigEEyuw5Wil2CeqM0=)
                          31: 34352e3132382e31342e302f32332d3234203d3e20313437303033.roa (hash: /eT04HyflwcC0pHAY5SGjJT8c4JaXavMPdfaeYoaE24=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 14:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c7:d3:21:98:99:a5:07:8e:3e:87:30:e4:59:c8:64:0e:58:f4:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
        Validity
            Not Before: Apr 16 13:44:42 2026 GMT
            Not After : Apr 17 14:26:42 2026 GMT
        Subject: CN=CF8CE543B77D7A1933B280CB9F021CE93176F0F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9b:ed:36:88:37:59:36:30:2a:b9:2e:ea:86:
                    3c:7b:cf:d6:24:e6:9f:d3:cd:51:e5:1e:6c:7e:0e:
                    34:1d:9c:36:54:5a:4d:25:f1:b3:a8:98:f2:a5:ee:
                    fa:cb:ed:21:49:fe:55:ca:d1:00:d0:dd:31:47:4b:
                    6b:ea:a4:89:bb:9b:9f:4d:8d:f2:ba:7b:b9:f9:b9:
                    f6:6e:70:60:7f:22:81:24:ce:6e:62:e4:40:c1:67:
                    54:59:75:19:ab:2f:41:0f:1e:3a:5d:d7:2c:71:fd:
                    5f:24:96:2b:22:88:aa:aa:8d:3e:c3:00:bd:90:9d:
                    48:0b:63:38:b6:bb:58:22:4c:ae:4c:34:b6:e9:20:
                    07:a9:a4:9a:ad:55:d7:6a:50:9a:66:de:ba:cf:37:
                    f3:65:fc:ea:58:26:a0:49:52:e3:6b:af:a4:c6:55:
                    03:64:a7:2d:4f:6f:32:b9:97:75:0b:3d:98:fe:ea:
                    ef:5e:f4:61:96:7d:8f:41:8d:dd:e7:65:d1:0d:07:
                    eb:e6:ca:fb:57:d6:ea:32:db:ad:b2:2c:c2:26:a5:
                    5a:1d:f1:ed:d4:91:07:40:00:02:a7:1b:91:fb:ca:
                    d8:31:7f:49:84:de:d3:ff:42:27:8e:3c:c1:4a:70:
                    d1:b2:94:69:05:d2:1b:38:1b:d0:ad:3f:f2:b9:df:
                    a4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8C:E5:43:B7:7D:7A:19:33:B2:80:CB:9F:02:1C:E9:31:76:F0:F4
            X509v3 Authority Key Identifier:
                keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:83:cf:0b:e3:be:4e:55:99:06:48:3d:02:ec:c0:20:f7:a8:
         5c:14:1f:2c:25:9c:b3:c4:2f:0c:0a:9f:98:25:e3:92:18:8d:
         e7:af:5d:98:5e:d0:22:2c:d0:7e:dd:ec:2a:e4:15:f1:78:69:
         f5:a4:b9:1e:2c:1a:8d:b5:24:21:e5:49:97:1b:2d:f0:fa:09:
         f9:b3:9c:c5:0e:da:f0:e3:fd:41:ef:4d:6c:b2:96:d0:35:28:
         ba:f5:46:5b:4e:fb:fc:7a:bd:0f:ef:7d:44:5f:1a:d1:4a:b0:
         5e:43:c1:2d:8e:4c:b5:65:c2:39:5d:84:12:e3:bb:ea:30:2a:
         9f:0a:f8:0a:c1:81:86:67:9c:4a:b1:71:34:d0:4c:cc:5d:0d:
         69:58:4c:a7:8b:35:6c:74:36:98:2c:0d:8a:f9:ae:01:6f:d1:
         e6:23:33:19:59:1d:15:ba:cf:1f:5c:d8:f9:55:b0:de:6b:26:
         af:5f:f6:f3:35:3a:c7:9e:c6:b8:50:d2:b3:d1:91:8f:2b:54:
         99:e9:ac:3d:30:ab:22:40:c4:55:78:50:d4:a5:01:dd:10:2d:
         db:a5:fe:3d:45:81:c0:4f:ac:9e:6b:c2:76:60:90:b2:c9:d8:
         63:72:02:ee:b6:8e:d1:11:e7:08:9b:ec:c6:63:7f:1c:bf:b6:
         16:42:34:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:33:19 2026 by rpki-client