Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
File:                     45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json)
Hash identifier:          ymMIejp8Np0Iz5OY417LGdB3t1VlfNEka0seLuLp4Y8=
Subject key identifier:   2D:C9:FA:F5:39:F8:3E:B2:A7:EC:72:C9:F3:33:5B:02:20:2F:DC:7E
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Certificate issuer:       /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial:       564EB8B8165A1AA4F0BD3D9D4676E6FF9E02CB8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
Manifest number:          02D3
Signing time:             Tue 28 Jul 2026 17:39:20 +0000
Manifest this update:     Tue 28 Jul 2026 17:34:20 +0000
Manifest next update:     Wed 29 Jul 2026 21:09:20 +0000
Files and hashes:         1: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: wPa88HthyMje0FC4DyK9XcGEOLxJkylfsOcQDqr+i80=)
                          2: 37372e38312e37392e302f32342d3234203d3e2036303739.roa (hash: CJIevw70hXk1ZbxNXn1s8ukayMRMzgKM7Ytd97RL5pI=)
                          3: 3138382e3231342e3233322e302f32332d3234203d3e2035303635.roa (hash: x3PmGOoet0cDs7+uuyuNJtaOTgdNjDt0p0iGeQg4oNo=)
                          4: 3231322e34372e33362e302f32342d3234203d3e2039333138.roa (hash: ZVXQWb7gEfqAkq16Ky0ZSqFCIZ2vC/M8/7YAMrFhXy0=)
                          5: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: d5TxhwAkeXwrF6uRbXxfjKGJfxHDWIa7sLTALcjfvN4=)
                          6: 3139342e32362e322e302f32342d3234203d3e2036303739.roa (hash: eXWT+PlyOnJLCf8fJSBgFCoZbaqBMmvm3nL9Np0p08s=)
                          7: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 5y1BpEcUWIqqauwo2u2KJKPFMCa0JPAhvtiDqGTVDHw=)
                          8: 37372e38312e37392e302f32342d3234203d3e20343032323336.roa (hash: M2dmsDaCkf9RNR7OAA/qGmqHIFBJr7jscLVBUWk8SoM=)
                          9: 3139342e32362e332e302f32342d3234203d3e20313937313733.roa (hash: 0gqojYMaS/0N7tH1AJI7/fdNCjGLNKJ+c++ER97t5Vc=)
                          10: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: H3bKuOif1KMBNIdeCv1XCMNxO9dD1DMBJvfstrhk5nQ=)
                          11: 3139342e32362e32312e302f32342d3234203d3e2036303739.roa (hash: PXc6iwOgxftDj1gzf8ORi/W4+N4fkSzIW7L2p1ULJyk=)
                          12: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: 2GU98PVW8A06wPHFP07dWrMXh03+0FNfaArisd+625g=)
                          13: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: A3pVDR25ByDI5MeiQGGyctYtEVKjmHED5jwJjMlcbk4=)
                          14: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: xdM7OBZ/9TbpR6di66FXGgK7azfT3ftRTjEe6Yt/SjQ=)
                          15: 3139342e32362e32312e302f32342d3234203d3e20343032323336.roa (hash: pUa1ndniCOYV9ES6BNwWdFcD47r2QhLmtLoNdmF7rhw=)
                          16: 3139342e32362e322e302f32342d3234203d3e20343032323336.roa (hash: Svrr+wgr/nQThaTFfhRBjAYu9J8WfdukPNEs2F7UKRs=)
                          17: 37372e38312e37372e302f32342d3234203d3e203438323636.roa (hash: 5I0vOu7kvIMlEY7Sq8XZtvSWHaZxS4B46RvJVyxx8WI=)
                          18: 3139342e32362e32302e302f32342d3234203d3e20323132323338.roa (hash: 39u3b1aPs44ID+slKDmXnVmqBOUo9+ShXVBFlRqmNOw=)
                          19: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: Tv5q+rfM3afhLe0aBDFGLWT8PXWC4GLzMQF3H6VLFL8=)
                          20: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: 5R59EysS9tL6UTIvemaJCrtszj6x6/cuKApXJ2KN9Lk=)
                          21: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: MdPKw7OONGYXcOZWO/o2hEi1vtA1V+k+wu8N5c3I5aE=)
                          22: 3139332e3234362e3136342e302f32342d3234203d3e20323134343332.roa (hash: dY1TZgYtt2XOIsVBxW8tOuYVl+qsqJFS06ZKgYUYzuc=)
                          23: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: ZWyLSTcE9mAQsDVjLP4sbforwwRF0gy7YQkGUCm2B9s=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4e:b8:b8:16:5a:1a:a4:f0:bd:3d:9d:46:76:e6:ff:9e:02:cb:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
        Validity
            Not Before: Jul 28 17:34:20 2026 GMT
            Not After : Jul 29 21:09:20 2026 GMT
        Subject: CN=2DC9FAF539F83EB2A7EC72C9F3335B02202FDC7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:78:00:e1:d0:91:16:d8:ab:0c:cb:27:d1:
                    6b:7b:23:fd:1f:b1:43:02:e7:f4:eb:c5:8b:33:ff:
                    45:1e:7a:43:96:2c:1f:94:0e:83:ec:04:35:0c:49:
                    16:c7:30:3c:81:c5:c4:a4:a1:e3:c8:42:e9:a5:48:
                    73:b2:00:cc:22:34:09:39:81:7d:bb:63:ed:03:68:
                    53:4b:cd:08:a3:47:ae:9b:24:33:df:0a:aa:e2:88:
                    61:f8:4a:9d:d1:c6:a2:56:8a:27:0e:de:9f:f3:ac:
                    8d:a2:40:c2:0a:82:84:99:68:55:b8:58:d8:59:3e:
                    71:8a:7a:7a:29:91:e3:b4:f9:64:9e:ef:33:f2:8f:
                    a8:e1:bf:64:1e:4a:be:68:63:7b:c0:99:ef:7e:28:
                    d6:71:ba:a3:20:79:cb:85:d6:07:40:f2:7a:d1:92:
                    4d:4a:89:64:cf:58:7a:c1:e5:c5:8f:c1:19:b1:cb:
                    d9:84:8c:5c:26:80:11:ac:bf:62:a1:85:50:e9:80:
                    f1:a5:4c:1e:53:3e:07:72:06:ef:94:4f:ce:db:7e:
                    66:b5:be:8f:e2:43:56:47:26:f9:44:6e:96:f9:4b:
                    aa:bc:00:7a:38:19:68:43:0e:20:77:01:2d:81:92:
                    27:97:43:6d:1a:72:84:9e:f6:ad:00:3e:bf:54:4e:
                    0f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C9:FA:F5:39:F8:3E:B2:A7:EC:72:C9:F3:33:5B:02:20:2F:DC:7E
            X509v3 Authority Key Identifier:
                keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:37:3c:ce:6c:84:2b:73:75:35:0c:95:5b:df:69:10:fc:ef:
         6d:32:e7:f6:78:4e:f9:13:dc:a8:64:9e:95:6b:03:2f:5c:8c:
         3f:07:6b:ad:68:da:2a:80:d3:d6:a8:bc:7f:93:a5:22:b0:b7:
         5d:09:e3:7c:a3:87:61:ed:88:29:a3:ed:38:09:17:ee:63:7a:
         73:2e:be:37:64:55:2c:a0:da:f9:da:dc:fe:fb:9c:55:b7:db:
         7b:5f:b4:29:dd:c8:69:5a:5c:69:98:40:9c:f7:45:dc:a8:59:
         8e:ba:f3:7b:db:30:e0:e2:8c:3d:e9:d5:ce:f7:71:9d:41:18:
         ab:2e:14:b6:fa:92:8f:78:a2:7e:02:5b:cc:de:a2:f4:ea:e5:
         30:a6:61:bc:6f:4a:a8:93:2f:b5:8b:c7:fe:f4:ef:6d:67:a6:
         76:e2:38:d7:4d:45:5b:60:cf:d3:b9:97:25:7f:48:fd:c1:8a:
         43:73:b5:fd:26:02:72:a7:e2:5d:65:1f:a5:d6:61:c9:b8:78:
         a9:52:ff:a4:ed:7f:52:d3:2d:38:04:1e:95:b1:c3:d7:6c:93:
         4e:b7:ef:39:ba:8c:12:44:98:42:53:f7:9c:b2:03:fd:d1:52:
         cd:92:db:91:00:79:bd:a0:d1:d5:32:b2:5b:e6:11:6a:81:1a:
         7c:c8:0f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:29:33 2026 by rpki-client