Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
File:                     B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json)
Hash identifier:          +S4aXOBCj88XX2WzvDteH+AEMZS15dENplrC+i7AIO0=
Subject key identifier:   7B:5B:11:D0:70:28:5C:17:6A:D9:F2:A2:5C:BB:CC:0D:61:04:8E:F4
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       52F8F192E48A8E2B72C0E52332974064D6258E2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
Manifest number:          07B2
Signing time:             Tue 28 Jul 2026 10:53:12 +0000
Manifest this update:     Tue 28 Jul 2026 10:48:12 +0000
Manifest next update:     Wed 29 Jul 2026 13:13:12 +0000
Files and hashes:         1: 3231332e3133392e39332e302f32342d3234203d3e2039303039.roa (hash: 0cchwdJLnMGDMK7R7/iy+DuTxrLqECv6lMhtpTOQuYc=)
                          2: 3231332e3133392e37352e302f32342d3234203d3e20383334.roa (hash: qufxABzYtPVqJhKbvB3PBmop5jMgkyRVa/W0Bx1F4s4=)
                          3: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (hash: MNLBCqMmK/mGKn+arx3sMtp4e+thFoWGhi8ivlTfj0U=)
                          4: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: ZNpXP0V7X1SLVOWk1qf9gaielEOXyCXpXadwIPelQAs=)
                          5: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (hash: +9ZlUjFGDijH8b5+yzD1PMjjZdY4zblyEeoJ6+Yq2Hw=)
                          6: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: imvON1NIsf5RjQ1xycG0mxKjYBudQ7J1/WlKrbcZWA4=)
                          7: 3231332e3133392e37332e302f32342d3234203d3e20323132323338.roa (hash: Dtv0Rk3S6CYGgeyc9Utp8OCStFSnf/fyoGbb6uGogTI=)
                          8: 3231332e3133392e36362e302f32332d3234203d3e20383334.roa (hash: gmWH6xBqv6iHkSUEaOI6mVn4z54Nuz/S3PczBQJukcU=)
                          9: 3231332e3133392e38302e302f32332d3234203d3e20383334.roa (hash: xh9MbcQaOVI91ITKhlmBWnlkj2aoxPKUoH1PWhneuhw=)
                          10: 3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa (hash: 2qZQfOcJdShx8dQdW3jSDzAf+zGAwRn+nvT7o3J4pwE=)
                          11: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (hash: mu6JkT3fZoMbVctkEBjnrLNPWmpvwLKVK+IulCwBuzU=)
                          12: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: BWn7Fyc71HS3Qx09imcUTYAlGWvzW8ei/YZ4vwsjDbQ=)
                          13: 3231332e3133392e36352e302f32342d3234203d3e20383334.roa (hash: aBJ7OoaXb6rDbnpVY6odGndz/aaVwq/3W9uHVst1MOE=)
                          14: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: JE4Afl+BwsWFQsk9N/CwcXSA8veAE7UIlsWEkr87dhs=)
                          15: 3231332e3133392e39312e302f32342d3234203d3e2039303039.roa (hash: YdmUivZOiB+z6zp254vUpjVQR2cGS4KwZb90oR6ZVsM=)
                          16: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: CxXf2MZIKaUycFVCcvqJ0pu6d/h/wQOBy3gRZyXomCo=)
                          17: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: e2HbFyb9jJVCReOUGrS06701Hln0j7R9pUtzgWwuBh4=)
                          18: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (hash: CavYIrZSFhZfgGj2RhsuO+5dyTDRj7K4lMIF+18l9zg=)
                          19: 3231332e3133392e38362e302f32342d3234203d3e2039303039.roa (hash: NJOowo5VUyyKfXn6pnDF/Tz4fWJEVeCOza5neOzvfGM=)
                          20: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (hash: jYd4q98qoULIjdslO4Xk9d5wPUuNksXv3RR74JoHySc=)
                          21: 3231332e3133392e36392e302f32342d3234203d3e20383334.roa (hash: 4avklCjVMylCEeeI60KDAm2gKF0wrDefWHJR4YHtwEk=)
                          22: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (hash: hksR2RFjNh00D4GQuid5Bvdsyv72DQ8eShLKWLWJ500=)
                          23: 3231332e3133392e37392e302f32342d3234203d3e20383334.roa (hash: AEIp6S70Gj6QR1Z2+hxR6CJde/WoBwWvkBWWBSrENhA=)
                          24: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (hash: OH/dvNiYWhw/SVHGvLSGkBdK+Kv4T+yJzETwI0tfRWM=)
                          25: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: r1pjD687zCx4FmCuXlGB5h73ScKoFYopGKhXlE6KUfY=)
                          26: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (hash: UJuRx/b7ZuN3xXtU9UGl0rZYUByVV4xgOSCJ1FXm9MY=)
                          27: 3231332e3133392e38342e302f32342d3234203d3e2039303039.roa (hash: JEuERYX+zmY14zA8MGqIEE+WMqqmJly2u5v4u9LNrmQ=)
                          28: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: DZpFNtIJlcLHmoaMDeodOmCa2IVlyKcWWOjWi093JRY=)
                          29: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (hash: ddkCuB2C0zIUJCsHJnqd7PIRz+kBJmKHlIRYHjQdbXM=)
                          30: 3231332e3133392e39322e302f32342d3234203d3e20383334.roa (hash: iBZrpirngtNdiGfgs1e/5egkTxly/jS9DyH9F0hqP68=)
                          31: 3231332e3133392e37372e302f32342d3234203d3e20333938323536.roa (hash: YJQzrkCNdtcHF03SEJIbUA14cqWLzrSdWGFwfzoZWw8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:13:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f8:f1:92:e4:8a:8e:2b:72:c0:e5:23:32:97:40:64:d6:25:8e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Jul 28 10:48:12 2026 GMT
            Not After : Jul 29 13:13:12 2026 GMT
        Subject: CN=7B5B11D070285C176AD9F2A25CBBCC0D61048EF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:af:ca:4b:f4:22:26:48:e0:50:6d:a5:88:76:
                    77:d0:5d:d5:fc:74:68:68:5c:7b:fa:fb:56:bc:d3:
                    18:be:7b:85:ae:63:d8:2f:d6:35:28:ec:0f:e3:c7:
                    fa:e7:06:d1:d5:1a:a9:76:39:04:67:64:f7:b8:f8:
                    b5:b6:cb:e8:82:71:91:52:2c:9d:cf:1f:d9:90:16:
                    7a:78:2a:f8:0b:46:e2:d5:f8:0c:5b:f5:54:09:5e:
                    04:bd:ec:33:10:5c:20:6a:c4:fd:1a:3f:c3:cc:cb:
                    67:08:5a:ed:d2:bf:35:89:ba:ee:be:17:da:f2:f9:
                    88:4e:4c:2e:60:26:0d:5f:81:cc:fd:7f:e1:b5:c0:
                    5c:c0:72:a7:94:21:f1:e1:b6:9b:68:b2:18:ff:15:
                    99:48:1f:8c:86:5d:57:6b:20:29:ea:ad:be:20:b2:
                    b6:59:72:a5:bb:a9:e4:98:7e:4b:19:36:6a:93:b7:
                    d6:7c:ab:46:03:68:9a:20:9c:3d:93:1e:c8:e6:65:
                    de:9d:25:42:93:7f:8a:e2:bc:4b:cf:9d:ec:bd:ca:
                    24:79:53:56:73:aa:d9:81:f5:40:4d:54:12:e7:09:
                    a7:5f:b9:86:a2:66:2c:66:95:69:46:7b:b8:78:84:
                    62:6e:f2:91:3b:96:2f:21:7e:84:14:b6:38:71:d9:
                    73:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5B:11:D0:70:28:5C:17:6A:D9:F2:A2:5C:BB:CC:0D:61:04:8E:F4
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f1:9a:d7:04:fe:83:80:21:e0:e7:01:80:ce:0e:d6:13:41:
         e6:72:ba:6f:9e:65:b5:30:68:19:53:30:7c:6a:cc:8e:fe:11:
         fd:1f:5a:b3:3a:2c:38:d2:62:60:9a:92:30:ee:7d:8f:3a:c6:
         51:c6:74:c2:37:7a:45:8c:b0:cf:24:b2:e8:31:1f:3d:d7:aa:
         70:e4:eb:8f:74:04:85:d6:d6:22:5f:81:a0:1a:6a:c9:e8:37:
         1d:b1:f3:7a:e7:1b:98:b5:5c:28:fa:e4:67:ee:d2:4d:90:84:
         93:e6:71:98:f4:b1:84:14:20:af:82:67:61:2b:67:8b:93:46:
         c6:46:c5:0a:1a:ee:d1:7d:ce:e3:a7:a2:22:a8:81:a0:0b:b7:
         b2:f8:8e:5f:d8:35:32:63:23:9e:cb:01:b5:4a:ea:e9:88:6a:
         f6:53:bd:56:1e:06:61:7a:87:2c:27:00:83:1d:47:1d:69:2f:
         c2:44:35:3a:e3:1c:1c:db:ae:ca:20:a3:4d:83:b0:d3:8f:7d:
         3a:f0:d6:f8:8b:fc:c5:bc:7b:b9:8a:76:c3:2b:6a:61:e8:ca:
         3b:70:8e:2d:23:b1:52:c0:e0:e2:a7:d9:73:99:cc:5c:49:ac:
         dd:67:34:de:26:d1:59:0c:d7:d7:d9:f2:5c:d6:4d:d2:70:fe:
         41:90:51:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:24:14 2026 by rpki-client