Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
File:                     8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json)
Hash identifier:          +qefCHvIXfFhWtKCKp6XaYKPCp0C+RoZQi/c/jYmktk=
Subject key identifier:   11:C7:E7:71:B9:43:B4:4D:A7:C2:2F:D1:71:A0:26:44:02:29:26:DF
Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
Certificate issuer:       /CN=8184669b0189b7fabe05e700325a0d74957beb27
Certificate serial:       2D38F567B529CCFFD9BA2FC94B6AD788C641FBCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
Manifest number:          02E0
Signing time:             Tue 22 Sep 2026 05:50:47 +0000
Manifest this update:     Tue 22 Sep 2026 05:45:47 +0000
Manifest next update:     Wed 23 Sep 2026 08:02:47 +0000
Files and hashes:         1: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: hiuvdGWkDUVa4rSBhYvM7ua/xqxtZdK1NbRIraGMMFQ=)
                          2: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: QIlDGQAR+BPaqMZSpuzOdDfZmoHzVS/KrbH1O77fni8=)
                          3: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: XYg9rq7u2qeQohZKrdmx+RfNgyAnLmLulXQ/wUuozA0=)
                          4: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: O9XudG5Hna9EdsKz3NaxZpnBC6BtoYf94CzMXezJk5w=)
                          5: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: g4IGtUFHeDDC8WAjlZEZva8EecSiFWhZuJ5FIzjktM8=)
                          6: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: seYrznt/EXPMYO3L1829ZbJQ4VyIGwcTFpihoLxVAh8=)
                          7: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: cmoTuzf9d88QYGPdNh2W2NI3sODit8tqxptI7nSQzP4=)
                          8: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: uXrdK0X7/NnmFTn32ldHmEE9aiPk6VWFQcLiW0WKLMQ=)
                          9: 3231332e3135372e3132332e302f32342d3234203d3e20323138383239.roa (hash: 5nflC/ZAQBKmwe6R0T4Zf8LtCLe1A1oD7ZGFGhKypUg=)
                          10: 3231332e3135372e3132312e302f32342d3234203d3e203331373135.roa (hash: I5j6fsClsT+fyd0Wi186EVr6Wo5+E40NjyrVgONGkdw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:38:f5:67:b5:29:cc:ff:d9:ba:2f:c9:4b:6a:d7:88:c6:41:fb:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27
        Validity
            Not Before: Sep 22 05:45:47 2026 GMT
            Not After : Sep 23 08:02:47 2026 GMT
        Subject: CN=11C7E771B943B44DA7C22FD171A02644022926DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:52:26:be:6f:b6:2e:d5:82:9e:2e:d2:53:5a:
                    a4:b4:d7:e4:89:4d:75:23:83:74:81:df:b7:c8:5c:
                    91:5f:c2:0d:ba:2b:81:7d:ba:ec:85:2a:96:a0:cc:
                    dd:22:c4:92:d7:f7:f8:ef:dd:a9:a0:63:6c:f5:64:
                    db:e3:b7:a6:61:df:5e:b3:a1:77:29:87:ff:4d:a2:
                    09:c7:40:19:dd:c5:72:ef:87:58:0b:d3:b1:80:ff:
                    13:1c:2b:f0:7a:06:7b:5d:64:65:6f:bb:6f:80:c0:
                    e1:c0:a1:66:a8:80:77:a9:78:ac:02:37:7e:ae:6c:
                    71:0a:f7:a6:fe:a1:30:6c:81:78:b4:96:36:7c:24:
                    64:dd:32:17:99:f0:08:22:36:46:1a:9c:a9:ae:2b:
                    de:9c:38:81:23:24:c6:4d:3b:c9:9d:da:31:e1:ed:
                    76:fc:df:77:52:2f:5e:9f:3e:1e:fc:9f:8f:39:f5:
                    02:8c:15:25:b8:a9:94:dd:8c:73:e1:e1:5c:74:d8:
                    20:bf:5f:7e:0e:2b:5a:2f:85:ee:30:ee:ab:17:c2:
                    2d:ae:37:38:a0:5a:d1:f9:bf:90:a9:5d:16:d2:c5:
                    23:3f:7f:2b:a9:1e:d8:7d:45:b1:f9:e3:6b:30:50:
                    87:ae:9d:57:50:50:bf:54:2b:aa:42:b7:08:a6:b9:
                    c0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C7:E7:71:B9:43:B4:4D:A7:C2:2F:D1:71:A0:26:44:02:29:26:DF
            X509v3 Authority Key Identifier:
                keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d9:b2:ed:f4:76:a9:20:f1:af:52:e6:f3:0e:b1:31:b4:36:
         3c:09:e2:0d:94:4f:57:31:38:f8:fd:24:d7:fe:b4:ec:21:cf:
         0d:a3:6e:4b:c7:81:72:ce:25:80:69:a1:be:2b:0f:0b:37:a4:
         41:32:90:4c:6e:94:4e:fd:d8:5c:26:9d:60:10:df:67:a9:2c:
         0f:40:17:60:55:81:64:c8:29:91:89:05:7f:86:fc:ee:e2:d8:
         a6:28:f7:e9:ca:e1:b2:58:7c:db:65:6f:73:08:a4:77:f1:82:
         8e:9a:58:fa:3e:7f:4a:71:da:10:ff:91:bb:81:f8:8f:cd:86:
         b4:bd:6d:a9:ff:38:1e:13:a7:f0:81:f2:5f:70:3f:a1:4e:25:
         b9:f0:56:4b:30:c1:9c:ff:71:c9:70:01:b6:45:e0:03:2b:25:
         d2:6b:15:79:a3:18:bf:7f:d8:ad:27:2c:25:d9:b5:d8:f7:c0:
         6e:ad:ea:64:22:a6:87:c7:e1:79:33:ea:2a:2d:cd:24:9b:87:
         eb:3e:19:da:5a:5c:c7:f4:84:90:48:54:59:29:7e:0d:c9:a3:
         a0:f9:e5:a0:f8:63:18:83:d4:63:b5:42:ac:68:f8:5d:5c:c0:
         ea:84:b6:96:3f:cc:f6:5a:2b:8d:d0:2d:c8:5e:da:d1:e8:25:
         36:10:45:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:43:28 2026 by rpki-client