Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
File:                     8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json)
Hash identifier:          QtdLfSqavrMkAXUuJDRDYsg/YY8WS8L8/THzXfaxtbE=
Subject key identifier:   6E:FD:FE:E7:8B:1C:E8:FF:9E:73:2F:20:39:64:43:67:05:F9:B3:51
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Certificate issuer:       /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial:       05F281489CC7A7F60583459A385A5EE9505CD35E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
Manifest number:          0624
Signing time:             Sun 01 Mar 2026 12:46:40 +0000
Manifest this update:     Sun 01 Mar 2026 12:41:40 +0000
Manifest next update:     Mon 02 Mar 2026 16:06:40 +0000
Files and hashes:         1: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: vjH30L2I+9ooZfOMMgIhr/3sS8zgAR6RoO437oEvTNw=)
                          2: 36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa (hash: 2GimDrI+u19G9USJIxEoIwe+FIkjWzBTs+tdLgZWAyE=)
                          3: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: JpeDtHMcVyRt7wSevEegZIXGiDHI/xp5ouHedcx7mT4=)
                          4: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: 1dKp6xe+eLRTQoCYGUtbaGkzNAIMlS65VuQGc12R6RA=)
                          5: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: CE9hWXGWiDqK5X5bUXx/dqTabhUB/7ogzo6chIHvh68=)
                          6: 3138352e3138312e302e302f32342d3234203d3e2035303635.roa (hash: XgDvqjA1DUwIeQGus4KqsR+dQUTBQ2aN4efEM7LhMpY=)
                          7: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: P57/fYjckH7KO6Bmf2RAAe9o4ZEd5zcCF66fMAqMs84=)
                          8: 36322e3139322e3137332e302f32342d3234203d3e203235363933.roa (hash: 7LxiUpW29bCJDw6ndbnVxwTHPen7XCpx03brWPSWNVo=)
                          9: 37372e38332e3235322e302f32342d3234203d3e20323734383237.roa (hash: 1TkU9CuZNSKSA6n8CCEVJKfR3/eejFvKDG72x42fajA=)
                          10: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: VegTYwpyqBI8NVsfiZGa7nbuIizSi0tQDSuMW1lp9V8=)
                          11: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: kL/USbewZ5F9rgl6OrE+AodqJSBjzH+0rgbH/DsidT0=)
                          12: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: VR4JLJ2ZU8eUzCRER2JzBOvrizo3+I5iCEURL4jUDUs=)
                          13: 38352e3230392e31372e302f32342d3234203d3e203235363933.roa (hash: sfBR34BQfUnBG/Dfs9RgO4NWV6dIYQiGWUQLFQnMRUU=)
                          14: 37372e38332e3235342e302f32342d3234203d3e203432383331.roa (hash: B5BKp3Kt7IC0lBSFIyTVJVOYl/EnjscrkC95vEdRQdg=)
                          15: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: 3Dh0+QL4Ca7K3/8ZGEgIxNy6qmtIRAGaEkPcZns1GuY=)
                          16: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: FvvfrZU7Zk5wRW7V0nJVCDjddc7RhJHDxzG+f+tC0NU=)
                          17: 36322e3139322e3137352e302f32342d3234203d3e203332313637.roa (hash: /WAm5dy4jlcwivOnkIFnMuEvBCc6QOLwRlkX4YTGCBc=)
                          18: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: MXRlv5xAo/BF9Pc+8yjAPEOfs4iVkOfxpIdVxrgD3OQ=)
                          19: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (hash: Nx4wSG2k5MsgvkZE/SkqlmuALnm8blh30hh9Mbxj2MU=)
                          20: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (hash: QDSk8x00L35RICmReakqpkA/56+KGgKX4susJmbToXY=)
                          21: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (hash: 7SPDhEMWd1gl2XtQJzxrngcOVdYu9T7eD0t4enh6w+8=)
                          22: 3231322e3130322e3131342e302f32342d3234203d3e20323132363039.roa (hash: k4QPq18KIVcE3YfXs1geEObswKolsmORhNCPU0jWep8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f2:81:48:9c:c7:a7:f6:05:83:45:9a:38:5a:5e:e9:50:5c:d3:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
        Validity
            Not Before: Mar  1 12:41:40 2026 GMT
            Not After : Mar  2 16:06:40 2026 GMT
        Subject: CN=6EFDFEE78B1CE8FF9E732F203964436705F9B351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:eb:a6:6f:3d:af:d3:72:88:87:da:6d:e5:18:
                    b1:2c:87:5d:df:0d:a6:33:ff:22:0c:00:ea:0c:b1:
                    94:e9:af:00:99:b1:1c:55:7f:ea:ab:52:8c:f5:89:
                    1f:33:18:f0:d2:09:9f:73:aa:ef:f9:1f:a6:db:f7:
                    9b:02:75:f0:a7:9f:f2:3e:85:74:db:2d:99:48:14:
                    78:0c:89:ff:3e:a0:86:4e:4f:2c:33:2f:1b:60:a5:
                    02:7e:7e:04:e5:2a:3b:ae:48:f6:05:01:40:0d:f5:
                    a2:1f:43:bc:f8:ec:69:b0:b4:2a:ed:f8:41:05:de:
                    4a:12:f9:31:37:92:45:36:4c:7b:99:97:1d:61:97:
                    ec:a9:7f:77:07:d3:86:1e:07:5a:b6:00:5c:34:45:
                    c6:12:0b:fe:cd:81:34:1e:84:ae:c9:83:7d:e3:d4:
                    26:f0:9f:04:04:92:3d:f4:98:33:97:3b:7e:c1:89:
                    b4:da:b4:1f:2f:ae:8b:94:85:02:8d:a9:22:16:4b:
                    18:48:d0:02:4e:cb:9c:53:f7:c3:75:b0:4b:2e:9d:
                    23:75:c0:65:12:32:3b:db:03:18:9e:0f:58:56:03:
                    d8:1c:d0:86:d8:32:87:f1:67:51:7a:b5:55:fd:dc:
                    b6:d3:a0:db:76:45:97:36:fd:fe:0b:49:3c:18:b3:
                    75:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FD:FE:E7:8B:1C:E8:FF:9E:73:2F:20:39:64:43:67:05:F9:B3:51
            X509v3 Authority Key Identifier:
                keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:3b:3d:88:7e:26:6a:55:2d:29:a0:c3:34:3c:66:7a:41:ed:
         2b:94:eb:bd:09:25:41:29:36:cc:c2:d2:6e:a2:9c:dc:b8:25:
         51:1b:ed:70:1a:c8:58:91:cb:e2:f7:f9:5d:b5:a7:fe:bd:97:
         c0:ea:e0:a0:f9:c0:3b:7a:20:54:76:2d:81:33:74:09:13:6c:
         2e:40:bd:85:03:1b:f2:65:ca:68:81:c9:e1:9b:7a:57:00:2e:
         61:49:ac:1b:1a:b8:21:0a:58:3f:e0:c8:38:c4:ed:e8:e8:3d:
         70:33:b2:26:e6:f3:42:83:ae:59:63:42:26:01:50:d2:05:fd:
         67:c4:96:cb:26:d8:f3:09:b1:2f:99:d9:a3:7b:92:41:f7:51:
         d3:6e:52:13:fa:da:35:cf:f5:e6:2f:7f:de:7e:7a:ec:3d:9c:
         db:f6:93:b8:4b:c8:35:4e:fd:53:10:c0:db:7e:79:17:61:16:
         80:74:4c:f4:67:56:f3:31:75:6d:59:56:c9:31:41:2d:54:c3:
         0b:6f:ca:9e:8b:2f:04:20:22:c8:0f:3f:46:70:e0:25:ca:4a:
         e4:35:75:6d:8e:eb:fe:d0:8a:99:07:8e:26:28:b8:4c:41:73:
         b4:35:36:fa:d4:34:91:7a:b2:af:e9:54:32:e4:85:82:2a:83:
         1e:80:ca:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:13:56 2026 by rpki-client