Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
File:                     8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json)
Hash identifier:          XIfmDyCpS7MF24jSJLnBNgOo3CLKB7aOzam2WrnxUuU=
Subject key identifier:   B3:F1:40:40:0A:6B:2E:75:91:58:22:AC:B7:18:60:5B:64:9C:71:66
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Certificate issuer:       /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial:       14B61C84FA4ADDC9478346A0A84D5124ED5D1ECD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
Manifest number:          06EE
Signing time:             Wed 29 Jul 2026 05:16:13 +0000
Manifest this update:     Wed 29 Jul 2026 05:11:13 +0000
Manifest next update:     Thu 30 Jul 2026 05:25:13 +0000
Files and hashes:         1: 37372e38332e3235342e302f32342d3234203d3e203432383331.roa (hash: B5BKp3Kt7IC0lBSFIyTVJVOYl/EnjscrkC95vEdRQdg=)
                          2: 36322e3139322e3137352e302f32342d3234203d3e2039303039.roa (hash: tnNyChr4oxUcnojqJuMajG3DuagFZQP9gO2VaWpCSS0=)
                          3: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: KdtoWFKZmupxeYv8ZtH2UnlJsLJFh2Np3sbeCuilvNs=)
                          4: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: kL/USbewZ5F9rgl6OrE+AodqJSBjzH+0rgbH/DsidT0=)
                          5: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (hash: +/mIlEx3xxWoZl+krpHUaeIjRRfIayd7cektA0/iFpI=)
                          6: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: P57/fYjckH7KO6Bmf2RAAe9o4ZEd5zcCF66fMAqMs84=)
                          7: 3138352e3138312e302e302f32342d3234203d3e2035303635.roa (hash: XgDvqjA1DUwIeQGus4KqsR+dQUTBQ2aN4efEM7LhMpY=)
                          8: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: CE9hWXGWiDqK5X5bUXx/dqTabhUB/7ogzo6chIHvh68=)
                          9: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: JpeDtHMcVyRt7wSevEegZIXGiDHI/xp5ouHedcx7mT4=)
                          10: 36322e3139322e3137332e302f32342d3234203d3e203235363933.roa (hash: l2moL/0n3AUQ5cZa8s9n/aY4gBFkHmTPj+K3TgDTaaI=)
                          11: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: MXRlv5xAo/BF9Pc+8yjAPEOfs4iVkOfxpIdVxrgD3OQ=)
                          12: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (hash: SlO9GlcvT7Yo+eC6PysK9Rigqz2h2W2yGk/p5q0Rstw=)
                          13: 36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa (hash: /DmT9jDgPBJnORjXPqoO2OikZb1TZUdRaJAnGGErjQc=)
                          14: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (hash: k9/Ch376K2xC47DoFkOrbQT45cHpJzonkazNFrVSeRg=)
                          15: 38352e3230392e31372e302f32342d3234203d3e203235363933.roa (hash: 5YJLPDaGqAiDF0G+tUXhPNg3tA1r1b/VO1ZV0rM38dQ=)
                          16: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: yLC1oKoMdjJrSS42z4vH04rNWh8jStXc4dl58WWWeFU=)
                          17: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: VegTYwpyqBI8NVsfiZGa7nbuIizSi0tQDSuMW1lp9V8=)
                          18: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: WZ8cDEsdzCRnMCCxt49kR7mnRf4BVe8+jNu1ZdECs5s=)
                          19: 3231322e3130322e3131342e302f32342d3234203d3e20323132363039.roa (hash: WTJQYj4kO8Tl738Oa1dFz0b2fCNqs4KUQg06eTa2Ut4=)
                          20: 37372e38332e3235322e302f32342d3234203d3e20323734383237.roa (hash: q68rGtvPxTIjEDPvv2TVoJliNz54C+gDFrWRdJOsUl4=)
                          21: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: FvvfrZU7Zk5wRW7V0nJVCDjddc7RhJHDxzG+f+tC0NU=)
                          22: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: 3Dh0+QL4Ca7K3/8ZGEgIxNy6qmtIRAGaEkPcZns1GuY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b6:1c:84:fa:4a:dd:c9:47:83:46:a0:a8:4d:51:24:ed:5d:1e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
        Validity
            Not Before: Jul 29 05:11:13 2026 GMT
            Not After : Jul 30 05:25:13 2026 GMT
        Subject: CN=B3F140400A6B2E75915822ACB718605B649C7166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fc:a5:28:6e:d1:41:6a:48:eb:dd:ad:ec:20:
                    3a:6d:b1:68:4a:ab:29:4b:e8:a5:85:67:b7:b0:06:
                    56:72:80:3d:2e:f0:4c:da:f3:0e:75:47:9c:fb:2e:
                    5f:43:a8:30:6a:fd:db:a0:fa:69:3f:a2:81:3b:b4:
                    24:b9:07:b1:bf:68:b1:9b:84:6a:43:a6:a0:7e:13:
                    39:96:7b:d0:da:f4:4d:e9:d2:1e:5d:68:b0:86:15:
                    37:82:6c:d1:73:81:3d:cb:32:eb:b9:22:cb:00:6e:
                    db:b9:cc:76:c1:e8:35:14:e0:3c:a2:d7:da:a1:21:
                    33:51:79:59:71:9b:eb:9b:94:16:3f:fe:aa:c5:57:
                    0f:9c:91:e2:13:97:02:6a:0a:b7:e2:30:d7:ae:fa:
                    6a:d1:69:2c:f4:84:06:0a:1c:7b:b0:8f:78:0e:6d:
                    d8:cc:3c:9d:b2:6c:93:74:31:0d:18:c2:58:a3:b4:
                    4a:82:4d:22:ad:2f:07:65:c8:e4:3f:dd:43:2a:a9:
                    7d:cb:eb:c3:e7:c4:f1:a2:cc:0a:e9:f4:71:ca:59:
                    38:3a:18:b0:ee:5a:82:45:98:31:ee:a5:70:55:b8:
                    38:ab:90:7b:bc:58:92:48:52:5f:51:ce:20:a7:40:
                    94:e0:b4:8d:33:97:8c:cb:c4:ee:02:3b:6c:c5:71:
                    61:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F1:40:40:0A:6B:2E:75:91:58:22:AC:B7:18:60:5B:64:9C:71:66
            X509v3 Authority Key Identifier:
                keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:60:37:cf:31:7c:6d:37:5e:b5:23:4a:70:cd:e1:07:6d:b5:
         c1:e9:f0:d0:3f:32:ee:e3:00:41:78:74:50:59:a8:c6:02:d1:
         b4:f1:2b:57:da:f4:cc:e9:22:19:74:e1:83:ed:01:e2:4b:0c:
         f0:2f:09:5f:26:d2:8f:ec:39:76:cb:ce:9c:6d:32:7b:a8:29:
         1b:40:f9:68:5b:05:f5:d3:d9:9b:14:84:ca:42:90:79:8c:89:
         08:04:67:ff:72:96:46:54:8e:d3:93:af:f8:b5:0d:83:74:e7:
         96:4f:af:e7:da:7c:0d:34:1a:15:35:d2:8c:8c:c2:ce:b8:1b:
         0e:86:58:16:ac:e1:a3:dd:bf:02:13:4b:6f:85:4a:91:ec:48:
         a0:c5:9f:37:a0:eb:b2:7c:2f:e1:7d:33:01:91:95:8e:5d:ca:
         e3:28:35:7b:53:a4:83:3e:d0:2c:cd:7c:ee:66:86:a6:b8:db:
         6e:07:71:21:77:73:57:69:25:68:40:48:ef:50:cb:b5:d7:b1:
         6e:43:cd:5a:f6:7e:49:78:de:14:ba:97:a9:4d:c4:3b:58:3b:
         e8:08:80:bd:b0:92:7a:e5:20:0a:e8:55:fd:e2:bf:56:2d:fb:
         4d:30:e5:d9:a5:c4:fe:ec:9b:89:4c:2a:2d:96:46:01:58:d7:
         bb:ed:ca:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:22:32 2026 by rpki-client