Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft
File:                     EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft (raw, json)
Hash identifier:          lW7hVFCCnaYRaiNSPJZ3sTTXMmdevzPb7xWRrplQGJE=
Subject key identifier:   51:C9:00:CC:7A:2B:13:7D:3D:32:6A:DC:63:B6:C5:B9:ED:A2:B0:78
Authority key identifier: EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE
Certificate issuer:       /CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE
Certificate serial:       07C835A914E3B3AFF006F7F5D9658AD539025A4D
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft
Manifest number:          2C
Signing time:             Wed 29 Jul 2026 01:43:15 +0000
Manifest this update:     Wed 29 Jul 2026 01:38:15 +0000
Manifest next update:     Thu 30 Jul 2026 02:18:15 +0000
Files and hashes:         1: 326130623a346530373a323930343a3a2f34372d3438203d3e20323139343538.roa (hash: KRlxFqHowZdaTNViCJhErb//DfzqvDoHewWZPqKtCkA=)
                          2: 326130623a346530373a323930663a3a2f34382d3438203d3e20323139343538.roa (hash: QdWdCYMQ1B0FZjXFRDlUNhMGI8TuC2nx+5W/1E5RsMo=)
                          3: 326130623a346530373a323930303a3a2f34382d3438203d3e20323139343538.roa (hash: mDjQQXF1v1WMqSeOU6+LNJClsgR6yYGDAu/LFfF+GPM=)
                          4: 326130623a346530373a323931303a3a2f34382d3438203d3e20323139343538.roa (hash: 9GeXEaD9Ha5SPI5oBieu1S85PeA/oPrJ9T28WW3r65g=)
                          5: EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl (hash: ig8iFxwMnvK/8WrMEmKT6UQr2cMwf0oF88Pw0JCFmK4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c8:35:a9:14:e3:b3:af:f0:06:f7:f5:d9:65:8a:d5:39:02:5a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE
        Validity
            Not Before: Jul 29 01:38:15 2026 GMT
            Not After : Jul 30 02:18:15 2026 GMT
        Subject: CN=51C900CC7A2B137D3D326ADC63B6C5B9EDA2B078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d4:91:91:5a:7b:f9:6c:77:02:80:da:62:be:
                    df:b0:0b:65:15:ab:73:f0:8a:1b:08:ce:cb:0b:cf:
                    b5:60:99:e1:81:6c:85:a0:8f:f6:9b:41:8c:4b:ff:
                    f2:de:60:71:fb:15:90:5e:0a:7c:d3:fd:30:50:94:
                    7b:10:e9:1a:71:bf:a0:ea:03:bf:aa:08:a7:37:c8:
                    37:89:f1:68:16:81:51:a5:ce:23:74:1c:3e:33:5a:
                    0e:22:86:d7:6d:b6:88:a4:4b:e0:f7:83:ff:c9:a2:
                    f0:9b:e5:8d:38:57:85:96:ea:ab:5c:3e:b7:e5:b4:
                    a4:3d:ff:4e:c2:fc:4c:f5:9e:02:ba:99:88:1e:92:
                    a0:cd:24:52:62:a4:40:ad:9f:53:08:0c:c5:50:54:
                    f8:35:bc:43:18:62:29:14:d2:b1:3f:39:41:80:4f:
                    29:4a:a0:31:07:87:d4:93:13:9c:e3:93:b2:23:aa:
                    b5:4a:1d:ed:ae:2a:17:d3:07:86:ae:02:0e:65:27:
                    1e:4b:a1:5d:87:55:7d:88:1e:15:5c:f3:0d:08:15:
                    8e:27:a6:d6:9a:55:48:61:f6:99:25:7a:dc:30:de:
                    8c:2f:05:d3:b2:51:d8:99:89:28:f4:7f:f2:0e:3a:
                    71:ad:f7:84:c5:d3:6c:0b:ca:73:f2:60:b3:69:6a:
                    2e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C9:00:CC:7A:2B:13:7D:3D:32:6A:DC:63:B6:C5:B9:ED:A2:B0:78
            X509v3 Authority Key Identifier:
                keyid:EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:96:ad:8f:85:5f:c8:bf:8e:04:0f:64:ad:5d:81:b1:05:d5:
         ad:9f:4b:a0:26:b1:3e:4b:78:d2:b3:ba:21:b7:80:8a:eb:c0:
         63:63:f8:20:84:ab:76:77:a7:a0:e5:92:c8:1e:af:b5:fb:54:
         cd:a0:ff:78:e6:29:ae:9d:bc:ce:54:f1:c5:2c:08:78:a0:50:
         f2:b3:9f:9d:6f:cf:38:99:9e:e1:e3:14:d7:48:0b:fb:54:26:
         7d:a8:2f:95:0f:d2:fc:5e:f2:a4:51:92:3d:38:c8:89:32:24:
         d2:87:be:4c:d1:31:da:04:a1:94:c1:1c:e1:b4:eb:50:f9:c7:
         bc:9d:90:47:4b:73:1a:ca:6b:7d:ca:96:75:43:b2:35:18:07:
         76:b1:0f:b6:84:df:30:ec:5f:0b:57:a1:af:ca:9f:15:d1:eb:
         c2:65:0a:95:a7:8c:60:8a:b4:a9:d0:5c:04:b0:2d:bb:dc:4b:
         67:70:ad:13:5c:9f:3c:68:52:6f:c7:0b:cb:5f:3b:12:07:1d:
         6d:41:67:45:12:27:02:2d:40:5e:54:7e:60:a7:54:63:8c:af:
         ab:eb:e9:79:ce:dc:ff:d2:45:28:83:c6:af:d5:85:f2:3b:96:
         29:9a:84:7d:3b:0c:b8:65:6a:b3:a2:b1:93:3d:84:5a:cb:30:
         08:63:5d:c3
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUB8g1qRTjs6/wBvf12WWK1TkCWk0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VG
Q0Q3RjdDRTAeFw0yNjA3MjkwMTM4MTVaFw0yNjA3MzAwMjE4MTVaMDMxMTAvBgNV
BAMTKDUxQzkwMENDN0EyQjEzN0QzRDMyNkFEQzYzQjZDNUI5RURBMkIwNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP1JGRWnv5bHcCgNpivt+wC2UV
q3PwihsIzssLz7VgmeGBbIWgj/abQYxL//LeYHH7FZBeCnzT/TBQlHsQ6Rpxv6Dq
A7+qCKc3yDeJ8WgWgVGlziN0HD4zWg4ihtdttoikS+D3g//JovCb5Y04V4WW6qtc
PrfltKQ9/07C/Ez1ngK6mYgekqDNJFJipECtn1MIDMVQVPg1vEMYYikU0rE/OUGA
TylKoDEHh9STE5zjk7IjqrVKHe2uKhfTB4auAg5lJx5LoV2HVX2IHhVc8w0IFY4n
ptaaVUhh9pkletww3owvBdOyUdiZiSj0f/IOOnGt94TF02wLynPyYLNpai4pAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUUckAzHorE309MmrcY7bFue2isHgwHwYDVR0j
BBgwFoAU77XfB2zfBiKUsSwwLnXVfvzX984wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWYxYjQxY2ItYTM3Zi00ZDkzLTg4NTYtNDA5MmFmYjIy
YjE3LzEvRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VGQ0Q3RjdDRS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz
MDUzZjgyMGY1LzEvRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VGQ0Q3
RjdDRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjFiNDFjYi1h
MzdmLTRkOTMtODg1Ni00MDkyYWZiMjJiMTcvMS9FRkI1REYwNzZDREYwNjIyOTRC
MTJDMzAyRTc1RDU3RUZDRDdGN0NFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJatj4VfyL+OBA9krV2B
sQXVrZ9LoCaxPkt40rO6IbeAiuvAY2P4IISrdnenoOWSyB6vtftUzaD/eOYprp28
zlTxxSwIeKBQ8rOfnW/POJme4eMU10gL+1QmfagvlQ/S/F7ypFGSPTjIiTIk0oe+
TNEx2gShlMEc4bTrUPnHvJ2QR0tzGsprfcqWdUOyNRgHdrEPtoTfMOxfC1ehr8qf
FdHrwmUKlaeMYIq0qdBcBLAtu9xLZ3CtE1yfPGhSb8cLy187EgcdbUFnRRInAi1A
XlR+YKdUY4yvq+vpec7c/9JFKIPGr9WF8juWKZqEfTsMuGVqs6Kxkz2EWsswCGNd
ww==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:02:14 2026 by rpki-client