Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
File:                     1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json)
Hash identifier:          XT5Anx0DeU+6pODloqf2JZv9vkFtqBFPF3ai3+DxgIs=
Subject key identifier:   DE:93:1E:E4:96:64:18:4B:B7:EA:00:05:9F:06:F9:98:98:C6:74:BA
Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
Certificate issuer:       /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
Certificate serial:       6888F706348E1C272A9D763EA5877286B1F63756
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
Manifest number:          0388
Signing time:             Fri 17 Apr 2026 00:58:49 +0000
Manifest this update:     Fri 17 Apr 2026 00:53:49 +0000
Manifest next update:     Sat 18 Apr 2026 02:28:49 +0000
Files and hashes:         1: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: Em50QpTy0foa8QUqUTX0uasEIDfP8Bn9f/ZisMl7kvo=)
                          2: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: KPVNDBydB4lEOCddQAWiNda/rm6IVb4G2i+sUeOhrYg=)
                          3: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: BL4+PYIdcLs3fiOkkamkg94lgyO9kcRHp6ACoQUQ5y8=)
                          4: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: DvQHKT6M+fkiG6o9KW4wBm0yNbqCXWjg78L/cu4BiJ0=)
                          5: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: OTYsTfrglFs/JKFj7RJtAXdrMe1OUcjbc3WSXqeD0dk=)
                          6: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: R4oy1L8+rEt1QdmoGVV7PiYt423B/xK5i6kPhc7W9aI=)
                          7: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: e+p8+Sw9X8S3Ty3gF9pg+LdvDbV5qMXAYBBthQD4LPE=)
                          8: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: M0+yHEN3VX8K+aVDmpusml/7Hx8dbBnadNDMaFbGOzQ=)
                          9: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: 9phDdz/jhh9vxdEc5WXHXIl+cdnJzAyh/6SdvyVejiI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:88:f7:06:34:8e:1c:27:2a:9d:76:3e:a5:87:72:86:b1:f6:37:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
        Validity
            Not Before: Apr 17 00:53:49 2026 GMT
            Not After : Apr 18 02:28:49 2026 GMT
        Subject: CN=DE931EE49664184BB7EA00059F06F99898C674BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b1:75:60:4c:5b:a0:ea:d1:f2:5e:e5:5c:5c:
                    18:6f:5c:61:74:06:00:4b:8a:6d:a4:41:25:1a:4c:
                    d8:8b:7b:76:1b:30:89:3e:21:49:89:3a:2f:09:b0:
                    91:42:22:be:0a:3d:e3:27:5a:76:c8:9a:06:c4:28:
                    91:c3:42:fa:3a:f8:64:56:85:aa:af:07:f4:21:22:
                    45:f7:0f:41:01:6d:9f:5e:e3:2a:db:33:da:ed:eb:
                    ca:64:ac:41:bd:b6:c1:a3:14:d4:59:aa:7b:a2:05:
                    ff:28:ed:61:0e:76:7f:55:8a:5d:fa:45:69:06:81:
                    76:18:f8:45:a3:06:7e:61:7d:65:52:88:ac:85:31:
                    98:52:c3:67:db:f7:c9:71:b8:68:49:b0:28:59:4c:
                    3a:74:88:50:ef:f8:8d:3e:43:66:49:38:82:98:15:
                    a0:7a:bc:d6:ff:a4:1f:4f:1d:84:0e:4b:2e:f1:fc:
                    8c:be:ac:9f:c5:01:62:b2:99:ca:4d:ea:7c:3c:fc:
                    e5:f0:8e:9c:0d:30:2a:9e:fd:76:32:9a:1e:3f:7e:
                    d8:e3:51:63:2d:57:85:21:90:90:cc:b0:68:ea:5b:
                    38:fa:76:28:07:2a:2d:96:bb:d9:fd:91:6b:4e:69:
                    62:01:d9:ad:f1:ac:ad:9e:d3:e5:4a:e7:67:58:66:
                    40:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:93:1E:E4:96:64:18:4B:B7:EA:00:05:9F:06:F9:98:98:C6:74:BA
            X509v3 Authority Key Identifier:
                keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:44:93:77:92:66:5e:41:71:e0:5a:74:4f:40:eb:e9:4f:cf:
         3f:82:ec:50:75:d2:83:be:83:3b:6f:0b:f2:36:9d:ba:cc:4b:
         6b:19:d2:f4:72:92:98:e4:d5:fb:12:73:be:0e:f6:d2:8a:66:
         b9:a5:78:9b:3e:27:14:0b:d7:e3:cb:e9:04:c1:f2:02:9a:22:
         c5:e0:84:f3:ad:ed:36:99:3f:b8:8e:9e:05:d4:ec:c8:a1:31:
         66:7a:89:16:5d:ab:f3:64:07:8d:ff:ae:9d:08:f2:4b:77:33:
         94:a3:69:16:56:c4:28:74:9b:de:97:f8:d2:03:2d:6b:0b:47:
         56:81:02:28:bb:bb:0a:cb:42:c8:ae:53:af:ce:82:82:34:c4:
         dc:27:ad:ab:7d:13:6b:b8:2f:3e:86:57:9e:77:c1:e1:87:46:
         09:23:06:31:24:56:77:3e:80:4d:99:a4:f8:40:96:88:d2:37:
         d1:79:3b:79:07:f4:ae:66:a9:75:c4:80:ee:f6:88:7d:e9:a8:
         4b:45:48:78:2e:be:c9:bc:07:5f:22:f8:4f:fb:86:6c:22:da:
         36:ff:84:0f:96:3a:a3:58:b5:b5:78:68:de:3b:3a:e6:be:3c:
         80:39:53:c0:ac:2b:17:ff:28:a4:bb:05:8d:e1:6f:b2:8a:ee:
         48:b9:7a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:03:36 2026 by rpki-client