Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
File:                     1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json)
Hash identifier:          3cNzrj3AWLlzh1Gp61LL9a61mvPOPe3sF0muoMYIsNg=
Subject key identifier:   48:BF:1C:7F:BE:21:D9:08:52:B7:F8:18:19:8F:99:54:D8:8A:37:35
Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
Certificate issuer:       /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
Certificate serial:       057DCAA939BBE76710DE18646C000058728AE748
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
Manifest number:          03D8
Signing time:             Sat 13 Jun 2026 13:02:07 +0000
Manifest this update:     Sat 13 Jun 2026 12:57:07 +0000
Manifest next update:     Sun 14 Jun 2026 13:38:07 +0000
Files and hashes:         1: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: uQ6YdX5/WUQ6EE4b+PyH9fVZLMZegSMvb7FY+FXaqfI=)
                          2: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: szbfiAabB2uAfi9D5AcfpxPGmaxMpLsPI3/vSpoxE9U=)
                          3: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: KwLIWCSeFKTrv4VaOW0JjqLpPgihB6aRK4CEWI2xsJA=)
                          4: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: Kd+QOrRraURrnm7DiXTAoMIjS5JdQwzRrqoABDmfXRA=)
                          5: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: AlY5Z1AihWSFAtcBObR2iby3i12VIhHyXxVUpZHdoc0=)
                          6: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: wItkpJymrUCqPyPQxmidR50wXi9vPRRLUnb7cZMe6Lc=)
                          7: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: sGk7ACRgj2xUOc33oWusMkib/NoqUeSQmBUzgrM/Pzk=)
                          8: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: w6hSAZV2VtLUk8Lcxp15MhyaA5GCxf2u983hjysiB3o=)
                          9: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: 8MoYL/dCbo6NYCzCa70zhAMqC8Td9hN9QuTr1/49Ea8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7d:ca:a9:39:bb:e7:67:10:de:18:64:6c:00:00:58:72:8a:e7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
        Validity
            Not Before: Jun 13 12:57:07 2026 GMT
            Not After : Jun 14 13:38:07 2026 GMT
        Subject: CN=48BF1C7FBE21D90852B7F818198F9954D88A3735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:db:17:33:8b:53:b7:23:f9:4d:a2:ed:d0:13:
                    72:da:2d:52:ed:5a:32:cc:6b:fb:73:dd:42:2f:49:
                    9f:82:96:a5:f3:f8:72:fc:90:bf:36:94:5b:3a:a6:
                    1a:ed:14:e6:71:31:57:1c:39:9c:82:c1:4d:dd:2f:
                    2e:01:97:49:b3:ea:57:81:14:84:8b:8a:6e:f4:27:
                    db:90:6c:f9:9d:d8:c6:37:ce:8e:3e:a9:93:43:8a:
                    c9:0e:93:92:63:ce:a0:07:ee:85:b0:88:86:a9:55:
                    64:61:42:b8:bb:f6:e1:77:13:34:11:07:ca:81:3d:
                    b1:f3:91:5f:89:1a:22:c6:48:b8:29:6f:b7:da:8c:
                    bb:59:14:60:3d:e9:35:13:e5:d7:cd:38:1a:0b:08:
                    ce:8b:85:1e:f9:19:08:c1:32:49:95:74:ed:68:6a:
                    8f:61:cd:21:d1:e8:60:e9:78:a9:af:1c:a3:d6:33:
                    4f:2d:da:3f:a6:9f:41:3b:6c:96:11:26:fc:bd:7d:
                    5f:26:0c:3c:5f:dd:7d:bb:7a:41:52:d1:a6:07:76:
                    f7:27:78:4d:d2:77:d5:c8:33:24:e3:ab:ae:6c:72:
                    a6:2e:fb:df:f9:c2:df:93:59:f8:87:9f:b9:5d:ef:
                    d6:6a:ab:e9:8f:80:3b:a8:de:47:78:c3:49:09:b3:
                    9c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BF:1C:7F:BE:21:D9:08:52:B7:F8:18:19:8F:99:54:D8:8A:37:35
            X509v3 Authority Key Identifier:
                keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:8c:4d:a9:cd:91:0b:59:8d:ae:dd:3a:1f:6b:d6:cf:34:d6:
         55:fa:87:2c:c1:01:a3:6e:75:d4:d0:b4:f4:6e:fb:79:18:75:
         25:3c:04:2a:2a:63:53:e7:40:b7:1d:5c:c4:39:3f:2a:57:e3:
         21:f4:28:71:5a:76:b6:44:f7:33:6f:81:c8:33:f3:a3:f0:85:
         22:f2:11:8b:86:6e:ba:7e:e5:fb:7d:da:ea:3d:67:8c:fd:f5:
         b1:32:da:a8:ba:b5:4d:5a:eb:a4:34:4a:59:b7:bb:2b:ba:1b:
         d1:66:57:5b:99:8f:00:f4:93:80:a7:b9:6d:64:33:f2:6a:23:
         d4:9f:2d:e6:e2:46:f6:79:af:b5:09:c3:eb:ed:59:ee:1c:2a:
         2b:07:83:d4:10:70:04:bb:08:62:11:2f:bc:6e:c8:5d:f2:43:
         66:98:af:d2:9a:17:2f:eb:4e:7e:dc:82:59:6d:ac:61:77:06:
         1e:9d:66:12:fe:61:7a:94:31:47:2a:54:b5:76:69:6c:a3:39:
         cf:1b:ce:13:18:14:3a:89:3e:fb:08:da:17:e4:df:de:01:27:
         ad:ce:01:ed:2a:0e:86:ab:3b:86:d3:41:61:10:0e:e4:b9:20:
         dd:71:1a:7d:01:ab:bc:3a:19:53:1a:22:02:85:bc:33:03:e2:
         f0:be:20:d6
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUBX3KqTm752cQ3hhkbAAAWHKK50gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC
RUM4OTBCQjAeFw0yNjA2MTMxMjU3MDdaFw0yNjA2MTQxMzM4MDdaMDMxMTAvBgNV
BAMTKDQ4QkYxQzdGQkUyMUQ5MDg1MkI3RjgxODE5OEY5OTU0RDg4QTM3MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC12xczi1O3I/lNou3QE3LaLVLt
WjLMa/tz3UIvSZ+ClqXz+HL8kL82lFs6phrtFOZxMVccOZyCwU3dLy4Bl0mz6leB
FISLim70J9uQbPmd2MY3zo4+qZNDiskOk5JjzqAH7oWwiIapVWRhQri79uF3EzQR
B8qBPbHzkV+JGiLGSLgpb7fajLtZFGA96TUT5dfNOBoLCM6LhR75GQjBMkmVdO1o
ao9hzSHR6GDpeKmvHKPWM08t2j+mn0E7bJYRJvy9fV8mDDxf3X27ekFS0aYHdvcn
eE3Sd9XIMyTjq65scqYu+9/5wt+TWfiHn7ld79Zqq+mPgDuo3kd4w0kJs5yHAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUSL8cf74h2QhSt/gYGY+ZVNiKNzUwHwYDVR0j
BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi
ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1
MzNEMUNCMUJFQzg5MEJCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2I1OWMxMDZjLTUzYjQtNGU5Mi05ZmJhLWQ2MDgyN2I1YmRiOC8wLzFGNEM4Mjgy
NzZBOTk2Njg2NUFCMkI1OTUzM0QxQ0IxQkVDODkwQkIubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQjE2p
zZELWY2u3Tofa9bPNNZV+ocswQGjbnXU0LT0bvt5GHUlPAQqKmNT50C3HVzEOT8q
V+Mh9ChxWna2RPczb4HIM/Oj8IUi8hGLhm66fuX7fdrqPWeM/fWxMtqourVNWuuk
NEpZt7sruhvRZldbmY8A9JOAp7ltZDPyaiPUny3m4kb2ea+1CcPr7VnuHCorB4PU
EHAEuwhiES+8bshd8kNmmK/Smhcv605+3IJZbaxhdwYenWYS/mF6lDFHKlS1dmls
oznPG84TGBQ6iT77CNoX5N/eASetzgHtKg6GqzuG00FhEA7kuSDdcRp9Aau8OhlT
GiIChbwzA+LwviDW
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:59:26 2026 by rpki-client