Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft
File:                     CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft (raw, json)
Hash identifier:          srSrkmY8icR046phWttIBOX0vjRP7OF6J448qK+wVdE=
Subject key identifier:   2A:4D:A7:E2:27:05:46:C3:7B:DB:33:77:75:BA:1D:E2:66:30:9F:AB
Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F
Certificate issuer:       /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F
Certificate serial:       01ECBFD57B3C50C0C6E7398030E938B71A428F4B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft
Manifest number:          01AA
Signing time:             Sat 13 Jun 2026 12:17:13 +0000
Manifest this update:     Sat 13 Jun 2026 12:12:13 +0000
Manifest next update:     Sun 14 Jun 2026 15:14:13 +0000
Files and hashes:         1: 326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa (hash: pYAR74KeV/ydFt3H/yMvWyWHHe92bO+vR47SO89EW90=)
                          2: 326131343a373538303a666637383a3a2f34382d3438203d3e20323033393135.roa (hash: gsIwpY245j8fIC94LqkPJHGZjyAqBYlxII7NePgbZ4Y=)
                          3: 326131343a373538303a666637653a3a2f34382d3438203d3e20323033393135.roa (hash: pc5v6qtoIv5YaFeB01kPphqJyZS0iflHilTdG3JkLMM=)
                          4: 326131343a373538303a666637623a3a2f34382d3438203d3e20323033393135.roa (hash: 8og23EO/3Ia44WrUwjHaKKbFmQpT/jNLPSJPJq4zzQo=)
                          5: 326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa (hash: eyQ+EXgpe7ogjkdUwWOMZF84NoStyr6kSLUk4hmsjiU=)
                          6: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl (hash: ZmMKQu7Yi2J5SsJwCV0f3Juy398fDh/oa0ngavHzV+4=)
                          7: 326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa (hash: oYu59g7cKHhApVpkgqRTnw9jfrdNbp5kP9+u0to/GDc=)
                          8: 326131343a373538303a666637353a3a2f34382d3438203d3e20323033393135.roa (hash: edWg8eVKPrPOKjy0IkXAinCPcIVKlmM6kiuxaUVH3dI=)
                          9: 326131343a373538303a666637363a3a2f34382d3438203d3e20323033393135.roa (hash: cLUSerzV/UxTz2t/TpAz/cwOxeJF4/5nsCmTzKx4J7I=)
                          10: 326131343a373538303a666637343a3a2f34382d3438203d3e20323033393135.roa (hash: 7OcMgtiJjOUp4vbH335wtUn8wWl9Q5s9aOGp4rOAn9U=)
                          11: 326131343a373538303a666637373a3a2f34382d3438203d3e20323033393135.roa (hash: 6+PbaU8J60OL7OlHqP0ZbtwAw8SVxx8dyJJBJqDbxFc=)
                          12: 326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa (hash: /TSCFxq1k6Mu748jZoN0Eo5Sjpn+cziXXXUhsucoLNg=)
                          13: 326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa (hash: Fqd3S2MbsOHclWEZXlewpnT8bnKZVvDGIgL3ze+YoHU=)
                          14: 326131343a373538303a666637613a3a2f34382d3438203d3e20323033393135.roa (hash: lVFPEuT+Vv7EHAhCsqJ2Rg8eFP3usNSJ0TffuGmsFKE=)
                          15: 326131343a373538303a666637643a3a2f34382d3438203d3e20323033393135.roa (hash: ZdaCYsoHSSWR/I5PfpXTEC74LAUCu/IQxWtNDjeYaUc=)
                          16: 326131343a373538303a666637333a3a2f34382d3438203d3e20323033393135.roa (hash: +raeShoeu82SK61p+CeGEiQBGb2nYgWjmH84XKpFNFY=)
                          17: 326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa (hash: +fGGZrWlnfQQmOHh82cPjXI/AqO47/pYdQ2wNZ+KDek=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ec:bf:d5:7b:3c:50:c0:c6:e7:39:80:30:e9:38:b7:1a:42:8f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F
        Validity
            Not Before: Jun 13 12:12:13 2026 GMT
            Not After : Jun 14 15:14:13 2026 GMT
        Subject: CN=2A4DA7E2270546C37BDB337775BA1DE266309FAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ba:ae:c4:5d:e4:f2:98:59:ba:26:9f:d8:05:
                    b6:de:98:a7:38:a8:81:5e:16:5e:69:df:8b:dd:e1:
                    0f:25:5f:36:61:2a:bf:f5:5a:96:55:53:53:fc:28:
                    f8:97:59:e1:2e:ca:fc:f4:e9:be:18:a7:da:25:a8:
                    d8:71:a3:79:d9:3b:4c:f8:f8:89:22:d5:58:6d:47:
                    c0:7e:8e:55:90:b0:a0:67:08:d3:77:ff:77:89:97:
                    64:e5:a0:68:0f:bf:71:bf:e6:95:13:26:f6:40:7e:
                    19:2a:e8:a9:22:1e:5b:83:ad:30:79:76:7d:aa:7d:
                    37:e1:08:bf:3f:75:75:1d:65:67:68:2f:ed:b3:6a:
                    90:86:d1:ba:4c:79:af:37:20:ea:59:e6:6b:ae:3b:
                    f3:4c:98:87:e3:c9:1d:15:53:6c:f0:de:73:cc:b5:
                    b9:30:b9:88:21:5b:db:bc:d7:c7:f8:48:eb:6e:43:
                    7f:0c:2b:cc:70:21:e7:58:3e:f8:cb:d7:60:e1:6f:
                    a7:11:13:09:fc:3b:20:1a:93:3b:f6:ef:b4:fa:a6:
                    83:00:64:95:c0:91:99:ec:ff:0c:3a:c5:25:8e:22:
                    73:1b:b0:be:bd:96:cb:ef:91:e3:c9:9a:df:94:63:
                    39:02:3e:ee:ad:e2:06:25:cc:91:65:51:fc:1a:dd:
                    af:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4D:A7:E2:27:05:46:C3:7B:DB:33:77:75:BA:1D:E2:66:30:9F:AB
            X509v3 Authority Key Identifier:
                keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:9c:e3:6f:48:2f:db:70:a4:c8:45:48:89:57:7e:a0:ab:97:
         c5:90:ab:e9:88:48:b9:5a:51:48:f8:a4:9b:ff:cd:48:02:d0:
         8e:19:b7:da:f6:c7:e3:ef:fe:75:14:29:d5:7f:03:0b:c7:ab:
         3f:a7:b6:2f:86:38:fd:a4:93:aa:e6:ac:f8:21:3e:a3:3f:9a:
         de:f0:bf:bd:c0:be:4b:5e:31:17:a6:23:85:60:a4:fe:d5:64:
         90:63:cb:eb:99:5e:ea:0f:3d:8a:be:84:f5:a2:e0:18:d3:36:
         08:10:7e:5b:69:bd:7b:59:96:bd:87:01:08:10:9e:60:c6:a9:
         a3:e7:9a:df:c0:0d:c5:5e:67:a4:c5:9d:8a:70:e8:d5:57:70:
         ac:f5:18:fe:59:bb:c8:79:2b:33:55:24:db:d7:22:6e:10:22:
         a2:25:e3:b6:c5:f8:8d:5e:3f:58:cd:46:ca:ad:06:e4:c6:c0:
         4a:78:aa:5f:49:96:dc:c2:ae:1c:3a:ed:bb:46:eb:de:83:1f:
         ed:17:05:bd:37:d8:04:fa:57:0e:e8:bd:3f:ee:38:48:ed:80:
         db:79:4e:50:ea:03:b7:bf:89:3a:45:8e:f3:9f:c9:0a:52:a5:
         68:10:19:28:c8:97:44:20:cb:1b:78:71:33:bf:f9:c0:a3:dd:
         61:dd:6b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:21:35 2026 by rpki-client