Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
File:                     399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft (raw, json)
Hash identifier:          wJv9HgRfVJ+v+MpsxbWEcqa0mljngUfU8Qn84d0+t98=
Subject key identifier:   25:B3:B8:70:F3:60:93:5C:66:97:B0:2F:01:41:AF:8C:5E:B6:36:96
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Certificate issuer:       /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial:       22FDE561FC0923C3207C901DCB8972ADD473B448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
Manifest number:          0307
Signing time:             Mon 21 Sep 2026 16:45:41 +0000
Manifest this update:     Mon 21 Sep 2026 16:40:41 +0000
Manifest next update:     Tue 22 Sep 2026 17:46:41 +0000
Files and hashes:         1: AS273043.roa (hash: J5XmuJxWgaFve963e8mjbZSN9H6IDO/exl7LJq+RNyc=)
                          2: AS48729.roa (hash: 9kOZrIrZDmTB/NO4UExUIWDXxdofMxriEIqF2KMPp4g=)
                          3: AS57043.roa (hash: IGqA+P4gyGQj+Ojgf3UYhxfhZx3ja/lPhrS9/OZoZrQ=)
                          4: AS218757.roa (hash: +oPJ4BCTREh5NYpXQhLqnbrUHjMt0jZYbNPOQ3NVfEY=)
                          5: AS16276.roa (hash: ivnTqgV4WNfXbRjaixdV8Az1b9K3HAxScmTRPDntrA8=)
                          6: AS395954.roa (hash: qpJnOKlx2JsSV2pN1Y3JKvyzN3SP5RoWp2ky1F3Qg4E=)
                          7: AS200213.roa (hash: mt0oKV4vKyzTLnTVvTz1WTT70/R8SpHLCy/OBAgeu/8=)
                          8: AS16509.roa (hash: MRwRszsGZxZG5dzirSfGrKpqCDPDeATyo9dzK+lHBJ8=)
                          9: AS17561.roa (hash: ClO3emh1IQhHFXSXeabdAwt6K42XyQd36OneCUf9o0E=)
                          10: AS62082.roa (hash: vnZ3izMrtJ4JH7rfOWOu+uvsXZMZS2hAbU6Xy2ppuF8=)
                          11: AS14618.roa (hash: +ZCMcc09GOGvH+RPQywhAOM/4k0Qko/J6RijUH1Gf1A=)
                          12: AS219183.roa (hash: 4UrOLweT+qrf1NMg3fly9j1yLDdaczMTQLgIHVuO3gA=)
                          13: AS197842.roa (hash: kIRy3NMl7bs1KiRBnYrlW/JpSPsYhqLQWfrFiCKCODo=)
                          14: AS219020.roa (hash: n7NjCG+aZTB+2pYlfb6hhXC06dmEQ0K4C7QxI9pIzRo=)
                          15: AS13335.roa (hash: YDslZ7oke18viDbx+Ygyopq6MWnYQD9W6tgXdPs8HXk=)
                          16: 399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl (hash: 8EqJ39J/0k6Y/xneXGkOS7jeDFib5mC6VGmxbgfzJt8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:fd:e5:61:fc:09:23:c3:20:7c:90:1d:cb:89:72:ad:d4:73:b4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
        Validity
            Not Before: Sep 21 16:40:41 2026 GMT
            Not After : Sep 22 17:46:41 2026 GMT
        Subject: CN=25B3B870F360935C6697B02F0141AF8C5EB63696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:5f:e8:cf:50:30:49:a4:00:12:26:2a:08:0c:
                    e5:68:77:9d:ec:ae:2f:2b:03:b6:b7:f0:31:14:c6:
                    7f:7c:4c:4d:98:11:b5:f7:95:25:79:27:82:21:55:
                    f3:d7:d3:7f:80:ac:17:f6:e0:92:90:02:17:59:9e:
                    13:94:4a:8f:67:00:42:b4:3e:cd:77:23:fe:6a:4b:
                    ba:bd:aa:89:00:14:a9:46:69:72:5f:46:0a:41:a5:
                    0e:24:e9:a0:02:8b:44:29:59:33:8c:c1:ad:1f:a6:
                    54:11:85:2a:e2:aa:b7:17:ff:24:2c:d6:a0:0d:e0:
                    ba:36:07:8d:e8:d7:16:6a:78:38:32:c6:63:7e:eb:
                    f5:00:76:81:92:8e:ec:25:77:83:1b:a4:2f:22:61:
                    68:00:86:4c:99:b9:83:66:aa:08:20:93:9a:75:f2:
                    8a:ef:8c:ab:73:bb:3d:3a:94:d7:ea:fe:ee:77:d5:
                    06:fc:af:1a:b3:2e:24:b2:6e:ca:c5:f7:ae:c3:7c:
                    41:72:55:2d:7b:de:f4:9a:0f:ee:73:c3:d9:ed:e9:
                    e5:99:7b:42:83:5d:d3:f3:15:90:85:50:e3:a2:4c:
                    8b:6c:c3:65:1f:c8:0c:64:e5:12:8f:b3:8e:56:63:
                    eb:f5:43:d4:ec:aa:9d:cf:d2:06:da:74:d4:50:f2:
                    86:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B3:B8:70:F3:60:93:5C:66:97:B0:2F:01:41:AF:8C:5E:B6:36:96
            X509v3 Authority Key Identifier:
                keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:9b:6b:fa:1a:d3:4f:87:f1:36:05:00:7e:e5:1f:d8:f3:13:
         c3:c8:fe:3e:31:8e:70:fb:e2:92:dc:90:fb:00:df:9a:d5:ba:
         f8:b8:eb:aa:a7:0c:aa:88:d4:4c:66:24:d1:7d:07:ee:c8:cc:
         e4:57:a1:18:08:93:af:2f:37:e6:9c:1b:12:66:75:01:d8:41:
         ef:93:f8:c1:5f:a0:68:a9:0a:6d:da:34:b5:50:99:8c:b1:c6:
         62:ce:b1:d9:0a:6c:15:e0:f3:a5:23:b0:18:99:b2:a6:0a:4e:
         cd:83:15:51:9b:07:57:1a:82:f1:84:43:02:ec:8e:95:1d:9f:
         07:63:3a:84:66:70:0e:48:54:71:38:5f:c7:e2:35:6b:75:25:
         b5:ca:c2:77:53:66:37:01:01:78:a3:03:62:7b:ed:b1:7f:5a:
         81:aa:fa:a4:fc:53:74:47:43:3f:2e:b4:45:15:bf:b1:40:3d:
         f6:c4:e1:75:2c:7d:74:df:0b:ef:6a:e8:fd:70:14:9f:71:32:
         bb:fc:14:28:99:06:83:04:01:65:ff:b4:d9:44:4c:22:2a:0b:
         0a:b8:33:34:07:b7:f1:56:e6:6b:7d:12:77:6a:e6:b4:3d:54:
         93:c2:86:94:28:40:11:d0:69:22:d1:43:61:0e:ac:cf:e8:e1:
         ca:6a:c7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----