Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
File:                     E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json)
Hash identifier:          jM5RA0TgTwoMJk74ZmNyIKDjF/ASEo0MrYSz7NZ99ko=
Subject key identifier:   53:3A:3D:12:16:2E:81:E4:44:4A:38:A2:AE:31:6D:F1:5F:6F:37:DD
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Certificate issuer:       /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial:       6B3930A1F787D5D21F10C9AA773FB6A7A3C970D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
Manifest number:          02C4
Signing time:             Tue 28 Jul 2026 15:44:08 +0000
Manifest this update:     Tue 28 Jul 2026 15:39:08 +0000
Manifest next update:     Wed 29 Jul 2026 19:37:08 +0000
Files and hashes:         1: 39312e3230392e35382e302f32342d3234203d3e203136323736.roa (hash: R4nCDM+gERSwMIVQOkFkhAEwhWmAFV8wbcJLGytRP4A=)
                          2: 326130663a356663303a6163653a3a2f34382d3438203d3e20323035303336.roa (hash: s62/iVKVlW2KdVyTR+Xnv457Z0j5+aZNRyV7RtkAKNQ=)
                          3: 326130663a356663303a6265643a3a2f34382d3438203d3e20323035303336.roa (hash: Vn0tNJq84yvhpEx3djvegd0qElXvUXIj3d10CpoBDS8=)
                          4: 326130663a356663303a636166653a3a2f34382d3438203d3e20323035303336.roa (hash: SIzDkF7YYsoaU9vFR/am7daSl1S+0BBZdMp9c5ogCY8=)
                          5: 39312e3230392e34302e302f32342d3234203d3e203436383434.roa (hash: lOyC9nhHln4w/6aFWRWEGti2qbnJIh38POtRvVGBI4s=)
                          6: 326130663a356663303a633064653a3a2f34382d3438203d3e20323035303336.roa (hash: vwuw8BagjBJB+QjPivE2w5i9soU6pwd3DUm4jYukQKs=)
                          7: 326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa (hash: dtubQqytFEqkt8TqTYJ+KlZgpXqOEEfNHG9KMyAKroE=)
                          8: 326130663a356663303a646561663a3a2f34382d3438203d3e20323035303336.roa (hash: nBnCDOBWFR9glmAsUSRrLmDkLZa6Zi7bYUkIoT7Lpvs=)
                          9: 326130663a356663303a6665653a3a2f34382d3438203d3e20323035303336.roa (hash: sgKb1dwb+yOP2QySpduAJeLZbiJJdLEfbfVpO0+8Lgg=)
                          10: 326130663a356663303a6261643a3a2f34382d3438203d3e20323035303336.roa (hash: tvkflaFeVW3sd8cXnqPd3goXjSItIqLYbambS6E6g9M=)
                          11: 326130663a356663303a6461643a3a2f34382d3438203d3e20323035303336.roa (hash: FjMn5kgc0Y1vdPNQCAd4cKVxUcNaP4msdjwOhjOI4iE=)
                          12: 326130663a356663303a626162653a3a2f34382d3438203d3e20323035303336.roa (hash: BEzvo1oTT3h/yITGofAX+DfQt9t+mraGyg3xFdVKM2I=)
                          13: 326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa (hash: xpwIwfTkmJ6MVFD7/8ThvhoBcV+rx30IkMkw3EnowGM=)
                          14: 326130663a356663303a626162613a3a2f34382d3438203d3e20323035303336.roa (hash: kdDGBWrURu4f0ClnA4SfgsI29M2UtK1sJ9ldbUvOvNc=)
                          15: 326130663a356663303a663030643a3a2f34382d3438203d3e20323035303336.roa (hash: Xgs2aXZ2twwalLnMnwHKHrLdiNgmex+4PLid272RcXc=)
                          16: 326130663a356663303a6465623a3a2f34382d3438203d3e20323035303336.roa (hash: HGgyYO79YRPv5eTIvRCSkvT+uzFYIDLIXRArnhiRVzA=)
                          17: 326130663a356663303a646565643a3a2f34382d3438203d3e20323035303336.roa (hash: 6WyHSY5Xp60q1IE95V4h6lwOICpnxsevWtnXKH+E1RA=)
                          18: 326130663a356663303a6164643a3a2f34382d3438203d3e20323035303336.roa (hash: N543k0DcGiJuxubeGma9GZg+VhMwbPVS9ShNVwfZl30=)
                          19: 326130663a356663303a646561643a3a2f34382d3438203d3e20323035303336.roa (hash: Z7YS72AkRUhmGE/8eVCwX/QArQ7kzj3DMVCvF8nhupE=)
                          20: 39312e3230392e35382e302f32342d3234203d3e20323032373035.roa (hash: PK2aFR1vuXxLprCpeWciXwI6HhgJ2xTabit5aAcYEng=)
                          21: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: Q3cOrEbAtcLV74XsXOCTXuwkZHfFmZDf6gPSYXwAdqU=)
                          22: 39312e3230392e34382e302f32342d3234203d3e2034363337.roa (hash: 9aJ1lRoOXNT0IiNEFJIwNi7z4Hr/etdLOUAmwK9LwsY=)
                          23: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: LfqYMzkh476Ki7VQsqODx8QNPNDEFujJRyehaY4kEpM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:39:30:a1:f7:87:d5:d2:1f:10:c9:aa:77:3f:b6:a7:a3:c9:70:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
        Validity
            Not Before: Jul 28 15:39:08 2026 GMT
            Not After : Jul 29 19:37:08 2026 GMT
        Subject: CN=533A3D12162E81E4444A38A2AE316DF15F6F37DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9a:67:21:4b:10:e8:90:32:cd:19:d9:6c:2b:
                    6b:4c:fe:0c:2f:0a:24:e6:69:ea:06:21:00:37:2f:
                    ea:72:69:fb:37:a3:51:fb:dd:51:02:36:b7:dd:d3:
                    4e:1b:e3:90:6d:e5:36:8d:77:5f:cb:a7:42:0e:a9:
                    ed:e4:ce:66:5b:67:dc:90:c3:cf:66:2a:9b:02:e5:
                    d0:04:1e:95:f0:d8:1e:dc:12:36:f4:ae:f2:7d:7e:
                    81:5a:42:88:69:c3:31:56:a8:ee:d8:00:c4:c7:23:
                    36:9a:4e:21:3d:ef:98:85:68:19:98:8f:e4:56:3a:
                    f5:93:2a:83:5c:ee:aa:2e:94:ae:03:45:bf:89:40:
                    4a:9f:9b:7f:ed:30:e9:8b:35:68:c2:b7:68:40:62:
                    1e:2c:95:7d:b2:1c:15:86:b2:c6:8f:6e:ea:7f:0c:
                    0e:75:1b:1d:e0:68:86:05:c3:df:7c:9f:0c:79:14:
                    c0:83:ed:5b:85:75:a1:67:6e:b3:95:e7:85:27:61:
                    4d:56:03:f9:bb:cc:c6:86:18:cc:7a:56:1a:75:92:
                    40:03:e2:c6:6a:2b:0e:fb:75:01:48:8d:0a:d9:db:
                    54:83:bd:a0:ca:e7:bd:1a:26:65:cc:42:53:ec:26:
                    68:ca:f2:e2:3e:be:51:28:97:f9:13:28:7d:85:e3:
                    2a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3A:3D:12:16:2E:81:E4:44:4A:38:A2:AE:31:6D:F1:5F:6F:37:DD
            X509v3 Authority Key Identifier:
                keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ea:94:20:f0:e1:3a:e0:6b:70:b5:89:85:9d:08:25:ac:09:
         cf:db:e4:fb:8a:cc:71:0b:f8:41:92:93:95:c1:69:1e:62:49:
         b3:e2:bd:ab:43:ed:6a:e2:1d:51:e4:19:ca:2a:a3:72:1b:dd:
         fc:59:78:8e:48:75:4e:a7:ec:55:b5:9e:5c:12:08:d2:6c:cd:
         29:0d:23:56:30:ce:30:43:8d:dd:1c:44:2c:c3:b9:9e:41:7c:
         ae:e3:ad:84:8a:c7:f7:9d:a6:fc:78:44:d1:bc:02:c7:79:e1:
         22:ae:a7:1a:ed:6f:3c:a2:f6:0f:ae:06:b1:cb:58:c0:e1:8b:
         ae:a3:21:62:88:02:0a:33:6b:65:c4:f4:20:3d:01:ff:ea:0b:
         de:a2:52:f1:af:c7:c9:35:e5:02:a0:af:1a:e4:cd:f4:8a:95:
         88:ba:ee:9e:18:1b:b4:a4:3d:d8:b7:c4:26:0f:62:8b:e2:66:
         ff:f9:b1:08:a8:b3:2c:de:3e:92:0e:67:0d:76:b8:0d:d0:27:
         03:0e:65:e5:1f:74:3c:d1:64:0b:1d:9d:67:a4:02:09:08:c8:
         a6:4e:8f:aa:46:21:30:48:af:a1:d9:20:8c:24:21:c5:e3:6d:
         b3:89:71:c4:5e:a1:44:df:64:88:3d:4e:51:10:0f:cf:e9:2c:
         8e:fd:da:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:10 2026 by rpki-client