Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
File:                     E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json)
Hash identifier:          06nXPun8t0JfDpmR5b0MFINFYFWA9WnQV9DW1dMz4l0=
Subject key identifier:   9E:B9:05:66:94:26:AC:A2:97:DC:95:D9:83:D2:5B:CD:90:CF:E5:E1
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Certificate issuer:       /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial:       462D46EA6D8C2F0EC485BD0F17D5F31D6D8B6153
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
Manifest number:          023B
Signing time:             Fri 17 Apr 2026 07:39:42 +0000
Manifest this update:     Fri 17 Apr 2026 07:34:42 +0000
Manifest next update:     Sat 18 Apr 2026 07:45:42 +0000
Files and hashes:         1: 326130663a356663303a646561643a3a2f34382d3438203d3e20323035303336.roa (hash: Z7YS72AkRUhmGE/8eVCwX/QArQ7kzj3DMVCvF8nhupE=)
                          2: 39312e3230392e34302e302f32342d3234203d3e203436383434.roa (hash: lOyC9nhHln4w/6aFWRWEGti2qbnJIh38POtRvVGBI4s=)
                          3: 326130663a356663303a6261643a3a2f34382d3438203d3e20323035303336.roa (hash: tvkflaFeVW3sd8cXnqPd3goXjSItIqLYbambS6E6g9M=)
                          4: 326130663a356663303a6265643a3a2f34382d3438203d3e20323035303336.roa (hash: Vn0tNJq84yvhpEx3djvegd0qElXvUXIj3d10CpoBDS8=)
                          5: 326130663a356663303a646565643a3a2f34382d3438203d3e20323035303336.roa (hash: 6WyHSY5Xp60q1IE95V4h6lwOICpnxsevWtnXKH+E1RA=)
                          6: 39312e3230392e35382e302f32342d3234203d3e20323032373035.roa (hash: PK2aFR1vuXxLprCpeWciXwI6HhgJ2xTabit5aAcYEng=)
                          7: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: InMl9SmqYe6lEdzQoYwbsMBY/jUGAL8mgrFEpcZDP/E=)
                          8: 326130663a356663303a663030643a3a2f34382d3438203d3e20323035303336.roa (hash: Xgs2aXZ2twwalLnMnwHKHrLdiNgmex+4PLid272RcXc=)
                          9: 326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa (hash: dtubQqytFEqkt8TqTYJ+KlZgpXqOEEfNHG9KMyAKroE=)
                          10: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: LfqYMzkh476Ki7VQsqODx8QNPNDEFujJRyehaY4kEpM=)
                          11: 326130663a356663303a6665653a3a2f34382d3438203d3e20323035303336.roa (hash: sgKb1dwb+yOP2QySpduAJeLZbiJJdLEfbfVpO0+8Lgg=)
                          12: 326130663a356663303a626162653a3a2f34382d3438203d3e20323035303336.roa (hash: BEzvo1oTT3h/yITGofAX+DfQt9t+mraGyg3xFdVKM2I=)
                          13: 326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa (hash: xpwIwfTkmJ6MVFD7/8ThvhoBcV+rx30IkMkw3EnowGM=)
                          14: 326130663a356663303a626162613a3a2f34382d3438203d3e20323035303336.roa (hash: kdDGBWrURu4f0ClnA4SfgsI29M2UtK1sJ9ldbUvOvNc=)
                          15: 326130663a356663303a6465623a3a2f34382d3438203d3e20323035303336.roa (hash: HGgyYO79YRPv5eTIvRCSkvT+uzFYIDLIXRArnhiRVzA=)
                          16: 39312e3230392e34382e302f32342d3234203d3e2034363337.roa (hash: 4+D5jdmTDYB1GvCAU0z5GBGlSPW7Q/zpduO0wdWv8pU=)
                          17: 326130663a356663303a6461643a3a2f34382d3438203d3e20323035303336.roa (hash: FjMn5kgc0Y1vdPNQCAd4cKVxUcNaP4msdjwOhjOI4iE=)
                          18: 326130663a356663303a6163653a3a2f34382d3438203d3e20323035303336.roa (hash: s62/iVKVlW2KdVyTR+Xnv457Z0j5+aZNRyV7RtkAKNQ=)
                          19: 326130663a356663303a633064653a3a2f34382d3438203d3e20323035303336.roa (hash: vwuw8BagjBJB+QjPivE2w5i9soU6pwd3DUm4jYukQKs=)
                          20: 326130663a356663303a646561663a3a2f34382d3438203d3e20323035303336.roa (hash: nBnCDOBWFR9glmAsUSRrLmDkLZa6Zi7bYUkIoT7Lpvs=)
                          21: 326130663a356663303a636166653a3a2f34382d3438203d3e20323035303336.roa (hash: SIzDkF7YYsoaU9vFR/am7daSl1S+0BBZdMp9c5ogCY8=)
                          22: 326130663a356663303a6164643a3a2f34382d3438203d3e20323035303336.roa (hash: N543k0DcGiJuxubeGma9GZg+VhMwbPVS9ShNVwfZl30=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2d:46:ea:6d:8c:2f:0e:c4:85:bd:0f:17:d5:f3:1d:6d:8b:61:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
        Validity
            Not Before: Apr 17 07:34:42 2026 GMT
            Not After : Apr 18 07:45:42 2026 GMT
        Subject: CN=9EB905669426ACA297DC95D983D25BCD90CFE5E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2b:e4:dc:b5:ce:82:9a:87:f7:b9:74:07:f9:
                    fa:85:4a:87:9f:a4:6c:40:e2:ea:58:13:2a:6d:f8:
                    f8:34:15:19:a4:92:40:1d:b5:6f:2a:ac:56:56:33:
                    1a:f9:4b:3f:21:df:7e:52:75:08:d2:97:67:b1:c8:
                    17:88:11:fb:bc:35:71:c7:05:4e:ea:d8:ec:18:4f:
                    ef:01:96:a1:c4:7a:43:ad:ab:1c:4b:2a:8c:af:19:
                    88:88:b4:8b:14:c6:72:fb:77:ef:47:ba:a2:73:f1:
                    21:8e:d7:d6:c2:58:f9:25:41:a9:fb:4b:6a:14:20:
                    ab:d4:07:ea:8a:fa:9f:58:42:42:a9:40:6d:f3:83:
                    1b:8d:71:3f:99:03:ba:a3:14:2a:0e:67:b5:86:56:
                    04:bc:16:ea:11:75:b0:1d:db:b2:43:e2:3b:d0:9f:
                    54:2e:e9:f1:9d:23:49:df:91:95:d4:27:61:cb:18:
                    09:e3:7b:ed:af:66:3f:a3:48:58:7e:96:6c:e2:f5:
                    63:c8:a1:94:cb:ee:6c:08:7c:3d:ed:5e:15:ec:b4:
                    47:40:bc:23:67:41:b9:90:f2:b9:8b:bc:16:ee:30:
                    b7:f4:77:bc:a0:b0:7a:f7:58:7d:98:1f:7e:0d:dc:
                    d8:85:5c:32:fd:2d:9d:3d:ca:f2:f2:46:f0:17:52:
                    40:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B9:05:66:94:26:AC:A2:97:DC:95:D9:83:D2:5B:CD:90:CF:E5:E1
            X509v3 Authority Key Identifier:
                keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:54:53:8e:09:2f:a6:3a:76:97:20:48:05:a7:76:c5:d2:63:
         30:a0:40:e6:78:83:85:ca:cf:c9:4f:39:45:c1:03:4e:ec:af:
         af:2d:6d:91:d3:19:fb:9e:08:a5:1e:f9:72:bd:c1:d4:a4:6b:
         05:18:fa:be:bb:2a:0e:d8:34:34:5e:1e:9a:51:5d:06:84:79:
         3f:6d:e8:d9:9e:bb:2a:85:ff:86:9c:4d:cb:4f:7d:55:51:75:
         26:7d:6b:bd:88:4f:c5:75:b1:4c:fc:ca:20:1f:93:0b:50:6b:
         9d:5e:ba:7c:bc:8e:e4:5c:b9:0a:e4:34:58:55:25:0e:7b:00:
         0d:5a:da:74:ef:2d:80:8e:f7:bc:69:0c:dc:c0:91:d2:35:db:
         52:d4:81:2e:ab:03:2e:3b:e9:3b:fe:9e:b8:15:a9:49:e5:a9:
         0f:86:d2:8c:0c:24:62:dc:92:e1:10:c8:13:70:fc:06:41:57:
         7a:5c:58:d6:32:57:7d:e8:c6:02:25:96:5e:9a:18:e8:d5:0d:
         42:78:74:c2:1e:18:0e:d7:7f:9e:a8:a6:61:45:d0:1a:c3:4b:
         e4:18:45:a4:3d:0f:2f:8c:76:31:a4:f0:1f:78:ed:46:f8:98:
         55:a4:aa:81:f7:c3:3d:f3:8c:ef:77:38:42:c3:03:da:36:ab:
         45:00:74:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:41:09 2026 by rpki-client