Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
File:                     199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft (raw, json)
Hash identifier:          PMxTJbxf2++URGq+IYAAj/BP/niXiWtAaglb8IZdBFM=
Subject key identifier:   99:C4:08:BB:9B:B7:4D:E4:89:B2:85:43:87:9D:76:90:4E:16:26:39
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Certificate issuer:       /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial:       4806ECC9E128E86945FD73C1BFE5960A6F9467C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
Manifest number:          78
Signing time:             Sat 13 Jun 2026 01:07:48 +0000
Manifest this update:     Sat 13 Jun 2026 01:02:48 +0000
Manifest next update:     Sun 14 Jun 2026 02:32:48 +0000
Files and hashes:         1: 3137362e3130322e3136392e302f32342d3234203d3e20323130353435.roa (hash: qdweDv/ArUKKn+iSNPlMNOmHnjG+yu3hh6MZ3RuN5Ks=)
                          2: 39312e3233332e31312e302f32342d3234203d3e20323038333939.roa (hash: b608/aD25N0+C4jsRLgiexFiGNPh713tPtHegBXVrp0=)
                          3: 199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl (hash: ZC9NmUTsiZy+J8QYrGCivQTpqIOQkUwZ8VABTvS+4Vo=)
                          4: 39312e3233332e31302e302f32342d3234203d3e20323033303930.roa (hash: Hycf4m/uyCvgrukKOL6GH1XDUuHN90sQFhGZMCD/fVQ=)
                          5: 3137362e3130322e3137302e302f32342d3234203d3e20323130353435.roa (hash: iLAOFktgeNi6FXUckFRcsh0irPGm/7n9N5v2nHd4bNg=)
                          6: 3137362e3130322e3136382e302f32322d3234203d3e2030.roa (hash: CXIvRfQqzEtDWgPFyzaNz4QogOJOjAUZffk+jhOjSGw=)
                          7: 3137362e3130322e3137322e302f32322d3232203d3e2032393134.roa (hash: NeWINT0yzxeGbQAkYPSSTlBaATh7hwEdqMyxHoWCi2c=)
                          8: 3139332e32352e3137302e302f32342d3234203d3e20313734.roa (hash: gUCz46pmpri/V6R2A0/vYa2at3JvkKr4X8pmgSsdW38=)
                          9: 39312e3233332e382e302f32342d3234203d3e20323135313532.roa (hash: QjQW+ZHXaZZs5QWfyh6YzF1NV5fXTeQF/UMJGjS1emY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 02:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:06:ec:c9:e1:28:e8:69:45:fd:73:c1:bf:e5:96:0a:6f:94:67:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
        Validity
            Not Before: Jun 13 01:02:48 2026 GMT
            Not After : Jun 14 02:32:48 2026 GMT
        Subject: CN=99C408BB9BB74DE489B28543879D76904E162639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7f:da:c8:0e:bf:a9:54:80:72:95:8d:1c:c8:
                    6e:c5:e2:b7:1a:56:5d:66:f9:88:5f:e4:1f:71:8d:
                    c0:31:6d:6d:22:61:45:e6:9e:54:12:80:c2:76:52:
                    ee:a6:b2:20:b4:a2:fa:5d:6b:b6:bc:b2:39:03:29:
                    b1:f7:96:7e:93:04:77:df:47:00:4d:47:d6:df:ce:
                    ba:f9:f9:e1:52:5a:15:95:5d:d3:d3:e7:ac:38:f0:
                    c6:90:49:bf:5d:ce:82:b1:03:a7:36:49:39:26:37:
                    9c:59:ef:db:ba:76:bf:dc:c7:26:a9:ff:59:27:e9:
                    b7:82:bd:af:2e:1f:02:09:73:09:e3:a4:f5:b4:d7:
                    8e:94:03:61:bd:52:8b:dd:cc:52:9d:c1:69:5d:7e:
                    67:12:b4:e5:47:8d:b7:4e:69:4e:22:11:fa:5c:95:
                    c6:f0:1c:c6:05:f0:63:d7:0e:1f:11:1b:3b:f5:5a:
                    f5:ad:f3:a0:00:8f:6f:a7:b8:18:bd:5b:34:ba:3f:
                    26:3a:e7:fd:c4:6f:ce:8f:cb:49:5a:46:ae:24:4a:
                    cf:07:d7:87:4c:39:85:0c:02:d2:10:6b:f8:f2:38:
                    36:3e:86:55:cc:e5:4c:aa:f2:09:5a:05:4c:20:dc:
                    c4:f5:5a:2a:6b:60:25:56:60:3e:d1:23:9f:3d:db:
                    93:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C4:08:BB:9B:B7:4D:E4:89:B2:85:43:87:9D:76:90:4E:16:26:39
            X509v3 Authority Key Identifier:
                keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:4e:da:ed:0e:ee:b8:00:7c:48:67:1c:02:b6:4d:0e:1e:55:
         9f:70:dd:a4:92:01:70:b7:5c:05:d4:73:8f:f1:17:05:a7:82:
         52:75:c8:56:6e:06:ad:be:2d:d4:43:a9:f2:50:26:2e:60:04:
         d9:19:27:62:ee:5b:dc:a6:8f:f3:3a:13:f1:a7:e7:69:a8:7d:
         e1:89:e2:64:d9:71:d4:c3:65:71:92:09:bc:e4:b9:db:65:ed:
         a8:fb:2a:6f:db:0e:57:5f:a9:66:a7:9c:da:40:5e:d0:aa:d9:
         03:25:8b:71:ba:ba:e8:fb:44:f7:d9:fe:66:be:f9:49:1d:52:
         3b:27:d3:3c:2e:ca:02:0e:76:67:b5:b7:f4:e5:20:07:2e:e3:
         4b:d5:ea:20:bb:4b:26:82:48:61:ba:71:ad:1c:e7:ba:fa:3c:
         7b:3b:e2:08:43:7b:42:11:a7:25:0f:cc:e4:33:67:4a:82:64:
         01:c6:7d:2f:fb:93:4c:f2:cf:35:94:79:f9:c4:c2:85:98:a2:
         71:c3:f1:8f:5e:cc:2a:52:da:53:fa:aa:1a:ad:02:61:55:35:
         ad:a9:9a:64:e1:38:24:2e:97:8b:a6:0d:35:5d:b7:de:29:3b:
         7f:01:ca:4b:7e:35:d8:15:f8:60:47:53:bd:f5:40:97:ed:d4:
         4f:82:5e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:46:51 2026 by rpki-client