Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
File:                     926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json)
Hash identifier:          OyCA+dLz1F82CIbDyxHKvAqtx4L8WeafGXZdlYiM2g0=
Subject key identifier:   72:30:AB:A4:11:94:04:A9:57:07:33:87:2F:CF:90:93:3F:91:4A:CB
Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
Certificate issuer:       /CN=926cb33722a3493216283dc80cae0ee9d58874f2
Certificate serial:       61AF96DB0CF5779C0E2908CDA16A8119141889A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
Manifest number:          06E0
Signing time:             Tue 28 Jul 2026 17:23:02 +0000
Manifest this update:     Tue 28 Jul 2026 17:18:02 +0000
Manifest next update:     Wed 29 Jul 2026 20:33:02 +0000
Files and hashes:         1: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: wZK8GKavAyHxdXi2NXubIUtrqAxE1wgx7MB4jomVNVo=)
                          2: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: GLWjJHjfXz9qMn2izTZRJXWNAO1J0i98KbYKbo1wAUo=)
                          3: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: Pxf4B7ZT6gV1TWVd3qoH34uVviW8HXPSyFTn+jTKS9w=)
                          4: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: m4JDjuZJDmmChmmlFAMJ8Bw8b2ZsdAh0iDbkWo79PPM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:af:96:db:0c:f5:77:9c:0e:29:08:cd:a1:6a:81:19:14:18:89:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2
        Validity
            Not Before: Jul 28 17:18:02 2026 GMT
            Not After : Jul 29 20:33:02 2026 GMT
        Subject: CN=7230ABA4119404A9570733872FCF90933F914ACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:55:93:5f:42:2f:ba:a4:b6:f1:07:c7:ad:93:
                    11:13:3a:db:81:79:29:05:ae:e1:7b:61:e0:74:9e:
                    f5:ec:19:94:c8:6d:fa:25:19:35:c1:83:b7:9e:de:
                    e1:43:22:7a:ff:ef:4c:80:e3:e1:74:20:54:92:2a:
                    19:02:aa:36:03:d3:41:f6:c5:30:41:9f:35:ff:24:
                    a4:4e:d2:cb:b8:75:f3:3d:f3:d6:f0:ba:a4:5a:ac:
                    40:b4:1b:b6:ae:84:5f:ea:18:1c:a5:13:a3:84:d8:
                    8e:78:ef:05:7d:31:9d:0f:31:ab:96:38:e3:89:d7:
                    51:b7:a5:86:04:20:f2:56:3e:39:e9:f3:a6:dd:be:
                    50:7c:e7:b9:e0:52:b7:4c:aa:82:a4:c2:73:f7:35:
                    bc:2f:68:2c:f5:ac:27:d5:1c:41:f0:14:82:a3:7c:
                    07:0c:3d:24:9d:a6:0d:9f:7e:5a:34:45:e0:07:ce:
                    21:0f:1b:53:d9:04:e6:92:a0:9f:f6:1b:38:b4:ae:
                    a7:db:3a:de:13:c3:c4:f3:d7:23:4c:98:a1:af:83:
                    80:22:8f:14:41:3e:17:78:4c:fb:f7:dd:a3:c3:9c:
                    02:f8:d8:15:a0:e4:fc:3e:99:41:86:cc:07:e2:0a:
                    e5:6e:92:15:e9:34:d1:8c:f6:32:5e:78:87:82:9e:
                    53:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:30:AB:A4:11:94:04:A9:57:07:33:87:2F:CF:90:93:3F:91:4A:CB
            X509v3 Authority Key Identifier:
                keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ab:c7:2d:64:96:43:7a:9a:4c:72:0d:1b:2c:9d:cd:69:67:
         b7:ca:89:f5:34:78:25:01:0a:e2:6a:87:96:8b:8d:43:e6:4f:
         17:22:87:5b:53:95:fc:06:f1:03:50:08:62:e7:fe:4e:34:fb:
         66:3d:89:a6:4e:5e:d0:5e:1b:50:19:98:f8:19:bb:8e:25:8b:
         8f:5b:34:12:fd:a7:94:84:b8:52:91:03:9d:8e:b8:ef:a6:55:
         e9:af:bc:06:89:a9:ec:8b:66:55:44:ca:ff:45:6a:34:0a:50:
         99:32:0d:37:ec:80:f8:5d:ee:f0:78:84:a5:d9:21:14:da:27:
         38:96:21:a4:65:f4:55:69:cc:e4:09:ef:f2:86:81:35:7e:82:
         9c:d4:d6:16:43:b5:06:7c:4e:26:71:29:14:57:ad:84:1a:38:
         0b:f5:1e:6c:47:ea:94:60:07:f8:a0:dd:f7:09:a1:a5:9a:59:
         32:12:fe:07:35:6a:c7:9a:91:12:65:65:d7:a0:6c:a5:de:a3:
         bc:3d:10:6f:cc:9a:3b:14:ef:97:8a:d4:a5:03:7b:47:5f:32:
         f2:1b:ec:68:64:07:e6:3d:70:9b:85:64:53:aa:c9:21:fb:21:
         e3:d9:1b:a0:18:ee:57:f2:bf:58:7b:d9:fc:e7:96:d9:16:ca:
         a2:e8:ed:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:31:48 2026 by rpki-client