Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
File:                     926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json)
Hash identifier:          oCDv2JpHO5A8I35Sdfm0lF+9g1p7v/hO28GDDIQ5/pM=
Subject key identifier:   F5:BF:9C:BA:D3:BE:B7:DC:4E:6F:F5:FC:03:F7:94:36:B0:9D:9E:A3
Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
Certificate issuer:       /CN=926cb33722a3493216283dc80cae0ee9d58874f2
Certificate serial:       65C8663A37562EAC6BD80FD8AA8274BB490BC677
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
Manifest number:          072C
Signing time:             Wed 23 Sep 2026 01:13:21 +0000
Manifest this update:     Wed 23 Sep 2026 01:08:21 +0000
Manifest next update:     Thu 24 Sep 2026 01:26:21 +0000
Files and hashes:         1: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: uK0Qd/USy59AqNTwWN3wPV3irBo5HSGqpruSyYVoTWs=)
                          2: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: wZK8GKavAyHxdXi2NXubIUtrqAxE1wgx7MB4jomVNVo=)
                          3: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: /6JYnu74FnlMKLeMyxGRy9zINdjsl5pRxawy91gInjc=)
                          4: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: 4iHuXr7YPRcwepbczBLM/smKtaZaXPKytxtMKrZbFAE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 01:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c8:66:3a:37:56:2e:ac:6b:d8:0f:d8:aa:82:74:bb:49:0b:c6:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2
        Validity
            Not Before: Sep 23 01:08:21 2026 GMT
            Not After : Sep 24 01:26:21 2026 GMT
        Subject: CN=F5BF9CBAD3BEB7DC4E6FF5FC03F79436B09D9EA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d7:3c:a5:a7:31:33:e2:a5:0b:05:a9:2b:1a:
                    26:4c:0d:3a:76:08:e3:f1:f4:e9:47:d6:8e:00:8c:
                    2a:38:b1:e8:42:97:5f:fd:5c:e8:98:9f:03:bc:dc:
                    69:0f:61:5d:77:80:ee:0c:1e:c3:1f:28:26:47:3f:
                    e3:0b:ca:f5:31:9e:a2:0d:a7:93:7f:1e:ad:e4:70:
                    0d:c1:ec:65:ae:48:30:ae:8c:5d:59:20:5b:c0:a6:
                    58:1f:d6:c6:61:54:29:c4:13:86:e4:cc:ba:06:c4:
                    9a:67:76:b4:66:93:48:6d:67:f6:c7:95:23:75:b0:
                    73:40:25:b6:61:e6:16:3c:bc:9d:70:8d:5a:a2:94:
                    a5:4e:2a:a2:fd:5d:9a:e0:b1:ac:68:d6:fe:d1:63:
                    43:9c:df:41:43:04:73:e7:0b:7f:4f:dc:23:dc:fe:
                    22:15:94:6c:19:98:4b:84:bc:7c:90:af:0f:df:f7:
                    7c:1e:c1:bc:75:21:e6:c8:53:20:f4:d3:46:f3:3e:
                    84:c9:56:13:31:80:35:84:13:96:df:85:fc:0c:be:
                    0a:68:90:f7:19:21:c5:c2:4e:5a:8e:01:b6:73:ef:
                    ec:6d:77:6f:ae:56:b5:d2:c4:84:17:2d:93:c7:a2:
                    c9:a1:d5:8c:39:1a:97:83:4e:df:16:7c:99:17:57:
                    55:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BF:9C:BA:D3:BE:B7:DC:4E:6F:F5:FC:03:F7:94:36:B0:9D:9E:A3
            X509v3 Authority Key Identifier:
                keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:30:6d:3f:86:85:e0:a8:0f:e5:68:4d:ed:d0:5c:15:e1:f6:
         d5:19:6b:a4:22:1c:98:6e:82:2e:00:c5:07:d6:93:d7:c4:72:
         7f:6f:99:7e:59:c6:25:ab:aa:c8:8b:0e:d5:29:fa:c1:2a:cd:
         55:dc:d2:d0:4e:0c:ee:ce:f2:40:34:f8:8e:55:a0:11:d4:fd:
         db:7d:d0:c8:a9:c3:5a:0e:42:f4:36:41:aa:68:96:5b:4f:a4:
         8b:ff:52:46:49:de:57:e9:4f:b8:0c:75:e7:59:8a:8d:2e:63:
         99:3b:4b:dc:7a:91:58:97:9c:b7:55:bb:29:59:00:49:ca:f1:
         d6:bd:89:d4:a8:e3:d7:7b:5e:2c:5d:5c:a2:b1:06:63:41:b7:
         86:d4:3b:31:75:fc:e1:e3:2c:5f:58:b6:7f:3d:90:96:69:b8:
         39:f5:15:98:91:63:1b:da:ea:c9:80:a4:cf:98:ec:10:3a:bc:
         47:f6:fc:66:e5:db:f5:97:95:62:15:c3:6c:a8:4b:18:f6:b1:
         28:7f:6f:16:0b:26:80:a8:e9:c8:3c:3e:3d:b4:30:71:78:ff:
         bf:e2:9d:68:41:f4:55:74:5a:cf:43:4d:1a:fb:cb:01:0f:81:
         59:5e:24:10:98:a5:2b:78:58:e2:97:4a:8e:a0:fc:9c:6c:19:
         97:98:9b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----