Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
File:                     2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft (raw, json)
Hash identifier:          onEnoSZB4jPq7/RqJ4+9j31iBCTz7uzOOPmOestehOw=
Subject key identifier:   06:1A:08:7E:B4:A6:ED:86:2D:F6:A5:07:9E:97:6B:8F:0E:3B:68:E7
Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
Certificate issuer:       /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Certificate serial:       14A1E89787296701EDA750DDE1F763DC2259DB3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
Manifest number:          04FF
Signing time:             Tue 22 Sep 2026 07:13:32 +0000
Manifest this update:     Tue 22 Sep 2026 07:08:32 +0000
Manifest next update:     Wed 23 Sep 2026 11:02:32 +0000
Files and hashes:         1: AS205329.asa (hash: D7v68W1jFkdHMUdFoafa1ip0HB/iYsJ/PoPFEmKh9to=)
                          2: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl (hash: DghMOwFi66WEgVU3ZVSux+e791SWrdKzYallTYQQIkM=)
                          3: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (hash: MA6NPPoujdiQWojyCVLJyxDFh4C42V7H1GeWERt+WOo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a1:e8:97:87:29:67:01:ed:a7:50:dd:e1:f7:63:dc:22:59:db:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
        Validity
            Not Before: Sep 22 07:08:32 2026 GMT
            Not After : Sep 23 11:02:32 2026 GMT
        Subject: CN=061A087EB4A6ED862DF6A5079E976B8F0E3B68E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b9:fe:b1:bd:4c:ba:03:73:22:f8:0f:43:41:
                    c8:a6:19:64:91:77:59:81:b8:7b:e7:ca:21:18:e8:
                    07:d9:38:0f:3a:1f:12:3f:43:b0:08:2b:e1:39:6b:
                    9e:72:69:93:42:df:1a:11:ee:94:be:8e:c6:46:10:
                    ca:c5:55:0e:df:52:04:77:32:45:36:cc:1b:c0:a3:
                    5a:89:f4:72:ff:ae:10:3f:47:53:c0:70:59:db:77:
                    98:10:8c:3f:fd:ce:f9:b6:90:d2:82:9c:4e:94:01:
                    f4:4a:b5:70:2c:dd:3b:2c:d5:a6:af:ee:41:f2:7b:
                    19:9a:4c:3e:e5:b8:bb:99:bf:a2:d7:b6:6f:e9:da:
                    6b:63:ae:77:db:af:f2:85:b6:32:39:fb:fa:3a:6b:
                    3a:f3:fb:8b:7f:d0:a5:5d:4c:aa:a2:37:81:00:b3:
                    fb:90:40:51:c5:26:2b:3c:e4:ec:3a:2d:70:5d:cd:
                    dd:58:75:cb:5f:9a:d1:6e:77:7b:ea:ea:a3:a3:11:
                    bb:47:d5:89:f8:4b:a4:7e:f4:9d:86:95:f2:37:40:
                    f1:bb:a6:dd:d8:24:b6:de:3a:51:45:d1:16:7b:68:
                    b8:d1:d3:82:6b:f1:85:e6:b6:36:23:fb:d2:14:24:
                    a4:a5:fb:5e:ed:54:9e:df:72:f2:d8:f8:ec:2d:26:
                    22:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1A:08:7E:B4:A6:ED:86:2D:F6:A5:07:9E:97:6B:8F:0E:3B:68:E7
            X509v3 Authority Key Identifier:
                keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ba:90:2a:85:f1:fb:15:e7:58:a1:33:15:ba:58:db:07:67:
         25:74:c1:db:36:b8:f6:48:fb:2a:3b:59:b0:4b:be:68:fa:c8:
         88:7f:41:94:49:76:78:bb:7f:4f:45:68:6f:ed:d7:39:5c:34:
         63:f7:73:5c:81:d1:0e:df:8e:f4:48:af:50:9b:1c:ff:17:7a:
         3e:40:f9:5f:fb:66:4b:6a:de:8f:c8:d1:c5:df:f7:3c:98:b1:
         0f:33:89:36:d8:bd:8b:e1:96:14:a6:8f:11:90:1f:ab:b5:3b:
         8a:26:df:f1:e6:07:e8:7b:a4:65:bb:2d:d5:0c:b4:bd:dd:e6:
         11:9c:1e:4e:6b:1b:23:00:1e:d6:23:7b:5a:65:8a:ce:32:87:
         b7:78:71:45:45:ba:83:f9:e1:ad:9b:a4:3a:92:01:74:9f:a5:
         61:69:bd:67:9b:80:9b:46:e8:b7:cf:17:33:38:61:f2:3c:b8:
         16:c4:91:5c:3c:ff:d0:66:37:5d:37:23:9f:5c:79:01:7a:e7:
         8f:a8:7c:e4:02:52:c6:b7:74:5f:1b:e0:b7:ce:6c:eb:b3:99:
         58:0b:25:ab:ff:26:68:5b:ad:fa:e0:c5:9f:f3:03:ac:de:62:
         85:d5:98:52:54:f1:11:c9:c6:b8:e7:6f:7f:6f:00:75:9d:6f:
         ab:bc:ba:4a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUFKHol4cpZwHtp1Dd4fdj3CJZ2z4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMmYwOGNlY2Q1ZTU3Y2JhMGU2OGJjYTdmNzQwMWJkNWVk
YjM4N2ZiODAeFw0yNjA5MjIwNzA4MzJaFw0yNjA5MjMxMTAyMzJaMDMxMTAvBgNV
BAMTKDA2MUEwODdFQjRBNkVEODYyREY2QTUwNzlFOTc2QjhGMEUzQjY4RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCuf6xvUy6A3Mi+A9DQcimGWSR
d1mBuHvnyiEY6AfZOA86HxI/Q7AIK+E5a55yaZNC3xoR7pS+jsZGEMrFVQ7fUgR3
MkU2zBvAo1qJ9HL/rhA/R1PAcFnbd5gQjD/9zvm2kNKCnE6UAfRKtXAs3Tss1aav
7kHyexmaTD7luLuZv6LXtm/p2mtjrnfbr/KFtjI5+/o6azrz+4t/0KVdTKqiN4EA
s/uQQFHFJis85Ow6LXBdzd1YdctfmtFud3vq6qOjEbtH1Yn4S6R+9J2GlfI3QPG7
pt3YJLbeOlFF0RZ7aLjR04Jr8YXmtjYj+9IUJKSl+17tVJ7fcvLY+OwtJiLfAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUBhoIfrSm7YYt9qUHnpdrjw47aOcwHwYDVR0j
BBgwFoAULwjOzV5Xy6Dmi8p/dAG9Xts4f7gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2
OTgwLzIvMkYwOENFQ0Q1RTU3Q0JBMEU2OEJDQTdGNzQwMUJENUVEQjM4N0ZCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0x3ak96VjVYeTZEbWk4cF9kQUc5WHRz
NGY3Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNjk3MTYwYy1h
Y2M1LTRiNTEtYmY1NS0xMGM3YTZlNjY5ODAvMi8yRjA4Q0VDRDVFNTdDQkEwRTY4
QkNBN0Y3NDAxQkQ1RURCMzg3RkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbqQKoXx+xXnWKEzFbpY
2wdnJXTB2za49kj7KjtZsEu+aPrIiH9BlEl2eLt/T0Vob+3XOVw0Y/dzXIHRDt+O
9EivUJsc/xd6PkD5X/tmS2rej8jRxd/3PJixDzOJNti9i+GWFKaPEZAfq7U7iibf
8eYH6HukZbst1Qy0vd3mEZweTmsbIwAe1iN7WmWKzjKHt3hxRUW6g/nhrZukOpIB
dJ+lYWm9Z5uAm0bot88XMzhh8jy4FsSRXDz/0GY3XTcjn1x5AXrnj6h85AJSxrd0
Xxvgt85s67OZWAslq/8maFut+uDFn/MDrN5ihdWYUlTxEcnGuOdvf28AdZ1vq7y6
Sg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:04:35 2026 by rpki-client