Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
File:                     C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft (raw, json)
Hash identifier:          ofooEbDYBhY+v2HecnEorLiuJbsjL51WfqcvennWv/U=
Subject key identifier:   A0:54:A2:F0:ED:20:7E:EB:C0:01:02:28:F4:C0:3D:A4:E5:DA:8D:47
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Certificate issuer:       /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial:       63036E38D14A941E08C23F80870893395D6D0A5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
Manifest number:          0682
Signing time:             Fri 12 Jun 2026 21:07:00 +0000
Manifest this update:     Fri 12 Jun 2026 21:02:00 +0000
Manifest next update:     Sun 14 Jun 2026 00:26:00 +0000
Files and hashes:         1: 3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa (hash: 1b5s7twDP9sp8gcJ29rXGkFdvEaLedS6c1Dcd8xTFyM=)
                          2: 3139332e3234362e3130322e302f32342d3234203d3e203630373831.roa (hash: 9YIjshhRHJCTBV0dIP18GlVU8/qr9siO7bVSgJFYoAw=)
                          3: 3231372e3139382e3138372e302f32342d3234203d3e20323132363039.roa (hash: 5MtBkdNTpZ938xlW09/xBkP2lUiJZGy2AiCo8woEVNw=)
                          4: C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl (hash: 9JWzN5Biq8CpdnzY48IPJyiSEL1AmiRL2SYopI+qiIA=)
                          5: 3139332e3234362e3130332e302f32342d3234203d3e20323136313338.roa (hash: fdALPGopwtGvbJEhx+/96pp78JBOCpIXPSPl4+ufmoE=)
                          6: 3139332e3234362e342e302f32342d3234203d3e20313335343032.roa (hash: F98d/FympCBtN9lHMDCUVdUPWLgbnNgcKgQazPb2R2o=)
                          7: 3139332e3234362e3130332e302f32342d3234203d3e20323032373336.roa (hash: 25OCay2OV/7fsFzlQCaWuZFV/8gtz5r77rm0KuzYhQc=)
                          8: 3139332e3234362e352e302f32342d3234203d3e20313939343135.roa (hash: lvghBplCcmXtQEEJ3nC5HmHIcxgk88drnBMjhNzmX2g=)
                          9: 3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa (hash: I5EY6cn+MqUeM13Ic2acCtvjkzpr7UgV9E8MpknrsP0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:03:6e:38:d1:4a:94:1e:08:c2:3f:80:87:08:93:39:5d:6d:0a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
        Validity
            Not Before: Jun 12 21:02:00 2026 GMT
            Not After : Jun 14 00:26:00 2026 GMT
        Subject: CN=A054A2F0ED207EEBC0010228F4C03DA4E5DA8D47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cc:4c:34:a9:26:32:89:63:3c:24:ac:09:96:
                    63:09:06:d6:4a:1d:27:3c:b7:a4:dc:c7:aa:ec:35:
                    d2:e0:15:c6:b2:69:8c:59:47:2d:d0:22:fb:e8:17:
                    14:29:05:8b:ea:7f:32:82:e6:0a:2f:74:21:34:75:
                    57:d5:ca:72:01:bb:f8:a3:ca:49:dd:05:f4:bb:c8:
                    68:df:98:5b:ce:37:8c:66:1f:b4:92:ea:5b:02:eb:
                    2c:be:1b:b4:52:ab:83:a6:07:64:0e:da:c5:ad:c1:
                    5a:b7:01:ac:17:32:0d:7f:ce:b4:43:f3:65:32:1e:
                    bb:1e:ad:bc:55:3a:1b:bd:a2:fc:53:2f:d1:7a:5a:
                    79:c9:48:31:0e:c8:1c:ff:64:4a:57:f4:e1:a1:76:
                    44:c0:6b:44:87:a7:54:db:2e:01:54:e6:94:d1:79:
                    14:5a:3d:9b:6e:d1:90:fa:31:d2:3a:92:53:ed:9f:
                    d1:52:de:5e:49:fc:87:af:34:34:52:db:dc:13:a6:
                    c3:0a:22:48:a7:ea:27:e3:50:f2:8a:11:2c:4e:3f:
                    dc:12:9a:74:3c:01:9b:43:d6:e8:cd:2e:3c:00:ed:
                    ed:3d:01:29:5f:a7:c1:79:61:73:a4:e2:34:82:5d:
                    60:b4:d2:63:e3:59:f1:b1:4f:47:02:48:91:d6:82:
                    40:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:54:A2:F0:ED:20:7E:EB:C0:01:02:28:F4:C0:3D:A4:E5:DA:8D:47
            X509v3 Authority Key Identifier:
                keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f3:75:dd:61:7b:11:c1:cb:c9:3c:50:68:b9:c5:a4:96:37:
         eb:5f:5c:9e:58:f7:27:cf:1e:31:3c:c2:84:fc:4d:d3:89:67:
         ca:f0:c6:43:23:05:97:52:bd:8d:be:bf:72:21:81:89:49:73:
         33:01:74:d4:8a:dc:93:4b:d7:7a:e6:d5:f6:cd:33:b0:24:02:
         24:b8:a2:86:f9:0f:80:09:4d:fb:06:0d:25:d1:6c:d2:bb:cd:
         3c:e9:19:7a:5d:4c:b0:84:3a:e7:cc:7f:5d:bd:64:8a:83:27:
         ac:56:20:ba:51:30:21:b7:24:6b:1d:8c:ab:64:12:7b:a4:11:
         51:17:da:06:47:0b:9f:e2:89:7b:18:ad:e1:bb:b1:4d:02:85:
         37:b8:08:16:d0:73:3d:4c:4b:0f:cd:7c:f2:d6:80:f1:13:c9:
         e1:c9:8a:37:1c:c4:61:27:07:b8:e1:f7:65:e0:2f:72:ab:b6:
         9a:be:75:5a:19:18:98:4b:67:ac:0c:c0:59:d0:0c:0c:0b:90:
         3f:88:ad:d3:c5:18:ce:36:ba:29:74:7f:01:cf:b4:4e:83:a7:
         7f:f3:cc:9d:9a:d9:f4:47:78:e7:0c:16:fa:29:f6:f0:50:c4:
         77:8c:d8:cb:4d:8d:3e:7c:d9:30:a9:34:2a:aa:1c:18:0b:28:
         59:f5:11:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:07:43 2026 by rpki-client