Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft
File:                     E19302BE91C9D4211CDF4AFF091055A173B3593B.mft (raw, json)
Hash identifier:          PbNvhngcwY9pp24iKfaz8/uahxDFfKFVpk+i1wfdu0s=
Subject key identifier:   A3:CB:A1:FE:B9:73:3B:38:06:79:68:67:F4:A7:42:12:B5:F6:B0:56
Authority key identifier: E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B
Certificate issuer:       /CN=E19302BE91C9D4211CDF4AFF091055A173B3593B
Certificate serial:       5224A31DD102987DB4C130629AEA80BAD4F64927
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft
Manifest number:          01D3
Signing time:             Sat 13 Jun 2026 02:12:59 +0000
Manifest this update:     Sat 13 Jun 2026 02:07:59 +0000
Manifest next update:     Sun 14 Jun 2026 02:52:59 +0000
Files and hashes:         1: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (hash: wbZ+dtGZUT4l0qbhwzr/zEDydlpNzZ1PEDiOmvwzOTk=)
                          2: E19302BE91C9D4211CDF4AFF091055A173B3593B.crl (hash: kC3SEftJwYkR8gHz/PMEmIGojvHys9E/nXY4CJlLhLQ=)
                          3: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (hash: zPB7I5Zm5tTVFn74uACj7IJ7zTmHWqBzRiNxRU5/9yY=)
                          4: 326130373a353463313a343234323a3a2f34382d3438203d3e20313939353138.roa (hash: TQW6ysixu0tP91BwcnDo0gwRpG74gPFiPCid6NcU7fI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 02:52:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:24:a3:1d:d1:02:98:7d:b4:c1:30:62:9a:ea:80:ba:d4:f6:49:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19302BE91C9D4211CDF4AFF091055A173B3593B
        Validity
            Not Before: Jun 13 02:07:59 2026 GMT
            Not After : Jun 14 02:52:59 2026 GMT
        Subject: CN=A3CBA1FEB9733B3806796867F4A74212B5F6B056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:18:d0:fc:b2:7f:d8:9e:79:7e:7e:ca:19:2f:
                    38:73:ab:23:fa:ba:0e:63:f7:06:35:a9:5c:65:24:
                    35:86:bb:60:60:a6:ec:5f:6c:42:b0:10:3a:bb:35:
                    74:89:af:24:20:35:6d:24:a0:6c:37:18:2d:69:50:
                    0f:db:49:8c:e4:38:49:43:93:72:55:4e:10:d0:fc:
                    16:cc:da:1f:39:6a:d1:c2:de:aa:29:a9:58:de:bf:
                    33:3e:11:26:78:76:a7:37:8d:25:a5:89:c3:5e:a4:
                    0a:b8:b4:0a:46:91:71:80:ed:3e:7c:1a:70:2f:0c:
                    67:48:5f:eb:23:f3:c2:85:86:aa:94:40:35:1b:91:
                    6d:85:34:f5:be:cd:a1:3b:59:d5:c7:92:58:c4:33:
                    50:99:82:c4:5d:14:71:fc:eb:d2:58:a8:c0:aa:a1:
                    b4:9a:17:ce:a7:8c:f9:26:98:ad:6b:47:5e:8d:12:
                    c6:d4:24:db:93:ce:3c:aa:42:0a:b8:13:13:58:a5:
                    0e:5a:92:f9:a7:65:86:5f:58:96:1f:0b:fc:80:85:
                    5e:4a:d6:1a:4d:a9:18:7f:5a:74:67:78:ae:0d:5c:
                    b5:45:3c:bc:40:bd:05:cf:86:af:64:32:64:f5:08:
                    62:c9:7e:7e:34:40:07:b4:b7:dd:52:0e:50:2c:43:
                    35:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CB:A1:FE:B9:73:3B:38:06:79:68:67:F4:A7:42:12:B5:F6:B0:56
            X509v3 Authority Key Identifier:
                keyid:E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:9e:6a:95:c8:73:c4:75:3f:73:c5:77:97:0f:c3:50:9c:e4:
         98:44:b2:3f:2f:72:ef:80:a6:92:77:9a:8d:ba:ee:ee:74:90:
         cf:5c:3b:61:dd:84:72:6f:4c:7f:eb:1f:8e:23:d5:6d:33:3d:
         85:ae:59:89:24:2c:97:f4:6f:e4:04:2a:ce:e8:b5:97:77:ad:
         e0:a4:0d:c6:10:f2:da:20:0a:80:c2:2c:f3:74:61:e6:8f:c2:
         e8:c4:1c:d1:f2:7e:df:79:c5:46:b7:b8:5e:50:21:75:46:aa:
         45:7c:a6:6c:99:ca:d5:3c:d1:e1:80:2e:e3:0e:aa:95:2d:a3:
         a5:bf:15:73:ac:7d:2c:50:39:49:cb:e7:28:7e:f6:6f:7f:0f:
         1b:4d:97:5c:c6:a7:e6:3c:6a:9b:75:1f:34:8a:97:25:31:c2:
         66:5a:a3:52:e6:c7:8f:e9:b8:1f:cb:ae:7f:ab:8d:4f:db:98:
         f2:c7:f0:17:4d:a0:54:c6:79:01:ca:2c:fd:e8:02:95:eb:4a:
         f2:2b:41:1d:88:e3:fd:48:01:ce:bb:69:4b:1b:84:3b:a7:45:
         81:ec:19:0e:c2:f3:6c:f2:cd:de:a8:15:8e:39:ed:f2:7c:e7:
         71:ea:8b:d8:1f:cf:51:ce:82:e7:de:ed:a8:dc:fd:d9:51:49:
         3f:63:5e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:08:18 2026 by rpki-client