Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
File:                     47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json)
Hash identifier:          nV8A0wnM5FJY3FoDTYdleRM9xa67YwNJORCoWzNf5Uc=
Subject key identifier:   3B:7F:83:49:D2:F3:78:02:DC:DB:FD:0C:96:DD:D8:7B:4E:D5:62:7B
Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41
Certificate issuer:       /CN=47E9555355C6B007AACD5D45BF41E3383E991641
Certificate serial:       0AEF3E052B8A95B93C56A0E3F0E151BEBDC67422
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
Manifest number:          053B
Signing time:             Sun 01 Mar 2026 21:01:08 +0000
Manifest this update:     Sun 01 Mar 2026 20:56:08 +0000
Manifest next update:     Mon 02 Mar 2026 21:53:08 +0000
Files and hashes:         1: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: joAEPn9ggJnOJibwtnJz8w4Tu9b024lTJQ13MXp3eQ4=)
                          2: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: rTLkamr33jvs9vh6WJjs/EffgdbNYBMYoWT6WatJXM0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
                          rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
                          rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
                          rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 07:37:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ef:3e:05:2b:8a:95:b9:3c:56:a0:e3:f0:e1:51:be:bd:c6:74:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641
        Validity
            Not Before: Mar  1 20:56:08 2026 GMT
            Not After : Mar  2 21:53:08 2026 GMT
        Subject: CN=3B7F8349D2F37802DCDBFD0C96DDD87B4ED5627B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1b:8a:60:f6:52:8a:ec:50:f1:85:be:10:1b:
                    04:4d:a8:7c:d3:65:ab:05:39:a1:7b:41:97:85:a6:
                    0b:6b:9c:7d:b9:1b:72:65:3a:fe:63:0a:29:92:f1:
                    f5:98:49:a2:95:d4:5b:83:92:cd:86:2c:4e:98:45:
                    7a:3c:8a:ab:df:0f:7f:b5:b7:5c:55:4b:37:01:21:
                    2e:c6:ae:96:80:0f:b4:80:be:03:9f:8e:2c:af:60:
                    89:16:97:38:4b:98:2a:99:32:ea:b3:ec:9d:6f:84:
                    d8:bc:0f:79:98:ed:23:97:b8:99:33:32:bb:6c:51:
                    2e:c8:ad:3c:14:15:dc:93:f1:e9:95:8b:31:22:5d:
                    ae:65:63:95:9e:f9:bc:4e:b4:7b:6e:2a:d4:a8:f4:
                    38:21:07:2c:2e:40:09:ac:0b:4c:86:d7:46:f9:b6:
                    07:59:22:10:f7:81:5d:b5:95:46:e7:cf:53:37:c8:
                    e3:8c:38:80:b1:57:95:8b:71:0c:2a:36:4b:22:f7:
                    78:cc:d4:41:9e:6e:82:58:ab:0f:2b:a8:6b:20:cf:
                    56:0d:fa:5d:fe:86:b6:0f:aa:c1:85:86:48:1f:5a:
                    d9:fd:75:f6:ec:af:57:b2:37:24:66:ad:ab:7b:a7:
                    82:9c:f3:03:7c:b3:c4:1e:cc:6e:d2:ec:30:6d:26:
                    44:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7F:83:49:D2:F3:78:02:DC:DB:FD:0C:96:DD:D8:7B:4E:D5:62:7B
            X509v3 Authority Key Identifier:
                keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:65:3d:f3:2d:d8:fe:1a:c1:e9:c4:b4:6b:d2:71:5c:76:26:
         d8:3e:0a:bf:f1:64:e1:72:77:27:7f:bc:cd:5d:ed:07:1c:48:
         59:f9:00:bc:78:d4:12:aa:bf:7b:4a:88:b3:eb:d3:d8:af:83:
         ec:a2:b3:c2:da:d4:72:a2:37:ce:d1:db:57:8f:76:30:54:b1:
         61:3a:cc:b3:0b:8d:ae:fd:58:4b:fe:c6:32:2f:15:cd:41:1c:
         59:99:df:2a:93:2b:ad:6c:ae:1f:bb:44:d3:37:c3:5d:ba:34:
         0f:dc:78:b8:a7:13:77:9a:b2:2c:85:a3:b0:c5:80:2b:4d:f0:
         f8:60:1d:05:42:aa:c5:98:f4:a4:c7:53:50:60:bf:58:ee:8c:
         28:09:22:9a:d0:fb:1e:22:12:29:40:f9:52:cd:7c:ab:02:cb:
         ed:b0:d5:a9:c1:c6:92:41:5e:df:75:aa:63:dc:b6:e5:66:5e:
         ad:88:15:ba:55:92:d6:4b:d5:15:d4:80:c9:d6:00:f7:08:5a:
         d4:a0:38:24:29:93:5c:42:e1:71:b5:c7:75:58:b6:b3:77:d5:
         d6:9a:64:e5:c0:63:41:75:fe:a7:8c:ce:01:82:b0:db:e4:42:
         52:98:3b:49:e3:74:58:21:c5:69:b2:29:62:a8:ad:82:3a:0d:
         f2:5f:f4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:45 2026 by rpki-client