Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
File:                     547BC28C92A229A5AC78C0DE287D89CE37726409.mft (raw, json)
Hash identifier:          uJ4OLjX9xyR1K2PcJhZhP2kJeR1OpImo8d3VuBNWhLk=
Subject key identifier:   BA:B9:60:7C:E2:97:19:EF:A1:2E:12:95:8E:11:74:91:32:A5:E3:FC
Authority key identifier: 54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09
Certificate issuer:       /CN=547bc28c92a229a5ac78c0de287d89ce37726409
Certificate serial:       2F7CA6C4BA408F8DB0289771B86411967AF5CB61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
Manifest number:          02F5
Signing time:             Sun 01 Mar 2026 14:05:51 +0000
Manifest this update:     Sun 01 Mar 2026 14:00:51 +0000
Manifest next update:     Mon 02 Mar 2026 17:04:51 +0000
Files and hashes:         1: 323030313a3637383a6362303a3a2f34382d3438203d3e20323034393331.roa (hash: dHqMpXO8Fn1QmdwMgzIUNohViMqf6+wcagP7yILYRFI=)
                          2: 547BC28C92A229A5AC78C0DE287D89CE37726409.crl (hash: VmsmPLGCNqA4T6VzXt4//XWCzazBazcjsCK01NQZuJI=)
                          3: AS60431.asa (hash: W8B2btvY8654NatOoBPRRMV+PSLMlHitlzk3n1vMklQ=)
                          4: 323030313a3637383a6362303a3a2f34382d3438203d3e203630343331.roa (hash: utwrqG/1k6qyhjzxqxfsIfDkj33KE0HmwhjLx5CU12Y=)
                          5: AS204931.asa (hash: zM51UdB/A/IZqHl1wn4NbUbXZwQrun9iugvDxBnKfTA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7c:a6:c4:ba:40:8f:8d:b0:28:97:71:b8:64:11:96:7a:f5:cb:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547bc28c92a229a5ac78c0de287d89ce37726409
        Validity
            Not Before: Mar  1 14:00:51 2026 GMT
            Not After : Mar  2 17:04:51 2026 GMT
        Subject: CN=BAB9607CE29719EFA12E12958E11749132A5E3FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8f:35:95:46:ac:1a:2d:13:5d:22:1d:93:33:
                    7f:0e:4a:4a:29:92:1e:e7:20:13:df:ea:e9:da:6c:
                    4e:7a:34:04:9b:05:c7:e7:4f:3c:9a:9c:9f:13:4c:
                    ea:e5:29:fe:69:2b:b3:0e:1b:87:21:a3:d1:93:9f:
                    af:d9:17:26:82:bd:47:77:d5:e7:43:f6:26:c5:2d:
                    27:59:d7:11:47:dd:6e:a9:2b:39:b5:4e:be:f6:ab:
                    30:ac:e8:c2:5a:1b:a9:1e:54:d0:01:60:f4:03:c3:
                    5d:b3:38:35:21:76:d0:2c:ae:e4:e3:98:f4:e4:f7:
                    66:83:fa:d8:a0:d7:28:24:05:c5:af:a0:5d:40:a6:
                    01:58:d6:4a:f3:66:a0:63:b3:5c:19:79:12:df:b1:
                    a9:1c:07:8c:1e:69:27:95:3a:a3:08:5d:f6:28:b3:
                    9f:86:b8:84:cb:a3:57:ae:fe:91:2e:d2:15:29:d4:
                    b8:77:a9:be:d3:af:94:65:d8:12:44:7c:4a:25:32:
                    d5:db:1d:82:f9:87:ce:95:40:eb:d0:e1:19:2f:e9:
                    c5:3d:83:7f:a4:d1:5c:20:05:59:28:6b:d6:a4:67:
                    18:30:47:f4:7f:5e:5c:43:5c:33:7c:a8:27:b7:26:
                    72:b8:db:c4:ec:c0:91:f3:9f:18:bb:12:e2:18:cd:
                    6b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B9:60:7C:E2:97:19:EF:A1:2E:12:95:8E:11:74:91:32:A5:E3:FC
            X509v3 Authority Key Identifier:
                keyid:54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:41:36:83:3c:e3:35:a6:b5:9a:df:9e:bf:11:a9:af:72:6e:
         ef:e1:45:a4:56:1a:e8:3b:a9:1e:d3:52:04:db:d0:51:00:9f:
         9a:0d:0d:5a:e4:14:ec:6e:43:21:05:2f:42:b0:2b:1a:22:06:
         3f:46:35:47:e0:e1:0d:a3:99:0a:b3:7d:6a:17:17:bb:14:e8:
         cf:00:84:56:69:93:32:b9:14:39:61:6a:fc:e3:26:e6:31:4e:
         06:0c:47:62:f4:aa:63:62:f8:6e:79:9c:7c:ff:cf:c3:dd:a4:
         08:fb:92:0a:5f:33:67:38:77:25:79:43:b3:60:42:ee:b1:e3:
         01:bc:6b:72:01:65:78:fc:f3:e1:d7:ff:e9:36:1d:fd:2a:91:
         4d:4b:ae:d0:8d:23:1c:70:a9:8f:b3:f9:89:24:03:0f:63:ea:
         17:e9:67:0a:1d:bc:ae:30:f5:69:18:d4:37:0a:11:03:df:08:
         b8:0b:ff:aa:66:bb:2c:9a:ea:42:0b:bf:be:33:23:fb:eb:6a:
         9d:6f:d1:df:28:5c:47:64:21:6f:ab:7f:be:5a:25:78:25:88:
         30:f6:e5:77:46:a7:40:a1:2e:e9:56:71:f9:40:eb:fa:56:65:
         c4:bd:4b:73:54:fa:e4:b2:5c:d9:fc:e7:c2:04:fa:54:e8:f7:
         93:ba:4a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:16:07 2026 by rpki-client