Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
File:                     547BC28C92A229A5AC78C0DE287D89CE37726409.mft (raw, json)
Hash identifier:          p7ojssru9EFcw0EmilmvqAI3G0X6ZnRzTnxVpNktKTU=
Subject key identifier:   8F:48:F6:7B:11:FF:1A:FC:0D:9B:D6:36:BF:39:33:FF:0E:0F:8C:66
Authority key identifier: 54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09
Certificate issuer:       /CN=547bc28c92a229a5ac78c0de287d89ce37726409
Certificate serial:       7AB7E4AF35251972BEDDC906B9D8CE5747FCDFDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
Manifest number:          0404
Signing time:             Mon 21 Sep 2026 13:37:05 +0000
Manifest this update:     Mon 21 Sep 2026 13:32:05 +0000
Manifest next update:     Tue 22 Sep 2026 14:24:05 +0000
Files and hashes:         1: AS204931.asa (hash: WkkqUrZUUqYLLIP2YfpkRnKXp8Ae2D+MNzxH7q66ml0=)
                          2: 323030313a3637383a6362303a3a2f34382d3438203d3e203630343331.roa (hash: w99lroiZv72N8oKbZJ+Jd++/KCNnlDGakkDAxtb04RI=)
                          3: 323030313a3637383a6362303a3a2f34382d3438203d3e20323034393331.roa (hash: fpn0FYUuBVhZxpN+e/uKOZM61WsCnlf3Qa38+ln9ad8=)
                          4: 547BC28C92A229A5AC78C0DE287D89CE37726409.crl (hash: DqKIdvphrv5RN6HPLKtNTphtNq5nFZkmSvHTVzds0KE=)
                          5: AS60431.asa (hash: yzuZh5MfCWqR2uRReA/FjOq/XGqBpC6B3FbqdwB/+KY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b7:e4:af:35:25:19:72:be:dd:c9:06:b9:d8:ce:57:47:fc:df:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547bc28c92a229a5ac78c0de287d89ce37726409
        Validity
            Not Before: Sep 21 13:32:05 2026 GMT
            Not After : Sep 22 14:24:05 2026 GMT
        Subject: CN=8F48F67B11FF1AFC0D9BD636BF3933FF0E0F8C66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:9f:0e:04:96:2b:be:c1:c1:70:6c:9e:b6:
                    81:3f:2c:95:83:45:94:97:6c:56:00:95:b2:8e:00:
                    bf:57:13:0d:88:c4:5d:ce:e5:ae:83:11:aa:93:02:
                    42:f9:9e:00:61:38:28:e2:19:3b:92:0a:f1:61:b3:
                    0e:b9:8c:5c:91:a9:3a:ab:2d:c5:9b:7d:09:16:aa:
                    9f:47:08:c9:81:1f:8a:b2:1a:da:0d:55:b2:bd:61:
                    6a:7f:4d:86:bb:7e:3e:3f:e0:63:29:b2:80:e2:64:
                    df:50:e6:60:c2:23:dc:a5:9e:b3:13:40:21:17:74:
                    4d:9c:ee:ff:6a:57:73:43:01:a6:65:54:f0:14:3b:
                    3b:7d:15:3d:6c:cb:c3:fc:c3:ba:36:5c:ba:c9:ab:
                    b7:2a:1b:40:a0:1b:2b:6f:df:fb:96:d0:0c:d2:fc:
                    e6:ed:7a:58:27:c9:fb:72:a9:57:7a:ed:b8:77:d4:
                    96:9e:4c:e6:37:c1:72:33:e8:69:f9:be:aa:92:d0:
                    50:41:c2:2e:10:00:7b:0f:87:bf:58:93:44:89:6e:
                    a1:86:bf:e4:c1:36:fe:7e:34:1e:1d:34:d2:c3:54:
                    23:d6:9d:36:6a:81:74:72:bf:3d:fa:03:41:6d:7e:
                    26:59:53:0f:33:45:e9:45:42:a6:fc:ec:96:ac:01:
                    39:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:48:F6:7B:11:FF:1A:FC:0D:9B:D6:36:BF:39:33:FF:0E:0F:8C:66
            X509v3 Authority Key Identifier:
                keyid:54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:0d:84:4c:ad:2e:e2:5d:81:f5:7f:f0:30:c8:bc:e9:ef:10:
         3e:94:d7:7c:7b:91:6d:75:32:37:80:93:fa:a5:d2:97:e3:5d:
         b7:d2:15:66:17:6b:d0:21:a8:6f:e9:ab:90:f7:b3:51:ab:08:
         8b:ff:c3:b7:05:31:37:1e:5e:7e:5d:9d:f8:80:04:67:27:8a:
         cf:cb:b6:48:ba:51:0f:e8:16:21:cd:8b:70:bd:01:79:14:82:
         a1:98:73:3c:8c:44:f2:4a:1e:41:90:63:78:c3:69:ad:7f:de:
         4f:74:98:b9:31:e4:15:f6:79:c4:81:98:16:d0:9d:ac:0d:17:
         4f:78:15:83:7e:ff:a0:fd:52:c0:62:a7:b6:a6:46:61:bb:cb:
         45:d8:9a:6c:c2:84:9b:d7:3b:2a:3a:37:af:8c:6d:37:c7:cc:
         e3:ae:70:ec:f1:30:fc:86:9f:47:c7:d1:85:dc:db:b2:99:1a:
         e2:be:26:94:e1:1c:6e:c9:49:a1:c1:6b:64:ca:dd:53:fd:00:
         05:3d:67:c5:9e:52:17:94:fb:6b:de:32:38:1c:fa:47:8c:10:
         0b:76:44:5e:93:9d:97:c1:b9:1c:97:7a:2f:80:4a:0b:e7:1c:
         90:3e:54:fb:43:c2:cf:a6:dc:10:71:d3:a5:fe:c1:6b:79:01:
         0a:18:f4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:00:12 2026 by rpki-client