Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft
File:                     E7585B5CD477D90075CDB63109F57279766C2976.mft (raw, json)
Hash identifier:          PHd/TMtvdLY9QOwSx8i2BsId1PgLVc6HkPgXTimtT+c=
Subject key identifier:   E7:5E:0E:DB:E1:2E:B3:F2:E1:7A:A8:45:58:B6:A0:D2:F2:95:16:C3
Authority key identifier: E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76
Certificate issuer:       /CN=e7585b5cd477d90075cdb63109f57279766c2976
Certificate serial:       53FDB2C778135F30347EC526A1E0AB52226DACD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft
Manifest number:          0216
Signing time:             Tue 10 Nov 2026 03:59:11 +0000
Manifest this update:     Tue 10 Nov 2026 03:54:11 +0000
Manifest next update:     Wed 11 Nov 2026 06:00:11 +0000
Files and hashes:         1: 3139342e3135332e3135382e302f32362d3236203d3e203438323830.roa (hash: eB/VLyl2lBzOgElsP6OLK0lCJzoQsF6daigviLJ6o9A=)
                          2: E7585B5CD477D90075CDB63109F57279766C2976.crl (hash: UmdmWv4uPhLEi7O+Kyse8ZdCnn1QEG7+bLYzdqiWCKU=)
                          3: AS52112.asa (hash: FhhGzMNZlZdNgosWnmgHoPIdMt6QO7EnQDJjZKjEsvQ=)
                          4: 326130393a323530303a3a2f34382d3438203d3e203532313132.roa (hash: TDWiIW/XU7HlZAno8Kh/w5WDO0yfFHK1ooS2A8uJ/gU=)
                          5: 323030313a3766383a38393a3a2f34382d3634203d3e203438323830.roa (hash: /fv5q3VyJ+dUoDJp3H9zfl0tBQO0ZzmuRjsXdxMQJvo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 22:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fd:b2:c7:78:13:5f:30:34:7e:c5:26:a1:e0:ab:52:22:6d:ac:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7585b5cd477d90075cdb63109f57279766c2976
        Validity
            Not Before: Nov 10 03:54:11 2026 GMT
            Not After : Nov 11 06:00:11 2026 GMT
        Subject: CN=E75E0EDBE12EB3F2E17AA84558B6A0D2F29516C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9a:d1:6d:4b:8e:ad:3f:36:b0:bc:4b:d1:72:
                    04:42:79:47:b8:ca:49:50:9c:2d:88:b9:c9:32:0d:
                    a0:5c:67:9d:2c:22:9e:76:2e:5f:d6:02:5e:72:1e:
                    a6:64:c9:04:85:6d:f9:ae:09:eb:3e:6c:ce:47:1e:
                    13:d0:74:cb:c6:24:19:02:b4:10:a1:b6:c4:86:ad:
                    5e:18:7d:7f:c2:d5:3a:03:55:8a:d3:70:28:22:62:
                    4e:1e:a6:5c:65:80:6e:4a:bc:33:1b:f2:9b:de:6e:
                    87:ce:c4:10:a1:a2:a3:cd:0e:97:c5:d0:4b:8e:4b:
                    4b:d0:81:28:87:bc:69:70:3d:57:0f:01:0a:da:fd:
                    4e:e9:bf:72:9d:de:b5:48:d0:e3:d6:0b:33:ee:19:
                    b4:89:52:1a:bc:0c:e6:5f:d3:a2:12:aa:ea:f4:9b:
                    b7:7c:8b:e8:bb:df:fc:95:00:89:e0:25:49:4f:c9:
                    a6:5c:70:0c:a4:90:90:cd:0c:f8:05:d6:25:89:62:
                    f4:73:85:54:0f:a7:5f:a7:6c:5e:2c:91:3b:20:ee:
                    e1:44:99:17:f2:ac:de:2c:36:0b:55:23:9f:b4:79:
                    c3:e0:ef:dc:59:d3:6a:9a:bd:dd:8e:ed:aa:3f:f9:
                    5c:ed:e4:6a:c5:7a:e8:70:9f:e3:0e:60:13:79:d7:
                    79:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5E:0E:DB:E1:2E:B3:F2:E1:7A:A8:45:58:B6:A0:D2:F2:95:16:C3
            X509v3 Authority Key Identifier:
                keyid:E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:dc:cb:61:ee:8f:73:45:e8:82:ba:a4:88:4f:55:e9:cd:d3:
         a1:67:ea:92:07:83:58:13:2d:a2:60:d3:63:23:f5:e7:39:eb:
         02:db:9c:5f:8d:a0:45:05:6b:a5:62:22:6a:4f:9a:df:f2:47:
         24:e8:a5:c4:ce:7e:b5:ca:e7:21:f9:87:b9:89:d2:e4:54:53:
         f9:7b:6f:a1:a1:2a:7a:2b:2a:73:eb:d2:d6:4a:0e:db:bc:f2:
         a4:87:19:ae:e6:28:a7:4e:50:2c:9b:08:67:77:3e:58:f0:37:
         fc:a8:44:b6:51:f8:73:55:a8:60:52:91:13:7c:a2:1a:c3:df:
         5a:01:5e:8c:ac:6e:ef:7e:e2:cc:19:7f:d8:37:b5:fa:fb:9d:
         8a:8b:c1:73:e0:af:b3:f1:89:cc:1b:59:59:27:3b:45:6d:25:
         21:74:cd:42:b5:07:f8:6f:c0:1a:33:57:28:5e:c5:25:e8:48:
         6c:22:ff:74:9d:27:fa:01:19:af:a0:1a:ce:51:96:1b:64:96:
         69:31:a3:ae:54:d7:13:89:12:49:92:60:35:37:59:dd:88:62:
         84:7c:f3:2c:67:7b:be:65:13:26:d3:36:fc:80:04:2e:6b:09:
         79:47:de:96:a2:76:e9:c8:de:d5:78:c0:73:83:12:3f:bc:a0:
         49:5d:b2:6a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUU/2yx3gTXzA0fsUmoeCrUiJtrNgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTc1ODViNWNkNDc3ZDkwMDc1Y2RiNjMxMDlmNTcyNzk3
NjZjMjk3NjAeFw0yNjExMTAwMzU0MTFaFw0yNjExMTEwNjAwMTFaMDMxMTAvBgNV
BAMTKEU3NUUwRURCRTEyRUIzRjJFMTdBQTg0NTU4QjZBMEQyRjI5NTE2QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmmtFtS46tPzawvEvRcgRCeUe4
yklQnC2IuckyDaBcZ50sIp52Ll/WAl5yHqZkyQSFbfmuCes+bM5HHhPQdMvGJBkC
tBChtsSGrV4YfX/C1ToDVYrTcCgiYk4eplxlgG5KvDMb8pvebofOxBChoqPNDpfF
0EuOS0vQgSiHvGlwPVcPAQra/U7pv3Kd3rVI0OPWCzPuGbSJUhq8DOZf06ISqur0
m7d8i+i73/yVAIngJUlPyaZccAykkJDNDPgF1iWJYvRzhVQPp1+nbF4skTsg7uFE
mRfyrN4sNgtVI5+0ecPg79xZ02qavd2O7ao/+Vzt5GrFeuhwn+MOYBN513nBAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU514O2+Eus/LheqhFWLag0vKVFsMwHwYDVR0j
BBgwFoAU51hbXNR32QB1zbYxCfVyeXZsKXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1
YjQ5LzEvRTc1ODVCNUNENDc3RDkwMDc1Q0RCNjMxMDlGNTcyNzk3NjZDMjk3Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxaGJYTlIzMlFCMXpiWXhDZlZ5ZVha
c0tYWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00
MDBhLTRmZDEtYWI4YS1lNzYxNmUyNDViNDkvMS9FNzU4NUI1Q0Q0NzdEOTAwNzVD
REI2MzEwOUY1NzI3OTc2NkMyOTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9zLYe6Pc0XogrqkiE9V
6c3ToWfqkgeDWBMtomDTYyP15znrAtucX42gRQVrpWIiak+a3/JHJOilxM5+tcrn
IfmHuYnS5FRT+XtvoaEqeisqc+vS1koO27zypIcZruYop05QLJsIZ3c+WPA3/KhE
tlH4c1WoYFKRE3yiGsPfWgFejKxu737izBl/2De1+vudiovBc+Cvs/GJzBtZWSc7
RW0lIXTNQrUH+G/AGjNXKF7FJehIbCL/dJ0n+gEZr6AazlGWG2SWaTGjrlTXE4kS
SZJgNTdZ3YhihHzzLGd7vmUTJtM2/IAELmsJeUfelqJ26cje1XjAc4MSP7ygSV2y
ag==
-----END CERTIFICATE-----
Generated at Tue Nov 10 07:36:30 2026 by rpki-client