Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft
File:                     E7585B5CD477D90075CDB63109F57279766C2976.mft (raw, json)
Hash identifier:          W0jnIBTF6u6QaRRs+WSL24YbV+o7n36GaodO+dn/fc8=
Subject key identifier:   8C:6F:98:B6:50:05:81:BC:58:54:44:59:8A:B5:B2:1C:7E:8C:C4:90
Authority key identifier: E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76
Certificate issuer:       /CN=e7585b5cd477d90075cdb63109f57279766c2976
Certificate serial:       34E719D446196C16B3E7BB691EB1DED77686776E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft
Manifest number:          014E
Signing time:             Sat 13 Jun 2026 03:13:21 +0000
Manifest this update:     Sat 13 Jun 2026 03:08:21 +0000
Manifest next update:     Sun 14 Jun 2026 04:35:21 +0000
Files and hashes:         1: 323030313a3766383a38393a3a2f34382d3634203d3e203438323830.roa (hash: toWECki1z50+cTDXuuD0ix4TCBXmtlZ4RV70JAsHdxg=)
                          2: AS52112.asa (hash: FhhGzMNZlZdNgosWnmgHoPIdMt6QO7EnQDJjZKjEsvQ=)
                          3: 3139342e3135332e3135382e302f32362d3236203d3e203438323830.roa (hash: vANCAIBQUmiZCdG8mosZNJVFV3jH6SOLvVTY393OKek=)
                          4: E7585B5CD477D90075CDB63109F57279766C2976.crl (hash: XNze4x3jdzAU3x1d/m2i9gb0SBYogLAsMjDb7y5nYPg=)
                          5: 326130393a323530303a3a2f34382d3438203d3e203532313132.roa (hash: TDWiIW/XU7HlZAno8Kh/w5WDO0yfFHK1ooS2A8uJ/gU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e7:19:d4:46:19:6c:16:b3:e7:bb:69:1e:b1:de:d7:76:86:77:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7585b5cd477d90075cdb63109f57279766c2976
        Validity
            Not Before: Jun 13 03:08:21 2026 GMT
            Not After : Jun 14 04:35:21 2026 GMT
        Subject: CN=8C6F98B6500581BC585444598AB5B21C7E8CC490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ce:76:15:f7:8d:9a:6b:fa:76:81:a1:9b:97:
                    1c:42:c7:83:51:04:6d:e2:be:79:f6:a9:90:1a:7f:
                    81:e3:4e:63:84:a2:aa:bc:d0:26:c7:2e:76:4c:a2:
                    6b:01:1a:2e:b2:98:8d:c1:10:29:f6:8d:50:53:a4:
                    6e:6b:4b:cb:ef:ef:0a:94:55:e1:3b:f4:83:8e:ec:
                    5b:fd:d8:c3:d6:4e:f2:0a:a8:f0:48:58:61:ed:f4:
                    1a:23:d7:27:89:33:18:ef:4b:04:8e:14:03:67:c8:
                    c6:a2:12:4e:eb:bb:c8:8a:c9:89:f3:c7:5c:4a:d6:
                    7d:42:bc:8c:c5:28:33:79:dd:b8:a3:59:28:0f:af:
                    65:d2:9a:c0:ca:d3:95:fa:ca:6f:59:e8:92:38:5b:
                    db:a7:9a:87:c1:6e:06:82:fe:8b:1f:5a:75:1d:6c:
                    14:b6:32:43:27:20:d2:6f:cf:d7:ce:99:60:6f:6f:
                    dc:6f:63:eb:41:fa:f3:21:c5:3a:5a:e2:91:34:f3:
                    f6:3c:e6:61:3e:7a:46:fb:7e:74:e4:16:ee:7d:fd:
                    42:f6:78:de:a8:0c:5d:f6:e4:8c:3d:c0:6e:7c:d1:
                    dd:13:f5:c1:53:a0:a3:2f:60:f3:9c:4a:77:db:d0:
                    61:74:88:84:1d:d1:cf:b5:54:c5:a1:2a:fb:ed:19:
                    ed:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6F:98:B6:50:05:81:BC:58:54:44:59:8A:B5:B2:1C:7E:8C:C4:90
            X509v3 Authority Key Identifier:
                keyid:E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:09:ba:a8:58:ee:1e:76:0e:c0:78:9f:cf:a6:e8:a2:93:69:
         ef:51:b6:ac:72:d8:e1:b5:d3:22:76:82:be:43:9c:fe:c1:e6:
         cc:ad:2d:2f:df:66:2b:e9:03:01:19:03:be:e1:f7:8a:4c:87:
         1a:91:2d:d7:0a:f5:93:a8:53:22:6f:5f:be:0e:6f:98:fd:1c:
         76:85:9e:10:5d:56:2d:38:b1:8a:48:85:77:24:d8:40:36:0f:
         78:9f:18:52:62:c7:63:b9:01:5a:e2:22:ee:3d:c7:4a:4b:ad:
         1b:d3:df:69:cd:ca:ab:9c:a2:c2:04:88:e6:02:85:8b:b1:13:
         fc:2c:64:cb:cc:54:3a:43:30:e7:63:d4:d3:d5:e9:ae:86:cd:
         94:6c:0d:94:f4:dd:90:10:d5:23:57:a8:02:d2:91:04:74:54:
         67:d8:2b:ac:8a:b1:a1:32:be:da:e1:23:4d:fc:e4:a6:2f:ca:
         b5:3f:50:28:c3:35:b1:8a:32:9c:60:0a:55:59:43:fa:c8:8a:
         a0:d5:63:e1:56:52:9c:bf:94:56:2c:4c:3f:10:08:c2:41:e7:
         a7:ab:2a:9c:31:32:2d:31:74:37:17:54:3a:1a:10:5e:70:08:
         57:4e:e1:99:df:b4:3c:ab:eb:46:4c:eb:93:1a:15:a0:69:31:
         dc:27:30:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:43:44 2026 by rpki-client