Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft
File:                     E7585B5CD477D90075CDB63109F57279766C2976.mft (raw, json)
Hash identifier:          tCTbO3PzQaeZFvTSkCrwVlDZb/8ODwxzjURDECOScOg=
Subject key identifier:   74:38:76:E7:1C:8F:87:0C:7A:18:3B:ED:03:B0:83:0E:38:56:8B:D7
Authority key identifier: E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76
Certificate issuer:       /CN=e7585b5cd477d90075cdb63109f57279766c2976
Certificate serial:       76638C24AB72F015C1B76CF26F7F45D97C741E1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft
Manifest number:          0189
Signing time:             Tue 28 Jul 2026 06:21:45 +0000
Manifest this update:     Tue 28 Jul 2026 06:16:45 +0000
Manifest next update:     Wed 29 Jul 2026 07:46:45 +0000
Files and hashes:         1: 326130393a323530303a3a2f34382d3438203d3e203532313132.roa (hash: TDWiIW/XU7HlZAno8Kh/w5WDO0yfFHK1ooS2A8uJ/gU=)
                          2: 3139342e3135332e3135382e302f32362d3236203d3e203438323830.roa (hash: vANCAIBQUmiZCdG8mosZNJVFV3jH6SOLvVTY393OKek=)
                          3: AS52112.asa (hash: FhhGzMNZlZdNgosWnmgHoPIdMt6QO7EnQDJjZKjEsvQ=)
                          4: 323030313a3766383a38393a3a2f34382d3634203d3e203438323830.roa (hash: toWECki1z50+cTDXuuD0ix4TCBXmtlZ4RV70JAsHdxg=)
                          5: E7585B5CD477D90075CDB63109F57279766C2976.crl (hash: VTk1mnIQqpHXuZweplo0KTeguIDJ17NIrQiRx3dHR1Q=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:46:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:63:8c:24:ab:72:f0:15:c1:b7:6c:f2:6f:7f:45:d9:7c:74:1e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7585b5cd477d90075cdb63109f57279766c2976
        Validity
            Not Before: Jul 28 06:16:45 2026 GMT
            Not After : Jul 29 07:46:45 2026 GMT
        Subject: CN=743876E71C8F870C7A183BED03B0830E38568BD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:72:49:00:70:15:38:06:33:75:48:a2:8d:df:
                    99:3e:93:9d:1d:f2:f3:91:03:a9:40:28:5e:c4:bd:
                    b6:ed:69:82:73:4e:22:d0:9e:7b:df:fe:58:dc:a2:
                    b8:d9:3e:fd:ac:4a:52:17:96:09:db:93:6b:0a:75:
                    5a:42:34:9f:e7:1d:64:da:9a:ea:cb:ab:be:92:bf:
                    97:5c:2e:dc:9d:39:3b:c8:15:cd:1e:3f:c7:96:3a:
                    62:78:37:74:9f:10:b2:e1:e1:55:0c:86:b9:d5:0f:
                    29:b5:60:3f:4b:97:ff:f5:b2:84:df:66:cb:3d:50:
                    68:5e:0f:8e:ae:c5:b3:c1:c2:c6:7b:74:cb:58:1f:
                    42:a9:63:4b:b0:54:83:ca:3c:c2:3b:7c:cf:82:02:
                    07:c3:da:33:4d:b5:b9:29:e6:3c:40:cd:4e:79:20:
                    55:06:e0:b1:a7:b7:60:eb:24:a5:98:7b:f5:1a:8d:
                    a9:13:4e:c0:d1:3c:09:0f:39:67:da:b5:2f:6b:01:
                    60:37:9e:ea:22:81:c8:33:fa:cf:15:3e:65:3a:b1:
                    41:64:9e:24:f9:fd:a8:1a:14:f6:d1:57:d9:3f:8d:
                    77:0b:f9:d6:52:b6:23:93:10:66:af:10:e6:8d:3b:
                    87:6e:f2:34:77:dc:ae:54:f3:fd:47:d0:63:02:a6:
                    4b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:38:76:E7:1C:8F:87:0C:7A:18:3B:ED:03:B0:83:0E:38:56:8B:D7
            X509v3 Authority Key Identifier:
                keyid:E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:a4:ce:34:9f:e0:31:9a:ac:46:99:30:9e:fc:6f:af:34:d6:
         c6:db:ad:90:56:e5:fe:d7:1f:6e:40:72:21:b1:c7:9d:dd:0f:
         d3:5f:79:47:de:02:6f:89:a8:01:45:82:4e:7b:b1:3f:61:a9:
         4e:da:b8:da:6e:67:ca:43:5d:55:09:57:3c:82:76:db:95:34:
         22:81:46:b6:64:d2:7d:28:44:70:88:f6:8e:d1:ea:b1:74:2b:
         49:95:ef:d2:34:6a:8d:77:7c:54:2d:b6:ef:16:c7:e9:de:2a:
         f1:5c:a6:9e:d7:ed:4c:a2:99:4b:96:4c:22:ab:3b:66:16:80:
         7a:4c:c3:47:c1:33:e5:2b:2c:0e:41:1d:68:0f:76:7d:b8:49:
         b4:15:c5:ba:00:c8:ca:0d:39:e8:03:1d:54:e6:3d:b9:3a:7d:
         cd:e9:6f:9a:6a:70:23:bb:cc:42:53:84:95:b9:3b:f2:80:76:
         f2:de:52:14:73:bc:be:7a:05:19:26:a9:9a:42:98:8a:93:0e:
         78:39:5d:f1:7e:98:99:1d:30:b5:d5:5b:1c:1b:0c:18:01:dd:
         ae:3a:23:dc:f6:03:e0:98:02:13:14:28:a9:10:e3:b9:1a:ad:
         a0:ed:ce:c5:dd:c8:bb:3f:88:61:08:fc:4f:d0:34:07:48:d9:
         59:9c:bc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:49:10 2026 by rpki-client