Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft
File:                     83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft (raw, json)
Hash identifier:          Ug/U266TmGtbjfML7tqPGILpWrLKwa/C8F36cPBgiGg=
Subject key identifier:   01:A9:01:36:22:FC:62:A6:C4:DC:06:C9:3E:00:53:7A:31:D8:00:13
Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E
Certificate issuer:       /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E
Certificate serial:       18B20A54919E6A1AF10E01783BC643B05D1A49AE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft
Manifest number:          1C
Signing time:             Sun 20 Sep 2026 16:09:02 +0000
Manifest this update:     Sun 20 Sep 2026 16:04:02 +0000
Manifest next update:     Mon 21 Sep 2026 17:20:02 +0000
Files and hashes:         1: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer (hash: J/NXoqSNBar5f3P2XQDX/ArWGpydgBQJacXUbW8Kctg=)
                          2: 326131343a373538363a363131353a3a2f34382d3438203d3e20323034323131.roa (hash: +RG7e4Mpaw7aAtFGJRkNP32SqsoyKJ3HXkxQmF48EME=)
                          3: 326131343a373538363a363530303a3a2f34302d3438203d3e20323032333936.roa (hash: kdcm2E2yjrBce2LkLk9pfeJaQAKXQlbcSuNncUIilzU=)
                          4: 83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl (hash: vEMsgoKOTBTn8WEM/yGtppLSBeqT9aKxya7XJlJ2Yns=)
                          5: 326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa (hash: pg01dmJKb4i6N1OISbtyGBdxn2HbVOxCfGKdfLBgGBU=)
                          6: 326131343a373538363a363130373a3a2f34382d3438203d3e20323034323131.roa (hash: tM02Frjt9GqAYw9AMT9AJQYlUSur+I4aPvxlBdDO/ZE=)
                          7: 326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa (hash: IposJX1/dkIc9KCM9TFTNcoPJOct8JFXE8VYQyXCQGI=)
                          8: 326131343a373538363a363131333a3a2f34382d3438203d3e20323034323131.roa (hash: lMmihb/04tHKQfah94vqyGtRBoUBSLViWROoIfWb+R0=)
                          9: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer (hash: EdwXjb+WYDK6QiRhUSjJHcf+DUC+lEkWQDa3ePFThcg=)
                          10: 326131343a373538363a363131323a3a2f34382d3438203d3e20323036303639.roa (hash: nQYOSOAU88ZOUN4XRe2kH036UdabGxGwJVqLchFMc84=)
                          11: 326131343a373538363a363130393a3a2f34382d3438203d3e20323036303639.roa (hash: McsutBYilHSf+D+zQp4WS0ZrKs44K8YIfKiqGRIwOWI=)
                          12: 140CF895225100CF571959173341D92070FF6E7C.cer (hash: GiVhe5wCSmxcIMA/bvZQYg7bw4oKTm6bJhvYg/eFDeY=)
                          13: 326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa (hash: OYC7HLv+BuvqzRe89yDGqiEIKOoLGwOVCrrcTvt7S0I=)
                          14: 326131343a373538363a363131303a3a2f34382d3438203d3e20323034323131.roa (hash: Xss1rIY1/9LH0JkCd4kH4TTvOENF78QImpavOtUADkw=)
                          15: 326131343a373538363a363131343a3a2f34382d3438203d3e203131343231.roa (hash: PRwacz5vYeETLuuqiKn4eg+u9MO1E7cOtPxt6n2Kwa4=)
                          16: 326131343a373538363a363131313a3a2f34382d3438203d3e20323036303639.roa (hash: I/2PHJxZeyEqiNbxH92CNv0UFHW8YzcvKl6PJAgo1vY=)
                          17: 9868B8A018D41E9D418D93B52C0A31174F40F11E.cer (hash: K8WZW75lvBjppVrxkTmVrExgqW1xMJgsYaqTqgl4smE=)
                          18: 326131343a373538363a363130333a3a2f34382d3438203d3e20323034323131.roa (hash: OMQ39sE0xuD98pyJIF5ctj0i+Akl1K8L7lf+usOHEvQ=)
                          19: 326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa (hash: AXSbGIUNn4IvcJ8FCvZh2aj1rjw4XLS45akYolms3s0=)
                          20: 326131343a373538363a363131363a3a2f34382d3438203d3e203131343231.roa (hash: MrwHj6gR6bkUOd/04peI6c/Ue0oDIdpPIQRV4p5/RNQ=)
                          21: 326131343a373538363a363130383a3a2f34382d3438203d3e20323034323131.roa (hash: kvgThrWNimya9GZ+Hb1hmWRsjnt4ZTY4cOtVrvum5N4=)
                          22: 326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa (hash: hh9Rd6v92uybHSKZay0GAXY+0l2OkBQ3MefYFze7J1I=)
                          23: 326131343a373538363a363130363a3a2f34382d3438203d3e20323034323131.roa (hash: IlRx4OBitw3wFaQW1PrD42/DA4szNKP16B3GuMogB1E=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 17:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b2:0a:54:91:9e:6a:1a:f1:0e:01:78:3b:c6:43:b0:5d:1a:49:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E
        Validity
            Not Before: Sep 20 16:04:02 2026 GMT
            Not After : Sep 21 17:20:02 2026 GMT
        Subject: CN=01A9013622FC62A6C4DC06C93E00537A31D80013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d3:50:90:c8:5c:c6:ab:16:f5:55:d2:90:71:
                    0e:f9:93:4c:95:f6:ef:01:3d:dd:4f:10:af:79:cc:
                    7a:7f:67:65:5a:9a:4e:62:24:e0:ec:f1:58:42:9e:
                    8a:64:0d:7b:0c:e4:0c:45:ba:2e:e2:3e:3a:6a:46:
                    92:95:cd:d7:26:fa:42:29:09:f2:84:b7:7d:9f:ed:
                    ce:a4:c0:0b:c6:52:d5:55:6e:7c:bf:13:c2:bc:72:
                    60:e4:e4:89:7b:3a:39:2f:16:27:c3:9e:fd:c2:74:
                    f2:da:79:55:b6:8f:c0:c0:6b:ce:ad:9a:3a:74:72:
                    3d:33:4a:2c:f4:54:3e:b5:de:cb:7a:5a:26:ac:21:
                    a3:9b:de:22:aa:13:c2:ed:00:7a:7e:b1:4f:87:f9:
                    0a:74:cb:0c:38:03:83:66:87:49:12:ab:75:94:28:
                    e4:24:71:5e:52:73:b7:3c:de:82:9d:df:e2:7d:1c:
                    11:da:7a:c5:1f:29:8a:7f:36:f2:83:f0:d8:3d:3e:
                    c3:21:b8:f3:6e:14:65:03:91:01:b5:9b:d0:b1:4e:
                    71:74:a0:8b:a3:7e:89:93:3b:3d:62:a4:a0:79:3a:
                    66:c7:5c:29:73:f9:d1:08:a8:2f:6d:1a:68:0f:ef:
                    a5:9d:34:7e:fd:5b:1c:67:e4:c3:dd:11:60:7e:14:
                    69:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A9:01:36:22:FC:62:A6:C4:DC:06:C9:3E:00:53:7A:31:D8:00:13
            X509v3 Authority Key Identifier:
                keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:aa:a6:c3:16:e4:11:d6:f2:cc:f7:26:d8:39:57:be:1f:7f:
         7f:c2:81:97:a4:8e:b5:ec:bc:7b:60:2b:b4:7c:8e:ae:02:d4:
         7f:b8:af:ee:41:28:b5:29:1d:f2:84:ba:5f:6e:66:36:0c:01:
         99:2d:8b:c1:c1:8e:0e:ae:be:af:38:64:3a:3b:7b:9c:da:b1:
         05:af:6f:5b:61:8a:b3:05:be:26:90:eb:9f:2f:d8:f4:ab:ca:
         f5:d7:6f:8d:ec:f4:33:0d:af:8c:fb:75:1b:79:74:d8:7c:b5:
         ab:bd:0f:00:83:cd:0d:97:9f:9a:c2:c8:15:67:91:5b:87:18:
         63:50:ce:c6:e6:c5:b6:e6:36:1a:a2:f7:2e:12:45:97:f5:0f:
         82:ef:19:20:59:b0:2f:2c:cc:71:87:a6:7c:d6:0d:1c:d0:fa:
         4a:4b:08:42:92:a1:4f:64:ee:ea:14:09:9c:97:5f:04:29:92:
         ca:ee:a3:c3:1d:2f:8b:a2:8a:76:ef:fe:6a:f1:39:e4:0c:2b:
         8a:a6:13:92:a3:82:4f:8f:97:7d:3c:ab:c4:e2:19:52:4c:e3:
         46:88:5c:7a:0f:2a:07:b2:3c:56:2d:71:ea:f4:1e:8b:38:5b:
         fe:39:79:ac:64:d4:ea:97:25:57:6f:ca:09:6c:f0:71:4d:0a:
         02:66:8a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:08:42 2026 by rpki-client