Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
File:                     578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft (raw, json)
Hash identifier:          p8UhVZR6/lLIgCoDbJiLYPnLCKDg+orxNlTzrcsMUFU=
Subject key identifier:   F1:20:CB:EB:74:28:80:E7:BA:10:98:14:7C:7F:68:EC:C7:A9:9E:AD
Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3
Certificate issuer:       /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
Certificate serial:       3A9EFD328536ECF550F0096CE66AD6F4A929032C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
Manifest number:          0242
Signing time:             Fri 17 Apr 2026 20:03:32 +0000
Manifest this update:     Fri 17 Apr 2026 19:58:32 +0000
Manifest next update:     Sat 18 Apr 2026 23:54:32 +0000
Files and hashes:         1: 3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa (hash: O+6twnNOV5ruNsTz6gyqZDCueGHR/39L745XmWi2d5I=)
                          2: 323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa (hash: RGTgCra6z97DL3zPw+EaFuLG0rQZ9DlytQ3X3ko6llc=)
                          3: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl (hash: gFtAqV2gZ9lqo30pAarMZaYdJlbUbvjV075e4cFLvzY=)
                          4: AS215296.asa (hash: l7QnDI/OpnY5Yq7b4HfqMZZEDw/6Wh6mqj/BM8KgG/E=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:9e:fd:32:85:36:ec:f5:50:f0:09:6c:e6:6a:d6:f4:a9:29:03:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
        Validity
            Not Before: Apr 17 19:58:32 2026 GMT
            Not After : Apr 18 23:54:32 2026 GMT
        Subject: CN=F120CBEB742880E7BA1098147C7F68ECC7A99EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:46:e2:d9:2c:3f:98:ad:d4:2e:a0:d9:de:
                    b7:fd:1a:a1:1e:78:68:e1:23:c8:c4:32:ee:35:85:
                    e1:a1:19:51:c1:6d:67:8a:6d:a3:5c:e9:b7:13:30:
                    a7:78:73:34:d4:4c:7a:23:58:42:69:0a:69:88:88:
                    b6:9e:4d:7d:4c:c1:1e:6f:3f:21:84:78:56:5b:44:
                    2f:e1:fa:0d:1d:47:bd:04:a8:19:bb:4d:2e:13:e0:
                    52:c1:2e:41:38:3b:1a:0a:69:41:ce:9c:c6:e0:3a:
                    45:32:cf:10:23:22:cc:53:06:1c:28:ff:b3:ca:d9:
                    9e:98:62:08:83:31:8e:68:9a:77:e8:74:23:db:63:
                    77:34:c8:d7:3d:c9:ca:eb:bf:c5:2d:10:3f:f3:ba:
                    1f:b4:23:f4:91:f7:ad:72:e1:3f:7c:19:9c:d5:75:
                    1a:d7:d4:c4:06:90:58:7a:ed:dd:bc:bb:b5:9e:55:
                    de:86:d0:2e:ed:c6:e0:ed:94:93:85:fb:5e:13:6a:
                    91:c0:4d:5b:d7:46:4e:00:1f:d9:b4:3d:b1:8c:10:
                    b1:1a:d1:94:eb:ff:93:ec:b7:a8:99:9b:8b:b9:4c:
                    5f:f6:20:1e:da:2f:fd:d7:96:72:ff:f6:e9:ca:56:
                    13:e9:78:38:08:4f:1b:4d:fd:7a:54:d0:39:cb:4d:
                    73:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:20:CB:EB:74:28:80:E7:BA:10:98:14:7C:7F:68:EC:C7:A9:9E:AD
            X509v3 Authority Key Identifier:
                keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:3b:56:b1:f4:78:13:d9:b1:40:e9:c7:05:ba:3e:cf:41:4b:
         14:14:01:ea:bf:b6:f6:55:b0:f1:ae:27:4a:a5:9f:0c:69:06:
         c9:e3:ea:08:76:30:b5:8b:94:e8:2f:8a:4d:79:0b:54:37:b3:
         fd:d2:45:a2:a1:f5:61:89:6e:83:51:03:af:5c:ec:5c:42:7e:
         30:59:de:c3:d3:fd:05:96:44:1d:84:7c:fb:c8:32:bb:93:aa:
         4f:2a:27:1e:7c:de:0f:09:e9:cf:89:0d:20:a8:37:42:8a:93:
         3b:16:c5:b0:fa:aa:28:67:84:95:f8:a0:a0:41:03:0d:2a:08:
         ad:f4:2e:3f:b3:49:b5:17:67:12:c6:43:10:23:59:69:1a:96:
         25:d1:38:a7:40:c8:5f:31:b3:d4:a7:8a:dc:12:c5:41:43:5d:
         d3:74:83:e4:2f:c6:eb:7b:d3:2e:69:e9:ae:6d:12:0b:28:27:
         ab:f0:02:59:e1:87:3b:78:c2:78:29:5a:c6:ef:b6:48:64:7c:
         ca:cf:58:da:fd:22:20:e3:e6:73:70:b6:a0:32:03:39:be:de:
         d1:f0:0b:04:af:9a:34:b1:9f:ae:26:fb:de:0a:2f:b6:ed:2f:
         29:48:b0:18:cd:f3:bf:85:cc:d7:f2:ad:09:76:75:35:51:bc:
         2e:82:d5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:17:06 2026 by rpki-client