Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
File:                     AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft (raw, json)
Hash identifier:          WGuvqZZI4lWpyB8bQQ0BgcWGLUsztkS6MYX3gbTn+Ms=
Subject key identifier:   A5:AD:DC:F8:A2:50:43:43:C4:D1:87:DD:93:C0:3E:07:50:40:A4:47
Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96
Certificate issuer:       /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
Certificate serial:       61E72D3ADC50BBFE4D353615093ED56474A946C3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
Manifest number:          2F
Signing time:             Sun 01 Mar 2026 21:22:23 +0000
Manifest this update:     Sun 01 Mar 2026 21:17:23 +0000
Manifest next update:     Mon 02 Mar 2026 23:47:23 +0000
Files and hashes:         1: 34352e3133362e33382e302f32342d3234203d3e203232343237.roa (hash: DVZekNAuwA3ip9E2oJI8N7TO3EANrn8mc568ZgMFs/g=)
                          2: 3139342e33312e3136352e302f32342d3234203d3e20323134303235.roa (hash: EY78SLNdqDoVTGyYCNTO3r94gx+kGyxnzZbPSk3cNUM=)
                          3: 34352e3133362e33392e302f32342d3234203d3e20313337323335.roa (hash: UhTypQACgX/qose3+Rz5crr8U0o2FSTLVVAcLhIaRXU=)
                          4: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl (hash: +1INhXWpxAL/ZQgCUYLPCq4kkNPPZszP/59McP76wEw=)
                          5: 34352e3133362e33362e302f32342d3234203d3e203633303235.roa (hash: +pP+6RG5Xk+om9nXzvq6WKJqnS83TS8lI7ERhzFqThI=)
                          6: 34352e3133362e33372e302f32342d3234203d3e20323136313338.roa (hash: JZ1L2KQs0f2eXdqI4to3PHDMlAV/dVTRle8eNzjpil8=)
                          7: 3139342e33312e3136352e302f32342d3234203d3e203235313938.roa (hash: 1XT5eK0onCHcuEXsori5RDmzilEugz+LQ7l81zuXthY=)
                          8: 3138352e33382e32352e302f32342d3234203d3e203133333335.roa (hash: 8Dov3dsVRdYA9hssq4paEGEc00JaP1eCascbI1uHeu4=)
                          9: 34352e3133362e33372e302f32342d3234203d3e203233353332.roa (hash: lQ482c7dNPnq+b2J23abNSxD06d725wZrRqBuqXdD1I=)
                          10: 3138352e33382e32362e302f32342d3234203d3e20323033303736.roa (hash: sDu6cSq1jkixXmJL543CieEIPCSsRynaX7T0t0iTsp4=)
                          11: 3138352e33382e32372e302f32342d3234203d3e20323031303738.roa (hash: ukyrW3OkENdui2e2lMLTPGtAVU5Vow3lLLqAXhAKFmY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e7:2d:3a:dc:50:bb:fe:4d:35:36:15:09:3e:d5:64:74:a9:46:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
        Validity
            Not Before: Mar  1 21:17:23 2026 GMT
            Not After : Mar  2 23:47:23 2026 GMT
        Subject: CN=A5ADDCF8A2504343C4D187DD93C03E075040A447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4a:6e:91:01:24:4f:a4:fe:9a:10:25:4b:55:
                    68:0e:28:6b:35:56:c9:dc:9e:22:a0:1b:cd:db:08:
                    ec:b6:41:e0:81:e0:9d:f6:7e:da:0e:5a:e0:31:2e:
                    da:d6:55:a6:3c:ff:34:b8:88:01:0a:41:ed:ba:8a:
                    a1:12:09:10:6d:ee:ae:e9:e6:4f:1a:7d:d6:fb:9f:
                    e6:6b:2e:7d:4f:a9:48:b5:81:84:6a:22:1d:e1:11:
                    42:4a:95:10:a3:be:33:ab:e4:f8:f9:da:41:22:2d:
                    e8:ff:cc:a7:50:e2:26:84:59:51:b1:26:a8:8b:b2:
                    fb:ad:fe:2b:38:d8:fe:2a:d3:6d:ed:bc:da:4c:56:
                    89:72:2f:b7:78:f2:83:3d:c6:d1:82:cb:e5:69:ea:
                    47:b1:e6:0b:d7:5f:ce:63:0d:37:77:ed:46:d4:26:
                    f6:18:f2:30:40:64:a5:bb:0c:cd:35:fb:a2:c6:5c:
                    28:38:4d:fb:d6:9e:99:99:c4:4a:4c:73:1d:be:de:
                    3f:3b:41:e4:1e:36:45:17:8b:b1:10:7c:2b:6a:3b:
                    09:31:d6:29:77:f0:c5:57:d9:24:f0:a2:f1:c7:e8:
                    17:9f:3a:fc:07:e9:ee:61:11:c2:42:86:90:f3:5d:
                    f7:ab:a9:ae:59:88:df:34:1b:02:7b:df:89:6d:47:
                    55:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AD:DC:F8:A2:50:43:43:C4:D1:87:DD:93:C0:3E:07:50:40:A4:47
            X509v3 Authority Key Identifier:
                keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:a7:24:7c:50:9b:3a:00:2e:d7:56:55:c8:6e:2a:c7:18:cd:
         bc:a7:91:7f:f9:64:12:c0:82:be:1c:d4:5d:05:3b:1f:94:24:
         4d:79:69:18:06:de:4e:10:c2:1a:16:60:49:0d:4b:03:7f:1b:
         a2:bc:04:af:82:a2:c9:46:d6:05:51:20:39:3c:f3:43:a5:19:
         f2:09:cc:12:a8:03:b8:7f:bc:de:61:2f:3a:53:cd:9e:3e:b5:
         d6:8e:1a:ca:22:80:ab:5b:fb:34:2a:4c:c4:e2:80:16:ef:ca:
         65:64:32:02:6e:63:3a:83:ba:0e:30:98:5f:ea:20:1e:35:fc:
         7d:a1:67:c0:8a:1d:73:ef:b6:f4:fd:bd:4b:3c:29:43:b9:0b:
         f6:46:43:1f:84:0b:5f:56:e7:ac:ab:a9:2b:8d:d9:8d:31:01:
         09:df:93:e5:0e:e3:93:5d:87:f9:08:87:58:ed:b0:25:92:bd:
         0d:57:9c:38:8b:7e:d2:2e:b9:c9:f8:33:be:46:c9:d0:18:52:
         c2:01:60:24:8a:0e:bc:f0:02:60:e7:92:01:ed:5a:03:07:48:
         03:10:6b:ce:e9:35:b3:d8:9d:6b:5c:57:5e:e2:66:23:45:b1:
         59:b0:1a:cb:2d:81:6b:bb:74:d0:f1:4a:9d:29:c0:6b:2c:01:
         83:73:8b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:29:02 2026 by rpki-client