Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
File:                     AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft (raw, json)
Hash identifier:          PuSvdsUJTqctje9tCnGl7au5MgtXfdILjJsQbjfA+Qk=
Subject key identifier:   F9:A2:A2:A2:62:E2:A8:BB:EA:44:5A:DD:E3:93:21:C0:11:E9:9E:20
Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96
Certificate issuer:       /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
Certificate serial:       7E8CF592F0B25C7F3F48E1781501CEA04B0D429E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
Manifest number:          BA
Signing time:             Sat 13 Jun 2026 01:42:55 +0000
Manifest this update:     Sat 13 Jun 2026 01:37:55 +0000
Manifest next update:     Sun 14 Jun 2026 03:37:55 +0000
Files and hashes:         1: 34352e3133362e33372e302f32342d3234203d3e20323136313338.roa (hash: JZ1L2KQs0f2eXdqI4to3PHDMlAV/dVTRle8eNzjpil8=)
                          2: 3138352e33382e32352e302f32342d3234203d3e203133333335.roa (hash: 8Dov3dsVRdYA9hssq4paEGEc00JaP1eCascbI1uHeu4=)
                          3: 34352e3133362e33392e302f32342d3234203d3e20313337323335.roa (hash: UhTypQACgX/qose3+Rz5crr8U0o2FSTLVVAcLhIaRXU=)
                          4: 34352e3133362e33372e302f32342d3234203d3e203233353332.roa (hash: lQ482c7dNPnq+b2J23abNSxD06d725wZrRqBuqXdD1I=)
                          5: 3138352e33382e32372e302f32342d3234203d3e20323031303738.roa (hash: ukyrW3OkENdui2e2lMLTPGtAVU5Vow3lLLqAXhAKFmY=)
                          6: 3139342e33312e3136342e302f32342d3234203d3e20313531373034.roa (hash: qPTeTmV7oWgeHcKKTzXESARKHRkTDbk6syKPhIyZlgk=)
                          7: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl (hash: zizP6BB5edEs95wqe7XrIDcT7L0B/m/VZZmuZCFqssU=)
                          8: 34352e3133362e33362e302f32342d3234203d3e203633303235.roa (hash: +pP+6RG5Xk+om9nXzvq6WKJqnS83TS8lI7ERhzFqThI=)
                          9: 34352e3133362e33382e302f32342d3234203d3e203232343237.roa (hash: DVZekNAuwA3ip9E2oJI8N7TO3EANrn8mc568ZgMFs/g=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8c:f5:92:f0:b2:5c:7f:3f:48:e1:78:15:01:ce:a0:4b:0d:42:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
        Validity
            Not Before: Jun 13 01:37:55 2026 GMT
            Not After : Jun 14 03:37:55 2026 GMT
        Subject: CN=F9A2A2A262E2A8BBEA445ADDE39321C011E99E20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8c:39:45:af:b3:24:92:99:d7:20:3a:d2:83:
                    72:1f:1d:d5:84:8d:8f:53:8d:78:1c:43:5d:98:ba:
                    a1:d0:ae:f0:b0:25:2a:7a:bc:e9:2d:e8:bf:fc:92:
                    ef:7f:44:8c:f8:e7:b6:7f:01:1e:cb:3a:2b:c0:02:
                    80:50:1f:ec:74:74:65:a4:66:8d:a9:1d:2a:d1:b4:
                    b3:2f:bb:f6:c4:7a:57:cc:dc:95:b6:db:7a:95:5a:
                    7b:ee:ab:85:c8:97:24:18:7b:e3:89:35:f4:a3:25:
                    26:fb:a9:15:74:6e:a4:4d:78:20:ec:a2:b3:21:c3:
                    4a:89:95:7f:6f:50:7e:79:f7:1c:93:4a:71:69:f0:
                    5b:a0:74:c0:6a:40:12:7f:e8:c1:b3:38:8b:0d:dc:
                    d3:80:0c:5c:72:93:d1:af:b7:44:c9:bf:8f:b7:72:
                    6e:29:1a:23:9f:76:28:bb:c7:f5:aa:c1:81:13:ab:
                    fe:d1:4b:45:12:c9:13:e8:4f:c7:e4:7d:c9:bc:75:
                    77:08:ef:98:ad:09:61:4b:ea:3f:9a:e2:82:d1:55:
                    fc:56:06:31:e4:0f:b5:ce:1e:85:9c:d9:07:10:bc:
                    78:11:07:d7:b4:6d:95:20:72:bd:c3:bc:fc:c6:52:
                    03:80:5a:5a:06:6d:e8:ba:f0:d0:1c:bb:3e:9f:91:
                    24:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A2:A2:A2:62:E2:A8:BB:EA:44:5A:DD:E3:93:21:C0:11:E9:9E:20
            X509v3 Authority Key Identifier:
                keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:55:5a:0c:d0:09:2b:c4:23:89:b6:64:cb:19:48:66:2f:57:
         4a:bc:61:b9:21:fd:c6:97:72:43:a4:4d:be:ff:5f:36:60:f6:
         5e:96:68:62:b0:2e:ae:35:a5:90:f8:35:55:e0:8f:51:19:6d:
         54:63:1c:fa:c0:3c:1e:60:cc:88:a1:a2:c0:31:82:91:8e:f4:
         20:ed:3d:6e:87:22:f0:40:4b:2d:f4:ed:8a:5e:ef:cd:e5:e2:
         71:49:58:aa:5f:09:fb:d4:f5:bd:06:b4:34:a1:22:a2:54:0e:
         2c:eb:97:0a:8e:68:07:c0:b4:40:88:b6:66:4e:7f:69:60:c9:
         ad:0a:e4:0e:a3:f2:d7:b6:a3:0c:1f:53:5e:93:fc:95:84:bd:
         93:a4:51:1e:4a:8f:3b:28:1c:e6:ca:d6:d6:17:6f:ac:ab:45:
         ed:e9:b9:95:be:f3:1e:f6:48:75:74:95:23:6c:ad:40:30:95:
         d5:f7:27:a2:f1:1f:2b:d4:e6:d4:4b:f7:1e:ba:fe:60:1c:08:
         11:5e:d6:80:32:81:6a:87:da:25:5d:77:6f:16:33:46:41:45:
         57:99:dc:2d:63:09:df:7a:07:a0:b8:9b:3a:5f:27:10:59:61:
         58:10:bb:53:6a:af:45:11:74:8b:4d:36:1b:4c:0f:6d:08:d4:
         87:09:b4:00
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUfoz1kvCyXH8/SOF4FQHOoEsNQp4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2
REE5QkU5NjAeFw0yNjA2MTMwMTM3NTVaFw0yNjA2MTQwMzM3NTVaMDMxMTAvBgNV
BAMTKEY5QTJBMkEyNjJFMkE4QkJFQTQ0NUFEREUzOTMyMUMwMTFFOTlFMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZjDlFr7MkkpnXIDrSg3IfHdWE
jY9TjXgcQ12YuqHQrvCwJSp6vOkt6L/8ku9/RIz457Z/AR7LOivAAoBQH+x0dGWk
Zo2pHSrRtLMvu/bEelfM3JW223qVWnvuq4XIlyQYe+OJNfSjJSb7qRV0bqRNeCDs
orMhw0qJlX9vUH559xyTSnFp8FugdMBqQBJ/6MGzOIsN3NOADFxyk9Gvt0TJv4+3
cm4pGiOfdii7x/WqwYETq/7RS0USyRPoT8fkfcm8dXcI75itCWFL6j+a4oLRVfxW
BjHkD7XOHoWc2QcQvHgRB9e0bZUgcr3DvPzGUgOAWloGbei68NAcuz6fkSQbAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQU+aKiomLiqLvqRFrd45MhwBHpniAwHwYDVR0j
BBgwFoAUri4d762B/zngKD7WG8n53G2pvpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjA3YzkzZWQtYjgxOS00NWU4LTk0NWQtNDI2MzZkNDcx
NzEwLzAvQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2REE5QkU5Ni5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1mNTM2LTQ0
NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC9BRTJFMURFRkFEODFGRjM5RTAyODNFRDYx
QkM5RjlEQzZEQTlCRTk2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2YwN2M5M2VkLWI4MTktNDVlOC05NDVkLTQyNjM2ZDQ3MTcxMC8wL0FFMkUxREVG
QUQ4MUZGMzlFMDI4M0VENjFCQzlGOURDNkRBOUJFOTYubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjVVoM
0AkrxCOJtmTLGUhmL1dKvGG5If3Gl3JDpE2+/182YPZelmhisC6uNaWQ+DVV4I9R
GW1UYxz6wDweYMyIoaLAMYKRjvQg7T1uhyLwQEst9O2KXu/N5eJxSViqXwn71PW9
BrQ0oSKiVA4s65cKjmgHwLRAiLZmTn9pYMmtCuQOo/LXtqMMH1Nek/yVhL2TpFEe
So87KBzmytbWF2+sq0Xt6bmVvvMe9kh1dJUjbK1AMJXV9yei8R8r1ObUS/ceuv5g
HAgRXtaAMoFqh9olXXdvFjNGQUVXmdwtYwnfegeguJs6XycQWWFYELtTaq9FEXSL
TTYbTA9tCNSHCbQA
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:28:42 2026 by rpki-client