Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft
File:                     80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft (raw, json)
Hash identifier:          fcPp+a3ovP5F17rChrZR15fhHVZ0j1ZX1w1c4MCmpg8=
Subject key identifier:   AC:02:F7:5C:60:A4:BA:8C:2B:84:EA:E5:F3:35:CF:D3:75:56:EB:2A
Authority key identifier: 80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E
Certificate issuer:       /CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E
Certificate serial:       6E412B1675C836AAF566626D733FEEE30501EB41
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft
Manifest number:          14
Signing time:             Fri 12 Jun 2026 23:16:41 +0000
Manifest this update:     Fri 12 Jun 2026 23:11:41 +0000
Manifest next update:     Sun 14 Jun 2026 02:21:41 +0000
Files and hashes:         1: 315EC08E540BCBC870FEB38832274E048E2E1F80.cer (hash: VmW5doMIj7/eESnk7x1Plcpb42wjrE2rXHg8mFlwx4c=)
                          2: 326130613a643638353a3a2f33362d3438203d3e20323034323131.roa (hash: X3yUeD61GhapeOsUlkFiq5TmnoG/p0KNKBsOGJwvygw=)
                          3: 80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl (hash: hdWqUrujo/Ox/T4ywHUPU7EC/k5R0VnWVmQAKoQhN+0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 15:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:41:2b:16:75:c8:36:aa:f5:66:62:6d:73:3f:ee:e3:05:01:eb:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E
        Validity
            Not Before: Jun 12 23:11:41 2026 GMT
            Not After : Jun 14 02:21:41 2026 GMT
        Subject: CN=AC02F75C60A4BA8C2B84EAE5F335CFD37556EB2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:10:dc:54:c2:45:ad:ba:32:b9:fd:43:c9:45:
                    bc:94:ed:c7:f5:3e:32:00:6a:1f:43:41:45:c5:6f:
                    a2:05:2d:e7:bf:26:61:7a:57:a1:64:68:8d:2f:cf:
                    72:c9:ae:10:15:f2:19:53:a1:fc:da:2b:3a:78:65:
                    75:a9:a9:4a:d2:0b:74:ef:d3:f0:43:03:4d:11:3b:
                    d7:94:4d:ba:e4:6b:fa:62:06:5c:22:56:40:dc:e7:
                    a7:ed:84:36:5e:53:b0:e6:5c:92:4b:a5:11:54:e1:
                    f9:5e:d6:28:84:45:08:9c:77:a8:1a:21:f8:b4:25:
                    8e:95:09:6c:94:24:f8:c8:1e:48:ef:46:ed:50:78:
                    13:5a:4a:d0:d5:f0:9d:56:8d:31:e7:b6:61:96:42:
                    9e:9a:6a:d5:f5:a5:b2:2f:6e:bb:07:09:8e:48:cd:
                    4b:ac:4a:88:87:3f:30:20:ac:20:15:03:8f:98:d5:
                    35:4f:e9:c6:ab:ba:f2:eb:99:8b:8e:b7:50:63:ef:
                    f3:2e:5e:00:1e:e9:5f:42:c8:6a:5d:1f:a5:52:ed:
                    49:61:70:35:25:bb:fd:a9:3c:6a:49:b4:8a:75:1d:
                    3c:0b:49:1b:a7:7a:34:61:0c:78:75:05:89:c1:8c:
                    10:c3:3b:da:d1:1b:5c:0f:84:b0:79:0f:87:49:ff:
                    ab:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:02:F7:5C:60:A4:BA:8C:2B:84:EA:E5:F3:35:CF:D3:75:56:EB:2A
            X509v3 Authority Key Identifier:
                keyid:80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:5c:43:51:af:d5:ef:7c:2f:cc:53:be:a4:07:31:7a:22:bd:
         e5:c1:7b:8d:a3:7e:6c:f8:58:90:72:1d:ff:9f:50:ee:9d:df:
         87:81:09:fc:ec:8a:0b:d9:6f:29:df:cf:89:17:9f:7c:2d:80:
         f7:8b:f1:80:1f:19:70:37:77:ee:78:36:7a:88:30:1e:9f:6d:
         56:fb:65:23:41:2a:f8:10:4e:3e:b0:13:d1:3a:3f:64:df:7c:
         f8:fa:81:30:09:5f:92:21:a4:2d:76:03:c8:09:21:ed:70:7e:
         67:bf:a7:74:87:49:d7:3c:e8:e6:8f:86:31:68:0d:e9:64:73:
         bd:6d:97:19:f4:49:f3:09:49:e2:2d:25:8c:0d:26:90:81:53:
         94:66:40:0e:c1:99:22:a0:da:d6:33:05:60:4e:f6:82:77:1e:
         c0:f0:18:31:05:ea:a4:4a:f3:a2:b2:8a:fb:f4:88:e8:a6:aa:
         95:ac:57:22:94:c8:a0:61:04:4c:0a:35:f3:be:da:06:8d:bf:
         8d:bc:3d:fb:dd:c4:4c:5d:85:e9:b1:64:73:8b:93:3c:c7:a6:
         4e:6a:2d:8c:86:e9:3d:41:c1:c7:6b:69:5e:03:10:ad:fc:67:
         91:da:88:63:2c:dd:41:99:ef:2d:66:bb:5d:63:21:76:c0:0d:
         c6:85:47:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:27 2026 by rpki-client