Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
File:                     35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json)
Hash identifier:          9ndSmBb8z1f/Z23NDyj7p5QxTXYybPL2o6j5iwcF+c0=
Subject key identifier:   07:B5:20:E4:6A:9F:50:A8:E8:BF:88:E9:5B:5C:54:E5:E5:0F:B1:E2
Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52
Certificate issuer:       /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
Certificate serial:       28B72BD7BB61EED4DFE471ECCC2F89F5225E34E0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
Manifest number:          027F
Signing time:             Sat 13 Jun 2026 23:06:41 +0000
Manifest this update:     Sat 13 Jun 2026 23:01:41 +0000
Manifest next update:     Mon 15 Jun 2026 01:06:41 +0000
Files and hashes:         1: 326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa (hash: tf4CnuzuqcNJkCPREEFPykMzx34y8Ud9hQ2hyeqIDkc=)
                          2: 326131343a373538313a323030303a3a2f34302d3438203d3e20323135333634.roa (hash: Qbpxn6m6N57BLQ/qLjGEPLIZz8aoJQbWLiHDKsDlsdk=)
                          3: 326131343a373538313a323030303a3a2f34302d3438203d3e20333936303530.roa (hash: sHH5EXfl8KcOz9d8oEb74NyMVuJWDbdSziQULSKFDd4=)
                          4: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: hhnXez1MtyG/OWqeDWj8Yk7vwpb6xK8SsXbhq+WvHw8=)
                          5: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: qMwS539lNZFoubA7sJWCkka1wt0G8zXYNPGQsBc3Exo=)
                          6: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: WHkf4m6DzfoyrufCoOAxeFwtqFzFGCors6ZbsGaGLa8=)
                          7: 326131343a373538313a323930303a3a2f34302d3438203d3e20323039313039.roa (hash: ENamU9VlpUh2S5yKvYrAp12SwLl/9Jv38ffU+yHH5Iw=)
                          8: 326131343a373538313a323030303a3a2f34302d3438203d3e20323136333234.roa (hash: 94LHGHEmr5Ow8y0LgQ8OziBDUOK8WBX/6zymxyfianM=)
                          9: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: 4/rbWWzHodtbt6clKHsUqH92kwQib9k/OMbGmX+4WBA=)
                          10: 326131343a373538313a323030303a3a2f34302d3438203d3e20343031333836.roa (hash: UDRqDR0JMowXqg92cpDjRfR7VLQyzzQdpbzczBoUKPE=)
                          11: 326131343a373538313a323730303a3a2f34302d3438203d3e20323039313039.roa (hash: MFKFuWCDL66Zxs5f3hEeRn+2JW7mEBoWjT7f6AJBOhM=)
                          12: 326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa (hash: 2DfIdT8hQ452p9tTWwGSgv6G5KrCdvIla2RYi0wqius=)
                          13: 326131343a373538313a323830303a3a2f34302d3438203d3e20323039313039.roa (hash: U1r4ZvjM4KXIBEm7hpH6+0Qd/LSsHMlknATpB6yDZ90=)
                          14: 326131343a373538313a323630303a3a2f34302d3438203d3e20323039313039.roa (hash: Ah/styCnPIoGFWiO0PQ2rB66bvMdDv2NyL9mrkcrCj4=)
                          15: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: GU9+rKAYRqNo9YIwP+TkUZlOwC3QOJ/ceUAdYXuG73A=)
                          16: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: DLjQUjmP+DsaW9+BMh56ieI2Ec94mZJVyHTBFU7NtcI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 22:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b7:2b:d7:bb:61:ee:d4:df:e4:71:ec:cc:2f:89:f5:22:5e:34:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
        Validity
            Not Before: Jun 13 23:01:41 2026 GMT
            Not After : Jun 15 01:06:41 2026 GMT
        Subject: CN=07B520E46A9F50A8E8BF88E95B5C54E5E50FB1E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b3:25:4c:8c:37:6f:cd:54:ef:ad:06:dd:29:
                    24:c5:9f:a3:45:67:ff:6e:59:3f:fe:65:43:57:e1:
                    6d:d5:14:88:83:6c:9b:b6:35:cd:f2:89:2c:48:6f:
                    82:47:f8:95:84:38:fd:f8:09:fa:f7:92:5f:d5:2f:
                    1a:51:df:d9:dd:44:07:00:1f:5c:44:6f:4a:5f:bb:
                    58:9a:b2:ad:61:fd:ae:1a:b4:f7:a1:d2:f3:f6:a1:
                    f2:2c:15:08:6d:57:e4:43:f8:b5:70:55:8e:e8:13:
                    fd:a2:d4:4d:79:74:64:ea:3a:34:3a:2b:79:7f:2b:
                    41:65:37:63:38:ca:f3:3c:e2:bb:7e:d8:12:0c:d3:
                    66:a4:27:2b:29:40:11:ba:f7:a8:f7:60:6b:fd:38:
                    95:e9:59:de:40:5c:ee:ab:3e:86:8a:74:1c:75:38:
                    30:83:64:6f:f6:5e:50:95:40:1c:05:24:9e:e3:08:
                    7b:76:5d:7a:08:5a:d6:b0:51:82:15:fc:0e:75:68:
                    34:80:db:b5:3a:3a:49:84:72:58:36:4e:c6:41:d4:
                    86:e9:02:93:3d:38:bb:12:9c:83:2b:95:b9:d7:3b:
                    e2:68:f8:f1:b0:bb:8c:78:99:fd:2e:ca:42:4c:81:
                    cc:d5:48:29:bb:e7:b5:ba:f2:9d:bc:98:fc:1f:94:
                    a3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B5:20:E4:6A:9F:50:A8:E8:BF:88:E9:5B:5C:54:E5:E5:0F:B1:E2
            X509v3 Authority Key Identifier:
                keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:97:5c:7e:7b:ef:c0:6b:fd:d6:b3:ec:44:d3:2f:67:2c:89:
         76:63:f7:26:32:d0:c7:9d:8c:36:fc:93:76:02:5d:d9:bb:c2:
         6a:c6:2d:60:d3:77:db:7d:bc:95:7f:a1:7e:5d:98:12:44:c0:
         c2:f2:5f:dc:b1:da:79:5a:d7:ca:81:4e:78:d8:5d:1a:47:d7:
         89:f8:1c:ca:3f:88:21:88:22:02:09:00:40:e1:fe:c1:15:e6:
         9b:d3:b0:15:81:07:59:f0:ba:fe:e4:21:07:fc:43:91:7c:4d:
         5c:a2:4c:a3:57:28:f9:9b:3c:ca:08:5f:97:cc:ad:32:0e:59:
         51:96:5b:1c:91:f9:8d:54:53:24:88:ca:bd:a9:1d:70:61:b2:
         f4:bf:3b:27:ee:2f:10:df:f0:6b:cf:84:e5:0f:a1:af:31:92:
         cb:74:75:be:77:1b:da:10:45:d9:87:64:17:21:98:27:86:37:
         b0:73:d2:1e:23:d5:f2:21:80:2c:12:ef:de:c6:7f:5b:e5:ac:
         c9:46:7b:d7:21:41:af:30:58:a6:4d:a9:75:f1:c1:ba:ff:ae:
         5d:b5:7d:db:d3:2b:55:36:0d:30:e3:9f:f8:c3:7c:92:ce:18:
         4f:dd:1c:a6:5f:c9:4f:9d:8b:7e:d7:e1:72:31:5d:2d:7f:a9:
         30:02:f7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:24 2026 by rpki-client