Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
File:                     51917E722DB03952D9056BED2F6BD4BF98B78976.mft (raw, json)
Hash identifier:          cGECaA8ZAoGaHEG23vj9LDHEOUdbfQmTCj6Sfg+I7ME=
Subject key identifier:   54:33:04:E1:C4:70:E7:E9:2A:A0:C3:8D:35:DA:58:9E:83:3B:1C:97
Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
Certificate issuer:       /CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Certificate serial:       41454DA4673BBF63320A632F6C9B0E620889F824
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
Manifest number:          02DC
Signing time:             Wed 28 Oct 2026 20:50:41 +0000
Manifest this update:     Wed 28 Oct 2026 20:45:41 +0000
Manifest next update:     Fri 30 Oct 2026 00:48:41 +0000
Files and hashes:         1: 326131343a373538303a3534303a3a2f34322d3432203d3e20323039373130.roa (hash: Av1B/CsfeimpaPDyAr/GwqgA0mmdJ8tWvzjK+NZ598o=)
                          2: 326131343a373538303a666635303a3a2f34382d3438203d3e20323039373130.roa (hash: CqYBJlC9HxvR/lzF60EvrSr55WqoXGsIwp/JfWPn/XM=)
                          3: 326131343a373538313a396637633a3a2f34362d3436203d3e20323138363831.roa (hash: 1hZDvl0qMpuDYfCMXPsCzSbYrHRxie7+lNBIWvvROBs=)
                          4: 326131343a373538303a3530303a3a2f34322d3432203d3e203331383938.roa (hash: kW0ykfTSwnRmtw5rqdfSJAoTUHSez3ElPGoIMTMRV0A=)
                          5: 326131343a373538313a396637303a3a2f34342d3434203d3e20323039373130.roa (hash: p385P4xF8QHkqCPa/hdjhVarHB8rsNeeYo+n7g9pTZ0=)
                          6: 326131343a373538303a666635363a3a2f34382d3438203d3e20323039373130.roa (hash: hxY4fGjdBFlVOI6exjx2RivYEFB7+0OSTFbNA/ZjJq8=)
                          7: 326131343a373538303a666635323a3a2f34382d3438203d3e20323039373130.roa (hash: O87kVBfj2J0xa4geQQDpom/gGWGIsL/XNYxhJIFYJnU=)
                          8: 326131343a373538303a666635303a3a2f34342d3434203d3e20323039373130.roa (hash: rQObBHe/jYqYen0xEroxiJeJ/RdU+jBQV0kO3W5kaTk=)
                          9: 326131343a373538303a666635313a3a2f34382d3438203d3e20323039373130.roa (hash: VqS5xTgMt4Ve90n9OZrI0nbLdp3XJUGys6dJrhIFmL4=)
                          10: 326131343a373538313a396637303a3a2f34382d3438203d3e20323039373130.roa (hash: PbnJV4v8C5QHnq2aBllU+RDCvAtSgAjZp/KgSmiAfVA=)
                          11: 326131343a373538303a3538303a3a2f34322d313238203d3e20323031313539.roa (hash: grtkVLSeBmK4RqaDolkiQDYEwz7NMtPUQB+CaYiZS8U=)
                          12: 326131343a373538303a666635343a3a2f34382d3438203d3e20323039373130.roa (hash: oduxdCtQvXNc6ctPbCrLlRtfzRRekU/B8PphIdwPh98=)
                          13: 326131343a373538303a3530303a3a2f34302d3430203d3e20323039373130.roa (hash: neZNgw7PLsgojfCmijqKDTuLqRpUvAzbBuxRqQ5exHY=)
                          14: 326131343a373538303a666635663a3a2f34382d3438203d3e20323039373130.roa (hash: bVu9jG4ygbQ2M9hg7Q2hYueCn9dZ67U+HzZp2NSwh9Q=)
                          15: 326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa (hash: CqPRVIJ+q90RN8VSTd4vYU1rnp26YUct1kQ2Ab1MyQw=)
                          16: 326131343a373538303a666635333a3a2f34382d3438203d3e20323039373130.roa (hash: 9UWTF9iOH6Z8mdDpbREEu5a0hC5xt7Bg4lhZ1je0aZk=)
                          17: 51917E722DB03952D9056BED2F6BD4BF98B78976.crl (hash: xt8ilCdaNmj3FG8/gybTWrVEsJnkN3c3mUy+uMzdhoQ=)
                          18: 326131343a373538303a3563303a3a2f34342d3438203d3e20323030393833.roa (hash: LWgSbiG8v12rmho8doO09JfDrfMqGywJ9H2+gVPGrQM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 22:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:45:4d:a4:67:3b:bf:63:32:0a:63:2f:6c:9b:0e:62:08:89:f8:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976
        Validity
            Not Before: Oct 28 20:45:41 2026 GMT
            Not After : Oct 30 00:48:41 2026 GMT
        Subject: CN=543304E1C470E7E92AA0C38D35DA589E833B1C97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9a:f7:3a:34:dc:82:f3:7f:b7:9f:8b:0b:06:
                    c1:63:11:8a:a2:a0:eb:91:ea:6e:1c:2e:e4:56:64:
                    47:06:86:9b:51:dc:37:09:56:c7:f9:f5:7d:b7:6f:
                    01:5e:e1:f3:38:d0:06:f1:41:0b:37:a8:34:35:f8:
                    69:1c:54:e5:e9:40:49:0b:90:3d:62:7b:c6:8b:70:
                    e6:16:a4:e1:52:1d:19:c3:cc:11:90:02:46:7b:73:
                    fd:2b:72:25:4c:17:b0:f9:9a:c1:28:e4:6e:c6:11:
                    36:14:b3:c9:6d:84:5a:f5:12:bc:25:0b:4a:98:b8:
                    14:4e:c4:25:53:c1:49:b4:ea:9e:77:cc:63:e6:aa:
                    53:3c:39:f9:36:f2:cd:38:98:58:94:06:8f:05:cb:
                    53:f6:21:0b:d4:36:e7:36:5e:a0:96:59:96:31:22:
                    9c:94:07:4a:8e:ba:31:55:1a:96:ce:4a:b8:ff:f8:
                    4c:36:b4:83:96:2f:92:58:5e:c9:66:53:70:d8:7e:
                    8c:63:bd:1a:ed:8e:ba:ae:19:d3:76:b0:66:c1:05:
                    75:b1:39:ea:33:7a:f1:91:e5:e6:c7:3e:84:25:57:
                    08:22:42:fe:4c:dd:4e:38:61:ba:1c:45:4b:8f:3e:
                    63:9b:6e:70:99:41:81:d5:ad:b8:38:38:f1:fc:3c:
                    8d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:33:04:E1:C4:70:E7:E9:2A:A0:C3:8D:35:DA:58:9E:83:3B:1C:97
            X509v3 Authority Key Identifier:
                keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:8e:74:63:c3:ad:4e:4e:85:12:e7:a0:c9:3d:ae:b3:24:2d:
         0b:bd:a9:43:6c:b1:fb:fd:19:5d:a8:21:7d:01:80:85:ec:06:
         e7:93:71:00:bd:8a:32:43:cc:17:80:23:0d:4d:9d:f6:8f:68:
         49:75:ff:22:31:90:13:e3:6c:60:36:99:f9:e3:e2:5b:38:80:
         1f:97:af:8e:69:9d:86:62:9e:b4:b3:27:20:37:46:02:a6:67:
         46:a8:99:92:a1:c3:a4:d9:8d:55:f5:0b:74:ba:d8:6e:eb:21:
         99:0c:47:f1:de:08:18:17:18:a8:1d:3c:0b:a5:89:12:f0:4d:
         8f:89:3c:f9:cc:20:70:40:9d:ca:43:23:cd:81:c2:36:63:d2:
         d6:12:4c:58:61:3b:b0:3e:0b:d1:b7:a9:2e:5f:6f:75:0b:84:
         37:21:c6:e7:73:c0:ea:ad:e8:15:9d:67:6b:59:07:9e:2e:f1:
         c4:ba:5b:fc:56:84:a0:ee:ca:03:63:03:49:2f:43:16:ff:0e:
         f6:18:da:ea:b8:e7:38:ea:b2:53:e5:ec:91:ba:97:bb:9a:ae:
         ae:ff:66:69:57:d8:ca:95:64:8b:ff:56:c4:64:89:8c:a1:07:
         fe:d5:0e:33:52:3e:9d:27:8c:43:64:e1:42:0a:de:af:92:45:
         39:2d:5a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 02:01:41 2026 by rpki-client