Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
File:                     47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json)
Hash identifier:          J1Twfc4Yz4WCw/YiqjHtOMVT9Z1xJMqL72KvqfvLewU=
Subject key identifier:   88:33:8B:47:AA:06:6B:B8:23:9F:61:52:1E:D2:92:05:9A:26:40:AE
Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41
Certificate issuer:       /CN=47E9555355C6B007AACD5D45BF41E3383E991641
Certificate serial:       6EC5B418455930D62DD90D74F3493008908FDBBF
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
Manifest number:          0559
Signing time:             Tue 24 Mar 2026 10:46:16 +0000
Manifest this update:     Tue 24 Mar 2026 10:41:16 +0000
Manifest next update:     Wed 25 Mar 2026 13:06:16 +0000
Files and hashes:         1: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: joAEPn9ggJnOJibwtnJz8w4Tu9b024lTJQ13MXp3eQ4=)
                          2: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: 7db74RjEv4lOAbXa5meh9EatJZMBDVPs17aHa0Qh8fQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
                          rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
                          rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
                          rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 25 Mar 2026 08:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c5:b4:18:45:59:30:d6:2d:d9:0d:74:f3:49:30:08:90:8f:db:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641
        Validity
            Not Before: Mar 24 10:41:16 2026 GMT
            Not After : Mar 25 13:06:16 2026 GMT
        Subject: CN=88338B47AA066BB8239F61521ED292059A2640AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:11:b6:ff:e7:8d:6c:08:15:8b:df:b8:45:c7:
                    d1:e9:f1:8a:d4:68:61:30:e8:e0:96:fc:61:12:22:
                    79:2a:c4:53:68:eb:1c:f4:27:ae:83:01:ac:c2:0d:
                    97:97:38:99:f0:f7:b8:4a:ff:65:25:7c:85:d2:46:
                    0c:ba:a8:82:5d:7f:0d:db:16:8b:f7:9d:45:02:52:
                    23:f3:1c:09:97:c2:a5:a6:17:0b:f0:36:1f:ce:59:
                    57:c5:ac:d6:82:1f:0c:77:b2:b2:47:74:db:63:ce:
                    91:a5:2c:4a:bf:5d:c8:5f:d4:b4:ef:3a:da:60:42:
                    c8:05:8e:3b:0f:f7:62:63:53:bc:05:65:03:a9:f6:
                    a0:2d:78:42:0c:02:f0:80:48:ce:32:a7:3d:3d:b7:
                    16:02:b6:3b:55:64:24:7e:a2:46:9b:fe:16:10:84:
                    c2:b7:f8:e1:5c:6f:16:35:30:c5:83:e4:dc:ad:d7:
                    40:b8:f4:fc:ea:c7:5c:31:29:d8:4c:3e:76:7f:09:
                    5f:d1:f5:3c:e9:48:2e:d0:f8:65:b2:7b:9b:37:13:
                    c6:ad:a8:0f:ef:aa:a2:41:d0:77:ee:fd:5b:2a:bf:
                    9c:ac:66:1d:dd:8e:53:46:5a:3b:36:dd:c9:38:23:
                    98:50:fb:74:bf:4b:64:b4:60:ab:3c:51:fa:35:d1:
                    f9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:33:8B:47:AA:06:6B:B8:23:9F:61:52:1E:D2:92:05:9A:26:40:AE
            X509v3 Authority Key Identifier:
                keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ee:7b:d2:a8:c6:46:2e:70:d3:b9:5f:0e:f3:e6:f3:3c:15:
         a7:0b:24:b8:97:3a:ff:2b:1b:56:58:9d:c8:b0:1f:49:06:c5:
         9a:03:cd:e7:f0:82:05:ba:cc:29:2f:56:19:ea:67:1a:5e:da:
         4c:22:82:9a:e9:93:93:79:0e:ae:60:20:24:66:0e:23:0b:5b:
         fb:a7:69:0b:9a:d3:c7:e1:b2:c9:a3:68:91:11:7c:37:02:19:
         4c:8e:ad:89:f9:a1:60:17:d4:61:d1:bb:31:f2:1b:f3:ba:c2:
         13:20:a7:d6:53:8f:59:2f:d3:52:68:fb:c4:63:e7:48:ce:95:
         33:e5:bd:c9:29:5a:2c:ae:7c:24:c1:6b:42:a3:43:fd:74:09:
         3d:48:fd:a8:5f:56:1c:09:56:a7:e4:c5:81:e0:53:76:df:3b:
         19:78:ca:a4:69:99:9e:23:45:27:64:15:0f:9f:54:2e:7e:4c:
         f9:75:d3:ab:9f:b6:c9:61:8c:02:c2:0c:14:e3:33:c6:c3:5d:
         27:fb:8a:12:24:6d:9a:a0:4d:03:03:9d:de:0c:2a:0e:86:a0:
         a4:d4:0e:ca:2c:32:e8:f3:43:4a:f2:f9:22:15:e4:55:c4:0f:
         54:dd:51:52:f6:b3:b1:89:7d:d7:db:2a:8e:70:b0:fa:c2:37:
         3a:e3:74:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 05:02:30 2026 by rpki-client