Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
File:                     1E74494683D8D2A4E029AAD4573928D2A55FA411.mft (raw, json)
Hash identifier:          GO2ovOV0K74HF+chfaGUcr9cDD5NyytTNsj3DG4WW4w=
Subject key identifier:   12:3D:AF:28:6A:30:D7:03:A2:72:22:C6:B1:5B:D2:67:C3:BA:46:ED
Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11
Certificate issuer:       /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411
Certificate serial:       2E62243E403B01E82C5C040713DFFD28E0FB3DEE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
Manifest number:          AF
Signing time:             Mon 17 Aug 2026 06:26:55 +0000
Manifest this update:     Mon 17 Aug 2026 06:21:55 +0000
Manifest next update:     Tue 18 Aug 2026 07:39:55 +0000
Files and hashes:         1: 09FD34FF6836F9DD01AC7FDF357840C752BB91A5.cer (hash: zWi5rFdGQYwJBXDhW9PKUkb3++OgSqlJ6YAaEWudTiw=)
                          2: 326131333a633863343a313030303a3a2f33362d3438203d3e20323134373632.roa (hash: JofSJio1ZSiKcgoMirJLUr+PbzVMXTI571DpwJP8INM=)
                          3: 326131333a633863343a666530303a3a2f34302d313238203d3e20323138393935.roa (hash: hztUOv3Nvb2GeqYrkrClKfNlsIU3N2NuQsxYmiLUBO0=)
                          4: 1E74494683D8D2A4E029AAD4573928D2A55FA411.crl (hash: KkVMEVHbmVwGRusTkLR6Ft+OfpxCO5BgSz+QoydOGw0=)
                          5: 326131333a633863343a663939303a3a2f34382d313238203d3e20323138393931.roa (hash: k853DvbN3iiS1Slm5LVndazbumM9csvV2y0CQquqjmY=)
                          6: 326131333a633863343a3a2f33362d3438203d3e20323035393431.roa (hash: MHTbuB6+g+ci+W3xhK1wq8aUoLgunvms/wXlaRYr9A4=)
                          7: 326131333a633863343a666630303a3a2f34302d313238203d3e20323134373632.roa (hash: eFBa4OwWuclMBCgU5m433/KeC4fb2SOvKkGDpf2qYGU=)
                          8: 300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer (hash: WUexCqCUAvgyF/Iv7z1a1aWJ8dcJnS0fgUUz16Pzr18=)
                          9: 326131333a633863343a663530303a3a2f34302d313238203d3e20323035393431.roa (hash: PxxBGQ7SipAzWoOzhhkRsumojkCUT+Er192+snUK4gs=)
                          10: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer (hash: qnGfja2gp1Dt5eiLazr0XeABKN1iXqNbT2nfPewlL3k=)
                          11: F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer (hash: QeIsnFtF/EdZr3eDL8K0OYPSz/bi5xfqK6RvjhvtAeE=)
                          12: 326131333a633863343a663130303a3a2f34302d313238203d3e20323134323035.roa (hash: llWttPtFxzSvHdRpuA4UR+5ss5mF3yPJlws0jwD0FEM=)
                          13: 326131333a633863343a666630303a3a2f34302d313238203d3e20323135393235.roa (hash: DCRzh/+o5rf4TeU7EAqLSelJkyKiofWcnaurItVLmfU=)
                          14: 326131333a633863343a3a2f33322d3332203d3e2030.roa (hash: gSZ+pcHkiMWO1K79/Mncci1lQFYMKmKkgDaeUtpna0Y=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Aug 2026 07:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:62:24:3e:40:3b:01:e8:2c:5c:04:07:13:df:fd:28:e0:fb:3d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411
        Validity
            Not Before: Aug 17 06:21:55 2026 GMT
            Not After : Aug 18 07:39:55 2026 GMT
        Subject: CN=123DAF286A30D703A27222C6B15BD267C3BA46ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9d:b4:84:8f:c6:d9:ae:86:c2:55:94:d6:e9:
                    d1:27:78:0e:51:3a:9a:57:e1:c6:98:c0:2c:1e:80:
                    61:90:53:ff:4d:63:24:01:77:59:ee:99:55:01:a6:
                    19:ef:9d:b1:68:ad:bc:c1:34:f7:b2:30:c6:af:37:
                    ea:0e:89:b3:f2:eb:76:aa:24:01:0f:4d:4f:c1:e7:
                    60:9b:60:a9:8a:b6:2b:12:2b:8d:e7:03:c8:bc:93:
                    7b:af:9d:b0:5e:65:83:d1:af:5b:b0:82:e1:a4:39:
                    54:36:94:2d:11:29:b6:07:3c:e8:76:dc:3b:c5:85:
                    75:40:9d:67:ca:72:32:e3:b8:ad:40:17:22:21:19:
                    f2:01:82:c6:c7:75:4d:b5:96:80:fd:a2:04:48:fc:
                    c5:49:a9:21:b7:ad:62:7c:96:d8:9b:77:86:3c:45:
                    ca:9f:17:19:f5:ea:3a:9e:c2:1e:e4:09:24:df:64:
                    75:08:5c:af:7e:1c:87:1a:67:f7:45:28:63:2a:5c:
                    48:f6:e3:7b:62:b2:36:e4:07:2a:ef:14:e1:14:d6:
                    9a:e1:c6:bd:2a:81:72:a0:e0:45:bd:40:af:09:e8:
                    98:63:0e:da:48:c9:cb:ab:9c:70:6d:12:32:3c:f4:
                    4f:62:d7:6d:7a:eb:b5:1a:b7:95:01:38:d4:17:7c:
                    24:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3D:AF:28:6A:30:D7:03:A2:72:22:C6:B1:5B:D2:67:C3:BA:46:ED
            X509v3 Authority Key Identifier:
                keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:64:f9:7b:59:e2:dc:ca:89:32:56:cb:7f:c1:e9:16:63:b9:
         80:49:70:e5:96:cd:e5:09:4f:72:b9:7f:c8:fa:ec:91:e5:39:
         8d:c5:d7:19:f4:1a:8e:b3:75:75:11:d5:94:67:1a:01:23:fe:
         dd:97:b2:4a:a3:42:26:dd:f3:83:04:cb:d9:f9:f7:57:fe:5b:
         88:e4:48:eb:00:1b:f7:c9:c4:5b:cf:da:1b:6f:6a:a9:9f:ee:
         ac:da:19:ad:6f:c2:af:22:78:9b:4f:32:6e:19:28:2e:3d:91:
         90:bf:07:3e:4e:c1:3f:d0:06:10:39:46:85:8d:4c:d9:13:63:
         70:ee:fd:67:b8:58:07:3d:6c:0e:d7:33:fd:90:dd:a4:cc:b5:
         40:a2:e2:07:8c:6f:15:c3:53:e8:f2:93:51:15:5d:0d:3a:ba:
         c2:66:73:e9:8b:8f:ee:51:32:e2:9c:0e:d4:d6:38:38:ed:37:
         75:94:20:b6:02:51:89:8e:1c:e6:7c:34:90:87:bb:ed:52:96:
         d1:4a:81:14:ea:3d:ee:66:5e:f9:f7:98:09:6c:ab:19:01:1b:
         77:ee:88:7e:ee:03:62:12:82:06:64:f7:1b:1e:f5:de:6e:e5:
         c4:f4:d9:14:9c:2d:99:1c:e6:f9:e6:fb:d9:3d:47:93:90:b0:
         db:22:fb:7f
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIULmIkPkA7AegsXAQHE9/9KOD7Pe4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJB
NTVGQTQxMTAeFw0yNjA4MTcwNjIxNTVaFw0yNjA4MTgwNzM5NTVaMDMxMTAvBgNV
BAMTKDEyM0RBRjI4NkEzMEQ3MDNBMjcyMjJDNkIxNUJEMjY3QzNCQTQ2RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNnbSEj8bZrobCVZTW6dEneA5R
OppX4caYwCwegGGQU/9NYyQBd1numVUBphnvnbForbzBNPeyMMavN+oOibPy63aq
JAEPTU/B52CbYKmKtisSK43nA8i8k3uvnbBeZYPRr1uwguGkOVQ2lC0RKbYHPOh2
3DvFhXVAnWfKcjLjuK1AFyIhGfIBgsbHdU21loD9ogRI/MVJqSG3rWJ8ltibd4Y8
RcqfFxn16jqewh7kCSTfZHUIXK9+HIcaZ/dFKGMqXEj243tisjbkByrvFOEU1prh
xr0qgXKg4EW9QK8J6JhjDtpIycurnHBtEjI89E9i121667Uat5UBONQXfCSBAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUEj2vKGow1wOiciLGsVvSZ8O6Ru0wHwYDVR0j
BBgwFoAUHnRJRoPY0qTgKarUVzko0qVfpBEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDAyZjhlZTYtYWJlNy00YWU4LTk2NGMtNzg4YmI5OGM5
NzVjLzEvMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJBNTVGQTQxMS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4
OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC8xRTc0NDk0NjgzRDhEMkE0RTAyOUFBRDQ1
NzM5MjhEMkE1NUZBNDExLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzAwMmY4ZWU2LWFiZTctNGFlOC05NjRjLTc4OGJiOThjOTc1Yy8xLzFFNzQ0OTQ2
ODNEOEQyQTRFMDI5QUFENDU3MzkyOEQyQTU1RkE0MTEubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCeZPl7
WeLcyokyVst/wekWY7mASXDlls3lCU9yuX/I+uyR5TmNxdcZ9BqOs3V1EdWUZxoB
I/7dl7JKo0Im3fODBMvZ+fdX/luI5EjrABv3ycRbz9obb2qpn+6s2hmtb8KvInib
TzJuGSguPZGQvwc+TsE/0AYQOUaFjUzZE2Nw7v1nuFgHPWwO1zP9kN2kzLVAouIH
jG8Vw1Po8pNRFV0NOrrCZnPpi4/uUTLinA7U1jg47Td1lCC2AlGJjhzmfDSQh7vt
UpbRSoEU6j3uZl7595gJbKsZARt37oh+7gNiEoIGZPcbHvXebuXE9NkUnC2ZHOb5
5vvZPUeTkLDbIvt/
-----END CERTIFICATE-----
Generated at Tue Aug 18 01:09:17 2026 by rpki-client