Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
File:                     F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json)
Hash identifier:          iHmUzNGGX/psxZhtbcgNPk1JC+MtUuSSCqZqdN0SigQ=
Subject key identifier:   4B:1C:C1:B9:D7:13:53:99:4E:B3:68:C4:0E:B8:2A:0A:FA:A1:D6:A0
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Certificate issuer:       /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial:       6D449093ACA62391E96268C4AB0F16A4E1ACBA28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
Manifest number:          02E7
Signing time:             Thu 11 Jun 2026 21:02:11 +0000
Manifest this update:     Thu 11 Jun 2026 20:57:11 +0000
Manifest next update:     Fri 12 Jun 2026 23:15:11 +0000
Files and hashes:         1: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: EDWUUKhrOtu3UMAllaeIt1ZR8GH4cYzCKJWn6QZal8k=)
                          2: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: foBoaKUPeMOXyMdgjQODzIp3g1QrOeZIcU4rmaW6W0Y=)
                          3: 3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa (hash: 6BGcWOFPHM6AYGamfRs+s+1VsWvQIYZ1oxiJHAvfJjg=)
                          4: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: V7It1R194wG2fKfWWlVdnzwed7rR2mdr0bGRnI9AxV4=)
                          5: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: 3WrBrAOV7SjPMl8BInuI3B0KtzI0JvDAuGMIMq+S9D8=)
                          6: 352e3232362e3138342e302f32342d3234203d3e20313534303439.roa (hash: H9hlRxAktpjIeT3DJhaD4nFRiEtoUGveoYH/KllFDKE=)
                          7: 3137382e3133322e3139352e302f32342d3234203d3e203232343237.roa (hash: QgvmMFuUdAiqbiI7YJRIvnHFDWl3E8S1w1OF0shY8uU=)
                          8: 3130392e3233342e3230392e302f32342d3234203d3e20323134313433.roa (hash: kfImODVrJ9DJfBDHIqmGZX0zk9Yq1KND0WLu9uNQXdY=)
                          9: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 18uWoZxLQSNFgorcRVHtw6ibhqjhBqTrkSvVXqFqM+Y=)
                          10: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: JpGLComndw26SOL3sJbPNJ7i8ZI6iCFmvappx1PnQqM=)
                          11: 352e3232362e3138372e302f32342d3234203d3e203331383938.roa (hash: kBpq1LEvwgTf4WM51jxpYydvFyszuazgeravGzXETJo=)
                          12: 3130392e3233342e3231322e302f32342d3234203d3e20313937353337.roa (hash: Lxa7aR1NsNsgX0Y0Me+SOrl9Sd6ODfPmrUUHY7uRFAg=)
                          13: 352e3232362e3138362e302f32342d3234203d3e203633303233.roa (hash: fPwJ5Sy/oz+WsKDVoSFpEWtFBdtjKpm8boIM97/qBQc=)
                          14: 3137382e3133322e3139332e302f32342d3234203d3e20313939313836.roa (hash: L1/VFBsoy+R+FOcnUQO8BUFLYVQcBVy/Jhpm44L+CLA=)
                          15: 3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa (hash: b3VPqm78d32upkRS45HOejDpaZzakM7RvUm8zYxxirQ=)
                          16: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: XdAkV6zbkuI1AZDLksTC73fyYmD1RaBTy+I3AGFuaxA=)
                          17: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: aweSXhd8mJw0T/P7jNxc4m1Vtbpxw0PK6PNEOA0lb/w=)
                          18: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: u4r7X/suBx+FzLFBQvOSNxzBhjg3wd1M6uflDgVU6DA=)
                          19: 352e3232362e3138392e302f32342d3234203d3e20323134343332.roa (hash: K8tasVMZPC8XCnfASfPGHgydq7gyNfePU1OJ6FJ9+yw=)
                          20: 3130392e3233342e3230392e302f32342d3234203d3e20333935373933.roa (hash: o3GE/oY8MCJAGEjtcPLWPVhOZbFRZAMmde/X42j4j+s=)
                          21: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: LFoy9nvq32ZdqPmOf9YSI6suXdwdYoUwrv21WI7Aj/Y=)
                          22: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: EK5hsG3gRXHAek4iXi8s4jAj1cLZXBGuH9nPrYMwZyI=)
                          23: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: xfnBgMCFpR8WsSmanu6oXx69cY6n9Ufmkf4lgYTGZHc=)
                          24: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: oMT5W+1A+v1pwvSVM/yS6Grj9zILUfxp/QJKJB7R/M8=)
                          25: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: uJEDxZm1l0+YcyFuGRmcGjOe89y2pFVQh//OE0DuSL8=)
                          26: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: DLQp9bKixJoY3b5MRNti/rwpsjDASy/ybqFdjhHZIbs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:44:90:93:ac:a6:23:91:e9:62:68:c4:ab:0f:16:a4:e1:ac:ba:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
        Validity
            Not Before: Jun 11 20:57:11 2026 GMT
            Not After : Jun 12 23:15:11 2026 GMT
        Subject: CN=4B1CC1B9D71353994EB368C40EB82A0AFAA1D6A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6b:1c:5a:22:a7:c3:1a:0d:80:62:53:58:f2:
                    98:be:57:43:3c:72:96:b7:5e:5d:08:98:dc:d8:6a:
                    e8:ce:3b:37:43:8c:2a:21:f5:5b:c8:c2:79:d1:49:
                    8d:29:c6:b3:b5:72:28:48:1e:70:31:20:62:ef:69:
                    eb:81:0f:de:27:14:02:4e:2b:e1:6e:77:b1:f4:b7:
                    d4:dd:b4:86:7e:ca:d2:8f:3f:d8:fe:23:18:0a:f0:
                    d4:a8:0b:3a:d3:85:0e:9d:5e:1d:ca:4a:f0:9a:6f:
                    ef:6c:32:4a:1a:d5:57:3a:e9:93:20:89:3f:7a:c3:
                    ed:7c:21:5c:63:6a:97:db:3f:44:38:48:72:81:42:
                    32:06:1c:bd:fb:79:3f:c7:c6:47:0d:6a:ab:18:19:
                    39:fc:45:89:71:86:14:13:e8:2c:de:82:1a:ff:50:
                    5b:5f:1d:e2:93:1d:76:6d:2e:a3:62:72:8e:4e:ee:
                    c1:d7:3c:cb:53:38:31:8a:df:55:a1:cc:83:2b:30:
                    74:4e:22:7e:54:a8:b2:8b:db:4d:14:2d:15:26:7b:
                    ba:83:08:f4:b5:a1:f1:e9:60:55:66:d8:aa:57:4c:
                    32:d7:a3:45:34:8e:bc:14:0c:bd:01:e9:9a:2a:5d:
                    a4:17:36:18:ad:aa:06:41:5a:19:c7:e8:04:90:c5:
                    74:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1C:C1:B9:D7:13:53:99:4E:B3:68:C4:0E:B8:2A:0A:FA:A1:D6:A0
            X509v3 Authority Key Identifier:
                keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:40:f1:da:ec:ce:cd:2b:8e:0e:3d:48:d3:7c:51:dc:7a:98:
         32:b7:7b:11:ba:55:c5:df:1d:fd:c5:ae:fe:71:48:93:df:06:
         e7:7f:44:f9:3e:8f:5a:1a:89:3f:71:0c:f8:77:ea:b3:b6:9d:
         82:b7:9d:8e:83:5e:2b:2f:f6:b3:d6:b8:16:59:28:48:1e:e6:
         24:26:b5:19:c6:b6:2b:20:03:71:21:31:db:3a:9b:74:92:c6:
         5f:ef:13:a7:d3:0d:10:8b:90:b7:ac:3a:78:b9:45:5d:af:f6:
         e5:69:a5:3d:f9:01:e9:68:d4:fa:c1:cd:3f:bb:74:86:b5:da:
         56:c8:d7:fd:9f:3d:f7:49:a4:c3:f3:4b:87:c9:10:c7:dc:34:
         ac:90:9d:f4:45:15:ca:db:c5:a3:06:a4:c9:d6:a0:3c:a5:cc:
         a4:e1:5c:95:ad:d4:a8:cd:e1:f8:16:e1:36:36:04:24:ed:49:
         14:9c:c0:50:c8:be:87:f5:00:45:7d:03:40:17:63:b5:fc:cd:
         9e:d5:7f:63:cc:da:11:ef:2f:f8:ec:22:c4:84:f4:89:ba:5f:
         56:1a:2b:c9:03:7e:14:84:02:41:11:af:91:04:8a:02:0e:1a:
         2b:b3:de:e7:5e:43:b8:99:c5:57:21:e0:e3:00:27:4e:ce:8e:
         03:c9:c9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:32:59 2026 by rpki-client