Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
File:                     B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft (raw, json)
Hash identifier:          JT+29O5bTBzJOTHhIuUfzXSokeblbPbsV5WFfR3Dsao=
Subject key identifier:   44:74:50:76:4D:26:00:F8:E8:97:9F:FD:5C:CF:B4:35:4E:18:7E:58
Authority key identifier: B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C
Certificate issuer:       /CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C
Certificate serial:       65CCD0A943D178B50588A1D09D01106BEF6D1418
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
Manifest number:          01D1
Signing time:             Tue 21 Jul 2026 03:29:27 +0000
Manifest this update:     Tue 21 Jul 2026 03:24:27 +0000
Manifest next update:     Wed 22 Jul 2026 04:41:27 +0000
Files and hashes:         1: 326130623a396534373a666666663a3a2f34382d3438203d3e20323132333936.roa (hash: e3h2ZTUNZXjv98ArysnYSYWhaEkUBmjS0VqOuj8+VAI=)
                          2: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl (hash: meXmrJsQ5ZyI+Apxd2aXCrhp5x/MRfR3NCsruEHjCfM=)
                          3: 326130623a396534303a3a2f33312d3332203d3e20323134343531.roa (hash: Kwvgoy8rYmD0xpV60BQdFB5n1PMXF0SutBXK7a1aRaY=)
                          4: 326130623a396534323a3a2f34342d3434203d3e20323134343531.roa (hash: Zck6J2syHDIk/NrGxsNjciGhnmYGMCo7e0kQNyx+lQM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 04:41:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:cc:d0:a9:43:d1:78:b5:05:88:a1:d0:9d:01:10:6b:ef:6d:14:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C
        Validity
            Not Before: Jul 21 03:24:27 2026 GMT
            Not After : Jul 22 04:41:27 2026 GMT
        Subject: CN=447450764D2600F8E8979FFD5CCFB4354E187E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:58:f5:7f:59:4f:a8:3c:6c:cc:7c:d7:bf:b5:
                    f1:c0:b3:e6:6f:1f:6f:22:78:2a:17:86:58:1b:26:
                    9b:56:98:56:31:7f:7d:5a:27:eb:33:d7:3d:98:da:
                    c3:1a:3b:e9:2f:b5:e0:a2:2d:a3:c7:d0:e3:13:1d:
                    79:3f:22:1f:68:7c:99:e1:83:51:51:9b:db:eb:52:
                    15:15:d9:19:3c:aa:9c:68:c9:86:b5:e9:b5:b3:99:
                    33:7e:d6:51:58:81:b0:b8:21:23:e4:61:1e:05:ed:
                    ec:2e:f3:92:7a:70:52:eb:59:27:cc:4b:33:d8:85:
                    d0:11:ac:17:6c:ed:67:41:95:ee:4c:7c:aa:8b:09:
                    52:66:b7:a9:30:09:b9:d6:96:96:be:45:e0:d0:cb:
                    3c:1d:09:05:f7:0c:72:7a:a5:6f:46:68:19:7d:8f:
                    9b:73:0f:52:f5:be:6c:c7:fa:22:3b:fe:a8:7b:37:
                    b5:b3:c0:ca:03:4d:01:1c:14:3f:b7:dc:b7:4a:a5:
                    4b:07:a1:49:86:9a:6f:62:47:e9:3f:4b:15:10:1b:
                    57:e4:1f:8c:06:4d:c5:8a:9a:22:1d:3d:4a:03:07:
                    f5:34:d0:50:53:8f:df:21:e3:45:91:91:f0:d0:d2:
                    a8:ac:de:dd:9f:07:53:93:49:86:ab:a8:7a:f6:2c:
                    8d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:74:50:76:4D:26:00:F8:E8:97:9F:FD:5C:CF:B4:35:4E:18:7E:58
            X509v3 Authority Key Identifier:
                keyid:B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:87:2c:c2:91:06:94:3e:b4:0e:b9:77:5d:1b:2c:9a:3a:72:
         96:49:86:6b:dc:e8:a6:b3:10:65:8f:68:36:b6:d6:36:bf:5c:
         ef:d5:f5:b4:ca:fb:73:87:99:fa:ef:15:6d:1e:86:0e:8c:41:
         b2:21:14:56:eb:ac:62:1a:b1:87:d2:a1:9f:19:52:49:af:b2:
         2c:23:b9:09:98:9a:e8:a3:e8:bd:68:0c:c3:e7:86:e4:45:cb:
         1a:25:05:48:6c:40:d6:fb:56:3e:01:44:ef:cb:02:cf:7d:22:
         2e:9f:20:c9:1d:ca:af:dc:1a:db:b6:cc:b6:02:1d:35:8b:d5:
         b4:26:be:02:53:e4:f6:cd:a2:45:e5:63:0a:c2:b9:61:c6:32:
         59:76:89:f3:41:7c:b2:8c:bc:58:5c:e2:ee:e0:30:19:5a:f1:
         ed:26:55:85:2d:54:cc:67:f7:6e:7c:3e:51:22:d3:62:5e:a6:
         9c:74:0f:74:9a:9b:1d:c1:cb:2c:99:a6:a7:03:dd:bb:c9:3b:
         d7:70:b5:5d:01:b6:8e:22:88:3b:e5:ad:ed:4c:1f:4e:b6:36:
         c0:59:51:5f:3b:8d:8b:81:a8:ec:b0:9c:e6:52:fa:9b:e3:cd:
         ed:4a:35:26:ec:6d:b7:81:fd:56:8c:b8:dc:74:f7:cc:70:a0:
         29:1e:37:e0
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUZczQqUPReLUFiKHQnQEQa+9tFBgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFD
Q0RFRTM1QzAeFw0yNjA3MjEwMzI0MjdaFw0yNjA3MjIwNDQxMjdaMDMxMTAvBgNV
BAMTKDQ0NzQ1MDc2NEQyNjAwRjhFODk3OUZGRDVDQ0ZCNDM1NEUxODdFNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfWPV/WU+oPGzMfNe/tfHAs+Zv
H28ieCoXhlgbJptWmFYxf31aJ+sz1z2Y2sMaO+kvteCiLaPH0OMTHXk/Ih9ofJnh
g1FRm9vrUhUV2Rk8qpxoyYa16bWzmTN+1lFYgbC4ISPkYR4F7ewu85J6cFLrWSfM
SzPYhdARrBds7WdBle5MfKqLCVJmt6kwCbnWlpa+ReDQyzwdCQX3DHJ6pW9GaBl9
j5tzD1L1vmzH+iI7/qh7N7WzwMoDTQEcFD+33LdKpUsHoUmGmm9iR+k/SxUQG1fk
H4wGTcWKmiIdPUoDB/U00FBTj98h40WRkfDQ0qis3t2fB1OTSYarqHr2LI3DAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQURHRQdk0mAPjol5/9XM+0NU4YflgwHwYDVR0j
BBgwFoAUtfXsXFZ/1Im+c5AoYuvugcze41wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdl
OTUwLzUvQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFDQ0RFRTM1Qy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFDQ0RF
RTM1Qy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMmNmOGJhNy1j
YjAyLTQxOGItYmUwNC00ZDlmM2EwN2U5NTAvNS9CNUY1RUM1QzU2N0ZENDg5QkU3
MzkwMjg2MkVCRUU4MUNDREVFMzVDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIcswpEGlD60Drl3XRss
mjpylkmGa9zoprMQZY9oNrbWNr9c79X1tMr7c4eZ+u8VbR6GDoxBsiEUVuusYhqx
h9KhnxlSSa+yLCO5CZia6KPovWgMw+eG5EXLGiUFSGxA1vtWPgFE78sCz30iLp8g
yR3Kr9wa27bMtgIdNYvVtCa+AlPk9s2iReVjCsK5YcYyWXaJ80F8soy8WFzi7uAw
GVrx7SZVhS1UzGf3bnw+USLTYl6mnHQPdJqbHcHLLJmmpwPdu8k713C1XQG2jiKI
O+Wt7UwfTrY2wFlRXzuNi4Go7LCc5lL6m+PN7Uo1Juxtt4H9Voy43HT3zHCgKR43
4A==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:19:48 2026 by rpki-client