Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
File:                     B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft (raw, json)
Hash identifier:          h0PNshFlihUqEmnrxLNPg42zz+YNNkofZ27qkZZrVzA=
Subject key identifier:   D7:EE:D7:C7:3F:C0:66:AD:01:C1:01:87:82:70:75:DA:D1:06:A0:45
Authority key identifier: B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C
Certificate issuer:       /CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C
Certificate serial:       79B319A4022C6A8D3867A6A3B78AAEE60B675D87
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
Manifest number:          024B
Signing time:             Wed 21 Oct 2026 21:09:31 +0000
Manifest this update:     Wed 21 Oct 2026 21:04:31 +0000
Manifest next update:     Thu 22 Oct 2026 22:51:31 +0000
Files and hashes:         1: 326130623a396534373a666666663a3a2f34382d3438203d3e20323132333936.roa (hash: e3h2ZTUNZXjv98ArysnYSYWhaEkUBmjS0VqOuj8+VAI=)
                          2: 326130623a396534323a3a2f34342d3434203d3e20323134343531.roa (hash: Zck6J2syHDIk/NrGxsNjciGhnmYGMCo7e0kQNyx+lQM=)
                          3: 326130623a396534303a3a2f33312d3332203d3e20323134343531.roa (hash: Kwvgoy8rYmD0xpV60BQdFB5n1PMXF0SutBXK7a1aRaY=)
                          4: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl (hash: qsBvkde3cSwvrOpP4JRoz0fQ5CNH+H7Nm3NR3j2Ds0s=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 18:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b3:19:a4:02:2c:6a:8d:38:67:a6:a3:b7:8a:ae:e6:0b:67:5d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C
        Validity
            Not Before: Oct 21 21:04:31 2026 GMT
            Not After : Oct 22 22:51:31 2026 GMT
        Subject: CN=D7EED7C73FC066AD01C10187827075DAD106A045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:37:c3:cd:0c:5a:e1:53:3a:5f:74:c2:85:47:
                    fe:54:21:32:ae:15:a4:66:0e:32:4f:33:9f:e8:76:
                    eb:86:7d:14:e2:cd:b0:74:a1:de:87:ff:64:8a:c4:
                    f8:e1:89:c4:ca:06:d1:9e:a8:24:cc:81:6b:6a:67:
                    4d:33:81:f0:a6:51:97:ae:17:e1:54:ac:12:01:12:
                    7e:98:5b:cd:0a:50:41:ad:8f:03:e9:06:e0:14:98:
                    60:d8:67:b7:69:c9:10:76:5c:5a:15:19:5a:52:fb:
                    04:91:73:29:62:fc:ae:49:0b:dc:f3:86:33:11:e0:
                    7a:1e:af:1d:76:25:b5:3c:df:f9:64:e4:03:f3:9f:
                    a5:de:73:99:6c:e3:4a:a5:64:2f:fb:fc:f1:c1:d4:
                    fe:69:39:69:30:38:cb:f0:d5:53:5f:13:54:e7:ec:
                    9e:33:59:61:e6:75:b1:6c:a2:ee:77:46:36:52:03:
                    8a:26:63:8d:95:a7:5f:a0:70:d0:ae:63:f1:92:2f:
                    28:72:f0:dc:6e:5c:7c:c6:c5:6b:d0:a6:af:29:d4:
                    61:58:cf:e6:ca:00:3d:1e:49:d0:05:b1:f4:89:3b:
                    7f:8f:97:78:73:40:57:ed:1f:dc:bf:86:d2:6e:3e:
                    32:51:e5:c3:bd:e4:64:28:b5:7b:26:cf:df:34:c2:
                    e0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EE:D7:C7:3F:C0:66:AD:01:C1:01:87:82:70:75:DA:D1:06:A0:45
            X509v3 Authority Key Identifier:
                keyid:B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:4b:22:3e:b4:29:07:07:e4:a6:d9:28:66:b3:7f:1f:5b:e8:
         94:06:98:7d:87:3c:1e:3f:38:6f:96:8f:c8:58:c3:49:c3:1a:
         03:88:57:0d:df:0f:c9:ce:15:2f:6e:a0:b5:a8:46:2b:e5:4b:
         de:53:a6:0f:16:a5:78:80:13:93:54:7e:d6:cd:46:3f:42:92:
         2a:a6:3b:2e:dd:91:3d:e0:30:cf:a4:7a:85:e1:fe:3e:ec:77:
         fc:ce:fd:93:e1:0e:6c:65:33:ff:af:3a:fb:d9:e4:4a:1c:88:
         ca:fa:fa:f0:f5:10:35:be:5c:8e:11:94:48:fe:1e:44:41:a7:
         e1:72:31:aa:5e:24:0d:16:5f:fd:3d:4a:95:75:7f:77:07:e8:
         63:da:ef:09:e3:d2:ec:c2:6f:71:a4:a5:e9:55:97:82:c4:dc:
         5e:f5:f9:6c:60:85:44:91:e2:3a:3e:ed:6b:cb:e3:a6:b2:94:
         40:16:29:82:4a:cf:b6:37:e3:cb:8a:de:ab:ff:ba:ff:8e:ef:
         a4:7e:b1:f1:b1:31:08:c0:4a:ff:c9:15:7d:3b:54:19:3b:80:
         15:ee:3b:df:bc:1b:46:1e:89:45:9f:88:db:b2:38:83:fd:15:
         8c:90:65:a5:0a:62:44:c0:3e:8f:1c:20:8c:be:91:c8:c7:d4:
         cf:d1:67:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 02:07:42 2026 by rpki-client