Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
File:                     20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json)
Hash identifier:          KSHFfbRqCUTbk74Cld9vdwkEQctRgpQ1di9U1xNAqlM=
Subject key identifier:   53:FB:B7:C2:28:85:8E:77:56:56:C0:1C:6F:9F:F7:5D:F3:FC:4F:D0
Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6
Certificate issuer:       /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
Certificate serial:       2F0C52F619B6AC8214BDCC3F98A09F598E02A183
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
Manifest number:          06D3
Signing time:             Wed 30 Sep 2026 14:32:44 +0000
Manifest this update:     Wed 30 Sep 2026 14:27:44 +0000
Manifest next update:     Thu 01 Oct 2026 17:47:44 +0000
Files and hashes:         1: 326131343a316563313a313630303a3a2f34302d3430203d3e20323139353233.roa (hash: 9E1PsTjd11hXDLZSZeoJaNnT7ONzxHIoAoZBFV00R+U=)
                          2: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: 6P+R6wuEEP+euC2TgU6pJdRCRgvMs4VP4k8K/rgjYxU=)
                          3: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: 8VhdvV/ADl1dQyHcZOJm0iqoZEaI9FAWV7wRLCn1Kkc=)
                          4: 326131343a316563313a376233303a3a2f34342d3438203d3e20323134393036.roa (hash: YRMori7doYSmuYrHuDGxvFWUqZxa6EqhEvjhhQlS2vI=)
                          5: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: 7XqZ13Ef/+b1VNSXq2rgololpGJoJrZKisEm3FKehVE=)
                          6: 326131343a316563313a376231303a3a2f34342d3438203d3e20323135363636.roa (hash: O5hXxs076gE3Ctu2AmKUIcSxIccZcu0zLTOjhJ6fNNY=)
                          7: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: 5zFC0aBKrn16Glyaue2oFptFutD2x5iVGxip/IIewrc=)
                          8: 326131343a316563313a313030303a3a2f33362d3438203d3e20323131303636.roa (hash: VwMdcB7cjunOknijcMaBRHJjTJhyW3Liym/2KH9Cpo0=)
                          9: 326131343a316563303a3a2f33322d3332203d3e2030.roa (hash: l1LgH+twMvgdn7/1KBWGxkEdCOcMXQ/E9AMQuJ/4pWU=)
                          10: 326131343a316563313a376235303a3a2f34342d3438203d3e20323135363835.roa (hash: IzwkS06+TU6xlgmjKohwCnvrPjgEE+53/+TvwhGB5Kg=)
                          11: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: sTUGPnv3eoSPb2BPlYxjIGZdr7d0jAi+6V/tKvoWeCI=)
                          12: 326131343a316563313a313730303a3a2f34302d3430203d3e20323139353233.roa (hash: A8bwWH9/ybdeySNN01RK//BZzg4rKSE3B00g1VeCR5M=)
                          13: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: M7y4yNzKisPGrMDI6N/h2uK0LmUwgVtJCXB3eT1YcCs=)
                          14: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: wCpGpHKdqFN1DO1NvTXNItL3x3NUD8VGRqAFwBrJITc=)
                          15: 326131343a316563313a313030303a3a2f33362d3438203d3e20323135313336.roa (hash: Hy38nW7g7jg3g8NEUSSR9hX3QcE4UfBQyRuLYa5OQGw=)
                          16: 326131343a316563313a376234303a3a2f34342d3438203d3e20323139353339.roa (hash: lk2g+VMPJ2e0ffh4BXNf9T04tdPmSZpAFUml3dW+JwM=)
                          17: 326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa (hash: 5615Ny7sVmjEhhHlRGRDH3u/ySBnlb2mwndcttt3V9g=)
                          18: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: 0MGh72HtcBIx2dyROH4vCwTGrkjWjpybf+czr46U9xA=)
                          19: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: EOUQ1JZ1oz2xZOU8+mEukp9ybbKV7scsmw0lQsJAxX4=)
                          20: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: 3/JDrgPcwa3QkItCqhf73S0kH72VYqnJSSE72cvYDCQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 05:24:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0c:52:f6:19:b6:ac:82:14:bd:cc:3f:98:a0:9f:59:8e:02:a1:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
        Validity
            Not Before: Sep 30 14:27:44 2026 GMT
            Not After : Oct  1 17:47:44 2026 GMT
        Subject: CN=53FBB7C228858E775656C01C6F9FF75DF3FC4FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:47:cb:e5:7c:23:c2:d7:f3:07:dd:02:0f:4e:
                    e5:0a:67:de:64:95:ed:29:ce:88:39:40:36:21:ce:
                    7a:69:76:d1:09:f2:cd:b2:0f:69:3e:f5:01:83:31:
                    c1:9b:cb:78:a8:b3:78:c3:62:69:a7:76:1e:4f:0e:
                    fa:a7:cd:8d:2d:46:f0:4d:b5:78:f1:f5:44:ac:70:
                    cc:63:88:36:ad:0d:77:22:d4:eb:b5:c8:2b:81:97:
                    fd:a8:3b:da:d6:a3:90:6b:d5:44:13:4e:c7:a4:e8:
                    16:d3:8a:4d:d9:e2:2d:cb:21:9d:f8:b8:bc:15:59:
                    a5:2e:bd:fa:18:90:52:66:74:3b:7b:37:70:29:b2:
                    42:d1:32:d7:3d:32:7a:06:98:28:b5:1f:ba:81:4a:
                    3a:0f:b4:56:39:6d:d4:ed:f5:7b:6e:a3:ed:be:2b:
                    31:1b:c2:f4:d3:59:46:6c:d3:2f:b5:7a:4f:91:e1:
                    28:1f:aa:ba:74:d1:d5:00:c5:5c:eb:2f:a8:2b:e2:
                    48:26:cd:b3:da:37:49:99:47:13:9f:f3:49:6d:f8:
                    e8:ad:ae:4c:28:a6:10:d5:d0:65:70:9a:0c:83:66:
                    8a:28:60:85:9c:93:47:db:0b:0a:f0:eb:6c:3f:00:
                    e5:1c:95:9a:5c:7a:5c:de:c8:a8:08:76:36:ab:78:
                    e1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FB:B7:C2:28:85:8E:77:56:56:C0:1C:6F:9F:F7:5D:F3:FC:4F:D0
            X509v3 Authority Key Identifier:
                keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c7:52:6a:a3:29:77:7c:16:61:d4:e2:66:89:89:f9:ab:5f:
         13:9e:d1:c5:ca:0d:bf:e5:20:76:71:59:b6:a0:9b:27:ca:8a:
         e3:d6:c2:9c:d0:b8:36:b8:bf:31:ed:2a:ac:cb:54:7d:84:8b:
         64:af:da:11:8b:4b:94:71:4b:01:ea:fd:83:f6:24:27:63:c2:
         11:d3:ab:35:96:4d:f8:a8:61:61:78:94:ff:50:45:e8:3d:f5:
         4e:f7:ac:1d:25:af:ff:bf:99:cf:16:56:11:f2:24:06:99:cf:
         c3:ee:f0:1b:d5:61:2f:88:51:f7:27:1e:57:1e:a5:6c:8c:9d:
         29:4b:3c:20:18:41:18:a2:10:7f:d4:ae:26:ce:44:d4:78:a9:
         2d:a4:0d:b9:32:d8:19:48:31:3b:60:ce:3c:8c:60:6d:5c:78:
         85:2a:85:99:37:a3:16:ca:c3:c5:4f:79:2c:69:54:13:8d:4e:
         c1:d5:78:2f:eb:fc:35:0b:c2:08:c4:31:9e:99:6d:ac:43:3f:
         e4:04:57:64:07:90:df:12:1a:41:fe:ee:cb:db:20:7d:f6:d0:
         c3:bc:f0:7d:43:8f:58:22:36:00:5e:03:0f:ed:2f:32:5c:55:
         19:c8:59:f3:ef:a8:4c:49:fd:87:f5:21:ce:af:c4:63:f5:0d:
         59:78:52:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 22:43:23 2026 by rpki-client