Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft
File:                     295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft (raw, json)
Hash identifier:          euCCJJS5mWLah07lzxEqLZRrychFM+RAzdYiWOyDcF8=
Subject key identifier:   66:78:58:44:42:A6:E0:66:9A:59:A8:4C:4D:E3:F2:5E:42:F1:B7:9F
Authority key identifier: 29:5B:60:BB:0C:BB:4A:53:D9:54:5B:C2:0B:77:4F:FA:03:6B:4A:46
Certificate issuer:       /CN=295b60bb0cbb4a53d9545bc20b774ffa036b4a46
Certificate serial:       423AC3644302918F2D0FD17808FD2F1CA9224DC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft
Manifest number:          F6
Signing time:             Wed 12 Aug 2026 16:18:04 +0000
Manifest this update:     Wed 12 Aug 2026 16:13:04 +0000
Manifest next update:     Thu 13 Aug 2026 16:24:04 +0000
Files and hashes:         1: 326130313a6234303a3a2f32392d3438203d3e203136353039.roa (hash: CivQf/u/Gk+LE+nokddTRzH9kTLqet4Y/E+g0q0KfIo=)
                          2: 295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl (hash: ooTYQkHsd71WyLX8i2TOrE1XiXgQiRFeje6mBvKwrGs=)
                          3: 326130313a6234303a3a2f32392d3438203d3e203438373030.roa (hash: zprKAfMxuhh44vBmZdJyS4oUsSHm80ESOd6bFepuvfw=)
                          4: AS48700.asa (hash: vc5Bz0waDsfQ0bs/Gu6racwgW1gSmnJnpEJHohHaeIg=)
                          5: 326130313a6234303a3a2f32392d3438203d3e203134363138.roa (hash: aQ7Zs1GXD2YhsOFRwSIq/T9v5bNh9rH0xnn29aQh438=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:3a:c3:64:43:02:91:8f:2d:0f:d1:78:08:fd:2f:1c:a9:22:4d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295b60bb0cbb4a53d9545bc20b774ffa036b4a46
        Validity
            Not Before: Aug 12 16:13:04 2026 GMT
            Not After : Aug 13 16:24:04 2026 GMT
        Subject: CN=6678584442A6E0669A59A84C4DE3F25E42F1B79F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f2:fe:3c:56:cd:89:23:9d:3d:bb:8f:f0:34:
                    44:ac:16:55:74:4c:cc:3a:87:0c:e2:53:70:a8:11:
                    45:48:2e:cc:f1:26:9a:5f:32:00:d2:87:84:56:20:
                    fc:b6:0a:13:3c:30:0b:08:81:fc:3d:7b:a0:ff:10:
                    93:78:c1:19:03:09:64:db:02:cd:40:4d:ce:4c:9c:
                    f4:65:9a:85:bd:0c:08:d3:7d:0a:f2:18:da:97:88:
                    fe:ce:9d:14:01:36:05:c6:a8:2f:ac:99:05:1b:92:
                    d5:78:bc:41:f7:29:90:fc:35:23:b3:e0:69:d3:6d:
                    91:b3:d9:a2:27:86:51:9d:d5:dc:42:c4:9b:ef:2b:
                    a0:d7:3c:44:40:51:d4:ee:9a:1a:0b:f7:2f:06:cc:
                    4c:42:54:db:c6:d8:4f:f2:2a:e5:98:bc:0e:bc:b8:
                    7e:1d:83:4c:50:0f:29:e0:14:87:e1:c4:59:71:1c:
                    50:96:3e:a1:9a:52:06:be:55:d1:67:97:48:dd:79:
                    16:60:1c:19:de:56:5a:ee:be:c3:2f:35:88:f8:99:
                    aa:be:30:cd:fa:58:e0:59:6c:0b:0c:30:e1:a4:14:
                    a7:52:06:35:39:df:b0:01:bf:58:79:36:67:f2:9a:
                    b4:b3:f9:2e:96:9c:7f:eb:a8:2c:3a:d0:5a:71:ef:
                    d1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:78:58:44:42:A6:E0:66:9A:59:A8:4C:4D:E3:F2:5E:42:F1:B7:9F
            X509v3 Authority Key Identifier:
                keyid:29:5B:60:BB:0C:BB:4A:53:D9:54:5B:C2:0B:77:4F:FA:03:6B:4A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:9b:90:46:60:4a:a8:06:e5:06:f8:cd:7d:f3:1f:26:43:86:
         21:74:ce:48:6b:3f:1d:df:a5:86:5e:03:4b:26:ac:12:5e:2e:
         5a:45:1b:0d:ef:90:ef:aa:d0:30:f0:b2:9d:1a:b0:4e:3e:77:
         1a:11:b7:f2:06:0a:3d:68:f8:66:ba:48:2c:aa:e0:08:7c:dd:
         ad:13:aa:5a:09:8f:62:c9:33:32:86:be:66:f1:62:f0:be:1a:
         1f:80:22:c4:c0:da:c8:c1:b9:ea:e9:1d:2c:7b:1a:3d:9d:94:
         e5:13:dc:80:8a:d8:d3:bf:6e:05:7f:e0:26:41:fc:8e:6f:5c:
         1d:62:3d:df:51:f0:78:20:82:76:d9:5b:6c:70:f9:73:de:b5:
         e7:2a:a7:6d:84:f6:a5:5e:ac:43:da:57:e6:3e:10:7f:28:0f:
         51:fc:cd:0b:82:fa:24:2e:6d:98:d4:2a:49:9d:ae:8e:ef:df:
         ce:d7:c7:5d:23:10:46:7a:9f:60:b5:57:28:30:2a:ad:08:39:
         d6:5f:01:ed:ef:20:13:ca:7f:2f:fa:c5:d9:7f:a3:57:66:4b:
         bd:aa:d2:8d:ce:df:04:8f:34:ea:b7:72:70:50:59:ce:94:e9:
         70:71:55:c3:3e:2c:b4:d1:e9:d7:4e:b3:95:43:54:59:18:6f:
         13:cd:1d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:16:31 2026 by rpki-client