Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
File:                     735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft (raw, json)
Hash identifier:          aIT32th3OAUtXPzIWfXpKuBjOWCE9Z0jcr4AurhE82U=
Subject key identifier:   94:CF:8A:8C:0F:A3:61:C2:80:E4:05:3B:EB:72:B3:5D:ED:B0:D5:8B
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Certificate issuer:       /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial:       6DF41F0DBCF30A4739D69CCF7315DF2BE17CDEFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
Manifest number:          074E
Signing time:             Sat 17 Oct 2026 18:14:18 +0000
Manifest this update:     Sat 17 Oct 2026 18:09:18 +0000
Manifest next update:     Sun 18 Oct 2026 21:42:18 +0000
Files and hashes:         1: AS22773.roa (hash: U1q0TybEYeXgTw6uKd6kOWdUCeNkhTbXbTRfVFUjPhs=)
                          2: AS6079.roa (hash: gTDz0TEYP3aap0xirZbWorSnTNf9KuIbcZTKrMQuvHE=)
                          3: AS42689.roa (hash: FHBh2AdRRmtfHcqleHaVKWLJpNMTz9vflaO0+qUbqJs=)
                          4: 735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl (hash: tkfbHTrpkghDuPeiW392nfA0TMlnmQkN1A92vekrXDA=)
                          5: AS48961.roa (hash: mjIwrDYeEebpa2e3KQ45oikrMsfasnq89j/xn5xuGzs=)
                          6: AS7029.roa (hash: I/vfl4ThG6Zr7/3vcXeSasklRzNkSuliccyvsw1aHGM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 21:42:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f4:1f:0d:bc:f3:0a:47:39:d6:9c:cf:73:15:df:2b:e1:7c:de:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
        Validity
            Not Before: Oct 17 18:09:18 2026 GMT
            Not After : Oct 18 21:42:18 2026 GMT
        Subject: CN=94CF8A8C0FA361C280E4053BEB72B35DEDB0D58B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:88:7a:60:2c:bd:d9:df:6c:df:81:8e:de:54:
                    cd:52:61:cc:58:09:0f:ac:1f:31:e5:90:27:b4:f1:
                    92:f5:de:f8:24:e0:11:a5:a4:82:7e:c4:1d:68:fa:
                    91:13:fd:66:41:7b:d3:2f:f8:d6:20:ed:69:6f:b6:
                    f2:18:8a:8c:89:23:c0:a6:a7:b3:b3:f5:dd:9c:67:
                    af:6d:19:07:ef:34:a5:f0:f8:13:96:b3:b6:5b:e3:
                    f7:ac:bd:58:d0:f9:34:f7:a3:ab:4d:55:46:84:2a:
                    0c:7f:35:c6:89:e2:bd:22:b7:6c:b2:88:8d:80:85:
                    e2:c6:0f:03:2c:75:30:05:0c:02:2d:73:c4:37:d5:
                    bc:5a:8e:cb:4a:14:d2:f9:3d:30:d5:97:a7:31:ba:
                    0a:60:f0:85:13:16:e4:c5:e6:3e:82:da:92:5b:1f:
                    dc:be:24:84:24:4a:ae:03:e6:bf:88:7d:8a:52:87:
                    f3:6d:4d:70:f2:9f:16:87:52:a1:15:cf:81:53:b6:
                    b5:5a:6c:60:a2:b6:0f:b2:f0:b4:7d:15:fc:23:39:
                    7b:11:11:01:ce:23:ac:65:5f:13:2c:59:67:0d:30:
                    1d:29:6b:44:62:fc:be:73:27:39:a4:3b:42:a3:1f:
                    73:72:b7:28:0e:eb:75:78:f7:ce:a5:0d:95:e9:a7:
                    ab:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CF:8A:8C:0F:A3:61:C2:80:E4:05:3B:EB:72:B3:5D:ED:B0:D5:8B
            X509v3 Authority Key Identifier:
                keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:38:ef:d3:75:c9:72:67:c8:96:c7:01:57:78:48:74:ae:6d:
         91:00:86:49:bc:e9:5f:56:d4:d6:2c:46:93:6c:74:62:6e:26:
         d6:2b:f3:7b:db:14:b9:05:49:1e:e1:7c:07:96:91:4d:78:16:
         66:3b:14:f8:bf:55:c4:b9:59:fb:dc:7f:c0:a1:e1:50:d7:fa:
         9c:05:ca:30:4e:55:c9:c0:e0:3b:cb:1f:36:1d:be:cb:d5:69:
         63:f0:bc:2e:26:33:db:49:03:c4:74:bc:18:87:0b:a3:dd:c6:
         b6:48:4e:65:01:1a:c2:5a:08:e3:aa:84:eb:55:c2:50:18:35:
         c3:d9:0c:a8:cb:93:6e:28:66:2b:0f:86:d4:e7:3c:25:31:25:
         57:b6:3d:96:7a:7f:6b:52:93:9a:e4:3b:09:7b:75:80:de:f4:
         01:a0:34:dd:2c:e7:ef:1b:b2:44:9f:3e:a5:76:e1:94:0b:d4:
         6f:de:70:7c:db:47:be:30:73:d5:8c:dd:fd:b9:a7:e3:be:53:
         5b:c4:55:01:8d:47:62:36:5c:19:b1:9e:38:d8:19:aa:95:3c:
         ed:5d:7d:6d:97:c9:d2:2c:44:f9:a1:cd:90:d0:ce:05:aa:2e:
         34:05:e6:9c:01:15:be:fc:2c:33:02:bf:0b:d8:1d:c2:4f:af:
         db:cd:ce:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:08:45 2026 by rpki-client