Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
File:                     735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft (raw, json)
Hash identifier:          CMIqDFZF5KxuMpYDQ+66VFctTt7gbZNqZznfIRRon2k=
Subject key identifier:   E3:25:99:2C:77:34:5F:3C:0E:DB:C0:5E:36:F6:1D:B0:E4:61:F9:F2
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Certificate issuer:       /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial:       23A4F12548FD6382A29920F93264DBCECBD80B54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
Manifest number:          0517
Signing time:             Wed 04 Mar 2026 01:23:28 +0000
Manifest this update:     Wed 04 Mar 2026 01:18:28 +0000
Manifest next update:     Thu 05 Mar 2026 02:18:28 +0000
Files and hashes:         1: AS42689.roa (hash: bHiyF655ZS6fGo+HfxHRjIXpprp7OxJwDoiubXJgV6g=)
                          2: AS48961.roa (hash: 3cIbAXwf9Yl1EVegsCq9QH9D9FfXgLy3FkzfZ43rjN4=)
                          3: AS7029.roa (hash: 8PLTntWjTUT/j3wb4jf3whlNbIemwNkkni4M1Q4/mDw=)
                          4: 735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl (hash: owoqrlRYfB+uPA8pxJl5CIWZOZiunFjGyYTp78BSWNU=)
                          5: AS6079.roa (hash: cwt2kgma2qYi3LhLoT0eQ8hzydzk6ECH01Cp7+lYh5Q=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Mar 2026 02:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a4:f1:25:48:fd:63:82:a2:99:20:f9:32:64:db:ce:cb:d8:0b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
        Validity
            Not Before: Mar  4 01:18:28 2026 GMT
            Not After : Mar  5 02:18:28 2026 GMT
        Subject: CN=E325992C77345F3C0EDBC05E36F61DB0E461F9F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:44:85:18:28:50:79:da:8c:fd:db:be:1b:a1:
                    9f:c2:a1:14:30:28:af:e7:5e:23:73:ba:b1:ed:92:
                    d7:25:50:1b:c5:64:04:14:ea:9a:e4:25:5e:74:d1:
                    13:e8:82:ad:98:34:6c:eb:8d:bf:12:bf:e5:c0:9f:
                    3a:90:d9:b3:46:fa:b9:df:e4:f8:af:07:e5:c0:46:
                    5b:53:dd:15:95:97:9d:e4:cc:b7:b9:99:93:6e:2b:
                    39:b4:be:d6:f7:55:1d:9c:8c:a8:78:12:eb:8d:8a:
                    e5:ac:ec:4a:eb:85:50:de:b9:84:f0:7f:13:73:53:
                    5f:2f:ae:a2:09:aa:4b:a6:75:28:3f:38:00:d4:89:
                    81:e8:d3:43:22:44:e9:2e:26:4e:a5:39:e6:e6:e4:
                    6d:c1:10:17:09:82:c3:44:1f:a1:85:9e:e8:09:41:
                    62:a9:87:4a:e8:27:d7:8c:c4:60:40:a8:f4:94:65:
                    38:41:35:9d:ff:91:16:6a:9c:39:60:81:51:19:29:
                    d4:5e:07:e3:ba:63:46:ee:0c:97:9c:02:cc:5b:7a:
                    a6:03:54:10:0d:74:30:f6:3c:00:db:94:4e:37:7c:
                    86:ee:6d:ba:79:d6:8a:03:ee:59:88:8c:8f:9a:4a:
                    6e:86:ff:ae:16:9e:78:a0:3c:e8:32:1c:ed:b0:8d:
                    31:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:25:99:2C:77:34:5F:3C:0E:DB:C0:5E:36:F6:1D:B0:E4:61:F9:F2
            X509v3 Authority Key Identifier:
                keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:fc:48:6e:38:77:93:03:35:ec:56:43:ec:92:05:14:7e:57:
         ca:2e:b1:97:d8:50:1b:1a:8f:24:33:9a:c7:3a:d7:c3:74:86:
         e9:d0:f4:25:78:49:cb:b4:35:0b:38:57:b7:2c:8b:96:59:14:
         3e:6c:65:32:3f:d9:ab:5e:ec:d1:12:56:8d:86:a0:ce:79:99:
         2e:bd:ba:d0:a9:88:00:b4:fa:25:8b:88:8e:68:e9:9c:1e:d1:
         35:e6:be:74:34:fe:86:8a:cb:e1:3f:a5:84:6a:a9:d4:25:30:
         80:c1:03:f8:5b:8e:72:c1:2a:ca:44:f8:9f:22:44:4e:74:dc:
         e6:5c:33:72:f8:49:6a:a2:35:9a:b6:de:98:6a:83:2e:a6:fc:
         5d:af:97:2a:b7:15:5e:6f:96:0c:07:94:07:d7:4e:ce:30:58:
         6f:a2:2f:1c:12:ac:dd:c3:9b:27:0c:e3:df:39:15:85:0a:8c:
         e5:a3:67:b4:e2:d0:bb:27:92:6c:0f:34:4d:c5:fb:d7:f1:5c:
         17:6e:7a:7b:b4:df:32:5f:65:98:1f:09:30:58:cf:50:08:33:
         c1:03:5f:1e:07:96:e8:38:cc:88:3d:19:9b:95:82:7d:ff:c4:
         4d:36:58:57:43:05:02:d5:a5:7f:8f:68:50:85:16:1f:9b:ae:
         52:c5:4d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:05:49 2026 by rpki-client