Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
File:                     E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft (raw, json)
Hash identifier:          rvaVZcnoV887GwMTOj4dENNVKQacBSWBqMVt9lR2seY=
Subject key identifier:   BC:E9:DD:85:29:40:AC:E4:83:73:0B:C9:25:73:EB:9C:93:4B:E5:38
Authority key identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A
Certificate issuer:       /CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A
Certificate serial:       4C0A44EE202ECB551C13C697B67BCF9273C2D6DC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
Manifest number:          7D
Signing time:             Sat 18 Apr 2026 10:17:06 +0000
Manifest this update:     Sat 18 Apr 2026 10:12:06 +0000
Manifest next update:     Sun 19 Apr 2026 10:58:06 +0000
Files and hashes:         1: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl (hash: g8BRsytnJgZ7EWrD7v+powTGTbvhPJyXnzPq6eLTjYk=)
                          2: 326130663a316363353a313032303a3a2f34342d3438203d3e20323136323939.roa (hash: PhJ22uKOLkIyMB26jpFkBLaf94CPZDjFlKqxP4B3DyA=)
                          3: 326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa (hash: alWdZcWOVcqLJ+t8VCXLM/51cMrMQD6vIi6z5Hkb/rM=)
                          4: 326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa (hash: GrABHnm92+umbLrVFGaFsGRxCk28MTZckUcjsaOY0Ow=)
                          5: 326130663a316363353a313033303a3a2f34342d3438203d3e20323136323939.roa (hash: sj4hnBEpnD4akX8jpgCsQPvr+ht2QjoESczHJBDU000=)
                          6: 326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa (hash: 6lZvvFWPvSfdQUMPjqUZGcuEJ5oDxzIDckdsgacq+JE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 10:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:0a:44:ee:20:2e:cb:55:1c:13:c6:97:b6:7b:cf:92:73:c2:d6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A
        Validity
            Not Before: Apr 18 10:12:06 2026 GMT
            Not After : Apr 19 10:58:06 2026 GMT
        Subject: CN=BCE9DD852940ACE483730BC92573EB9C934BE538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:30:0c:7b:43:b9:4e:2a:92:b7:5c:5a:3a:55:
                    5b:58:9f:aa:8a:04:5b:70:e0:ae:96:68:c4:f8:fe:
                    1a:bc:95:b6:41:fc:19:88:b5:c8:32:6d:79:b1:29:
                    78:e7:22:9f:f7:e3:cf:59:4b:fb:43:9d:3d:f6:9c:
                    54:da:53:44:d9:f4:77:72:d5:8c:e9:63:9c:8b:45:
                    c8:5c:c2:30:62:a8:f7:57:59:c6:06:77:54:7a:6c:
                    86:ec:cb:f9:53:3b:7d:d9:67:02:77:06:fd:38:44:
                    35:69:02:19:5f:bc:1c:ea:3e:75:98:52:39:90:0c:
                    62:f6:fb:29:2f:b4:0d:12:b3:ba:06:f3:b6:7a:c8:
                    f9:1f:f9:80:43:5d:59:d7:e6:d0:2c:b4:56:30:cd:
                    7c:16:3a:5a:32:84:16:4a:4e:1a:99:9b:6c:96:ce:
                    60:5f:83:0d:57:51:12:3c:c8:11:6a:0b:35:13:c0:
                    75:d1:70:ce:41:de:d1:3e:cf:64:cb:59:d2:f3:06:
                    73:8a:7d:43:6e:0a:88:81:05:6b:d1:83:5f:91:2c:
                    46:11:49:df:f5:80:13:eb:08:1f:fe:62:41:ca:d2:
                    2c:da:32:e4:32:ee:b2:2a:34:af:60:1c:2c:00:eb:
                    fd:c7:74:ce:64:ad:7d:66:4c:9a:37:7d:30:90:87:
                    b0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E9:DD:85:29:40:AC:E4:83:73:0B:C9:25:73:EB:9C:93:4B:E5:38
            X509v3 Authority Key Identifier:
                keyid:E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ce:35:35:ce:94:a3:8e:c4:f6:d0:7e:eb:4e:b7:5b:f8:bb:
         fd:af:34:b6:60:c1:7e:80:44:78:60:06:25:73:0a:8a:72:2b:
         dd:fa:97:4b:8f:4d:80:da:3a:40:8d:58:a0:98:80:d0:34:e6:
         28:87:84:70:7e:62:7e:27:2a:61:fd:2b:10:d6:6a:99:93:ef:
         38:20:9d:36:e5:8f:7b:28:bc:89:49:0a:79:6d:35:3e:5f:0c:
         a6:23:ae:84:89:92:8d:c3:10:07:04:1d:35:97:72:29:37:91:
         36:21:77:38:77:24:66:07:ad:49:4e:fb:c4:39:41:ff:81:6e:
         6e:69:e4:65:cc:4c:67:eb:37:7d:21:36:39:35:d1:3d:c6:e2:
         45:d6:37:58:1c:5f:28:f7:0f:cf:ec:ce:c0:ca:02:4f:f1:2a:
         29:d3:85:cf:59:3a:c1:b5:14:f6:6b:91:7f:0b:7a:a1:66:80:
         05:10:94:7c:3a:7b:13:1d:7c:24:df:1e:6a:5e:76:bc:a0:d1:
         be:47:71:fb:1d:99:bb:9c:20:9d:9e:10:63:1d:99:2a:03:e5:
         b0:62:7a:d7:3a:b6:6e:e2:1c:69:a9:bb:14:dc:3c:5e:24:da:
         a9:1a:92:1e:43:30:4b:1e:e3:c8:19:a2:1c:c1:34:56:ff:fd:
         14:a9:e9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 02:45:30 2026 by rpki-client