Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
File:                     92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft (raw, json)
Hash identifier:          /KjNQ66s3Czw4wVpREka9qD8g14deoSnF3kgFPcWgKk=
Subject key identifier:   05:CF:F5:D8:25:D8:96:1B:D5:2D:9D:38:1D:07:FA:88:52:4F:70:C0
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Certificate issuer:       /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial:       13394D143DD8A543DF29FBFA883959605366E55A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
Manifest number:          01C3
Signing time:             Thu 12 Mar 2026 12:52:05 +0000
Manifest this update:     Thu 12 Mar 2026 12:47:05 +0000
Manifest next update:     Fri 13 Mar 2026 13:24:05 +0000
Files and hashes:         1: 34352e3133392e3139382e302f32342d3234203d3e20323134343636.roa (hash: 9KX5zC7UuI47N7heL//vNyLO3x7YEi1CucEhFX8SUR0=)
                          2: 39352e3231342e3137322e302f32342d3234203d3e20313937343737.roa (hash: y8hcJrulcRceTx871qhtDNBcbMxDEQZoJON7Dc+UpGA=)
                          3: 39352e3231342e3138322e302f32342d3234203d3e20323132333834.roa (hash: ahvCpQCYKDC5UmCWINUE1+9+R3CEuxDs9xpt+/mHGMc=)
                          4: 39352e3231342e3137352e302f32342d3234203d3e20313335333931.roa (hash: dZLABnxKpTxFiKmt1/yK20i3zGqpWgZ6NnQoPD/883U=)
                          5: 34352e3135362e35322e302f32322d3232203d3e2039303039.roa (hash: eK18gsMy8+wzgYZmaz7TkcO08JcfPTkHAWlv0aJXuz0=)
                          6: 39352e3231342e3138302e302f32342d3234203d3e20323033373538.roa (hash: yeHT2siMw+46e40lrxlb+yyyQe2+Rk/4CH0GwC6laEg=)
                          7: 34352e3135362e35322e302f32322d3234203d3e2039303039.roa (hash: Bs9P6MukVIk3Mqg2bASja42eYp9YV11upUqwTKj8Pqc=)
                          8: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl (hash: Y+crt3BMpxx2X8K0+hwim1lIqYCINSW1srivHdD10rg=)
                          9: 39352e3231342e3138322e302f32342d3234203d3e20323132363039.roa (hash: AjgG1gM1OxMVlGFutJS1mpX2Qd4qqtcRZt6UVKIG+j4=)
                          10: 39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa (hash: EnyfxlxrEZoOAQu439Mhaj0MSgN4o3Cr584mhVLUCgw=)
                          11: 39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa (hash: P3AXSCPo5qCcqJ/tF9UnDRiSqmNKJoNVWYccPe9dv1w=)
                          12: 34352e3135362e35322e302f32342d3234203d3e2039303039.roa (hash: TVTxbW5Hn/uwBDAOJAxsysgEid6g/rYwKpFkj0KhHLI=)
                          13: 39352e3231342e3138332e302f32342d3234203d3e20333933393432.roa (hash: ppvL8ONO4VguHbFDU1oqqBQJIOG4rM+WNvZk8GO+7nk=)
                          14: 39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa (hash: 7RDjli52ea3Y5rIxOBi7CoAOYzObgN76cF1oNhGaH/0=)
                          15: 39352e3231342e3137332e302f32342d3234203d3e20383334.roa (hash: Jg1Q0RqkgI1Bru+o5L0tV+On7fhjEQhtHFzUtySiiHA=)
                          16: 34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa (hash: JaeJstE2poR1Rlm8a7RHcBFfHeeu7vNkxKzYr0p4Jc8=)
                          17: 3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa (hash: yFl38PxDDUPllDewnZ7MEFH9Z5qJaOTL0zY/pvxRoUY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 13:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:39:4d:14:3d:d8:a5:43:df:29:fb:fa:88:39:59:60:53:66:e5:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
        Validity
            Not Before: Mar 12 12:47:05 2026 GMT
            Not After : Mar 13 13:24:05 2026 GMT
        Subject: CN=05CFF5D825D8961BD52D9D381D07FA88524F70C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:63:48:80:96:1b:4e:8b:23:f3:7e:d3:21:71:
                    b9:d5:29:63:fb:9f:9b:5d:40:5d:d6:4b:f8:8e:c4:
                    7b:23:5e:f4:89:a2:6e:9e:ea:db:a8:4b:2e:a1:ef:
                    00:e7:1a:77:b3:9e:a6:73:44:41:dd:95:de:a4:c4:
                    f7:8f:33:2d:29:84:4e:6a:e7:26:cf:01:13:53:5e:
                    61:05:62:7c:e0:0d:d8:4c:3e:1f:73:53:96:c7:a0:
                    82:a8:70:f6:37:71:a9:e4:a5:08:3a:f4:30:da:ff:
                    4b:2b:f6:9b:5c:9f:dd:f6:1b:10:aa:43:0d:3f:dd:
                    62:2c:e1:a2:a8:58:20:41:e9:30:4a:bd:7c:55:17:
                    92:11:20:fe:9b:f3:51:8b:56:21:95:05:7e:36:4e:
                    01:a7:d2:1b:5a:eb:a2:6e:6c:04:86:53:bd:06:7b:
                    c2:5e:2e:54:3f:be:5b:e7:5e:84:72:44:d0:62:e7:
                    6d:48:96:e1:b8:49:26:37:0e:30:ae:4a:c9:ca:7e:
                    99:52:10:c2:78:0a:49:24:e4:42:7c:92:db:00:da:
                    ec:31:36:e4:02:da:c5:b0:c6:a8:24:4c:b9:38:1b:
                    2d:56:4e:b6:02:87:8c:4b:79:2c:06:d9:34:4e:00:
                    ef:2c:aa:a4:24:05:33:cc:ac:1e:e3:3b:c4:6b:11:
                    74:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CF:F5:D8:25:D8:96:1B:D5:2D:9D:38:1D:07:FA:88:52:4F:70:C0
            X509v3 Authority Key Identifier:
                keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d7:4a:c5:c7:1c:c2:05:4f:d5:0b:c0:b8:7a:16:60:4f:db:
         55:67:87:3f:9a:85:3b:f3:5e:30:9b:46:f9:21:c3:ab:ee:02:
         a1:ac:23:ba:a1:ca:03:24:d1:67:6a:02:85:63:e2:73:7c:b1:
         18:e0:cb:0f:05:bb:59:8e:1b:3d:d8:b3:80:16:5d:89:5a:04:
         8c:87:ae:0b:43:ea:22:dd:b6:99:d9:98:54:22:8c:5d:88:9c:
         ef:d8:59:f3:f6:ca:e9:a0:ba:59:24:ff:b6:5c:97:30:2f:fe:
         1f:b5:03:e4:a4:f3:cd:4d:6f:36:17:e3:89:b1:6b:b4:e4:38:
         47:7f:5f:ad:09:4e:71:99:01:72:5a:f6:f7:78:96:8e:1d:fa:
         c9:7d:d6:85:5b:f5:1b:16:b0:68:10:06:2d:ba:cc:9f:53:a3:
         6f:aa:c0:8b:bb:82:7e:c6:43:8e:d0:1d:42:d1:ca:b3:b3:8e:
         8f:e2:d3:8a:1f:ed:0d:cc:ce:89:6c:84:30:d8:d1:da:48:5b:
         10:3a:c0:93:b1:46:5b:91:ba:67:93:69:1e:73:c9:75:12:2d:
         89:01:54:d9:5f:44:bb:44:a7:a7:89:64:c8:ad:f0:16:26:3a:
         25:6d:0c:b4:28:f5:1c:f9:6e:64:1c:e0:12:6d:2e:28:28:14:
         db:4c:ac:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:33:38 2026 by rpki-client