Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
File:                     9B848163C7049122702E8D37941241ED5ADD94D9.mft (raw, json)
Hash identifier:          zjTQn/049o35e30zkli00DGeUtAhN2k1GymKjqihyW4=
Subject key identifier:   04:36:3C:31:36:69:DF:94:36:D1:40:42:21:5A:07:AF:59:23:DB:28
Authority key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
Certificate issuer:       /CN=9B848163C7049122702E8D37941241ED5ADD94D9
Certificate serial:       1EF73F9E0695420A4E519A5C93606D4644551C56
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
Manifest number:          0157
Signing time:             Wed 26 Aug 2026 04:18:19 +0000
Manifest this update:     Wed 26 Aug 2026 04:13:19 +0000
Manifest next update:     Thu 27 Aug 2026 07:28:19 +0000
Files and hashes:         1: 326131343a373538333a3230303a3a2f33392d3438203d3e20323130343634.roa (hash: xKU1YO819a7VQTTpF+nB40wFij16/Jgq+O6qShtQ1sQ=)
                          2: 326131343a373538333a6430303a3a2f34302d3430203d3e20323130343634.roa (hash: 966xfzbp7XI2tIIl6RtKV8fWr+EKvskhBHx3zk5WK2Y=)
                          3: 326131343a373538333a6530303a3a2f34302d3430203d3e20323130343634.roa (hash: lZqMqZa8igc4AoCDRmP6SzhiPgp0yN3qUzgnbipm9bo=)
                          4: 326131343a373538333a3830303a3a2f34302d3430203d3e20323130343634.roa (hash: 6HRIzRgoHlrwDg0x+dQ+QTPqwbR2buVOX5nau8igN3A=)
                          5: 326131343a373538333a3a2f33392d3438203d3e20323130343634.roa (hash: vW1fGYMrYSYz3dMO9eci0Q6WugN6uOArURnsJ7uQq7I=)
                          6: 9B848163C7049122702E8D37941241ED5ADD94D9.crl (hash: aqo5TBAoBbTP6e3xnuUFMhBaAxFQvKmftVPwDjk6NL4=)
                          7: 326131343a373538333a3730303a3a2f34302d3430203d3e20323130343634.roa (hash: txMtmYCSrCjAQUsz3jwIOMVv2WDfMNs3rFGjXdQ1uHI=)
                          8: 326131343a373538303a633330303a3a2f34302d313238203d3e20323130343634.roa (hash: IxwgCbk25nW4zIf3Ev9+/v30oO87JlPDOY2TfrlWzrc=)
                          9: 326131343a373538303a633030303a3a2f34302d3430203d3e20323130343634.roa (hash: BZx4A+1lDPAS1ebt61e3ltRE332soDf255t2tHvVUu8=)
                          10: 326131343a373538333a6230303a3a2f34302d3430203d3e20323130343634.roa (hash: SkZGavhoTJC5ic0mJF3ZGqoq5jWXKF9H+0oYVlFuDaQ=)
                          11: 326131343a373538333a6630303a3a2f34302d3430203d3e20323130343634.roa (hash: mmfp1swzQs8+dv25AiJSqWincq1kV1e/VcrkZp1tcVY=)
                          12: 326131343a373538333a3930303a3a2f34302d3430203d3e20323130343634.roa (hash: QxJbzcNlut2XGQpfjiGDY/VAY9MqONp8dnDCfca/jtE=)
                          13: 326131343a373538303a636630303a3a2f34302d3438203d3e20323130343634.roa (hash: SE8E6a3ZD0LK5ZlZINe9eNIZjVQ9JR0AtsvzDG1ugzg=)
                          14: 326131343a373538333a6130303a3a2f34302d3430203d3e20323130343634.roa (hash: aFhwRSDU+t/TQvGHJmF4CgULB5DA6EuNIybmGsacNPY=)
                          15: 326131343a373538333a6330303a3a2f34302d3430203d3e20323130343634.roa (hash: u9LwYErQUKmq8o1Cp9FlrT7DQfjHnm37GLoiMAQKUWk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 07:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f7:3f:9e:06:95:42:0a:4e:51:9a:5c:93:60:6d:46:44:55:1c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B848163C7049122702E8D37941241ED5ADD94D9
        Validity
            Not Before: Aug 26 04:13:19 2026 GMT
            Not After : Aug 27 07:28:19 2026 GMT
        Subject: CN=04363C313669DF9436D14042215A07AF5923DB28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a8:e1:98:a7:ac:92:66:3c:6e:a8:7c:76:17:
                    61:c3:f1:56:7c:53:0b:e7:b7:f1:72:10:6d:2f:e3:
                    13:b6:b6:64:db:b0:92:89:0a:85:4a:aa:df:09:f8:
                    40:68:a9:eb:56:b0:54:94:b5:24:51:cd:d3:b0:c8:
                    a5:98:e9:a5:24:ca:e0:f4:55:d9:fe:c4:16:a2:82:
                    96:de:da:ec:c6:f8:2b:af:5d:be:c3:05:70:b9:21:
                    f8:aa:cd:f7:79:b9:ca:84:62:eb:c3:36:78:35:53:
                    b6:0b:53:49:75:be:5b:45:2a:6a:4b:83:4d:11:4e:
                    b4:7a:4c:9e:3e:b7:e3:71:1d:4b:f9:b0:1f:55:03:
                    90:3e:f6:4f:a7:5b:7e:29:6b:9b:2e:7e:22:ba:cd:
                    24:fc:84:4e:4e:df:e9:cd:d3:a7:9d:be:33:ef:67:
                    0e:24:db:86:fc:ff:35:4a:61:ad:16:25:88:aa:20:
                    e0:b3:f1:7c:1b:87:18:1d:64:c7:e7:dc:ac:d4:ac:
                    9b:0b:ad:80:48:05:0d:c9:53:aa:c5:ff:44:24:d8:
                    6b:fc:7d:bf:05:3b:ef:90:13:67:85:24:66:79:85:
                    a1:ed:26:18:86:cb:8d:fc:13:c3:68:d4:a9:fe:41:
                    ba:72:34:9b:d5:6e:56:d0:0f:6f:8e:c5:ec:38:fb:
                    f2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:36:3C:31:36:69:DF:94:36:D1:40:42:21:5A:07:AF:59:23:DB:28
            X509v3 Authority Key Identifier:
                keyid:9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:cd:01:d9:ed:64:71:ca:98:93:3e:73:88:43:41:61:56:73:
         2b:84:da:ae:c1:7b:f0:bf:7d:6f:29:0f:f4:68:a5:80:b7:51:
         a3:26:71:00:54:13:ca:03:4d:fb:d2:0c:bf:32:5c:37:9d:7a:
         5b:5a:f1:79:30:ce:a6:e7:1e:0b:02:8d:78:0a:35:4f:5a:e9:
         b5:77:3c:bc:b1:65:14:e0:bc:69:58:e8:85:db:ac:3f:cd:5a:
         80:1f:2f:b4:73:6f:e2:2a:1a:f6:ce:ed:56:33:a5:47:4b:b1:
         85:15:c8:3b:97:6b:f3:81:80:3b:b6:2c:fb:34:17:19:ea:dc:
         0b:22:c4:62:c6:71:ae:b0:7e:a6:ee:2a:27:e2:f3:ce:f5:f1:
         1c:08:04:37:9e:ea:36:cc:a0:ed:91:07:34:46:21:32:81:fb:
         3d:59:5e:2a:b2:4d:2d:82:0b:ed:a2:90:29:0a:da:ab:76:77:
         59:a8:f4:92:d6:e8:31:b4:89:05:79:de:86:32:69:e7:8f:47:
         af:97:58:cf:92:ec:54:fc:3f:71:5e:1c:15:9b:24:a2:74:4b:
         5f:8e:9e:89:24:d9:6f:d8:c0:9b:1b:ee:73:94:c7:38:15:e0:
         38:46:9d:dc:db:27:fc:ec:11:54:17:4b:2b:5c:bf:ca:ad:0b:
         cc:03:02:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:12:31 2026 by rpki-client