Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
File:                     391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft (raw, json)
Hash identifier:          BOzPxhv9I7B8CggCqAh7pRyOzSlMxxeqlY2+I+ASR8c=
Subject key identifier:   2E:36:AF:7E:F7:15:12:75:B2:4F:92:D4:D9:D1:55:F7:1F:42:0E:12
Authority key identifier: 39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D
Certificate issuer:       /CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
Certificate serial:       3D18246BE8DF26F60F5591DF3117748BBE93CBE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
Manifest number:          010B
Signing time:             Wed 12 Aug 2026 17:06:37 +0000
Manifest this update:     Wed 12 Aug 2026 17:01:37 +0000
Manifest next update:     Thu 13 Aug 2026 17:07:37 +0000
Files and hashes:         1: AS215685.asa (hash: w4KwhUrCEWEbAZ5XQsaxlfF0DuiwIqmvA5FzmwAgvBA=)
                          2: 323030313a3637383a6139303a3a2f34382d3438203d3e20323135363835.roa (hash: f01olELinbK/WN+AKKfNEa3BaJPmtAdvY7LAPWQjTbg=)
                          3: 391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl (hash: 5Dp8YrE/AIF1sIwhi2Tj6IEkDud50/sfruQ+6kHsF10=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:18:24:6b:e8:df:26:f6:0f:55:91:df:31:17:74:8b:be:93:cb:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
        Validity
            Not Before: Aug 12 17:01:37 2026 GMT
            Not After : Aug 13 17:07:37 2026 GMT
        Subject: CN=2E36AF7EF7151275B24F92D4D9D155F71F420E12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6b:98:ca:4a:fb:d1:91:e7:01:48:62:30:b5:
                    42:d2:5c:be:fc:f4:08:06:c3:55:6b:71:1c:ad:ed:
                    69:5c:f7:1b:58:11:4e:5d:ab:30:87:44:0e:4c:e8:
                    d5:a2:c6:72:f5:6d:3c:41:8a:71:b7:72:7c:65:fa:
                    54:c5:44:77:b9:43:39:05:69:35:af:24:88:cb:0b:
                    04:e1:d3:d8:0f:4e:a1:f1:d5:36:8f:ce:22:b2:c4:
                    25:c5:06:e5:6f:9b:9d:91:03:26:03:85:e6:89:8a:
                    41:0d:d4:d2:4c:da:87:19:a2:5d:41:9a:e9:00:2e:
                    6d:18:68:7a:ea:1f:14:7b:bb:b6:63:c2:d1:e1:1e:
                    92:9b:1d:9c:59:7f:01:13:23:8c:cf:5d:f2:83:00:
                    70:24:8a:74:0a:27:24:fd:18:cd:a7:50:a6:e1:c2:
                    1c:c3:d0:33:00:70:ac:1d:85:54:c5:bf:8f:27:88:
                    ae:8a:ad:c8:7b:d8:7c:40:49:70:73:92:4c:5e:de:
                    4e:47:2a:21:f4:a4:23:f6:9a:46:b8:66:e0:54:af:
                    80:0f:9b:88:d7:60:44:ce:be:75:9d:7e:e1:d4:37:
                    32:e8:d8:eb:d4:66:27:55:dd:46:09:69:0b:3d:5a:
                    5e:8f:14:8c:05:0f:04:ad:9f:9b:5f:12:4f:98:ad:
                    bd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:36:AF:7E:F7:15:12:75:B2:4F:92:D4:D9:D1:55:F7:1F:42:0E:12
            X509v3 Authority Key Identifier:
                keyid:39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:33:ff:3f:1b:4b:23:b4:e8:39:a9:f8:24:76:d2:ce:f3:a2:
         5c:40:41:93:71:9b:ab:6d:25:10:6f:68:c8:47:eb:2f:cc:04:
         80:e6:2e:6e:08:cb:86:00:a7:e2:84:33:1e:ab:35:a0:87:5d:
         94:65:24:58:71:b5:95:c7:82:8b:5d:03:b9:92:53:a2:39:af:
         0a:fa:ba:84:37:fc:34:25:e4:5d:d8:f8:07:40:b3:bd:be:fb:
         ce:56:b1:a4:a2:df:df:fa:e3:60:06:38:66:7a:7b:01:69:bc:
         6a:bd:f1:21:e5:0d:71:a8:2d:fe:bb:a7:f4:57:58:bb:24:9d:
         3f:45:c2:29:9d:ad:80:47:76:0f:83:2f:63:75:cc:ae:99:44:
         a0:0d:10:de:0a:6e:e5:1d:4d:f3:bc:dd:05:fe:eb:96:c0:2b:
         be:48:3a:da:fe:7a:66:7b:7e:e3:3f:9a:8c:3d:42:76:39:8e:
         7c:5c:3e:99:74:c3:1a:a7:e7:57:88:fa:40:9e:98:8f:bd:7b:
         52:ce:e5:04:55:34:00:39:1f:5d:2d:89:21:5a:36:49:a1:74:
         bf:05:0a:31:6a:9b:68:6e:c0:57:fb:bf:87:b4:05:e4:ae:87:
         10:ce:54:dd:8e:e8:d9:6c:2d:ae:13:ff:12:64:64:ee:b1:d0:
         78:5f:1a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:14:23 2026 by rpki-client