Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
File:                     ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft (raw, json)
Hash identifier:          nae9iTaRQVDxVTk1EQyncq8fdhDssVH+GytPGS/plpU=
Subject key identifier:   D2:1D:A3:65:E2:CC:E6:FC:7B:D0:76:0E:B0:3A:0D:BE:19:F0:FC:1F
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Certificate issuer:       /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial:       03C4B8A700269F8CC14428F3A0050AE483D28F7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
Manifest number:          0142
Signing time:             Wed 08 Jul 2026 01:53:17 +0000
Manifest this update:     Wed 08 Jul 2026 01:48:17 +0000
Manifest next update:     Thu 09 Jul 2026 03:49:17 +0000
Files and hashes:         1: 34352e3134332e3136322e302f32342d3234203d3e203233343730.roa (hash: OcZ6EMgc6x8+IMfJh9quglLv9DVchqMI90FMfGysZqA=)
                          2: 34352e3134332e3136332e302f32342d3234203d3e203139343337.roa (hash: M8Y5TaWjTiVOLanqncdwCCTpjaAInXMAJmIU/gVIuL8=)
                          3: 3139342e3234372e34352e302f32342d3234203d3e20313337353137.roa (hash: 7Uz0iGXKq5oSbUI44D0T64XUT0jHl47mRLVxjRhD2eU=)
                          4: 3139342e35302e312e302f32342d3234203d3e203534323532.roa (hash: ruvdsYTXtE0Ab54FYmgOEkBccmfDScUwXgNFAX7lgcQ=)
                          5: 34352e3134392e3136362e302f32342d3234203d3e20323132333834.roa (hash: oGRqBKIGwkwo89Qzo8J8QE2XhyVF3R37X5VJTJkYTLY=)
                          6: 3139342e35302e302e302f32342d3234203d3e203438333134.roa (hash: BtX3QzIneVP4peKGNcyeJeMDG5hgOoQ4i/5PEk0YGmY=)
                          7: 34352e3134392e36322e302f32342d3234203d3e20383334.roa (hash: K8ltTDgW9HfANPuVJSFbKlcEJqaQBf+iEfDLJr+tHyE=)
                          8: 3139342e35302e312e302f32342d3234203d3e203634323637.roa (hash: Y111o5heSVgTuvX1afqOIbWwexv6C9e08p+YRNlvpVI=)
                          9: 34352e3134392e36312e302f32342d3234203d3e20313337353137.roa (hash: bPblgjM8vXENfZasylb5ZzMp1DkYcmu6TBL1HJESdOc=)
                          10: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl (hash: SmOiBXpJPnXJiEv8F4fjcr0ErVKEBXnTfxFxw1em5rI=)
                          11: 34352e3134332e3136302e302f32342d3234203d3e203232313638.roa (hash: R01FRlBDr9pZoq05BG3LRHuNkIAJs+FNxUn/NkK9at8=)
                          12: 3139342e3234362e33362e302f32342d3234203d3e20313532313739.roa (hash: Qgu5Tvm9W5X7SEvK1a2hylvdBTNEStW6QJu77ozFsGM=)
                          13: 3139342e35302e312e302f32342d3234203d3e20333937363330.roa (hash: TeUJtf1ikY7LLYRPrAz/E+BsfW9QE1+7cNe6Ilv12VI=)
                          14: 34352e3134392e3136342e302f32342d3234203d3e203235333639.roa (hash: a0LqwFPI6pwa1fZnOKWJVr+UvNzZLlo/pfpnRlcnUlw=)
                          15: 34352e3134392e36302e302f32342d3234203d3e20383334.roa (hash: v5z4mH+8qoFiRalLg5vNyoviHu/g6QQvDiLP4ihiaTg=)
                          16: 3139342e3234372e34342e302f32342d3234203d3e20313432313436.roa (hash: TqX0P9wlnvbZoWAo8DlV20oJQITx6kCNiVhWbz6v/l4=)
                          17: 34352e3134392e3136372e302f32342d3234203d3e20323132363639.roa (hash: G5FQ1l+cRk3n7sDIEiJiOqD91u3IjodfdNcjTCN0Zms=)
                          18: 34352e3134392e3136352e302f32342d3234203d3e20323039303433.roa (hash: xof4y/WucaiGMtyPzgbTPsOcPFlb9obn6jFW42zp3IM=)
                          19: 3139342e35302e342e302f32342d3234203d3e20343030303339.roa (hash: 1KQ8U/cyI6RlRLUmJsQ7MnZR4YGCCRfjVSVg2/aEhuA=)
                          20: 34352e3134332e3136312e302f32342d3234203d3e203631333137.roa (hash: 8ZjMd6obm3N7HBniZT8uftJQwQbBGvAMihymyaoAi+E=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Jul 2026 03:49:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c4:b8:a7:00:26:9f:8c:c1:44:28:f3:a0:05:0a:e4:83:d2:8f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
        Validity
            Not Before: Jul  8 01:48:17 2026 GMT
            Not After : Jul  9 03:49:17 2026 GMT
        Subject: CN=D21DA365E2CCE6FC7BD0760EB03A0DBE19F0FC1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4f:36:7a:0c:66:1a:53:10:29:92:b8:62:8e:
                    1f:40:27:f4:d1:5a:b3:15:1c:72:37:f3:38:00:24:
                    26:33:72:c2:f8:25:3f:64:99:af:bc:24:e3:ba:72:
                    1f:7c:4c:51:9e:5a:96:fc:8b:4f:de:e9:31:1d:b5:
                    26:8e:5e:76:53:55:89:32:05:ca:57:da:7f:46:9f:
                    c7:1e:4c:80:f4:a3:04:a0:26:1f:69:81:07:cf:13:
                    6a:2e:94:16:88:81:56:7f:25:81:e0:94:b1:1f:8e:
                    fc:ff:32:c3:04:f2:d4:e2:6b:6a:3f:3c:3d:4a:61:
                    8f:30:7b:aa:d2:ee:95:10:65:47:63:d0:26:ff:18:
                    9a:da:11:58:64:cd:17:2a:6b:c7:9e:98:a9:60:8c:
                    c0:0d:39:15:c7:7a:8f:b1:42:88:ae:08:db:42:7c:
                    fa:80:3d:f0:78:bb:aa:76:77:07:00:69:d7:6a:46:
                    60:3d:50:8b:ca:b0:4b:bd:c7:82:5d:6f:52:86:bf:
                    90:f9:6a:ff:fb:45:87:d7:82:d7:cf:28:70:0e:9f:
                    ad:57:66:d6:91:05:16:1a:09:95:52:09:2d:1f:d4:
                    21:62:37:df:69:8c:1e:4a:c3:c0:7b:06:76:b4:14:
                    4d:f1:f9:a2:73:d3:6b:5e:a2:ff:3e:05:54:5c:64:
                    b6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1D:A3:65:E2:CC:E6:FC:7B:D0:76:0E:B0:3A:0D:BE:19:F0:FC:1F
            X509v3 Authority Key Identifier:
                keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:1c:91:ce:09:69:b6:8d:87:3a:2a:fd:6a:0b:0c:8b:f8:05:
         00:0d:ce:41:f7:05:3a:91:21:30:bb:ab:be:07:6f:56:87:38:
         67:d6:90:17:1c:a0:5b:6e:f5:2d:f8:0c:8a:5c:b4:0e:c4:79:
         86:0e:78:aa:a4:e5:b5:97:6b:6b:42:ed:94:05:65:5b:aa:3f:
         41:49:05:7d:8e:47:b6:ef:9c:44:f5:c9:7f:db:62:5c:db:c2:
         6f:56:af:9e:da:1c:34:df:69:31:5b:71:ed:ea:28:73:dd:da:
         db:bb:e1:0f:c6:f3:c0:dd:7f:bb:af:a3:a1:c6:09:28:63:0a:
         9d:6c:ea:45:3e:28:49:aa:da:f9:0f:d8:d5:7b:3e:da:92:90:
         de:52:8c:63:0d:10:29:6b:0f:54:e9:fe:ab:20:ed:de:a5:e6:
         6d:e8:87:4e:64:0a:4e:f2:57:d7:5f:29:a7:85:d3:e7:05:86:
         c1:7d:04:b8:d2:a5:1d:ff:22:4d:0f:d7:ff:c1:b1:c6:3f:47:
         19:87:eb:da:23:37:1c:61:37:7c:5d:90:31:6f:56:fe:1f:0d:
         2c:84:cc:4b:9a:d8:b8:59:e1:7e:76:9f:bb:7b:02:b2:00:88:
         76:cd:08:45:fa:8e:d9:97:51:ff:2c:ec:0f:54:57:11:39:81:
         ea:fa:17:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 13:23:27 2026 by rpki-client