Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft
File:                     307456E03A11DBB48443E93538958B15B4E9E0F0.mft (raw, json)
Hash identifier:          iZd7rxUcGUVH2gimdFvEW+yNh1r/SvKAcQXCEeeQORs=
Subject key identifier:   E5:F5:B0:83:20:A2:F9:5A:4A:3B:C5:13:C2:56:02:15:14:B4:F5:1F
Authority key identifier: 30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0
Certificate issuer:       /CN=307456E03A11DBB48443E93538958B15B4E9E0F0
Certificate serial:       3B015C705D7E0BBBF9375FF5CAFC876DAF62955D
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft
Manifest number:          01C4
Signing time:             Thu 18 Jun 2026 11:45:13 +0000
Manifest this update:     Thu 18 Jun 2026 11:40:13 +0000
Manifest next update:     Fri 19 Jun 2026 14:35:13 +0000
Files and hashes:         1: 3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa (hash: aBp6U2aVMH3hSM5eeFVi+p63pJd0WYDoQYC72uEJ/w8=)
                          2: 307456E03A11DBB48443E93538958B15B4E9E0F0.crl (hash: u/9OKgLA7PGpy3+MxswP9360y8G2kIDWz2EDXGBdhpg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Jun 2026 14:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:01:5c:70:5d:7e:0b:bb:f9:37:5f:f5:ca:fc:87:6d:af:62:95:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307456E03A11DBB48443E93538958B15B4E9E0F0
        Validity
            Not Before: Jun 18 11:40:13 2026 GMT
            Not After : Jun 19 14:35:13 2026 GMT
        Subject: CN=E5F5B08320A2F95A4A3BC513C256021514B4F51F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:78:2b:a2:f6:4b:f6:51:44:68:02:d6:61:51:
                    ae:47:6a:04:54:ab:2c:cc:ea:8e:6f:4a:48:fc:12:
                    9e:15:b9:65:2b:40:4f:30:3d:10:dd:b1:49:96:ec:
                    81:2d:e6:7c:e2:e7:e8:97:9e:3d:26:ee:ce:e1:63:
                    1c:3f:4e:66:7e:69:bc:e5:00:2e:3e:90:08:9c:c7:
                    02:b6:58:35:3f:6a:b2:de:d7:af:5f:fe:58:74:3a:
                    26:08:82:b0:93:8e:8c:c1:8c:1d:54:3f:d8:c8:fc:
                    09:59:05:d2:82:e1:94:c4:9a:bb:53:8e:42:bc:0d:
                    1b:d5:38:cd:7f:35:c0:91:99:96:53:98:f6:e2:ee:
                    d1:a0:23:59:8f:01:a6:2c:e8:d7:96:7c:f3:7d:0a:
                    9b:8e:8a:18:af:a6:1a:45:cd:af:64:b1:ea:ac:4a:
                    b4:b5:79:37:3e:c6:f7:d2:70:8c:85:e8:57:f8:f0:
                    f6:5f:6f:8f:b4:9e:11:a1:d6:67:da:fd:ae:a4:f8:
                    44:01:77:58:aa:06:3f:b2:57:3d:b0:0c:d8:da:a2:
                    73:10:3c:1e:13:eb:2e:77:3b:81:12:3c:84:62:bf:
                    10:4d:f9:7d:5c:39:4f:d1:83:e4:d5:dc:2f:c4:a2:
                    bf:13:87:a7:01:00:0b:d7:91:32:b3:ce:c9:0f:6f:
                    85:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F5:B0:83:20:A2:F9:5A:4A:3B:C5:13:C2:56:02:15:14:B4:F5:1F
            X509v3 Authority Key Identifier:
                keyid:30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:09:cb:e5:6b:24:41:e3:09:c2:a9:5e:6b:64:bb:84:bb:a8:
         f5:8d:7d:27:c0:b4:f8:f1:1d:fa:23:d2:20:7c:65:4e:ff:c3:
         06:cd:d5:09:d4:8d:fb:fe:5c:89:9c:3f:93:1e:81:fd:3c:e2:
         39:7d:92:c5:a6:a8:2c:a6:6c:d0:ba:ef:58:8c:34:19:31:02:
         b7:c6:82:e9:8a:78:85:c0:ca:61:6e:27:16:6a:91:18:8d:90:
         ff:12:03:09:31:f2:82:89:f8:29:09:ad:ce:8b:d5:27:a9:36:
         b4:16:5d:36:00:b4:bd:49:a4:05:4c:8d:d7:bc:6c:63:16:7b:
         85:ed:35:45:a8:48:58:7d:cf:af:e7:88:97:05:ce:db:41:cc:
         5f:45:e9:44:ff:bd:29:b8:7a:9c:e9:0a:95:e4:73:57:92:4c:
         36:0e:d6:95:43:fc:92:5e:c7:a8:0b:15:38:c1:a0:cf:0a:8c:
         97:06:3b:2d:1c:13:fe:44:54:47:e7:d2:9f:a1:f7:58:46:28:
         ad:ea:59:dc:73:48:b1:24:ef:e9:56:a6:84:f5:1b:48:01:da:
         7d:e5:3d:1e:c0:71:a0:be:83:bf:39:fa:78:e3:50:f4:d4:af:
         01:ed:31:10:93:27:68:dc:70:4e:8a:53:fa:45:9e:9b:f7:85:
         22:9a:d9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 05:28:29 2026 by rpki-client