Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
File:                     892C2C5990DF4D7045BB55A011F473261F0643F6.mft (raw, json)
Hash identifier:          Q3cULXqJttQtEkJW1EyPNIo8JPbvID0e6cdQuXfeTow=
Subject key identifier:   BF:86:BA:0B:3D:F2:80:8B:4F:EE:3B:6B:7D:3A:29:AF:01:63:00:46
Authority key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6
Certificate issuer:       /CN=892C2C5990DF4D7045BB55A011F473261F0643F6
Certificate serial:       0BABC986125D77766ACA2FC492079D8646B3A41F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
Manifest number:          95
Signing time:             Sat 09 May 2026 12:45:51 +0000
Manifest this update:     Sat 09 May 2026 12:40:51 +0000
Manifest next update:     Sun 10 May 2026 16:22:51 +0000
Files and hashes:         1: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (hash: YStl04IuWDei0D2oH+P/iOh9DAuPICnaprLiyMtF9EQ=)
                          2: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: BopLEf/ZmGSLBYK/WoER81ANZkew9Ua3lUbCSl9Jp8M=)
                          3: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (hash: hu2ypRUPAbYRtYy+M6vE/W8hAPWUPIin1Y9THyO12k8=)
                          4: 326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa (hash: zJsseoUx2WfsGKQLt6/5bb4va41JRgL/bMceecvpwjU=)
                          5: 326131343a373538313a366661303a3a2f34342d3438203d3e20323031393433.roa (hash: JBtcFivWNaxAMDtrHXjCq5obdYQeQd+Iuq7/0LpltBs=)
                          6: 326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa (hash: qRdEAnTHQewkn5xjFMDkvIHao/PLgA0XfOA580oQ+Wc=)
                          7: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: xJNDYcDRMGL3P/Oo1HJdC8ak3UBswnP71D60lUjKtOU=)
                          8: 892C2C5990DF4D7045BB55A011F473261F0643F6.crl (hash: EOmQmU12BVvheoWywTdeFVkWge0kyYNo33xzsPkutQk=)
                          9: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: eEYD+/uvxh4zHSJ/ztOoyn4X0s3MJpPiWt8uJufCQxo=)
                          10: 326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa (hash: zvsXrWVsgBSXSyUjh+x5IMf/onv6HLNx12EoyFofF0E=)
                          11: 326131343a373538313a366666303a3a2f34342d3438203d3e20323035353932.roa (hash: tJECAkp2L4ouOi5S7tH2woZZkAUIydRlFynQO3qJTRU=)
                          12: 326131343a373538313a366630303a3a2f34342d3438203d3e20323035353932.roa (hash: tGdxxPffiEkwkQ8zZYSEAsNxiyZw0E/Szbr/GF6Tp3w=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 May 2026 11:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ab:c9:86:12:5d:77:76:6a:ca:2f:c4:92:07:9d:86:46:b3:a4:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892C2C5990DF4D7045BB55A011F473261F0643F6
        Validity
            Not Before: May  9 12:40:51 2026 GMT
            Not After : May 10 16:22:51 2026 GMT
        Subject: CN=BF86BA0B3DF2808B4FEE3B6B7D3A29AF01630046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a5:24:ae:0a:76:dc:7e:de:13:25:a9:14:d7:
                    67:62:09:bd:3b:2f:93:d0:d9:21:fc:76:b1:bb:96:
                    27:d8:2f:49:d3:23:29:7a:af:6f:fa:e2:0e:52:d6:
                    e9:13:d9:32:b6:94:b9:80:b9:82:6a:e2:d3:df:64:
                    6c:da:86:d5:e3:7b:7b:a3:6a:27:5f:a1:4f:eb:a1:
                    a1:5e:99:83:38:f6:2e:c8:40:f9:24:81:e9:a1:b8:
                    66:9d:7e:d3:a7:21:21:64:cc:0c:43:1b:a1:58:fb:
                    45:49:4a:f1:32:e4:63:ec:de:cd:a7:79:8d:04:b5:
                    25:e5:6d:69:98:ae:ef:3e:dc:81:01:d0:4d:f2:1a:
                    0e:d8:01:eb:59:83:fd:7b:0a:5a:07:da:1d:83:80:
                    e2:a2:50:f5:48:66:a0:fa:25:62:31:71:51:ea:8b:
                    91:5e:9c:b1:a6:a0:77:96:d2:b6:4e:58:5b:e4:86:
                    66:75:81:a9:5e:52:2f:b0:3c:96:53:2d:04:28:32:
                    1b:f3:7f:54:8a:f2:3b:b1:d1:f7:36:50:34:c9:d8:
                    68:63:1b:aa:2c:fa:78:c6:3d:e0:53:73:35:da:a1:
                    a3:f8:17:e7:57:b2:60:24:0f:ba:54:44:fb:d3:8c:
                    83:de:a7:6e:e3:4d:0f:7f:46:71:59:18:3a:fd:09:
                    e6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:86:BA:0B:3D:F2:80:8B:4F:EE:3B:6B:7D:3A:29:AF:01:63:00:46
            X509v3 Authority Key Identifier:
                keyid:89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:9c:4b:27:52:d8:9f:8a:82:3b:ff:f3:63:a4:c9:bb:89:ec:
         ea:8f:c0:15:7a:f7:3b:2e:2f:a9:fc:e2:34:6f:d0:e7:85:e0:
         de:30:b0:a7:04:cc:6b:78:fb:84:37:2e:8d:2b:d9:b1:98:f5:
         90:00:1c:d1:d5:53:db:74:a2:de:1d:b7:ce:f6:2b:9f:54:fa:
         03:6c:36:30:31:98:90:d9:30:7f:40:98:48:c2:03:ce:7a:54:
         72:e9:4b:be:9a:58:6c:45:39:cd:64:fe:bf:34:2d:a8:db:ee:
         2e:a6:a5:de:88:12:7b:8e:af:35:4f:1a:37:fb:28:6e:9b:15:
         9b:d6:73:d4:97:1f:f7:58:63:a8:dc:e4:b4:31:f2:c9:d1:38:
         04:6c:60:76:fb:63:de:40:0f:6a:5a:00:5c:f4:41:9b:59:5b:
         82:c6:07:13:28:43:5f:c5:f3:66:6d:af:87:7a:b9:85:e9:3f:
         9e:55:00:30:53:a8:fb:ed:14:f1:18:21:2d:41:5f:ff:28:bb:
         be:64:ab:ab:81:ca:c3:8c:c2:91:ee:c7:92:e9:21:ef:6f:7c:
         89:51:00:ff:79:70:df:6a:93:31:fb:d5:4d:c6:bc:35:be:e9:
         09:8d:61:0f:c9:9a:99:77:ab:33:9c:71:3c:77:ca:4c:65:85:
         7d:a1:d3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 21:21:43 2026 by rpki-client