Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
File:                     892C2C5990DF4D7045BB55A011F473261F0643F6.mft (raw, json)
Hash identifier:          A862Ltlh+XsTN4Bu3C6SuPXJQCngPdpU/XPCmr8uAHk=
Subject key identifier:   CC:12:C9:FA:6F:4C:00:68:4D:5E:03:D4:0C:9A:70:A9:47:0D:4D:6A
Authority key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6
Certificate issuer:       /CN=892C2C5990DF4D7045BB55A011F473261F0643F6
Certificate serial:       4BE8188FBFD77E15F16FEF5794A6B444F20EC904
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
Manifest number:          D8
Signing time:             Wed 24 Jun 2026 16:10:51 +0000
Manifest this update:     Wed 24 Jun 2026 16:05:51 +0000
Manifest next update:     Thu 25 Jun 2026 17:03:51 +0000
Files and hashes:         1: 326131343a373538313a366630303a3a2f34342d3438203d3e20323035353932.roa (hash: tGdxxPffiEkwkQ8zZYSEAsNxiyZw0E/Szbr/GF6Tp3w=)
                          2: 326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa (hash: zvsXrWVsgBSXSyUjh+x5IMf/onv6HLNx12EoyFofF0E=)
                          3: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: eEYD+/uvxh4zHSJ/ztOoyn4X0s3MJpPiWt8uJufCQxo=)
                          4: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: BopLEf/ZmGSLBYK/WoER81ANZkew9Ua3lUbCSl9Jp8M=)
                          5: 326131343a373538313a366336393a3a2f34382d3438203d3e20323136313233.roa (hash: HgdPJda6r5W610xVzMNjTKP68bG2jdXcdcTL6VaTf2E=)
                          6: 326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa (hash: qRdEAnTHQewkn5xjFMDkvIHao/PLgA0XfOA580oQ+Wc=)
                          7: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: xJNDYcDRMGL3P/Oo1HJdC8ak3UBswnP71D60lUjKtOU=)
                          8: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (hash: YStl04IuWDei0D2oH+P/iOh9DAuPICnaprLiyMtF9EQ=)
                          9: 892C2C5990DF4D7045BB55A011F473261F0643F6.crl (hash: U7LYn7n48/iBVrRQjY/bs4SyeMPtt6SoIfwezSAqSkE=)
                          10: 326131343a373538313a366661303a3a2f34342d3438203d3e20323031393433.roa (hash: JBtcFivWNaxAMDtrHXjCq5obdYQeQd+Iuq7/0LpltBs=)
                          11: 326131343a373538313a366666303a3a2f34342d3438203d3e20323035353932.roa (hash: tJECAkp2L4ouOi5S7tH2woZZkAUIydRlFynQO3qJTRU=)
                          12: 326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa (hash: zJsseoUx2WfsGKQLt6/5bb4va41JRgL/bMceecvpwjU=)
                          13: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (hash: hu2ypRUPAbYRtYy+M6vE/W8hAPWUPIin1Y9THyO12k8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 11:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e8:18:8f:bf:d7:7e:15:f1:6f:ef:57:94:a6:b4:44:f2:0e:c9:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892C2C5990DF4D7045BB55A011F473261F0643F6
        Validity
            Not Before: Jun 24 16:05:51 2026 GMT
            Not After : Jun 25 17:03:51 2026 GMT
        Subject: CN=CC12C9FA6F4C00684D5E03D40C9A70A9470D4D6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5e:2a:00:85:6e:de:e2:ff:12:ac:45:2a:c1:
                    29:0d:41:b1:4c:ff:ae:46:51:d0:d7:b9:18:c2:32:
                    83:e9:a2:3d:4c:88:b4:49:a3:9c:13:2c:2c:0b:36:
                    fd:06:a4:c0:b4:62:86:52:16:f5:2b:08:ed:94:53:
                    a3:f3:9d:ab:2f:25:7d:b3:4d:fd:d5:f2:ad:f0:76:
                    5e:b8:32:66:20:8e:89:dc:9c:2c:1e:13:14:06:ef:
                    48:1f:3a:32:77:26:09:8c:1c:50:99:2e:5c:aa:7b:
                    82:a1:51:09:e0:65:d2:19:a2:f2:b0:b8:fa:14:be:
                    a0:80:4e:3e:21:03:75:46:77:87:23:ef:4c:e6:78:
                    e2:2e:80:70:88:11:75:d8:84:e6:e0:43:d0:4b:b8:
                    66:73:c5:76:ba:1d:4b:ab:b8:32:62:ec:84:5b:d7:
                    60:16:7c:06:dd:bd:c6:90:41:fc:7b:0d:2b:63:df:
                    c6:51:de:c9:0f:c4:83:02:f5:d4:91:5b:01:37:f9:
                    be:e7:9f:00:04:91:10:69:3a:58:0d:30:9e:b0:c6:
                    3c:89:3f:ce:d5:27:3e:bc:e5:8e:e5:bf:00:62:b9:
                    48:90:b5:c7:99:00:31:0a:4e:de:6d:15:10:12:83:
                    b0:a3:3d:94:50:22:4c:3d:a0:99:7b:69:40:4a:72:
                    8a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:12:C9:FA:6F:4C:00:68:4D:5E:03:D4:0C:9A:70:A9:47:0D:4D:6A
            X509v3 Authority Key Identifier:
                keyid:89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:f0:9f:27:37:df:56:b9:e9:b8:85:71:76:d9:0e:35:bd:fd:
         72:3e:a8:f6:2a:d2:e1:45:a7:ca:5e:f0:c3:cc:3f:56:10:cc:
         95:20:69:85:ac:37:da:8d:24:e3:b1:de:d0:72:c8:8b:67:dc:
         48:f1:87:73:4e:e1:a4:16:fd:f8:58:1d:58:eb:c1:c5:7f:d5:
         4f:b5:22:50:17:f3:31:26:72:56:62:05:b4:2a:53:f2:18:04:
         09:f7:75:a5:68:d7:03:66:4e:d2:f6:a9:ae:f9:13:ee:47:46:
         22:0c:6e:d0:ea:98:ec:69:1f:a0:c0:6d:9f:26:da:fa:58:1c:
         45:73:83:e5:72:32:23:34:d2:ab:bf:1d:6f:f4:cb:08:d5:71:
         5a:73:a2:d7:8a:d6:f1:51:9b:01:aa:a6:b2:c1:56:c9:cc:b5:
         af:7a:1b:9b:25:0d:dc:81:06:ce:2b:3c:0e:52:d3:7d:ae:57:
         39:30:b6:a4:c5:3a:c3:ae:bf:a5:06:b3:27:5a:da:63:dd:03:
         de:35:86:47:99:5b:1f:ae:bf:af:10:c5:7a:8f:01:4d:b3:80:
         fc:b2:a7:d9:85:5d:62:c1:e7:9a:59:64:26:d5:22:79:41:da:
         d1:b6:26:35:49:f1:d2:43:5b:3f:2e:bc:5d:ac:87:c3:20:7c:
         5b:f7:1c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 23:19:24 2026 by rpki-client