Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
File:                     4158AB6E76F847695C8FEB594CB05DE3191E7877.mft (raw, json)
Hash identifier:          tBsq8k6F4PjND1pyRqk4eOSUtSnjdjuAcFQfFoSgByY=
Subject key identifier:   30:1E:F5:22:E1:CC:DE:58:0A:85:A4:AD:68:BE:B7:57:BF:85:7A:5D
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Certificate issuer:       /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial:       47649629E1A7FED2089F6E56D4843523B1FD43E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
Manifest number:          0309
Signing time:             Sun 11 Oct 2026 17:58:06 +0000
Manifest this update:     Sun 11 Oct 2026 17:53:06 +0000
Manifest next update:     Mon 12 Oct 2026 21:17:06 +0000
Files and hashes:         1: 4158AB6E76F847695C8FEB594CB05DE3191E7877.crl (hash: C/I/uf0hFDjHVXRtLy+EQ7lHysBK17lrCcMyg+tOzR0=)
                          2: 3230312e342e33322e302f31392d3234203d3e2038383838.roa (hash: 88uKKmosMU8QWurDK/eF4tR2RZHe7yQN2jm6tp8Qx98=)
                          3: 3230312e342e312e302f32342d3332203d3e203136353039.roa (hash: ox9/J9tAboo2XRgTvirVB5Q0oV+/xLNvFO2aInogmMg=)
                          4: 3230312e342e312e302f32342d3332203d3e203530303639.roa (hash: yCPwiHlSYGyN7DUJMOMTwc4KlrDr6ee2eRkrRvYrukw=)
                          5: 3230312e342e33322e302f31392d3234203d3e2033323134.roa (hash: RqpDVwFKUVJ4KXL9OMqnTfidvT/47+lHjhOmK+YPi50=)
                          6: 3230312e342e322e302f32332d3332203d3e203530303639.roa (hash: ere/v3sb0RHIzq2vnbrgSDPEImJtyblbjxi3tF1BIoQ=)
                          7: 60D5CF86368D32D8BD736410814916DA300E83CF.cer (hash: h9K1/FoQIn4IQ+Pj55UDAEkL6w9NDH2w/iYJJkzSELI=)
                          8: 3137372e3137372e3232342e302f32342d3234203d3e203630333236.roa (hash: IN+YllwkR1FWZAEbAPZjDy8pp86M2J4Vo+MuthHkyLk=)
                          9: 3230312e35302e33322e302f31392d3234203d3e2034373835.roa (hash: GhLtRoDjlqNHphHRdRApCsni62HttlSYQnl4FDsPCxk=)
                          10: 3137372e3137372e31392e302f32342d3332203d3e203538333432.roa (hash: uhL5qKKRO2qWA9YVVLwXgDMutAoJMmazOlzWjeSTGTY=)
                          11: 3230312e35302e33322e302f31392d3234203d3e2039333132.roa (hash: cjeOGY6nCjdAT/hEk3/0FGXwsaf/Bg3Zzc4O5AGGMT8=)
                          12: 3230312e342e352e302f32342d3332203d3e203530303639.roa (hash: EEXiCogld0jiCpGpaGf8puqkOYyieyMdz+HB/WP5ab4=)
                          13: 3230312e342e33322e302f31392d3234203d3e2034373835.roa (hash: HzdUv+l0E/f7AUZqSmhM8rTExNCjiFWuqHPsfDzLrYM=)
                          14: 3137372e3137372e372e302f32342d3332203d3e203530303639.roa (hash: UDM9uAdn5LfzILf/mJRfKDKeql8VK1sk34KeXiw7cEI=)
                          15: 3230312e35302e302e302f32302d3332203d3e20393137.roa (hash: LV5vXg1tBVGVGbGvuwuejlVcIl0gybi5ijTXlVnWnYs=)
                          16: 3230312e342e31322e302f32322d3332203d3e20393137.roa (hash: dM5HSwOUNmEnlGbv7ZT9pdO1x5lxVVoCWSo1pXl1GwY=)
                          17: 3230312e342e33322e302f31392d3234203d3e2039333132.roa (hash: l48ICNEOZSUFsv60Oe/8RzlWGIiclCXu4mnDrM98Rag=)
                          18: 3230312e35302e302e302f32302d3332203d3e203233393631.roa (hash: x1nzhHbSXkkPXE9Cj4iypMmjIOnW38aYFhMxIaEDc4c=)
                          19: 3230312e342e312e302f32342d3332203d3e203134363138.roa (hash: mvQmoRedgx4S6LRwa0SlJVlpATt4GGTM28ypKNbLfkw=)
                          20: 3230312e342e302e302f32332d3332203d3e20393137.roa (hash: 3XwO613XjTcJvibqlowu29uDf0sqrqGl9LF3k3R7qN8=)
                          21: 3230312e35302e33322e302f31392d3234203d3e2036323333.roa (hash: Lv+ZvhTtVlYc/JvDCP4pL2DuKvKs1Y5SiCDu8gR+7Ns=)
                          22: 3230312e342e382e302f32312d3332203d3e203233393631.roa (hash: S33h+aDRfgdvF1EOJk6OEOLimNuns4MAvwGMN64MpPI=)
                          23: 3137372e3137372e302e302f31392d3332203d3e203335343837.roa (hash: FhNumEvNBAPQ2E3f+BoZr2srux+Hc8OraRoB9QFpC2c=)
                          24: 3230312e35302e302e302f32302d3332203d3e203335343837.roa (hash: cxmy3kIvPh6s/1LnEwWKks49FiEuuQvkqmFi12hPpdI=)
                          25: 3137372e3137372e3232352e302f32342d3234203d3e203630333236.roa (hash: Mq/JzSvGU5lIzO/TaOmEgCjy319Aw/U4Udxf9FpuSFA=)
                          26: 3230312e35302e33322e302f31392d3234203d3e2033323134.roa (hash: ccY703myVDD41xHnGS5gI1MUGhj3xhz4NQq+ZVDdal0=)
                          27: 3230312e35302e33322e302f31392d3234203d3e2033323538.roa (hash: B+7eeENIirWUXLBYi6Gdu/QL872sGXdRYHqgd1hn4gM=)
                          28: 3230312e342e33322e302f31392d3234203d3e2033323538.roa (hash: mPkCpSJR7Ox8U53hcqwZhn2X5roIkg0pkz9RDiEMY8s=)
                          29: 3230312e35302e33322e302f31392d3234203d3e2038383838.roa (hash: Id0lD9Oi+RFE/S2xLodJ4oFQZxHVtg1X/xF7a5feNlk=)
                          30: 3230312e342e33322e302f31392d3234203d3e2036323333.roa (hash: WdBX9P0O+wUAyIeyoPquWCOx0wam+Enxn9GHVit4ex0=)
                          31: 3230312e342e362e302f32332d3332203d3e203233393631.roa (hash: 6dgSDcNhm53ie+bsgD7J8IGn5nBp0ZbLPHVHuPecMnc=)
                          32: 3230312e342e31302e302f32332d3332203d3e20393137.roa (hash: 7DbKYuvrYYcMc4FJjAjREZxF0j1+7/joCPmYoc/EHe4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 21:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:64:96:29:e1:a7:fe:d2:08:9f:6e:56:d4:84:35:23:b1:fd:43:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
        Validity
            Not Before: Oct 11 17:53:06 2026 GMT
            Not After : Oct 12 21:17:06 2026 GMT
        Subject: CN=301EF522E1CCDE580A85A4AD68BEB757BF857A5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:31:d1:3d:bc:d8:15:7a:92:e5:4b:30:7e:ed:
                    f2:bc:4c:37:a4:21:68:93:3e:d1:7e:ba:a9:10:26:
                    9d:96:fe:62:34:24:5c:b2:c4:20:d4:63:9a:d4:1c:
                    f8:92:64:41:e2:27:c0:47:a2:f9:7a:27:21:69:60:
                    72:5d:00:47:77:90:f3:cd:35:56:f5:35:61:62:a8:
                    4a:b7:d9:8a:7e:f9:3e:ab:e5:98:12:f7:ef:c4:e6:
                    09:af:c5:31:55:c5:62:08:c0:b6:2f:92:ec:28:bf:
                    c5:6b:85:6c:e0:63:ae:40:41:89:4c:65:36:b3:d3:
                    76:fb:5e:be:9f:34:ab:17:07:3b:e1:d6:62:32:36:
                    67:82:a3:14:70:90:70:61:c2:c1:0a:34:98:aa:b5:
                    b0:a7:ab:2c:d2:5d:7d:5f:f7:e4:37:a8:a4:e7:51:
                    ba:ed:89:4d:06:6f:f0:cd:c0:db:3d:48:8c:ce:84:
                    b1:42:79:02:1e:13:1a:d6:9a:af:ef:8c:22:ea:fe:
                    af:ba:70:39:82:52:a1:b4:a7:af:f7:97:bd:35:e5:
                    ba:46:81:e8:e2:c4:76:a5:09:d6:aa:20:46:b3:2b:
                    84:8c:a4:a5:25:b9:a9:36:9d:1a:af:37:94:56:04:
                    21:10:4a:9e:0b:58:06:6c:a1:6d:74:ef:32:58:2b:
                    63:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1E:F5:22:E1:CC:DE:58:0A:85:A4:AD:68:BE:B7:57:BF:85:7A:5D
            X509v3 Authority Key Identifier:
                keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:6a:74:ec:bc:a0:ac:e4:45:af:0d:f1:ec:d3:14:3f:ea:65:
         82:7e:4a:45:7a:d9:11:1d:db:24:a7:8b:71:69:c8:33:b5:4d:
         7c:70:78:26:dc:22:11:37:bf:b1:50:bc:d0:c2:a1:c2:a2:ea:
         20:04:dc:32:51:20:76:8d:49:1f:a4:b9:e8:09:2b:eb:78:3a:
         70:89:f3:42:2c:74:ad:8f:6b:9b:26:0f:cb:a8:f6:a5:2a:04:
         e1:12:27:8e:76:9a:41:b8:e6:95:bc:71:16:11:ad:52:75:03:
         2b:4e:cf:f9:17:bd:d9:fb:d0:d7:c1:fe:65:a4:f2:43:9f:aa:
         a9:22:05:42:4a:2b:b5:70:bd:92:7d:6a:41:f1:72:60:72:40:
         5a:2d:bb:91:c5:3f:18:70:78:3b:55:a5:e1:0a:39:a1:12:8a:
         6a:17:5c:ea:df:f3:dc:56:7d:f2:04:79:93:7a:32:21:51:7d:
         8e:12:cd:d5:e1:98:71:42:8c:d7:ff:0b:e8:f6:c7:85:05:30:
         49:70:db:c2:42:cc:39:a9:c1:de:11:20:dd:ea:63:c9:cc:c1:
         a8:ef:cd:fc:75:ff:ee:38:c8:63:50:da:93:da:b5:d0:03:dc:
         4b:34:fd:10:d2:f5:8f:92:b4:a6:cb:b1:6b:d6:5b:b5:d1:e2:
         9f:3e:d6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:58:42 2026 by rpki-client