Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/1/75F554161E3D1197F4F9B22E7171E99E87BEB830.mft
File:                     75F554161E3D1197F4F9B22E7171E99E87BEB830.mft (raw, json)
Hash identifier:          arNBz+lZWx4U+1bvlgcXKF+zzuBCjN2FGSdP8EaaBNo=
Subject key identifier:   62:9A:E6:49:A3:16:30:5A:CD:B0:8A:67:6C:96:C0:23:6C:4B:5D:78
Authority key identifier: 75:F5:54:16:1E:3D:11:97:F4:F9:B2:2E:71:71:E9:9E:87:BE:B8:30
Certificate issuer:       /CN=75F554161E3D1197F4F9B22E7171E99E87BEB830
Certificate serial:       0AF3B188DDA0C4140A4B3C1CF1BA5B8AB2F7B7AC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/75F554161E3D1197F4F9B22E7171E99E87BEB830.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/1/75F554161E3D1197F4F9B22E7171E99E87BEB830.mft
Manifest number:          2B
Signing time:             Thu 05 Mar 2026 09:23:56 +0000
Manifest this update:     Thu 05 Mar 2026 09:18:56 +0000
Manifest next update:     Fri 06 Mar 2026 12:54:56 +0000
Files and hashes:         1: 75F554161E3D1197F4F9B22E7171E99E87BEB830.crl (hash: RttdlppduVvHuCoidINxjqINVWlVUQnQxHERQAoWRt0=)
                          2: 326131343a373538303a393030303a3a2f34302d3438203d3e20323134343230.roa (hash: 1nc15sBmXGLcJ+vZKUEIDElcwAMIwyX0sJw3OiBW5oM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/1/75F554161E3D1197F4F9B22E7171E99E87BEB830.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/1/75F554161E3D1197F4F9B22E7171E99E87BEB830.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/75F554161E3D1197F4F9B22E7171E99E87BEB830.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 12:54:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f3:b1:88:dd:a0:c4:14:0a:4b:3c:1c:f1:ba:5b:8a:b2:f7:b7:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75F554161E3D1197F4F9B22E7171E99E87BEB830
        Validity
            Not Before: Mar  5 09:18:56 2026 GMT
            Not After : Mar  6 12:54:56 2026 GMT
        Subject: CN=629AE649A316305ACDB08A676C96C0236C4B5D78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5c:93:61:bb:a8:c6:50:28:78:2a:50:d5:1e:
                    6e:de:34:14:a4:30:fa:d7:58:c1:d0:b6:46:f1:ea:
                    8e:f3:a4:0b:0a:2a:88:45:1d:37:29:ad:91:e8:b3:
                    40:f8:4d:22:fd:e5:6f:e5:15:19:43:ad:62:84:8a:
                    41:b1:39:26:3a:16:1c:30:7b:42:51:2e:b8:eb:03:
                    9d:58:99:df:38:a6:56:f8:a9:b1:83:c5:5a:cd:34:
                    0c:00:6b:47:aa:0e:87:4e:3f:a1:27:4b:0d:fa:37:
                    45:c6:ba:d8:be:49:0e:f9:6a:f8:7c:37:4a:fb:90:
                    3a:bf:be:40:94:1a:97:31:36:8d:48:21:18:08:b6:
                    51:1c:82:d0:cc:18:b7:36:7a:66:fa:25:ac:fe:00:
                    e7:7e:61:0a:0a:8a:00:24:d1:9f:c2:df:5f:f6:e7:
                    91:43:c4:b8:2e:9c:5c:93:a0:3d:b6:a5:19:63:2a:
                    6b:7a:15:77:df:35:e6:1e:0e:8b:7e:26:8a:8b:7a:
                    13:3a:93:4e:90:96:7d:b8:4f:36:5d:4f:95:57:f2:
                    85:ab:f5:b4:63:3d:38:de:e2:ba:1e:c5:f4:34:fc:
                    75:f7:f2:74:a5:d5:b4:27:af:ab:26:46:03:9f:b5:
                    d3:26:90:9e:32:7a:f8:19:ce:ce:97:fd:72:66:32:
                    02:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9A:E6:49:A3:16:30:5A:CD:B0:8A:67:6C:96:C0:23:6C:4B:5D:78
            X509v3 Authority Key Identifier:
                keyid:75:F5:54:16:1E:3D:11:97:F4:F9:B2:2E:71:71:E9:9E:87:BE:B8:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/1/75F554161E3D1197F4F9B22E7171E99E87BEB830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/75F554161E3D1197F4F9B22E7171E99E87BEB830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/1/75F554161E3D1197F4F9B22E7171E99E87BEB830.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:86:3e:c0:ac:e2:f3:5c:84:73:f6:2a:35:cc:c5:ca:9d:5e:
         02:9f:82:f4:79:29:64:25:54:60:33:86:64:59:cb:32:28:fb:
         bd:12:11:44:6f:d2:d1:28:67:8b:1b:da:c2:ca:6a:e0:54:88:
         74:3e:c4:99:56:6b:b9:1e:ab:2a:b5:c2:7f:52:98:08:e7:43:
         1a:6f:10:79:57:f0:70:ad:45:d5:90:41:84:7e:f2:ba:bf:fd:
         a7:8c:0a:97:84:de:04:3b:71:5a:08:22:41:a9:49:3e:94:4f:
         bc:9d:46:0e:31:bd:3e:c7:37:e5:5b:04:cb:06:b9:2e:7f:78:
         4b:40:19:76:f0:a2:55:86:af:7a:48:0a:58:49:53:25:d6:5b:
         e0:1a:6f:93:7b:49:6a:22:3c:ab:3e:e1:63:d5:6b:18:f1:6e:
         35:d9:34:c3:63:4e:b0:0f:46:4d:7e:ec:88:65:82:4e:44:8f:
         e2:fe:27:a1:6b:66:23:60:a1:77:85:60:3e:9c:a1:88:b4:70:
         ea:ac:d6:19:e5:e9:52:36:2a:e3:9f:9a:00:77:4c:98:c3:b3:
         62:60:12:ba:8b:1d:86:b1:a7:50:60:4a:55:a8:1d:c1:a3:f7:
         59:da:17:b6:23:4f:92:40:61:20:3a:ed:06:71:f6:28:1e:3a:
         3a:69:fe:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 16:45:11 2026 by rpki-client