Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/52722DE3E767BA8FC1EB29A7D1679F734C55966D.mft
File:                     52722DE3E767BA8FC1EB29A7D1679F734C55966D.mft (raw, json)
Hash identifier:          LUaEOGln54S31wY+3IyX9tn5UsDrecP04bnK1hgYiEk=
Subject key identifier:   8E:DB:BC:0E:B9:1C:DD:F3:A4:B8:17:92:5C:56:2D:EE:30:A4:54:FB
Authority key identifier: 52:72:2D:E3:E7:67:BA:8F:C1:EB:29:A7:D1:67:9F:73:4C:55:96:6D
Certificate issuer:       /CN=52722DE3E767BA8FC1EB29A7D1679F734C55966D
Certificate serial:       6137F6C29B8EB3ABB07D60BC7E2E5AC0D8D7FA66
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52722DE3E767BA8FC1EB29A7D1679F734C55966D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/52722DE3E767BA8FC1EB29A7D1679F734C55966D.mft
Manifest number:          43
Signing time:             Tue 21 Jul 2026 02:26:02 +0000
Manifest this update:     Tue 21 Jul 2026 02:21:02 +0000
Manifest next update:     Wed 22 Jul 2026 04:46:02 +0000
Files and hashes:         1: 326131343a373538343a333030303a3a2f33362d3438203d3e20323135383439.roa (hash: mRoIFmsCmEGH6SUTDOuYeSSlx3FrBmmk9tb2GFLY9aI=)
                          2: 326131343a373538343a333030303a3a2f33362d3336203d3e20323135383439.roa (hash: EhQvT5ZMCX9huG89IO3Xb6heQ+ZoxMGHcoAExi8XBfA=)
                          3: 52722DE3E767BA8FC1EB29A7D1679F734C55966D.crl (hash: 3utxv16PikKfCpO5Ik9CGKAEq+0iQ0RH5udoF/9ulZI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/52722DE3E767BA8FC1EB29A7D1679F734C55966D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/52722DE3E767BA8FC1EB29A7D1679F734C55966D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52722DE3E767BA8FC1EB29A7D1679F734C55966D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 04:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:37:f6:c2:9b:8e:b3:ab:b0:7d:60:bc:7e:2e:5a:c0:d8:d7:fa:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52722DE3E767BA8FC1EB29A7D1679F734C55966D
        Validity
            Not Before: Jul 21 02:21:02 2026 GMT
            Not After : Jul 22 04:46:02 2026 GMT
        Subject: CN=8EDBBC0EB91CDDF3A4B817925C562DEE30A454FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d2:0e:f7:9e:20:ce:06:4c:50:bd:31:6e:47:
                    13:44:88:fd:9f:56:f2:55:f8:be:97:46:f6:44:43:
                    10:d0:72:d3:ed:ae:fe:be:9f:ec:46:be:bc:26:46:
                    48:8e:b8:b9:f7:6e:44:50:48:83:60:24:4d:97:8a:
                    5f:5e:6d:da:e0:94:23:7b:b8:9c:38:e9:bf:3c:2b:
                    cb:c0:ad:99:ec:c6:9f:ff:21:bd:ca:57:59:b0:38:
                    94:4e:5d:f7:a4:a3:b7:98:91:0d:ee:3a:f2:a9:26:
                    8a:16:67:f7:17:67:36:a0:3f:79:14:45:e9:a1:27:
                    80:fa:36:7c:88:45:07:93:cd:1e:89:a0:96:2b:2d:
                    a3:f1:2a:b4:54:30:1c:0a:5b:16:f6:60:9a:23:12:
                    47:30:50:02:da:06:8d:99:ba:2f:d1:95:9f:7a:94:
                    91:35:4a:87:07:5f:12:7a:0c:76:d9:bb:21:f1:7e:
                    d1:58:1e:58:9d:e9:60:5a:17:28:6d:fd:80:fb:0d:
                    51:ec:12:e6:fc:6b:e1:3d:76:1e:1b:08:c5:cf:2e:
                    58:e3:99:cb:f7:74:eb:03:39:9b:b2:80:87:f1:22:
                    ea:8a:da:cd:a3:f9:00:7c:36:21:49:f5:3e:3c:1f:
                    cb:8f:95:0e:98:b6:4b:5c:52:f9:44:94:0c:98:61:
                    1d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DB:BC:0E:B9:1C:DD:F3:A4:B8:17:92:5C:56:2D:EE:30:A4:54:FB
            X509v3 Authority Key Identifier:
                keyid:52:72:2D:E3:E7:67:BA:8F:C1:EB:29:A7:D1:67:9F:73:4C:55:96:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/52722DE3E767BA8FC1EB29A7D1679F734C55966D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52722DE3E767BA8FC1EB29A7D1679F734C55966D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/52722DE3E767BA8FC1EB29A7D1679F734C55966D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:3c:c6:cb:38:11:cd:60:6f:c9:ec:02:19:8b:30:0e:ef:70:
         73:b8:86:8c:4d:84:aa:c9:b8:6c:bd:b0:65:03:85:7b:e2:95:
         3a:79:94:e1:2b:0e:1f:20:4e:9d:bc:0a:af:66:b3:73:63:69:
         63:7c:30:66:a5:d7:3a:ff:4c:a0:27:be:54:27:2a:21:09:c5:
         b5:f8:2b:76:71:39:21:5f:63:ed:7f:23:18:0e:e9:69:30:ea:
         b8:1f:8f:7b:ad:25:b6:0e:27:a3:ef:3c:9a:b3:94:41:c3:4e:
         23:84:49:f0:f8:7a:4f:74:f3:6f:5f:67:4c:c3:78:d0:46:63:
         45:20:60:a0:69:f4:6d:73:7c:49:43:ee:38:07:94:3c:7c:1e:
         45:9b:62:0d:39:4b:1b:73:d1:bd:7d:56:7b:5b:57:a3:0e:e9:
         b4:70:fb:45:62:8b:3a:e5:64:b5:54:ba:5a:e8:fe:7d:42:7f:
         29:0e:0d:38:2c:e4:16:d8:6b:24:26:7c:a2:28:2c:fd:8d:a9:
         30:fe:e5:7b:02:6c:fa:cc:bf:5b:c7:5e:e7:82:f8:bf:35:51:
         53:b2:6f:14:d0:66:2d:99:4e:29:07:66:0b:bf:7e:f9:f9:05:
         0c:3d:ab:21:31:95:20:65:4b:d9:76:5a:6f:fa:d7:96:64:48:
         b9:18:e1:ff
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUYTf2wpuOs6uwfWC8fi5awNjX+mYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI3MjJERTNFNzY3QkE4RkMxRUIyOUE3RDE2NzlGNzM0
QzU1OTY2RDAeFw0yNjA3MjEwMjIxMDJaFw0yNjA3MjIwNDQ2MDJaMDMxMTAvBgNV
BAMTKDhFREJCQzBFQjkxQ0RERjNBNEI4MTc5MjVDNTYyREVFMzBBNDU0RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb0g73niDOBkxQvTFuRxNEiP2f
VvJV+L6XRvZEQxDQctPtrv6+n+xGvrwmRkiOuLn3bkRQSINgJE2Xil9ebdrglCN7
uJw46b88K8vArZnsxp//Ib3KV1mwOJROXfeko7eYkQ3uOvKpJooWZ/cXZzagP3kU
RemhJ4D6NnyIRQeTzR6JoJYrLaPxKrRUMBwKWxb2YJojEkcwUALaBo2Zui/RlZ96
lJE1SocHXxJ6DHbZuyHxftFYHlid6WBaFyht/YD7DVHsEub8a+E9dh4bCMXPLljj
mcv3dOsDOZuygIfxIuqK2s2j+QB8NiFJ9T48H8uPlQ6YtktcUvlElAyYYR1JAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUjtu8Drkc3fOkuBeSXFYt7jCkVPswHwYDVR0j
BBgwFoAUUnIt4+dnuo/B6ymn0Wefc0xVlm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODA2MmJmYTYtOTNkYi00ZDU5LTlhNDUtODFmODJhOGMy
Yzc2LzEvNTI3MjJERTNFNzY3QkE4RkMxRUIyOUE3RDE2NzlGNzM0QzU1OTY2RC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjcyMkRFM0U3NjdCQThGQzFFQjI5QTdE
MTY3OUY3MzRDNTU5NjZELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzgwNjJiZmE2LTkzZGItNGQ1OS05YTQ1LTgxZjgyYThjMmM3Ni8xLzUyNzIyREUz
RTc2N0JBOEZDMUVCMjlBN0QxNjc5RjczNEM1NTk2NkQubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbPMbL
OBHNYG/J7AIZizAO73BzuIaMTYSqybhsvbBlA4V74pU6eZThKw4fIE6dvAqvZrNz
Y2ljfDBmpdc6/0ygJ75UJyohCcW1+Ct2cTkhX2PtfyMYDulpMOq4H497rSW2Diej
7zyas5RBw04jhEnw+HpPdPNvX2dMw3jQRmNFIGCgafRtc3xJQ+44B5Q8fB5Fm2IN
OUsbc9G9fVZ7W1ejDum0cPtFYos65WS1VLpa6P59Qn8pDg04LOQW2GskJnyiKCz9
jakw/uV7Amz6zL9bx17ngvi/NVFTsm8U0GYtmU4pB2YLv375+QUMPashMZUgZUvZ
dlpv+teWZEi5GOH/
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:21:00 2026 by rpki-client