Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
File:                     A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json)
Hash identifier:          0AEw/56xV2vY0Qon2G/OQSojAcpT2wjK/WoeAoQV68A=
Subject key identifier:   76:E4:B4:F5:A0:23:F5:46:09:C9:F5:FB:4C:B8:19:66:52:CF:4D:B2
Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
Certificate issuer:       /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Certificate serial:       10F7835EFABC009C603A4E53FB6EEB2B95EC727A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
Manifest number:          03C5
Signing time:             Thu 11 Jun 2026 15:01:57 +0000
Manifest this update:     Thu 11 Jun 2026 14:56:57 +0000
Manifest next update:     Fri 12 Jun 2026 16:21:57 +0000
Files and hashes:         1: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (hash: hztXLWa69ZCSvaHsgxfmIu1iGEyi0dmDHTKRn8lva0U=)
                          2: 326131343a373538313a393330303a3a2f34302d3438203d3e20323039313039.roa (hash: TWxboGw6/lxhoMiWiDnyOg4O9SxsEOXusyizWuah2wo=)
                          3: 326131343a373538313a393066653a3a2f34382d3438203d3e20323135333634.roa (hash: BYtMeV7LUYCkn/ZlkNGbMC11vRUN13yQPjH3QL+ojYM=)
                          4: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: 1g59AndTpeuojlSNC7MQicy9YrEwBPc41WOJd+gnKfI=)
                          5: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (hash: bhxVymRF822sGUYT46rm76gxr9MTDGnqCYuxjLcYLpE=)
                          6: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (hash: WYhSrcn5TXhJNdUP3qkf2gSgA8q33bj3XMR4NNPqdCA=)
                          7: 326131343a373538313a393062303a3a2f34342d3438203d3e203134343437.roa (hash: 0s1d24KMFu1kYJPCMrebtn4XcHECqVsweN9wGCszluU=)
                          8: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: XCup3CDpTI8h0icf6dg5YC13MftgQWrPGVHtOIE5Emk=)
                          9: 326131343a373538313a393230303a3a2f34302d3438203d3e20323039313039.roa (hash: pMn1lmNiSpZ9TgFB+IRiwlTd7+lbxKBF0vBWWTkkXYs=)
                          10: 326131343a373538313a393230303a3a2f34302d3438203d3e203134343437.roa (hash: kZ5VHXe1kAhX5tvSZsX77jhReBFDdvoZNrdYu896udw=)
                          11: 326131343a373538313a393230303a3a2f34302d3430203d3e203134343437.roa (hash: wCZcPZ1Lk7X2Qee1qTSfN0RGP0Z21kPGqT0D7sgtD64=)
                          12: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: CugFEvD4Ktg/5XSZzy7iQtNWk6C3XP2CbAfxfcxZ7Ek=)
                          13: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: Gb20k2EnGZzvbyTlIeQSpvNY4DJYE6vr5KU3wa59HTU=)
                          14: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: zpx42ErZf38nArat2lWc2CjcEQLArb7UaUXhAgB+AXc=)
                          15: 326131343a373538313a393061303a3a2f34332d3438203d3e203134343437.roa (hash: jsviVwthOZBlV5+oRRFYDUvQF+OHc4iDYR8PVPHLwkA=)
                          16: 326131343a373538313a393061303a3a2f34332d3438203d3e20323135333634.roa (hash: kJs4pIFr56jieUGNJ8cBdGuDgpKUTJvT+kMc/MGiNTY=)
                          17: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (hash: 0pqNFsy2Jv3exhCr65w5BUOK2wMYsDflsm3c/HDS3Jw=)
                          18: 326131343a373538313a393063303a3a2f34342d3438203d3e203134343437.roa (hash: 1KwjyQC5mQq96/1cZ1aeVWaWGIQIpF6Ei+ZSWIfd5WM=)
                          19: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 8uD4bBwjny3oHimP3K0P6bnhdh9l/903krEKBsdb/Mg=)
                          20: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: for3TZ55MsAMVGTBxoaBqPnYYuJ9C2scw6xD7EipCVE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f7:83:5e:fa:bc:00:9c:60:3a:4e:53:fb:6e:eb:2b:95:ec:72:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
        Validity
            Not Before: Jun 11 14:56:57 2026 GMT
            Not After : Jun 12 16:21:57 2026 GMT
        Subject: CN=76E4B4F5A023F54609C9F5FB4CB8196652CF4DB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:91:eb:e2:ae:0c:73:fc:49:c0:e7:96:a9:09:
                    17:a6:ce:e7:6d:de:1a:30:f2:78:ef:47:e2:94:ad:
                    6e:a4:4d:08:8f:51:9c:4a:5d:fa:93:e9:fa:1c:17:
                    3e:47:0a:27:0e:7e:7f:4f:0d:32:d3:83:43:ca:08:
                    26:40:74:96:89:46:75:15:45:28:d1:8d:e4:f7:58:
                    da:a7:0e:94:61:0c:35:0e:9e:de:ab:c4:b4:87:80:
                    c0:a4:0d:62:5e:eb:82:c6:1e:1b:8f:ad:29:33:c8:
                    32:e1:e9:d7:a1:5d:ae:b7:4e:27:98:4e:a5:db:0c:
                    a6:16:68:bc:7f:be:7c:3b:d0:ba:dd:1f:c8:ec:ea:
                    b8:8f:72:8c:09:53:4a:8f:a5:02:c6:29:2e:97:3c:
                    c7:7e:57:a0:57:7b:cd:ee:e2:8e:66:db:ea:77:08:
                    a9:3b:17:75:46:d9:7c:7f:15:81:42:15:a9:0a:f5:
                    2d:33:48:10:10:bd:de:ad:93:ca:9c:5d:3f:08:95:
                    f0:fa:83:19:77:fb:ef:f7:70:3f:31:3f:98:81:48:
                    33:4b:63:c6:5b:fa:39:05:a6:a1:77:fe:b4:6e:b8:
                    97:8b:62:a6:43:2e:6d:df:32:59:4e:50:25:ef:68:
                    08:94:53:fa:46:8a:33:4a:53:f1:74:88:3c:03:13:
                    5d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E4:B4:F5:A0:23:F5:46:09:C9:F5:FB:4C:B8:19:66:52:CF:4D:B2
            X509v3 Authority Key Identifier:
                keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:52:a7:13:4f:d4:50:e3:71:95:dd:84:03:de:9a:25:28:ff:
         fb:f9:8d:fd:b5:b5:8f:48:b0:48:b9:f4:c6:47:0a:b8:30:24:
         0e:f8:f1:c7:df:2a:12:d2:e9:53:fc:62:82:08:ee:36:e9:b3:
         d9:d7:97:dc:9a:03:36:c3:69:9d:b7:13:7d:ad:2f:7e:70:7a:
         91:2a:d9:b1:2a:ae:2f:4b:77:21:eb:96:07:b3:90:0a:c7:f1:
         d3:4b:b2:91:0a:cf:ca:99:a8:9e:81:93:64:ae:ac:82:0a:92:
         43:56:78:30:78:b6:4a:f0:bf:b6:88:82:fd:07:db:f3:55:e1:
         3d:f1:0a:ae:03:f2:c9:6f:4c:3b:78:c4:62:9a:66:8d:a2:04:
         5d:e7:45:50:16:50:55:16:02:28:4d:5a:f8:78:37:71:08:c0:
         f7:e7:94:b7:bc:05:fb:d1:6a:1f:93:de:77:de:92:0e:fe:4f:
         67:e4:e5:13:b0:bb:0c:46:9f:39:f4:80:37:82:3c:39:aa:15:
         f6:c6:61:1e:73:3e:68:75:26:55:3a:89:2e:74:2e:2a:9a:a9:
         da:80:fb:57:ee:8a:3a:d9:c8:2c:20:3a:5f:c8:8b:e2:e2:6f:
         2b:40:5e:03:7e:32:70:b6:1f:dc:b0:71:fe:23:58:06:95:10:
         e5:5a:d0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:31:47 2026 by rpki-client