Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
File:                     B3D0280F500695A43204251C9830454CA8A2E7AC.mft (raw, json)
Hash identifier:          mLulzNrvV3drUVooSxGxRB5Fj8GkKgDqgfmDfvK9jPI=
Subject key identifier:   4C:84:74:A8:78:E7:66:7D:56:1C:09:9F:8C:E3:A8:8F:85:AC:4C:51
Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC
Certificate issuer:       /CN=b3d0280f500695a43204251c9830454ca8a2e7ac
Certificate serial:       23604F981743A7D1EEBCB36F50A755C1E75C3B89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
Manifest number:          0378
Signing time:             Thu 05 Mar 2026 05:39:53 +0000
Manifest this update:     Thu 05 Mar 2026 05:34:53 +0000
Manifest next update:     Fri 06 Mar 2026 07:04:53 +0000
Files and hashes:         1: 3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (hash: 64uxD3jQtXWcavfYFljDhJHJgbOPhGll/0DiDk/jIuA=)
                          2: B3D0280F500695A43204251C9830454CA8A2E7AC.crl (hash: 6TKocCsJfXuJ5Y5H+DSKw7ettUwVJz5qHy8EAcMtquY=)
                          3: 3138352e3138362e32352e302f32342d3234203d3e20323133373732.roa (hash: KbS5MjAty6bkNu2TCkQpJN6TOq9xU7ustWBHWVtQeSQ=)
                          4: 3138352e3138362e32352e302f32342d3234203d3e203135343430.roa (hash: zbKaWYwmjPPC167P5YL6I94JcPZEWN0HKnmqpfcR9u4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 07:04:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:60:4f:98:17:43:a7:d1:ee:bc:b3:6f:50:a7:55:c1:e7:5c:3b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac
        Validity
            Not Before: Mar  5 05:34:53 2026 GMT
            Not After : Mar  6 07:04:53 2026 GMT
        Subject: CN=4C8474A878E7667D561C099F8CE3A88F85AC4C51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e1:00:a5:ad:d2:7f:3e:d8:ce:53:90:c8:c9:
                    7b:d9:4e:1c:17:db:98:38:bd:87:41:99:19:d0:09:
                    3a:29:30:13:b1:4c:75:c8:c4:51:77:c4:ae:1c:a5:
                    64:4a:1f:07:b8:a3:b1:49:8e:13:aa:e9:6b:4f:b0:
                    9f:90:a8:4e:81:05:e6:57:c7:9d:db:15:98:8d:ed:
                    cd:1f:22:58:68:a9:7a:45:54:e7:0a:1a:e0:6e:a3:
                    b2:bb:0d:bf:c8:b7:45:0e:3d:ee:0b:48:fd:75:78:
                    ad:ee:47:cb:96:d5:63:7c:85:da:18:f2:a5:3a:da:
                    14:20:c4:aa:75:e5:b6:9a:4b:6a:ab:9e:6c:02:14:
                    eb:b5:73:17:c2:43:cb:68:8a:f8:c3:a5:b3:7b:02:
                    3a:55:b0:1a:85:5f:2e:da:80:f6:27:9c:15:3a:4d:
                    5d:a6:00:6d:6b:db:71:be:f1:50:ae:18:3c:7c:c7:
                    b7:ae:a2:bc:99:fc:22:38:4c:54:64:bd:87:0a:6b:
                    93:e6:a6:16:79:4b:fc:5c:8c:9c:01:f3:87:c8:e9:
                    97:d6:b5:64:c5:84:00:54:f6:18:66:23:bf:df:b9:
                    2e:f7:11:f1:24:58:a9:55:3c:10:fc:4e:52:f8:03:
                    8e:80:cb:e2:ba:0c:27:11:4b:5d:9f:c0:d5:9d:6c:
                    04:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:84:74:A8:78:E7:66:7D:56:1C:09:9F:8C:E3:A8:8F:85:AC:4C:51
            X509v3 Authority Key Identifier:
                keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:bf:4e:a8:d3:d6:83:01:f1:0a:1a:1b:74:df:d6:a6:fb:86:
         f8:28:38:b5:0e:71:2a:5a:f5:92:e3:f5:5f:f8:76:6b:cf:01:
         b3:01:b1:c4:b5:b3:c2:6c:8c:f9:32:2a:82:4c:90:fc:ef:ed:
         cd:9d:f8:0f:7d:36:d0:3f:fe:a6:fd:88:6f:62:93:95:7b:62:
         a0:2f:57:6e:a5:1d:13:81:e1:b4:fb:fe:d8:b3:cd:13:ca:d0:
         27:28:09:45:71:14:48:17:ef:d8:d0:cb:20:9b:a8:91:67:23:
         9a:4b:8a:15:b5:45:b9:bd:c8:21:d1:2c:de:7e:b5:0b:a6:40:
         c6:0e:06:37:e3:05:a2:21:2e:80:02:b3:35:bf:dd:34:c3:d7:
         16:4b:a3:f3:6a:03:98:39:5b:09:ea:7f:3c:1b:cb:f3:49:e4:
         6b:e3:0a:fa:54:98:11:3d:d4:1f:dd:06:97:b2:8f:d2:a9:81:
         e5:9a:35:85:35:ec:a5:78:d6:90:11:10:60:35:d8:bf:76:04:
         b3:3f:fe:56:a8:0b:63:4a:d4:0c:86:8d:bb:6d:06:f6:f3:a2:
         1d:ee:fa:28:83:76:1a:6b:f0:7b:f0:43:e5:78:42:bc:7c:ce:
         a6:3f:8d:85:31:2f:d0:8d:c5:2e:70:ea:b5:ac:5d:a4:c9:a2:
         96:ef:1e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 18:07:02 2026 by rpki-client