Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
File:                     B3D0280F500695A43204251C9830454CA8A2E7AC.mft (raw, json)
Hash identifier:          N1s3bfJb/glzEiKJNQoTZzEWHAiM9E+2873b6H/6AsM=
Subject key identifier:   B4:A3:58:C0:6A:4C:DC:9E:70:4E:1B:90:03:91:CE:C1:21:4A:20:90
Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC
Certificate issuer:       /CN=b3d0280f500695a43204251c9830454ca8a2e7ac
Certificate serial:       5044BDC8ED0DF715A2ED0C647DB744CE868F1BD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
Manifest number:          0379
Signing time:             Thu 05 Mar 2026 23:05:38 +0000
Manifest this update:     Thu 05 Mar 2026 23:00:38 +0000
Manifest next update:     Sat 07 Mar 2026 02:35:38 +0000
Files and hashes:         1: B3D0280F500695A43204251C9830454CA8A2E7AC.crl (hash: b5JwG7HW1wE/cvslS2VmX2g9uzXtYSPBKpDW+UtlMN8=)
                          2: 3138352e3138362e32352e302f32342d3234203d3e20323133373732.roa (hash: KbS5MjAty6bkNu2TCkQpJN6TOq9xU7ustWBHWVtQeSQ=)
                          3: 3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (hash: 64uxD3jQtXWcavfYFljDhJHJgbOPhGll/0DiDk/jIuA=)
                          4: 3138352e3138362e32352e302f32342d3234203d3e203135343430.roa (hash: zbKaWYwmjPPC167P5YL6I94JcPZEWN0HKnmqpfcR9u4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Mar 2026 02:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:44:bd:c8:ed:0d:f7:15:a2:ed:0c:64:7d:b7:44:ce:86:8f:1b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac
        Validity
            Not Before: Mar  5 23:00:38 2026 GMT
            Not After : Mar  7 02:35:38 2026 GMT
        Subject: CN=B4A358C06A4CDC9E704E1B900391CEC1214A2090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dc:0e:0a:d8:8b:5c:4b:74:f4:45:df:a1:25:
                    87:b5:00:32:f1:b1:99:85:ed:ef:e1:f4:f7:87:b7:
                    74:80:dd:33:1d:0d:58:2c:fe:52:24:24:9f:06:15:
                    dd:0a:09:d1:41:20:cb:36:48:bd:50:fd:ea:69:e0:
                    a5:e7:97:05:fe:7a:3a:ab:2f:1a:de:f6:0f:9e:ea:
                    f6:5a:58:43:3d:c9:31:85:4f:76:9a:25:d6:a4:17:
                    51:38:79:ea:cd:f3:95:b4:29:80:af:4d:d0:62:17:
                    04:fb:df:cd:e9:45:c4:d3:56:87:6b:55:38:ab:7c:
                    9a:e7:3a:54:ef:59:d4:e2:6e:8d:bd:2c:0c:63:2b:
                    e5:10:56:8f:2f:41:f3:90:49:8e:3a:73:22:8a:7a:
                    30:de:7a:35:58:8e:ae:ba:3b:f8:35:e9:53:d9:64:
                    28:80:33:36:76:b2:86:45:94:16:eb:b0:8d:57:e0:
                    18:80:71:dc:49:5c:d6:d2:a0:56:54:e9:90:6d:dc:
                    a8:5a:85:c6:ca:3a:52:7c:e1:e5:7f:0b:2a:c0:47:
                    20:06:f7:b9:fa:c5:f6:30:c9:74:8a:5c:32:e5:d4:
                    04:63:af:98:2a:2b:39:56:f0:a7:41:94:9b:5a:b5:
                    a3:d0:f9:79:bd:95:14:19:39:42:cd:76:b1:a5:5c:
                    56:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A3:58:C0:6A:4C:DC:9E:70:4E:1B:90:03:91:CE:C1:21:4A:20:90
            X509v3 Authority Key Identifier:
                keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ae:c0:33:1b:a1:0f:6c:43:34:c3:de:12:ec:0a:6b:cc:e1:
         96:1a:84:6e:05:76:69:64:56:4d:53:64:f0:98:24:07:35:5c:
         4e:ca:24:56:4a:3c:bc:58:8b:fb:ce:a7:58:6a:b7:75:12:6a:
         02:7b:05:3f:29:47:2a:9b:63:84:5c:94:72:54:04:e4:56:95:
         90:ad:eb:d5:84:80:0f:39:86:a7:32:12:eb:43:28:ee:33:2e:
         c0:fb:83:7d:04:03:8a:21:7d:67:de:cb:b4:69:87:62:8f:8e:
         cc:3d:3c:0a:b5:9b:e2:72:b4:e7:4f:0a:12:31:0f:46:bf:9b:
         b5:60:09:fb:c0:2e:68:78:26:4c:1d:7f:91:8f:06:04:94:2b:
         42:2c:d2:c1:c5:37:91:ed:65:b6:26:a9:03:96:f0:8b:de:d7:
         01:7d:7c:d1:50:2d:9a:5e:b0:e1:fb:04:46:9b:96:5a:c6:d5:
         b1:b3:c0:5c:75:cf:d9:9f:45:4b:c2:9c:ee:35:41:cc:30:65:
         0a:c5:9e:d0:6f:03:ae:17:af:8e:e2:71:75:a5:8c:a5:d5:96:
         76:bd:0e:be:00:2d:bb:f1:85:87:f9:3a:81:d6:b7:18:c8:46:
         21:27:c3:e4:f1:0d:8f:e5:f2:48:85:7f:f3:ad:85:1c:a9:41:
         69:48:a9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 20:20:28 2026 by rpki-client