Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
File:                     8CC300FAF2F6D49186A8B62E08F190107743973D.mft (raw, json)
Hash identifier:          lamAjjfFS01HmZ+ZpoMtT9Y0sg9XTzw0vwBsmxaeiJw=
Subject key identifier:   C6:00:23:B4:07:9D:8E:B2:1C:EA:97:79:26:58:34:E9:DD:39:29:DA
Authority key identifier: 8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D
Certificate issuer:       /CN=8cc300faf2f6d49186a8b62e08f190107743973d
Certificate serial:       30FAF72D06371281E1372A6BA99F944AEC5E724A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
Manifest number:          0119
Signing time:             Wed 12 Aug 2026 00:11:54 +0000
Manifest this update:     Wed 12 Aug 2026 00:06:54 +0000
Manifest next update:     Thu 13 Aug 2026 00:55:54 +0000
Files and hashes:         1: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer (hash: GFHqWxN9S46J9mAmEiVgStEzFnFl5M2lHDxwpuTvPQs=)
                          2: 326130303a666265343a3161623a3a2f34382d3438203d3e20323035323335.roa (hash: BQDJ5MQBcUAO3DNIndlqGRpqRDYK9vOMV2e/1C55/mU=)
                          3: 326130303a666265303a3a2f33322d3332203d3e203632313133.roa (hash: WNjAJELB/oLrw9Hz4dnzCW0vPcsiMFGJ+BAVSWItBek=)
                          4: 8CC300FAF2F6D49186A8B62E08F190107743973D.crl (hash: uk+VVY7wpNwuGH85nW3tdttafdvCw2gUClbtM7oyspw=)
                          5: AS62113.asa (hash: Yver10QWMXYIYP5ZY4+AuiARoynXV5PYVi7Q6x7VN9c=)
                          6: 326130303a666265313a3a2f33322d3332203d3e203632313133.roa (hash: Z+RU3vtzvAe7ynR14QHAUV1/vmbrfJ5VHYPGPd2caBI=)
                          7: 3138352e33382e32342e302f32342d3234203d3e203632313133.roa (hash: DL9cUbkHdgRd6E9kt0CXscnQjaDpUpLE3Ywus/lXk+w=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 00:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:fa:f7:2d:06:37:12:81:e1:37:2a:6b:a9:9f:94:4a:ec:5e:72:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cc300faf2f6d49186a8b62e08f190107743973d
        Validity
            Not Before: Aug 12 00:06:54 2026 GMT
            Not After : Aug 13 00:55:54 2026 GMT
        Subject: CN=C60023B4079D8EB21CEA9779265834E9DD3929DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a2:7c:4e:f5:57:fa:6c:f8:07:11:3b:ea:b4:
                    a0:79:95:b9:2b:d6:41:b0:28:52:e6:16:c8:8b:40:
                    1b:28:60:3e:4d:15:02:c2:98:03:00:4d:3f:1c:cd:
                    27:c4:46:02:49:3a:fc:26:d0:ad:28:cb:22:3a:ae:
                    06:c5:3d:f4:2d:27:cd:d4:2f:29:de:c9:00:a3:87:
                    0e:c3:80:92:91:e3:c3:e1:ac:c0:1f:7a:fa:45:c0:
                    d1:96:34:b7:5b:49:a9:f6:ee:98:b4:8d:49:90:1c:
                    8c:b5:a5:82:f9:c7:48:99:4a:d2:cb:14:b0:49:25:
                    25:61:bc:7d:b4:d6:42:ad:94:c4:85:02:7b:5a:9c:
                    40:6e:ad:fe:69:6e:e1:68:46:8e:a6:b2:74:11:48:
                    29:fc:8b:c6:2b:5c:09:4e:14:f7:b4:27:b7:b0:ac:
                    7f:e6:2f:f0:c1:92:84:45:5b:fb:a8:62:ef:81:61:
                    92:ce:f8:1b:c0:92:a8:ff:91:2b:48:32:6c:3f:00:
                    f8:19:95:6c:d8:96:cd:ed:e0:cb:d2:3f:cc:e2:91:
                    5c:d4:d5:ed:a3:3e:97:28:bb:9a:de:18:af:08:d3:
                    0a:04:c8:ec:72:4a:b7:79:95:aa:df:a9:b3:49:c0:
                    68:0d:9f:5d:33:b3:17:0a:71:a9:93:f6:c6:65:68:
                    40:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:00:23:B4:07:9D:8E:B2:1C:EA:97:79:26:58:34:E9:DD:39:29:DA
            X509v3 Authority Key Identifier:
                keyid:8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:63:09:6e:51:f9:99:59:f8:30:00:1e:7f:27:14:28:63:44:
         7e:ca:34:24:3b:7e:b7:95:63:cf:49:04:ff:d7:d2:4b:46:82:
         41:b0:ac:f7:a9:d7:fb:3e:f2:b5:53:65:86:9f:0b:2c:3a:0d:
         9b:f3:04:5f:b3:33:d4:5e:c3:0b:22:47:5d:2c:23:51:e7:f5:
         db:79:b0:c8:74:07:f4:fa:62:eb:20:da:c7:ac:61:e5:6b:d1:
         f7:8b:83:9e:0c:40:48:1d:b2:e7:ad:59:82:c3:e9:a6:59:b5:
         2b:65:d3:96:cd:aa:03:36:6b:4d:12:fa:1e:a4:95:6b:51:77:
         a1:18:0d:cd:94:22:28:df:9c:b6:c7:63:5e:96:6e:24:d5:80:
         eb:28:3f:50:10:33:d3:3d:f5:da:b0:f1:1e:41:e8:cc:23:3f:
         37:46:fd:dc:a6:fe:fa:da:b9:38:fa:06:d1:62:01:97:4e:3f:
         ab:f7:18:9f:71:18:0d:f5:0c:54:8c:c9:51:4d:b4:29:78:e4:
         29:fc:58:e5:e7:b1:9b:2b:bb:7d:e6:46:b0:df:71:f4:d2:b9:
         2b:e4:91:f9:b4:0d:69:53:85:d8:12:98:86:9e:a4:80:20:8c:
         ef:41:15:0c:c9:90:02:e7:05:f2:04:98:72:0e:20:f5:a9:04:
         f3:c5:af:0a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUMPr3LQY3EoHhNyprqZ+USuxeckowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGNjMzAwZmFmMmY2ZDQ5MTg2YThiNjJlMDhmMTkwMTA3
NzQzOTczZDAeFw0yNjA4MTIwMDA2NTRaFw0yNjA4MTMwMDU1NTRaMDMxMTAvBgNV
BAMTKEM2MDAyM0I0MDc5RDhFQjIxQ0VBOTc3OTI2NTgzNEU5REQzOTI5REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtonxO9Vf6bPgHETvqtKB5lbkr
1kGwKFLmFsiLQBsoYD5NFQLCmAMATT8czSfERgJJOvwm0K0oyyI6rgbFPfQtJ83U
LyneyQCjhw7DgJKR48PhrMAfevpFwNGWNLdbSan27pi0jUmQHIy1pYL5x0iZStLL
FLBJJSVhvH201kKtlMSFAntanEBurf5pbuFoRo6msnQRSCn8i8YrXAlOFPe0J7ew
rH/mL/DBkoRFW/uoYu+BYZLO+BvAkqj/kStIMmw/APgZlWzYls3t4MvSP8zikVzU
1e2jPpcou5reGK8I0woEyOxySrd5larfqbNJwGgNn10zsxcKcamT9sZlaEA1AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUxgAjtAedjrIc6pd5Jlg06d05KdowHwYDVR0j
BBgwFoAUjMMA+vL21JGGqLYuCPGQEHdDlz0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGQ5MDYyZGUtZjUzNi00NDVkLWJhNzEtMDM1ZmJmZWNh
YWQ4LzAvOENDMzAwRkFGMkY2RDQ5MTg2QThCNjJFMDhGMTkwMTA3NzQzOTczRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pNTUEtdkwyMUpHR3FMWXVDUEdRRUhk
RGx6MC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1m
NTM2LTQ0NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC84Q0MzMDBGQUYyRjZENDkxODZB
OEI2MkUwOEYxOTAxMDc3NDM5NzNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEWMJblH5mVn4MAAefycU
KGNEfso0JDt+t5Vjz0kE/9fSS0aCQbCs96nX+z7ytVNlhp8LLDoNm/MEX7Mz1F7D
CyJHXSwjUef123mwyHQH9Ppi6yDax6xh5WvR94uDngxASB2y561ZgsPpplm1K2XT
ls2qAzZrTRL6HqSVa1F3oRgNzZQiKN+ctsdjXpZuJNWA6yg/UBAz0z312rDxHkHo
zCM/N0b93Kb++tq5OPoG0WIBl04/q/cYn3EYDfUMVIzJUU20KXjkKfxY5eexmyu7
feZGsN9x9NK5K+SR+bQNaVOF2BKYhp6kgCCM70EVDMmQAucF8gSYcg4g9akE88Wv
Cg==
-----END CERTIFICATE-----
Generated at Wed Aug 12 11:55:13 2026 by rpki-client