Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
File:                     8CC300FAF2F6D49186A8B62E08F190107743973D.mft (raw, json)
Hash identifier:          qxk0UwiuSLVd/n6NREuNg7nSX3xfBZNhkceEK95pPig=
Subject key identifier:   EA:40:55:BD:53:7E:F4:2D:45:A0:8E:A7:44:B9:9A:C4:13:77:11:F4
Authority key identifier: 8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D
Certificate issuer:       /CN=8cc300faf2f6d49186a8b62e08f190107743973d
Certificate serial:       35C5787A34A1BDF3460DB6B7AEB31D71778A982A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
Manifest number:          62
Signing time:             Fri 27 Mar 2026 22:40:13 +0000
Manifest this update:     Fri 27 Mar 2026 22:35:13 +0000
Manifest next update:     Sat 28 Mar 2026 23:34:13 +0000
Files and hashes:         1: 326130303a666265343a3161623a3a2f34382d3438203d3e20323035323335.roa (hash: BQDJ5MQBcUAO3DNIndlqGRpqRDYK9vOMV2e/1C55/mU=)
                          2: 326130303a666265303a3a2f33322d3332203d3e203632313133.roa (hash: WNjAJELB/oLrw9Hz4dnzCW0vPcsiMFGJ+BAVSWItBek=)
                          3: 326130303a666265313a3a2f33322d3332203d3e203632313133.roa (hash: Z+RU3vtzvAe7ynR14QHAUV1/vmbrfJ5VHYPGPd2caBI=)
                          4: AS62113.asa (hash: Yver10QWMXYIYP5ZY4+AuiARoynXV5PYVi7Q6x7VN9c=)
                          5: 3138352e33382e32342e302f32342d3234203d3e203632313133.roa (hash: DL9cUbkHdgRd6E9kt0CXscnQjaDpUpLE3Ywus/lXk+w=)
                          6: 8CC300FAF2F6D49186A8B62E08F190107743973D.crl (hash: 8LsUGwRByi2TIIUKzFk5/nA8LfYqYbS0/sLzjMakDVI=)
                          7: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer (hash: GFHqWxN9S46J9mAmEiVgStEzFnFl5M2lHDxwpuTvPQs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 23:34:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c5:78:7a:34:a1:bd:f3:46:0d:b6:b7:ae:b3:1d:71:77:8a:98:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cc300faf2f6d49186a8b62e08f190107743973d
        Validity
            Not Before: Mar 27 22:35:13 2026 GMT
            Not After : Mar 28 23:34:13 2026 GMT
        Subject: CN=EA4055BD537EF42D45A08EA744B99AC4137711F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:29:5f:5b:d7:07:6e:f7:f3:3c:d4:a4:4a:9e:
                    38:fb:ee:eb:56:cf:9b:de:af:1b:ff:0f:6d:27:5a:
                    1c:84:b2:bb:e7:69:b6:9f:43:82:cf:b0:eb:0e:0c:
                    6d:4b:7e:74:02:6e:b9:f6:29:50:4f:11:82:8d:89:
                    b4:71:36:ec:d4:e7:80:0a:fd:33:ab:7c:e7:b3:ad:
                    96:12:99:10:11:47:81:06:80:e8:70:6f:7e:52:ed:
                    ac:a1:73:7e:60:2f:07:aa:bf:9d:17:9c:c3:45:71:
                    c5:45:ba:06:78:a5:9a:54:f8:23:b9:a0:6f:34:9a:
                    bd:d3:69:c5:7d:d9:15:38:b4:2f:ce:7d:e8:eb:77:
                    e9:b4:5d:37:a1:e1:8e:7c:fd:81:c0:1b:5f:fb:08:
                    77:e7:5d:49:02:de:fd:31:2b:5a:83:d6:df:49:d5:
                    8c:e4:b8:f1:4d:3f:dc:27:0a:68:3e:d1:52:ca:3e:
                    16:23:d7:6a:b3:57:d7:23:37:54:1e:17:95:dd:c2:
                    59:fd:67:c0:4f:4f:b1:de:f0:b1:e2:77:dc:00:07:
                    54:c9:3a:02:cf:39:27:0b:a1:0d:99:b2:cd:f7:5f:
                    a8:86:f5:c5:dd:5f:7e:00:68:fb:86:c9:a8:78:20:
                    a3:a4:ba:c7:24:fc:8b:55:3c:e8:a4:8b:c7:fb:ef:
                    ba:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:40:55:BD:53:7E:F4:2D:45:A0:8E:A7:44:B9:9A:C4:13:77:11:F4
            X509v3 Authority Key Identifier:
                keyid:8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:3b:60:6f:0e:ab:fb:80:f7:67:45:b3:f5:b5:d1:3f:c1:ce:
         78:f0:e8:a2:e0:c5:20:c5:74:64:d5:74:ac:36:e2:e5:db:ba:
         bf:e3:c1:c9:21:18:62:1c:68:a8:0c:7b:4f:fa:b1:24:94:51:
         e4:73:0b:47:c8:a3:44:99:eb:ff:24:7f:9d:db:c7:f5:91:ab:
         17:9a:84:ec:21:4a:fa:55:08:01:7e:c4:34:ed:84:58:ef:f9:
         89:bf:37:33:c4:91:80:fe:05:0f:8f:40:55:51:ac:41:db:0f:
         80:07:1d:8c:24:02:16:7d:12:22:f4:92:55:e6:d2:bc:32:f5:
         86:dc:1d:9d:05:27:1d:a3:aa:d2:cb:18:4b:0e:df:9d:1c:9c:
         6a:c0:96:6a:ed:0b:02:c7:ff:1a:eb:f1:09:d3:b2:4f:aa:cc:
         bf:f7:e9:7e:e6:c2:79:62:c4:06:f0:e4:fa:a2:d4:87:e2:6c:
         cd:55:a2:68:19:10:3e:ed:02:b5:46:86:66:2e:43:af:2b:05:
         d3:b5:cf:ef:74:d2:a4:30:81:41:04:f5:94:e5:ad:a0:92:87:
         e0:1c:8a:f0:79:0e:69:87:63:30:0d:e0:9f:15:c3:c7:cb:9d:
         f3:73:63:7b:2a:bf:ca:7a:7c:d5:d6:d0:03:4f:ac:4f:70:8a:
         21:20:b5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:11:46 2026 by rpki-client